last executing test programs: 10.438950521s ago: executing program 3 (id=2310): syz_open_procfs(0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x1, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x8, 0x5}]}}}}}}}, 0x0) 10.1379545s ago: executing program 3 (id=2312): ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) preadv2(r0, &(0x7f0000000300)=[{&(0x7f0000001040)=""/4082, 0xff2}], 0x1, 0x0, 0x0, 0x6) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv2(r1, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x0, 0x0, 0x8) 9.325718819s ago: executing program 3 (id=2316): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'dummy0\x00', 0x0}) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f00000001c0)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xff}, 0x4}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=[@pktinfo={{0x20, 0x29, 0x32, {@private1={0xfc, 0x1, '\x00', 0x1}, r2}}}], 0x20}, 0x100) 9.093582886s ago: executing program 3 (id=2317): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = fspick(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000010c0)='user_id', &(0x7f0000001100)='rootmode', 0x0) 8.858121939s ago: executing program 3 (id=2318): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=@newlink={0x64, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}, @IFLA_LINKINFO={0x28, 0xd, 0x0, 0x1, @veth={{0x9, 0x9e00}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x64}}, 0x0) 7.163942763s ago: executing program 3 (id=2321): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x3c, r0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @default=0x9b4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9be}]]}, 0x3c}}, 0x0) 4.121224161s ago: executing program 0 (id=2344): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0xff09, 0x0) 3.999945344s ago: executing program 0 (id=2345): r0 = syz_open_procfs(0x0, &(0x7f0000002140)='fdinfo\x00') getdents64(r0, &(0x7f0000000140)=""/4087, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) getdents(r0, &(0x7f0000001140)=""/4096, 0x1000) 3.791853249s ago: executing program 0 (id=2346): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)={0x34, r2, 0x1, 0x70bd2b, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}}, 0x0) 3.136460024s ago: executing program 4 (id=2354): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES32], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x4018480c, &(0x7f00000000c0)={0x2}) 2.085531884s ago: executing program 0 (id=2359): r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x10, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') fchdir(r1) landlock_restrict_self(r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107242, 0x0) 2.020359015s ago: executing program 0 (id=2360): r0 = socket(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, 0x0, &(0x7f0000000080)) 1.938572897s ago: executing program 1 (id=2362): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f95f24fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 1.629506508s ago: executing program 1 (id=2364): r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x1000}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x18, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff]}, 0x1) 1.287969125s ago: executing program 1 (id=2366): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000300)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 1.287737572s ago: executing program 2 (id=2367): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xac, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x51, 0xe, {{{}, {}, @device_a, @device_b}, 0x0, @default, 0x200, @void, @void, @void, @void, @void, @void, @val={0x25, 0x3, {0x0, 0x0, 0xfe}}, @void, @void, @val={0x2d, 0x1a, {0x8000, 0x0, 0x2, 0x0, {0x2, 0x853, 0x0, 0x2, 0x0, 0x1, 0x1, 0x3, 0x1}, 0x6, 0x101, 0x5}}, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}]}]}]}, 0xac}}, 0x0) 1.249978427s ago: executing program 4 (id=2368): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000001300)=0x3c6, 0x4) sendmmsg$inet(r0, &(0x7f0000001980)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @loopback}, 0x10, 0x0}}], 0x1, 0x240080e4) write(r0, &(0x7f0000003000)='\t', 0x1) recvmmsg(r0, &(0x7f0000006600)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1}}], 0x1, 0x2000, 0x0) 1.083743075s ago: executing program 4 (id=2369): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x28}}, 0x0) 1.018583304s ago: executing program 0 (id=2370): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c36919790"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0xc018480b, &(0x7f0000000080)={0x2, 0x200}) 863.805609ms ago: executing program 2 (id=2371): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x20, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x4}]}, 0x20}}, 0x0) 847.540618ms ago: executing program 4 (id=2372): mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1205029, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) 725.275626ms ago: executing program 2 (id=2373): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r0, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r1, &(0x7f00000000c0), 0x10) 679.715828ms ago: executing program 4 (id=2374): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256-avx2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) read$alg(r1, &(0x7f0000000180)=""/48, 0x10) 648.856724ms ago: executing program 2 (id=2375): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000fff5000023000040"]) 542.078729ms ago: executing program 1 (id=2376): write$sndseq(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="043e9c19"], 0x14) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) 411.874262ms ago: executing program 4 (id=2377): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000200)=@generic={&(0x7f0000000080)='./file0\x00', r0}, 0x18) 229.688122ms ago: executing program 1 (id=2379): unshare(0x8000000) shmget$private(0x0, 0x4000, 0x1000, &(0x7f00004bd000/0x4000)=nil) shmat(0x0, &(0x7f00000ca000/0x4000)=nil, 0x4000) unshare(0x2c020000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 228.660586ms ago: executing program 2 (id=2380): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') fchdir(r0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r1, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000000000)={0xb}, 0x20) openat$cgroup_ro(r1, &(0x7f00000000c0)='devices.list\x00', 0x275a, 0x2) 50.256514ms ago: executing program 1 (id=2381): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140), 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1, 0x42031, 0xffffffffffffffff, 0x80000000) 0s ago: executing program 2 (id=2382): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6005, &(0x7f0000000040)=0x7, 0x7, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): 28622][ T1053] team0 (unregistering): Port device team_slave_0 removed [ 223.524894][ T5237] Bluetooth: hci2: command tx timeout [ 223.657264][ T9147] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.667234][ T9147] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.676428][ T9147] bridge_slave_1: entered allmulticast mode [ 223.685745][ T9147] bridge_slave_1: entered promiscuous mode [ 223.733219][ T9217] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1378'. [ 223.868396][ T9147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.920597][ T9147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.950864][ T9018] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 223.979432][ T9018] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 224.011751][ T5237] Bluetooth: hci4: command tx timeout [ 224.020968][ T9018] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 224.041442][ T938] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 224.053810][ T9018] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 224.085978][ T9147] team0: Port device team_slave_0 added [ 224.097200][ T9147] team0: Port device team_slave_1 added [ 224.121757][ T5281] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 224.172663][ T9147] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.179685][ T9147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.210144][ T9147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.221648][ T938] usb 2-1: Using ep0 maxpacket: 32 [ 224.231824][ T938] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 224.257731][ T938] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 224.280943][ T9147] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.289920][ T938] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 224.309502][ T9147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.341235][ T5281] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 224.357885][ T5281] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 224.367940][ T938] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 224.383049][ T5281] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 224.393199][ T938] usb 2-1: config 0 interface 0 has no altsetting 0 [ 224.399993][ T9147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.417461][ T5281] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.428345][ T938] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 224.443981][ T9221] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 224.455207][ T5281] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 224.472116][ T938] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 224.503069][ T938] usb 2-1: Product: syz [ 224.522875][ T938] usb 2-1: Manufacturer: syz [ 224.527532][ T938] usb 2-1: SerialNumber: syz [ 224.586323][ T938] usb 2-1: config 0 descriptor?? [ 224.610328][ T938] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 224.628405][ T9147] hsr_slave_0: entered promiscuous mode [ 224.641478][ T938] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 224.657809][ T9147] hsr_slave_1: entered promiscuous mode [ 224.701993][ T9147] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 224.711473][ T9147] Cannot create hsr debugfs directory [ 224.763835][ T9018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.767844][ T47] usb 4-1: USB disconnect, device number 15 [ 224.867467][ T9018] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.909473][ T1053] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.916640][ T1053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.973768][ T5281] usb 2-1: USB disconnect, device number 18 [ 224.979736][ C0] ldusb 2-1:0.0: usb_submit_urb failed (-19) [ 224.997130][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.004332][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.022053][ T5281] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 225.234138][ T9219] ldusb: No device or device unplugged -19 [ 225.317578][ T9018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.514780][ T5281] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 225.548591][ T9018] veth0_vlan: entered promiscuous mode [ 225.577355][ T9018] veth1_vlan: entered promiscuous mode [ 225.659577][ T9018] veth0_macvtap: entered promiscuous mode [ 225.691276][ T5281] usb 1-1: Using ep0 maxpacket: 16 [ 225.694976][ T9018] veth1_macvtap: entered promiscuous mode [ 225.706027][ T5281] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.750925][ T5281] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.800520][ T5281] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 225.834004][ T5281] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.868178][ T5281] usb 1-1: config 0 descriptor?? [ 225.868859][ T9018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.900010][ T9018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.910143][ T9018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.920875][ T9018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.930990][ T9018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.941623][ T9018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.953121][ T9018] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.978230][ T9018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.989915][ T9018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.010065][ T9018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.027775][ T9018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.048430][ T9018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.069227][ T9018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.081419][ T5237] Bluetooth: hci4: command tx timeout [ 226.096389][ T9018] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.124768][ T9147] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 226.145449][ T9147] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 226.176917][ T9018] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.201864][ T9018] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.211591][ T1849] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 226.238031][ T9018] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.253386][ T9018] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.272964][ T9147] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 226.288599][ T9147] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 226.320279][ T5281] logitech 0003:046D:C29C.000B: unknown main item tag 0x0 [ 226.343649][ T5281] logitech 0003:046D:C29C.000B: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.0-1/input0 [ 226.387031][ T1849] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.423116][ T1849] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.457237][ T1849] usb 4-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 226.475285][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.498769][ T1849] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.514920][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.525406][ T1849] usb 4-1: config 0 descriptor?? [ 226.598681][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.621732][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.701635][ T9147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.717890][ T5281] logitech 0003:046D:C29C.000B: no inputs found [ 226.771809][ T1849] usbhid 4-1:0.0: can't add hid device: -71 [ 226.781874][ T5281] usb 1-1: USB disconnect, device number 12 [ 226.783618][ T9147] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.805690][ T1849] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 226.841425][ T1849] usb 4-1: USB disconnect, device number 16 [ 226.856837][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.864066][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.973430][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.980610][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.140577][ T9147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.189447][ T9147] veth0_vlan: entered promiscuous mode [ 227.216457][ T9147] veth1_vlan: entered promiscuous mode [ 227.256522][ T9147] veth0_macvtap: entered promiscuous mode [ 227.266912][ T9147] veth1_macvtap: entered promiscuous mode [ 227.287919][ T9147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.307226][ T9147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.317294][ T9147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.333721][ T9147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.350056][ T9147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.371786][ T9147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.391555][ T9147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.411192][ T9147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.426466][ T9147] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.444437][ T9147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.476929][ T9147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.487759][ T9147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.499247][ T9147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.509516][ T9147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.532392][ T9147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.542361][ T9147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.553311][ T9147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.565180][ T9147] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.589676][ T9281] mmap: syz.4.1306 (9281) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 227.593582][ T9147] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.619888][ T9147] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.628978][ T9147] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.638061][ T9147] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.763458][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.786822][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.848013][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.865850][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.078272][ T29] audit: type=1326 audit(1727299917.930:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9298 comm="syz.1.1392" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 228.161707][ T5237] Bluetooth: hci4: command tx timeout [ 228.168395][ T29] audit: type=1326 audit(1727299917.970:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9298 comm="syz.1.1392" exe="/root/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 228.191580][ T29] audit: type=1326 audit(1727299917.970:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9298 comm="syz.1.1392" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 228.248204][ T29] audit: type=1326 audit(1727299917.970:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9298 comm="syz.1.1392" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 228.338276][ T29] audit: type=1326 audit(1727299917.980:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9298 comm="syz.1.1392" exe="/root/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 228.424761][ T29] audit: type=1326 audit(1727299917.980:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9298 comm="syz.1.1392" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 228.448819][ T9318] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 228.508438][ T9318] vhci_hcd: invalid port number 9 [ 228.521348][ T29] audit: type=1326 audit(1727299917.980:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9298 comm="syz.1.1392" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 228.531118][ T9318] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 228.641720][ T29] audit: type=1326 audit(1727299917.980:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9298 comm="syz.1.1392" exe="/root/syz-executor" sig=0 arch=40000003 syscall=379 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 228.704307][ T29] audit: type=1326 audit(1727299917.980:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9298 comm="syz.1.1392" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 228.760178][ T29] audit: type=1326 audit(1727299917.980:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9298 comm="syz.1.1392" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 229.025405][ T9334] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1403'. [ 229.401528][ T5281] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 229.546480][ T9357] netlink: 'syz.0.1409': attribute type 49 has an invalid length. [ 229.566038][ T5281] usb 5-1: Using ep0 maxpacket: 16 [ 229.692407][ T9365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1422'. [ 229.715843][ T5281] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 229.741233][ T5281] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.770454][ T5281] usb 5-1: Product: syz [ 229.789078][ T5281] usb 5-1: Manufacturer: syz [ 229.831159][ T5281] usb 5-1: SerialNumber: syz [ 229.849173][ T5281] usb 5-1: config 0 descriptor?? [ 229.922037][ T5285] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 230.083357][ T5285] usb 2-1: New USB device found, idVendor=093a, idProduct=2626, bcdDevice= d.b4 [ 230.096779][ T5285] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.120662][ T5281] usb 5-1: Not enough endpoints found in device, aborting! [ 230.153754][ T5285] usb 2-1: config 0 descriptor?? [ 230.203925][ T5285] gspca_main: gspca_pac7302-2.14.0 probing 093a:2626 [ 230.303242][ T9390] macsec1: entered allmulticast mode [ 230.362432][ T5281] usb 5-1: USB disconnect, device number 15 [ 230.761883][ T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 230.936644][ T9] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 230.965499][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.988281][ T5285] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 230.994425][ T9] usb 4-1: Product: syz [ 231.006587][ T5285] gspca_pac7302 2-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 231.023936][ T9] usb 4-1: Manufacturer: syz [ 231.036883][ T5285] usb 2-1: USB disconnect, device number 19 [ 231.039586][ T9] usb 4-1: SerialNumber: syz [ 231.051587][ T1849] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 231.066586][ T9] usb 4-1: config 0 descriptor?? [ 231.221546][ T1849] usb 3-1: Using ep0 maxpacket: 16 [ 231.237412][ T1849] usb 3-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 231.261525][ T1849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.281574][ T1849] usb 3-1: Product: syz [ 231.285800][ T1849] usb 3-1: Manufacturer: syz [ 231.290424][ T1849] usb 3-1: SerialNumber: syz [ 231.352524][ T1849] usb 3-1: config 0 descriptor?? [ 231.380763][ T1849] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 231.395606][ T5280] usb 4-1: USB disconnect, device number 17 [ 231.592289][ T1849] gp8psk: usb in 128 operation failed. [ 231.610110][ T9441] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1434'. [ 231.612052][ T1849] gp8psk: usb in 137 operation failed. [ 231.658232][ T9441] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1434'. [ 231.662319][ T1849] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 231.704983][ T1849] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 231.733707][ T9446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1435'. [ 231.742890][ T1849] usb 3-1: media controller created [ 231.759284][ T1849] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 231.822265][ T1849] gp8psk_fe: Frontend revision 1 attached [ 231.859790][ T1849] usb 3-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 231.883004][ T1849] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 231.987710][ T1849] gp8psk: usb in 138 operation failed. [ 232.000066][ T1849] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 232.021600][ T1849] gp8psk: found Genpix USB device pID = 201 (hex) [ 232.066331][ T1849] usb 3-1: USB disconnect, device number 11 [ 232.119321][ T9459] capability: warning: `syz.0.1440' uses 32-bit capabilities (legacy support in use) [ 232.265578][ T1849] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 233.247998][ T1106] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.534735][ T1106] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.715623][ T1106] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.805777][ T9527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1463'. [ 233.831227][ T9527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1463'. [ 233.831726][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 233.831744][ T29] audit: type=1326 audit(1727299923.680:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9525 comm="syz.4.1462" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x0 [ 233.939305][ T5240] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 233.949730][ T5240] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 233.957989][ T5240] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 233.966138][ T5240] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 233.979050][ T5240] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 233.986606][ T5240] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 234.110649][ T1106] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.477388][ T1106] bridge_slave_1: left allmulticast mode [ 234.485289][ T1106] bridge_slave_1: left promiscuous mode [ 234.491111][ T1106] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.504553][ T1106] bridge_slave_0: left allmulticast mode [ 234.520481][ T1106] bridge_slave_0: left promiscuous mode [ 234.530777][ T1106] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.822322][ T5279] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 234.992710][ T5279] usb 4-1: Using ep0 maxpacket: 8 [ 235.010022][ T5279] usb 4-1: config 0 has an invalid descriptor of length 116, skipping remainder of the config [ 235.034003][ T5279] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 235.051431][ T5279] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 235.078486][ T5279] usb 4-1: SerialNumber: syz [ 235.113765][ T5279] usb 4-1: config 0 descriptor?? [ 235.359584][ T5279] usb 4-1: Found UVC 0.00 device (05ac:8501) [ 235.374227][ T5279] usb 4-1: No valid video chain found. [ 235.410915][ T5279] usb 4-1: USB disconnect, device number 18 [ 235.487323][ T1106] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.505294][ T1106] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.520888][ T1106] bond0 (unregistering): Released all slaves [ 235.602166][ T5237] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 235.610640][ T5237] Bluetooth: hci4: Injecting HCI hardware error event [ 235.620408][ T5240] Bluetooth: hci4: hardware error 0x00 [ 235.774737][ T9536] chnl_net:caif_netlink_parms(): no params data found [ 235.951406][ T5280] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 236.085838][ T5237] Bluetooth: hci1: command tx timeout [ 236.111562][ T5280] usb 3-1: Using ep0 maxpacket: 16 [ 236.124241][ T5280] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 236.133546][ T5280] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.146144][ T5280] usb 3-1: Product: syz [ 236.156470][ T5280] usb 3-1: Manufacturer: syz [ 236.162294][ T5280] usb 3-1: SerialNumber: syz [ 236.174993][ T5280] usb 3-1: config 0 descriptor?? [ 236.298498][ T1106] hsr_slave_0: left promiscuous mode [ 236.333806][ T1106] hsr_slave_1: left promiscuous mode [ 236.361823][ T1106] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.369301][ T1106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.408858][ T5280] usb 3-1: Not enough endpoints found in device, aborting! [ 236.412347][ T1106] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.456017][ T1106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.558417][ T1106] veth1_macvtap: left promiscuous mode [ 236.579976][ T1106] veth0_macvtap: left promiscuous mode [ 236.590309][ T1106] veth1_vlan: left promiscuous mode [ 236.640645][ T5280] usb 3-1: USB disconnect, device number 12 [ 237.386427][ T1106] team0 (unregistering): Port device team_slave_1 removed [ 237.530282][ T1106] team0 (unregistering): Port device team_slave_0 removed [ 237.765074][ T5240] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 237.841307][ T5285] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 237.981891][ T9536] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.989063][ T9536] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.001760][ T5285] usb 3-1: Using ep0 maxpacket: 16 [ 238.013053][ T5285] usb 3-1: New USB device found, idVendor=2770, idProduct=9050, bcdDevice=11.97 [ 238.021574][ T9536] bridge_slave_0: entered allmulticast mode [ 238.029064][ T5285] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.037230][ T9536] bridge_slave_0: entered promiscuous mode [ 238.041635][ T9536] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.050595][ T9536] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.061388][ T5285] usb 3-1: config 0 descriptor?? [ 238.071256][ T9536] bridge_slave_1: entered allmulticast mode [ 238.073616][ T5285] gspca_main: sq905c-2.14.0 probing 2770:9050 [ 238.092544][ T9536] bridge_slave_1: entered promiscuous mode [ 238.139830][ T9615] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1491'. [ 238.172271][ T5240] Bluetooth: hci1: command tx timeout [ 238.335220][ T9536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.353786][ T9623] netlink: 'syz.3.1496': attribute type 1 has an invalid length. [ 238.384887][ T9536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.523502][ T9625] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1497'. [ 238.568245][ T9625] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.659105][ T9625] bridge_slave_0 (unregistering): left allmulticast mode [ 238.669486][ T9625] bridge_slave_0 (unregistering): left promiscuous mode [ 238.676855][ T9625] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.740307][ T9536] team0: Port device team_slave_0 added [ 238.786761][ T9536] team0: Port device team_slave_1 added [ 238.919689][ T9536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.948125][ T9536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.967987][ T5285] usb 3-1: USB disconnect, device number 13 [ 239.014019][ T9536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.083633][ T9536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.129275][ T9536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.248271][ T9536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.299827][ T9653] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1506'. [ 239.444963][ T9536] hsr_slave_0: entered promiscuous mode [ 239.493184][ T9536] hsr_slave_1: entered promiscuous mode [ 239.507299][ T9536] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 239.521160][ T9536] Cannot create hsr debugfs directory [ 239.759160][ T9670] [U] vÔ3¸ [ 240.241532][ T5240] Bluetooth: hci1: command tx timeout [ 240.921317][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 240.964206][ T9713] ======================================================= [ 240.964206][ T9713] WARNING: The mand mount option has been deprecated and [ 240.964206][ T9713] and is ignored by this kernel. Remove the mand [ 240.964206][ T9713] option from the mount to silence this warning. [ 240.964206][ T9713] ======================================================= [ 241.082812][ T9] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 241.094533][ T9] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 241.121492][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 241.130595][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.185395][ T9698] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 241.222482][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 241.467308][ T9536] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 241.504424][ T9536] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 241.506015][ T5281] usb 3-1: USB disconnect, device number 14 [ 241.548994][ T9536] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 241.598999][ T9536] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 241.721266][ T5280] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 241.805353][ T9536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.838939][ T9536] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.871427][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 241.886574][ T5280] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 241.898366][ T5280] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.910840][ T1053] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.918027][ T1053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.925720][ T5280] usb 5-1: Product: syz [ 241.931511][ T5280] usb 5-1: Manufacturer: syz [ 241.936154][ T5280] usb 5-1: SerialNumber: syz [ 241.959447][ T5280] usb 5-1: config 0 descriptor?? [ 241.975825][ T1053] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.983087][ T1053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.046600][ T9] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 242.076397][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.128534][ T9] usb 4-1: config 0 descriptor?? [ 242.206273][ T9536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.244069][ T9536] veth0_vlan: entered promiscuous mode [ 242.257307][ T9536] veth1_vlan: entered promiscuous mode [ 242.278489][ T9536] veth0_macvtap: entered promiscuous mode [ 242.288451][ T9536] veth1_macvtap: entered promiscuous mode [ 242.305625][ T9536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.316412][ T9536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.326697][ T9536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.337466][ T9536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.347660][ T9536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.358244][ T9536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.368155][ T9536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.378761][ T9536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.380270][ T9] ath6kl: Failed to submit usb control message: -71 [ 242.390185][ T9536] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.406502][ T9536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.417425][ T5240] Bluetooth: hci1: command tx timeout [ 242.417433][ T9536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.417454][ T9536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.423990][ T9] ath6kl: unable to send the bmi data to the device: -71 [ 242.433166][ T9536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.444063][ T9] ath6kl: Unable to send get target info: -71 [ 242.450687][ T9536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.450710][ T9536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.450729][ T9536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.450743][ T9536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.452293][ T9536] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.463603][ T9] ath6kl: Failed to init ath6kl core: -71 [ 242.470758][ T9536] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.479448][ T9] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 242.487938][ T9536] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.487978][ T9536] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.488011][ T9536] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.645612][ T5279] usb 5-1: USB disconnect, device number 16 [ 242.950865][ T9] usb 4-1: USB disconnect, device number 19 [ 242.998759][ T3018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.050115][ T3018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.144949][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.157545][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.891262][ T47] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 244.980786][ T9803] sctp: [Deprecated]: syz.0.1547 (pid 9803) Use of struct sctp_assoc_value in delayed_ack socket option. [ 244.980786][ T9803] Use struct sctp_sack_info instead [ 245.071288][ T47] usb 4-1: Using ep0 maxpacket: 16 [ 245.085887][ T47] usb 4-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 245.112538][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.156601][ T47] usb 4-1: Product: syz [ 245.173579][ T47] usb 4-1: Manufacturer: syz [ 245.178242][ T47] usb 4-1: SerialNumber: syz [ 245.216288][ T47] usb 4-1: config 0 descriptor?? [ 245.252629][ T47] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 245.530877][ T47] gp8psk: usb in 128 operation failed. [ 245.552898][ T47] gp8psk: usb in 137 operation failed. [ 245.558636][ T47] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 245.573569][ T47] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 245.583261][ T47] usb 4-1: media controller created [ 245.604342][ T47] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 245.637993][ T47] gp8psk_fe: Frontend revision 1 attached [ 245.648838][ T47] usb 4-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 245.659945][ T47] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 245.751253][ T47] gp8psk: usb in 138 operation failed. [ 245.756791][ T47] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 245.820574][ T47] gp8psk: found Genpix USB device pID = 201 (hex) [ 245.847189][ T29] audit: type=1326 audit(1727299935.700:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9835 comm="syz.1.1557" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x0 [ 245.892926][ T47] usb 4-1: USB disconnect, device number 20 [ 246.023745][ T47] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 246.142590][ T9843] netlink: 200836 bytes leftover after parsing attributes in process `syz.0.1558'. [ 246.171274][ T9843] openvswitch: netlink: Duplicate key (type 0). [ 247.272374][ T9899] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1586'. [ 247.358143][ T29] audit: type=1800 audit(1727299937.210:72): pid=9902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1576" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 247.573755][ T9] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 247.765054][ T9917] syz.3.1582 uses obsolete (PF_INET,SOCK_PACKET) [ 247.786057][ T9] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 247.795605][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.862163][ T9] usb 2-1: config 0 descriptor?? [ 247.887679][ T9] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 248.091736][ T9] gp8psk: usb in 128 operation failed. [ 248.298937][ T9] gp8psk: FW Version = 241.01.130 (0xf10182) Build 2088/100/55 [ 248.507692][ T9] gp8psk: usb in 149 operation failed. [ 248.514153][ T9] gp8psk: failed to get FPGA version [ 248.535416][ T9] gp8psk: usb in 138 operation failed. [ 248.546121][ T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 248.566861][ T9] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 248.606686][ T9] usb 2-1: USB disconnect, device number 20 [ 248.742848][ T29] audit: type=1326 audit(1727299938.600:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9949 comm="syz.4.1596" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 248.766669][ T29] audit: type=1326 audit(1727299938.630:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9949 comm="syz.4.1596" exe="/root/syz-executor" sig=0 arch=40000003 syscall=11 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 248.789597][ T29] audit: type=1326 audit(1727299938.630:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9949 comm="syz.4.1596" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 248.834218][ T29] audit: type=1326 audit(1727299938.630:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9949 comm="syz.4.1596" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 248.951537][ T5285] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 249.071300][ T5284] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 249.126737][ T5285] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.137202][ T5285] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 249.146636][ T5285] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.161592][ T5285] usb 3-1: config 0 descriptor?? [ 249.167187][ T5281] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 249.251283][ T5284] usb 1-1: Using ep0 maxpacket: 16 [ 249.259438][ T5284] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 249.274402][ T5284] usb 1-1: New USB device found, idVendor=0b05, idProduct=1807, bcdDevice= 0.40 [ 249.284173][ T5284] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.292292][ T5284] usb 1-1: Product: syz [ 249.297036][ T5284] usb 1-1: Manufacturer: syz [ 249.303485][ T5284] usb 1-1: SerialNumber: syz [ 249.327289][ T5281] usb 5-1: Using ep0 maxpacket: 16 [ 249.335148][ T5284] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 249.357055][ T5281] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 249.377052][ T5281] usb 5-1: config 0 has no interface number 0 [ 249.384875][ T5285] usb 3-1: string descriptor 0 read error: -71 [ 249.391373][ T5281] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 249.416035][ T5285] usb 3-1: Found UVC 0.00 device (046d:08c1) [ 249.419363][ T5281] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 249.431129][ T5285] usb 3-1: No valid video chain found. [ 249.438164][ T5281] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 249.465795][ T5285] usb 3-1: USB disconnect, device number 15 [ 249.477284][ T5281] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.503567][ T5281] usb 5-1: Product: syz [ 249.511581][ T5281] usb 5-1: Manufacturer: syz [ 249.516246][ T5281] usb 5-1: SerialNumber: syz [ 249.543533][ T5281] usb 5-1: config 0 descriptor?? [ 249.568111][ T9954] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 249.575188][ T5280] usb 1-1: USB disconnect, device number 13 [ 249.582933][ T9954] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 249.610500][ T5240] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 249.619372][ T5240] Bluetooth: hci0: Injecting HCI hardware error event [ 249.628424][ T5240] Bluetooth: hci0: hardware error 0x00 [ 249.834274][ T9954] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 249.842168][ T9954] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 250.466060][ T5281] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 250.494803][ T1106] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.521126][ T5281] asix 5-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 250.552586][ T5281] asix 5-1:0.251: probe with driver asix failed with error -71 [ 250.573595][ T5281] usb 5-1: USB disconnect, device number 17 [ 250.644603][ T1106] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.720708][ T1106] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.799498][ T1106] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.937982][ T1106] bridge_slave_1: left allmulticast mode [ 250.945912][ T1106] bridge_slave_1: left promiscuous mode [ 250.960305][ T1106] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.980250][ T1106] bridge_slave_0: left allmulticast mode [ 251.002500][ T1106] bridge_slave_0: left promiscuous mode [ 251.008289][ T1106] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.562164][ T1106] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.578627][ T1106] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.589583][ T1106] bond0 (unregistering): Released all slaves [ 251.682821][ T5240] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 252.130807][T10022] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1620'. [ 252.166332][ T5237] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 252.178180][ T5237] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 252.191276][ T5237] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 252.204559][ T5237] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 252.214187][ T5237] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 252.222521][ T5237] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 252.371714][T10035] warning: `syz.2.1623' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 252.539863][ T1106] hsr_slave_0: left promiscuous mode [ 252.631146][ T1106] hsr_slave_1: left promiscuous mode [ 252.677692][ T1106] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.699530][ T1106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.722633][ T1106] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.743414][ T1106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.808597][ T1106] veth1_macvtap: left promiscuous mode [ 252.819179][ T1106] veth0_macvtap: left promiscuous mode [ 252.827200][ T1106] veth1_vlan: left promiscuous mode [ 253.572302][ T1106] team0 (unregistering): Port device team_slave_1 removed [ 253.633933][ T1106] team0 (unregistering): Port device team_slave_0 removed [ 254.322280][ T5237] Bluetooth: hci0: command tx timeout [ 254.400984][T10030] chnl_net:caif_netlink_parms(): no params data found [ 254.566545][ T938] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 254.578394][ T29] audit: type=1326 audit(1727299944.440:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10080 comm="syz.4.1642" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x0 [ 254.762206][ T938] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 254.770972][ T938] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 254.820608][ T938] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 254.833346][T10030] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.840488][T10030] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.856867][ T938] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.868310][ T5279] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 254.882885][T10030] bridge_slave_0: entered allmulticast mode [ 254.884448][ T938] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 254.904672][T10030] bridge_slave_0: entered promiscuous mode [ 254.937495][ T938] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 254.956827][ T938] usb 2-1: Product: syz [ 254.963731][T10030] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.969267][ T938] usb 2-1: Manufacturer: syz [ 254.980135][T10030] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.999183][ T938] cdc_wdm 2-1:1.0: skipping garbage [ 255.000897][T10030] bridge_slave_1: entered allmulticast mode [ 255.021004][T10030] bridge_slave_1: entered promiscuous mode [ 255.022676][ T938] cdc_wdm 2-1:1.0: skipping garbage [ 255.041277][ T5279] usb 1-1: Using ep0 maxpacket: 16 [ 255.060386][ T5279] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.078275][ T938] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 255.095541][T10030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.112624][ T938] cdc_wdm 2-1:1.0: Unknown control protocol [ 255.119511][ T5279] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.145666][T10030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.165727][ T5279] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 255.194976][ T5279] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.236403][ T5279] usb 1-1: config 0 descriptor?? [ 255.250616][ T47] usb 2-1: USB disconnect, device number 21 [ 255.348217][T10030] team0: Port device team_slave_0 added [ 255.373381][T10030] team0: Port device team_slave_1 added [ 255.461925][T10030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.469012][T10030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.519456][T10030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.543037][T10030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.557347][T10030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.613057][T10030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.696885][T10030] hsr_slave_0: entered promiscuous mode [ 255.710491][T10030] hsr_slave_1: entered promiscuous mode [ 255.719337][T10087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.752224][T10087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.772714][ T938] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 255.796584][ T5279] hid (null): global environment stack underflow [ 255.807872][ T5279] hid (null): bogus close delimiter [ 255.923443][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.929984][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.953745][ T938] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 255.977342][ T938] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 256.000340][ T5279] usb 1-1: string descriptor 0 read error: -71 [ 256.018149][ T938] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 256.053274][ T5279] usb 1-1: Max retries (5) exceeded reading string descriptor 200 [ 256.061535][ T938] usb 3-1: SerialNumber: syz [ 256.071627][ T5279] letsketch 0003:6161:4D15.000C: probe with driver letsketch failed with error -32 [ 256.150377][ T5279] usb 1-1: USB disconnect, device number 14 [ 256.292135][T10130] tipc: Started in network mode [ 256.297064][T10130] tipc: Node identity :, cluster identity 4711 [ 256.310938][T10130] tipc: Enabling of bearer rejected, failed to enable media [ 256.402032][ T5237] Bluetooth: hci0: command tx timeout [ 256.890461][T10030] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 256.945452][ T938] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 256.984404][ T938] usb 3-1: USB disconnect, device number 16 [ 256.995347][T10030] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 257.016412][T10030] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 257.044971][T10154] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 257.059381][T10154] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 257.075021][T10030] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 257.165596][T10030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.183500][T10030] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.229380][ T3018] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.236672][ T3018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.261546][T10160] raw_sendmsg: syz.0.1665 forgot to set AF_INET. Fix it! [ 257.315588][T10165] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 257.332409][ T1053] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.339606][ T1053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.575156][T10030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.723411][T10030] veth0_vlan: entered promiscuous mode [ 257.787452][T10030] veth1_vlan: entered promiscuous mode [ 257.896858][T10030] veth0_macvtap: entered promiscuous mode [ 257.935458][T10030] veth1_macvtap: entered promiscuous mode [ 258.007765][T10030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.057633][T10030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.089351][T10030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.113828][T10030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.138425][T10030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.162023][T10030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.183360][T10030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.211105][T10030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.225154][T10030] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.353686][T10030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.396884][T10030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.421107][T10030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.457823][T10030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.481949][T10030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.482814][ T5237] Bluetooth: hci0: command tx timeout [ 258.507014][T10030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.527356][T10030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.538501][T10030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.550368][T10030] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.565495][T10207] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1679'. [ 258.633869][T10030] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.661240][T10030] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.670012][T10030] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.720258][T10030] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.034564][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.089675][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.100300][ T3018] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.128125][ T3018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.461509][ T938] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 259.551180][ T5281] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 259.627459][ T938] usb 1-1: Using ep0 maxpacket: 16 [ 259.647588][ T938] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 259.669973][ T938] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.685198][ T938] usb 1-1: Product: syz [ 259.690152][ T938] usb 1-1: Manufacturer: syz [ 259.697959][ T938] usb 1-1: SerialNumber: syz [ 259.716825][ T5281] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 259.735827][ T938] r8152-cfgselector 1-1: Unknown version 0x0000 [ 259.747662][ T5281] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.781939][ T938] r8152-cfgselector 1-1: config 0 descriptor?? [ 259.815905][ T5281] usb 5-1: config 0 descriptor?? [ 260.023152][ T938] r8152-cfgselector 1-1: Needed 2 retries to read version [ 260.073514][ T938] r8152-cfgselector 1-1: Unknown version 0x0000 [ 260.100373][ T938] r8152-cfgselector 1-1: bad CDC descriptors [ 260.263836][ T5284] r8152-cfgselector 1-1: USB disconnect, device number 15 [ 260.268634][ T5281] [drm:udl_init] *ERROR* Selecting channel failed [ 260.342193][ T5281] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 260.378620][ T5281] [drm] Initialized udl on minor 2 [ 260.399661][ T5281] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 260.456103][ T5281] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 260.483514][ T938] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 260.507033][ T5281] usb 5-1: USB disconnect, device number 18 [ 260.530451][ T938] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 260.561805][ T5237] Bluetooth: hci0: command tx timeout [ 260.894731][T10282] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1699'. [ 260.953654][T10282] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1699'. [ 261.005548][T10282] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1699'. [ 262.125265][ T1053] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.302268][ T1053] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.399877][ T1053] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.723894][ T1053] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.134527][ T5240] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 263.159271][T10350] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1720'. [ 263.193007][ T5240] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 263.204600][ T5240] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 263.213349][ T5240] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 263.255937][ T1053] bridge_slave_1: left allmulticast mode [ 263.262329][ T1053] bridge_slave_1: left promiscuous mode [ 263.268109][ T1053] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.277927][ T5240] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 263.347273][ T5240] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 263.396038][ T1053] bridge_slave_0: left allmulticast mode [ 263.402164][ T1053] bridge_slave_0: left promiscuous mode [ 263.408339][ T1053] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.642827][T10378] program syz.1.1729 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 264.091666][ T5285] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 264.206128][ T1053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 264.218843][ T1053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 264.230497][ T1053] bond0 (unregistering): Released all slaves [ 264.272862][T10382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1730'. [ 264.273107][ T5285] usb 1-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 264.319014][ T5285] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.340034][T10382] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1730'. [ 264.351370][ T5285] usb 1-1: config 0 descriptor?? [ 264.370684][ T5285] ums-realtek 1-1:0.0: USB Mass Storage device detected [ 264.376486][T10389] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1733'. [ 264.568261][ T5285] usb 1-1: USB disconnect, device number 16 [ 264.591210][ T938] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 264.886351][ T938] usb 3-1: Using ep0 maxpacket: 16 [ 264.908950][ T938] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.920437][ T938] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.931409][ T938] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 264.940527][ T938] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.974126][ T938] usb 3-1: config 0 descriptor?? [ 265.021775][T10367] chnl_net:caif_netlink_parms(): no params data found [ 265.172624][ T1053] hsr_slave_0: left promiscuous mode [ 265.222755][ T1053] hsr_slave_1: left promiscuous mode [ 265.274749][ T1053] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.301254][ T1053] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.328573][ T1053] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.339749][ T1053] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.367423][ T1053] veth1_macvtap: left promiscuous mode [ 265.377797][ T1053] veth0_macvtap: left promiscuous mode [ 265.393947][ T1053] veth1_vlan: left promiscuous mode [ 265.405562][ T1053] veth0_vlan: left promiscuous mode [ 265.445325][T10392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.453981][ T5240] Bluetooth: hci0: command tx timeout [ 265.463879][T10392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.486048][ T938] hid (null): global environment stack underflow [ 265.493150][ T938] hid (null): bogus close delimiter [ 265.680965][ T938] usb 3-1: string descriptor 0 read error: -71 [ 265.719147][ T938] usb 3-1: Max retries (5) exceeded reading string descriptor 200 [ 265.730273][ T938] letsketch 0003:6161:4D15.000D: probe with driver letsketch failed with error -32 [ 265.767330][ T938] usb 3-1: USB disconnect, device number 17 [ 266.526348][T10436] netlink: 201400 bytes leftover after parsing attributes in process `syz.1.1744'. [ 266.545363][T10438] TCP: request_sock_TCPv6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 266.701777][ T1053] team0 (unregistering): Port device team_slave_1 removed [ 266.848198][ T1053] team0 (unregistering): Port device team_slave_0 removed [ 267.352343][T10450] netlink: 201400 bytes leftover after parsing attributes in process `syz.1.1760'. [ 267.531350][ T5240] Bluetooth: hci0: command tx timeout [ 267.661253][ T5281] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 267.816533][ T5281] usb 2-1: Using ep0 maxpacket: 16 [ 267.866189][ T5281] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.884461][ T5281] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.939202][ T5281] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 267.952111][ T5281] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.988742][ T5281] usb 2-1: config 0 descriptor?? [ 268.220905][T10367] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.228769][T10367] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.292625][T10367] bridge_slave_0: entered allmulticast mode [ 268.299896][T10367] bridge_slave_0: entered promiscuous mode [ 268.370448][T10367] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.411273][T10367] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.418555][T10367] bridge_slave_1: entered allmulticast mode [ 268.444376][T10454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.472338][T10367] bridge_slave_1: entered promiscuous mode [ 268.481763][T10454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.545154][ T5281] hid (null): global environment stack underflow [ 268.570868][ T5281] hid (null): bogus close delimiter [ 268.590204][T10367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.653113][T10367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.729870][ T5281] usb 2-1: string descriptor 0 read error: -71 [ 268.789564][ T5281] usb 2-1: Max retries (5) exceeded reading string descriptor 200 [ 268.801192][ T5281] letsketch 0003:6161:4D15.000E: probe with driver letsketch failed with error -32 [ 268.857037][ T5281] usb 2-1: USB disconnect, device number 22 [ 269.063790][T10367] team0: Port device team_slave_0 added [ 269.126828][T10367] team0: Port device team_slave_1 added [ 269.223894][T10367] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.243691][T10367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.269650][ C0] vkms_vblank_simulate: vblank timer overrun [ 269.324674][T10367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.402250][T10367] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.409342][T10367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.435300][ C0] vkms_vblank_simulate: vblank timer overrun [ 269.523879][T10367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.604553][ T5240] Bluetooth: hci0: command tx timeout [ 269.673614][T10367] hsr_slave_0: entered promiscuous mode [ 269.718532][T10367] hsr_slave_1: entered promiscuous mode [ 269.819328][ T5282] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 270.284437][T10543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1781'. [ 270.474618][ T5282] usb 3-1: Using ep0 maxpacket: 8 [ 270.498446][ T5282] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 270.526432][ T5282] usb 3-1: config 0 has no interface number 0 [ 270.540120][ T5282] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 270.568182][ T5282] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 270.591304][ T5282] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.609024][ T5282] usb 3-1: config 0 descriptor?? [ 270.619933][ T5282] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 270.873591][ T938] usb 3-1: USB disconnect, device number 18 [ 270.882460][ T938] iowarrior 3-1:0.1: I/O-Warror #0 now disconnected [ 271.118437][T10367] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 271.142809][T10367] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 271.164235][T10367] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 271.196724][T10367] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 271.399445][T10367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.474819][T10367] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.506395][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.513642][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.655495][ T1053] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.662709][ T1053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.681350][ T5237] Bluetooth: hci0: command tx timeout [ 271.774261][T10367] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 271.866309][T10367] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.919244][ T5281] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 271.991011][T10367] veth0_vlan: entered promiscuous mode [ 272.045754][T10367] veth1_vlan: entered promiscuous mode [ 272.100599][ T5281] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 272.143422][ T5281] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 272.148401][T10367] veth0_macvtap: entered promiscuous mode [ 272.191522][ T5281] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.216042][T10367] veth1_macvtap: entered promiscuous mode [ 272.231668][ T5281] usb 3-1: config 0 descriptor?? [ 272.237457][T10604] netlink: 200836 bytes leftover after parsing attributes in process `syz.1.1797'. [ 272.260161][T10604] openvswitch: netlink: Duplicate key (type 0). [ 272.313626][T10367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.364830][T10367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.396034][T10367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.414880][T10367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.438934][T10367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.461751][T10367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.477399][ T5279] usb 3-1: USB disconnect, device number 19 [ 272.485003][T10367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.504998][T10367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.538903][T10367] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.567334][T10367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.589299][T10367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.609570][T10367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.630398][T10367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.640737][T10367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.671721][T10367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.692595][T10367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.731084][T10367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.756340][T10367] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.785980][T10367] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.815525][T10367] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.835792][T10367] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.865659][T10367] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.065015][ T3018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.099835][ T3018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.220411][ T1053] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.238724][ T1053] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.340195][T10630] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1804'. [ 273.361703][ T5237] Bluetooth: hci3: command 0x0406 tx timeout [ 273.381610][T10630] netem: change failed [ 273.533086][ T5281] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 273.742899][ T5281] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 273.768530][ T5281] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.823741][ T5281] usb 3-1: config 0 descriptor?? [ 273.877888][T10650] netlink: 'syz.0.1810': attribute type 1 has an invalid length. [ 273.916323][T10650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1810'. [ 274.257324][ T5281] [drm:udl_init] *ERROR* Selecting channel failed [ 274.298204][ T5281] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 274.331207][ T5281] [drm] Initialized udl on minor 2 [ 274.351319][ T5281] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 274.380258][ T5281] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 274.395475][ T5282] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 274.438850][ T5281] usb 3-1: USB disconnect, device number 20 [ 274.446209][ T5282] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 274.472392][ T5282] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 274.657532][T10680] TCP: tcp_parse_options: Illegal window scaling value 127 > 14 received [ 276.142967][T10745] netlink: 'syz.2.1841': attribute type 11 has an invalid length. [ 276.542320][T10762] netlink: 4056 bytes leftover after parsing attributes in process `syz.0.1846'. [ 276.579783][T10762] openvswitch: netlink: Actions may not be safe on all matching packets [ 276.867351][T10774] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1849'. [ 276.899341][T10774] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1849'. [ 277.209761][T10788] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1853'. [ 277.807265][T10823] netem: incorrect ge model size [ 277.851462][T10823] netem: change failed [ 278.117987][T10835] trusted_key: syz.0.1870 sent an empty control message without MSG_MORE. [ 278.481438][ T47] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 278.589047][T10860] ALSA: mixer_oss: invalid OSS volume 'H8LAÆ¢ÎoÚÜQn' [ 278.690474][T10863] netlink: 'syz.0.1890': attribute type 4 has an invalid length. [ 278.762555][ T47] usb 4-1: Using ep0 maxpacket: 32 [ 278.795107][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.816903][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.855734][ T47] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 278.909241][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.925305][ T47] usb 4-1: config 0 descriptor?? [ 278.982237][ T47] hub 4-1:0.0: USB hub found [ 279.215967][ T47] hub 4-1:0.0: config failed, hub has too many ports! (err -19) [ 279.281334][ T5285] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 279.441836][ T938] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 279.520147][ T5285] usb 1-1: Using ep0 maxpacket: 8 [ 279.525505][ T47] usbhid 4-1:0.0: can't add hid device: -71 [ 279.533389][ T47] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 279.563160][ T5285] usb 1-1: config 0 has no interfaces? [ 279.584256][ T47] usb 4-1: USB disconnect, device number 21 [ 279.594211][ T5285] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 279.605335][ T5285] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.613455][ T5285] usb 1-1: Product: syz [ 279.617658][ T5285] usb 1-1: Manufacturer: syz [ 279.622371][ T5285] usb 1-1: SerialNumber: syz [ 279.642659][ T5285] usb 1-1: config 0 descriptor?? [ 279.645749][ T938] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 279.673120][ T938] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 279.683347][ T938] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 279.692547][ T938] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.722702][T10883] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 279.739829][ T938] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 279.904291][ T5282] usb 1-1: USB disconnect, device number 17 [ 280.004218][ T47] usb 2-1: USB disconnect, device number 23 [ 280.163702][T10894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1893'. [ 280.887852][T10926] netlink: 4056 bytes leftover after parsing attributes in process `syz.1.1906'. [ 280.926956][T10926] openvswitch: netlink: Actions may not be safe on all matching packets [ 281.089219][T10934] TCP: tcp_parse_options: Illegal window scaling value 128 > 14 received [ 281.229612][T10939] sctp: [Deprecated]: syz.1.1910 (pid 10939) Use of struct sctp_assoc_value in delayed_ack socket option. [ 281.229612][T10939] Use struct sctp_sack_info instead [ 281.662757][ T1106] tipc: Subscription rejected, illegal request [ 282.348653][T10970] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1926'. [ 282.371195][T10971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1925'. [ 283.541173][ T5281] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 283.724869][ T5281] usb 4-1: unable to get BOS descriptor or descriptor too short [ 283.744279][ T5281] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 283.776806][ T5281] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 283.836518][ T5281] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 283.884723][ T5281] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 283.934478][ T5281] usb 4-1: string descriptor 0 read error: -22 [ 283.947974][ T5281] usb 4-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=b5.39 [ 283.998843][ T5281] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.045932][ T5281] usb 4-1: config 0 descriptor?? [ 284.088163][ T5281] usb 4-1: NFC: Unable to get FW version [ 284.124507][ T5281] pn533_usb 4-1:0.0: probe with driver pn533_usb failed with error -90 [ 284.389538][ T47] usb 4-1: USB disconnect, device number 22 [ 284.706079][T11053] atomic_op ffff88807b2cf998 conn xmit_atomic 0000000000000000 [ 284.931525][ T5240] Bluetooth: hci1: unexpected cc 0x203e length: 2 > 1 [ 285.083130][T11067] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 285.292698][T11074] input: syz0 as /devices/virtual/input/input19 [ 285.462865][T11077] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1973'. [ 285.492826][T11077] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1973'. [ 285.631148][ T5280] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 285.812768][ T5280] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 285.838816][ T5280] usb 3-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00 [ 285.874252][ T5280] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.884602][ T5280] usb 3-1: config 0 descriptor?? [ 285.898701][ T5280] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 286.101144][ T47] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 286.102742][ T5282] usb 3-1: USB disconnect, device number 21 [ 286.291291][ T47] usb 5-1: Using ep0 maxpacket: 8 [ 286.306844][ T47] usb 5-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 286.321084][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.351208][ T47] usb 5-1: Product: syz [ 286.355437][ T47] usb 5-1: Manufacturer: syz [ 286.360148][ T47] usb 5-1: SerialNumber: syz [ 286.372186][ T47] usb 5-1: config 0 descriptor?? [ 286.389741][ T47] option 5-1:0.0: GSM modem (1-port) converter detected [ 286.633955][ T5280] usb 5-1: USB disconnect, device number 19 [ 286.640965][ T5280] option 5-1:0.0: device disconnected [ 286.678281][T11113] vlan2: entered allmulticast mode [ 286.684119][T11113] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 286.715002][T11113] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 286.931316][ T47] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 287.102951][ T47] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 287.116162][ T47] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 287.126366][ T47] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 287.137909][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.150787][T11114] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 287.158642][ T5285] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 287.192456][ T47] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 287.336601][T11136] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 287.353429][ T5285] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 287.367893][T11136] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 287.384064][ T5285] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 287.394432][ T5285] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 287.406832][ T5285] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.429570][ T5285] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 287.440176][ T5281] usb 4-1: USB disconnect, device number 23 [ 287.448889][ T5285] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 287.478148][ T5285] usb 3-1: Product: syz [ 287.500608][ T5285] usb 3-1: Manufacturer: syz [ 287.620017][ T5285] cdc_wdm 3-1:1.0: skipping garbage [ 287.625736][ T5285] cdc_wdm 3-1:1.0: skipping garbage [ 287.635541][ T5285] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 287.641878][ T5285] cdc_wdm 3-1:1.0: Unknown control protocol [ 287.865395][ T5285] usb 3-1: USB disconnect, device number 22 [ 288.026842][T11162] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 288.033755][T11162] pim6reg0: linktype set to 0 [ 288.182167][ T5282] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 288.206520][T11167] process 'syz.4.2014' launched './file1' with NULL argv: empty string added [ 288.347331][ T5282] usb 1-1: Using ep0 maxpacket: 16 [ 288.401793][ T5282] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.418828][ T5282] usb 1-1: config 0 interface 0 has no altsetting 0 [ 288.426121][ T5282] usb 1-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 288.446117][ T5282] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.466083][ T29] audit: type=1326 audit(1727299978.320:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11174 comm="syz.3.2019" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 288.512208][ T5282] usb 1-1: config 0 descriptor?? [ 288.581170][ T29] audit: type=1326 audit(1727299978.350:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11174 comm="syz.3.2019" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 288.652278][ T29] audit: type=1326 audit(1727299978.350:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11174 comm="syz.3.2019" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 288.744388][ T29] audit: type=1326 audit(1727299978.350:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11174 comm="syz.3.2019" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 288.832185][ T29] audit: type=1326 audit(1727299978.350:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11174 comm="syz.3.2019" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 288.879400][T11192] vxcan1: tx address claim with dlc 9 [ 288.914024][ T29] audit: type=1326 audit(1727299978.350:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11174 comm="syz.3.2019" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 288.943352][ T5282] kye 0003:0458:0138.000F: unknown main item tag 0x0 [ 288.950119][ T5282] kye 0003:0458:0138.000F: unknown main item tag 0x0 [ 288.962451][ T5240] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 288.972763][ T5240] Bluetooth: hci1: Injecting HCI hardware error event [ 288.981874][ T5240] Bluetooth: hci1: hardware error 0x00 [ 288.991117][ T5282] kye 0003:0458:0138.000F: unexpected long global item [ 289.001665][ T5282] kye 0003:0458:0138.000F: parse failed [ 289.002118][T11194] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2027'. [ 289.007386][ T5282] kye 0003:0458:0138.000F: probe with driver kye failed with error -22 [ 289.037292][ T29] audit: type=1326 audit(1727299978.350:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11174 comm="syz.3.2019" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 289.162087][ T29] audit: type=1326 audit(1727299978.350:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11174 comm="syz.3.2019" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 289.268074][ T5280] usb 1-1: USB disconnect, device number 18 [ 289.272508][ T29] audit: type=1326 audit(1727299978.360:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11174 comm="syz.3.2019" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 289.370030][ T29] audit: type=1326 audit(1727299978.360:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11174 comm="syz.3.2019" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 289.392000][ C0] vkms_vblank_simulate: vblank timer overrun [ 289.680119][ T5237] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 289.698588][ T5237] CPU: 1 UID: 0 PID: 5237 Comm: kworker/u9:6 Not tainted 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 289.709184][ T5237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 289.719464][ T5237] Workqueue: hci3 hci_rx_work [ 289.724232][ T5237] Call Trace: [ 289.727557][ T5237] [ 289.730529][ T5237] dump_stack_lvl+0x241/0x360 [ 289.735268][ T5237] ? __pfx_dump_stack_lvl+0x10/0x10 [ 289.740530][ T5237] ? __pfx__printk+0x10/0x10 [ 289.745233][ T5237] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 289.750575][ T5237] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 289.756191][ T5237] sysfs_create_dir_ns+0x2ce/0x3a0 [ 289.761364][ T5237] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 289.767061][ T5237] kobject_add_internal+0x435/0x8d0 [ 289.772328][ T5237] kobject_add+0x152/0x220 [ 289.776805][ T5237] ? do_raw_spin_unlock+0x13c/0x8b0 [ 289.782060][ T5237] ? device_add+0x3e7/0xbf0 [ 289.786629][ T5237] ? __pfx_kobject_add+0x10/0x10 [ 289.791616][ T5237] ? _raw_spin_unlock+0x28/0x50 [ 289.796521][ T5237] ? get_device_parent+0x165/0x410 [ 289.801775][ T5237] device_add+0x4e5/0xbf0 [ 289.806167][ T5237] hci_conn_add_sysfs+0xe8/0x200 [ 289.811183][ T5237] le_conn_complete_evt+0xc9f/0x12e0 [ 289.815706][T11229] ALSA: mixer_oss: invalid OSS volume '' [ 289.816503][ T5237] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 289.827899][ T5237] ? __mutex_unlock_slowpath+0x21d/0x750 [ 289.833585][ T5237] ? __copy_skb_header+0x437/0x5b0 [ 289.838763][ T5237] ? skb_pull_data+0x112/0x230 [ 289.843605][ T5237] hci_le_enh_conn_complete_evt+0x185/0x420 [ 289.849549][ T5237] hci_event_packet+0xa55/0x1540 [ 289.854524][ T5237] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 289.859835][ T5237] ? __pfx_hci_event_packet+0x10/0x10 [ 289.865226][ T5237] ? do_raw_spin_unlock+0x13c/0x8b0 [ 289.870453][ T5237] ? hci_send_to_monitor+0xd8/0x7f0 [ 289.875669][ T5237] ? kcov_remote_start+0x97/0x7d0 [ 289.880735][ T5237] hci_rx_work+0x3e8/0xca0 [ 289.885188][ T5237] ? process_scheduled_works+0x976/0x1850 [ 289.890934][ T5237] process_scheduled_works+0xa63/0x1850 [ 289.896548][ T5237] ? __pfx_process_scheduled_works+0x10/0x10 [ 289.902568][ T5237] ? assign_work+0x364/0x3d0 [ 289.907191][ T5237] worker_thread+0x870/0xd30 [ 289.911840][ T5237] ? __kthread_parkme+0x169/0x1d0 [ 289.916900][ T5237] ? __pfx_worker_thread+0x10/0x10 [ 289.922031][ T5237] kthread+0x2f0/0x390 [ 289.926116][ T5237] ? __pfx_worker_thread+0x10/0x10 [ 289.931249][ T5237] ? __pfx_kthread+0x10/0x10 [ 289.935854][ T5237] ret_from_fork+0x4b/0x80 [ 289.940290][ T5237] ? __pfx_kthread+0x10/0x10 [ 289.944895][ T5237] ret_from_fork_asm+0x1a/0x30 [ 289.949689][ T5237] [ 289.957518][ T5237] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 289.971914][ T5237] Bluetooth: hci3: failed to register connection device [ 290.111913][ T5282] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 290.284813][ T5282] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.302698][ T5282] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.314676][ T5282] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 290.336701][ T938] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 290.344746][ T5282] usb 5-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 290.361394][ T5282] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.377873][ T5282] usb 5-1: config 0 descriptor?? [ 290.451554][ T5281] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 290.514596][ T938] usb 4-1: Using ep0 maxpacket: 8 [ 290.528303][ T938] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 290.538822][ T938] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 290.550662][ T938] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 290.561702][ T938] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 290.575765][ T938] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 290.592290][ T938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.623504][ C0] hrtimer: interrupt took 63748 ns [ 290.631857][ T5281] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 290.645587][ T5281] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.655996][ T5281] usb 2-1: New USB device found, idVendor=046d, idProduct=c09b, bcdDevice= 0.00 [ 290.665531][ T5281] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.678143][ T5281] usb 2-1: config 0 descriptor?? [ 290.810704][ T5282] hid-udraw 0003:20D6:CB17.0010: unbalanced delimiter at end of report description [ 290.839712][ T938] usb 4-1: GET_CAPABILITIES returned 0 [ 290.850639][ T5282] hid-udraw 0003:20D6:CB17.0010: parse failed [ 290.857987][ T938] usbtmc 4-1:16.0: can't read capabilities [ 290.877290][ T5282] hid-udraw 0003:20D6:CB17.0010: probe with driver hid-udraw failed with error -22 [ 291.078633][ T5282] usb 4-1: USB disconnect, device number 24 [ 291.091007][ T938] usb 5-1: USB disconnect, device number 20 [ 291.112124][T11239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.139063][ T5240] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 291.146083][T11239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.178390][ T5281] logitech-hidpp-device 0003:046D:C09B.0011: unknown main item tag 0x0 [ 291.187081][ T5281] logitech-hidpp-device 0003:046D:C09B.0011: unknown main item tag 0x0 [ 291.195904][ T5281] logitech-hidpp-device 0003:046D:C09B.0011: unexpected long global item [ 291.205457][ T5281] logitech-hidpp-device 0003:046D:C09B.0011: hidpp_probe:parse failed [ 291.214244][ T5281] logitech-hidpp-device 0003:046D:C09B.0011: probe with driver logitech-hidpp-device failed with error -22 [ 291.375272][ T938] usb 2-1: USB disconnect, device number 24 [ 291.467166][T11265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2059'. [ 292.189799][T11293] netlink: 'syz.0.2070': attribute type 12 has an invalid length. [ 292.218762][T11295] netlink: 'syz.3.2072': attribute type 10 has an invalid length. [ 292.221206][T11293] netlink: 165628 bytes leftover after parsing attributes in process `syz.0.2070'. [ 292.245062][T11295] syz_tun: entered promiscuous mode [ 292.293299][T11295] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 293.249332][T11343] mac80211_hwsim hwsim34 wlan0: entered promiscuous mode [ 293.294529][T11343] macsec2: entered allmulticast mode [ 293.321455][T11343] mac80211_hwsim hwsim34 wlan0: entered allmulticast mode [ 293.360957][T11343] mac80211_hwsim hwsim34 wlan0: left allmulticast mode [ 293.386845][T11343] mac80211_hwsim hwsim34 wlan0: left promiscuous mode [ 293.682319][T11352] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 294.270174][T11381] netlink: 'syz.1.2108': attribute type 29 has an invalid length. [ 294.299079][T11381] netlink: 'syz.1.2108': attribute type 29 has an invalid length. [ 294.318899][T11383] netlink: 191416 bytes leftover after parsing attributes in process `syz.4.2109'. [ 294.340243][T11381] netlink: 'syz.1.2108': attribute type 29 has an invalid length. [ 294.515422][T11391] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2112'. [ 294.552867][T11393] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2115'. [ 294.571556][T11391] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2112'. [ 294.585425][T11393] vlan3: entered promiscuous mode [ 294.590510][T11393] vlan3: entered allmulticast mode [ 295.256529][T11421] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 295.268843][T11421] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 295.291429][ T5282] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 295.489261][ T5282] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 295.508926][ T5282] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.525577][ T5282] usb 2-1: Product: syz [ 295.530024][ T5282] usb 2-1: Manufacturer: syz [ 295.536481][ T5282] usb 2-1: SerialNumber: syz [ 295.560053][ T5282] usb 2-1: config 0 descriptor?? [ 296.241721][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 296.241742][ T29] audit: type=1326 audit(1727299986.070:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11451 comm="syz.3.2142" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 296.342311][ T938] usb 2-1: USB disconnect, device number 25 [ 296.359478][ T29] audit: type=1326 audit(1727299986.070:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11451 comm="syz.3.2142" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 296.436610][ T29] audit: type=1326 audit(1727299986.080:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11451 comm="syz.3.2142" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 296.546724][ T29] audit: type=1326 audit(1727299986.080:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11451 comm="syz.3.2142" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 296.661162][ T29] audit: type=1326 audit(1727299986.080:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11451 comm="syz.3.2142" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 296.751379][ T29] audit: type=1326 audit(1727299986.080:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11451 comm="syz.3.2142" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 296.785042][T11469] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 296.840986][ T29] audit: type=1326 audit(1727299986.090:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11451 comm="syz.3.2142" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 296.867680][T11472] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2152'. [ 296.909978][ T29] audit: type=1326 audit(1727299986.090:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11451 comm="syz.3.2142" exe="/root/syz-executor" sig=0 arch=40000003 syscall=23 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 296.972144][ T29] audit: type=1326 audit(1727299986.090:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11451 comm="syz.3.2142" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 297.059705][T11480] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2155'. [ 297.113818][ T938] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 297.286476][ T938] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 297.300208][ T938] usb 2-1: config 0 has no interface number 0 [ 297.309313][ T938] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 297.328896][ T938] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 297.349152][ T938] usb 2-1: config 0 interface 255 has no altsetting 0 [ 297.357725][ T938] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 297.417167][ T938] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.448353][ T938] usb 2-1: config 0 descriptor?? [ 297.473014][ T938] ums-realtek 2-1:0.255: USB Mass Storage device detected [ 297.710190][ T5285] usb 2-1: USB disconnect, device number 26 [ 297.931234][ T5284] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 298.103693][ T5284] usb 5-1: Using ep0 maxpacket: 8 [ 298.117633][ T5284] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 298.134675][ T5284] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 298.148727][ T5284] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 298.164406][ T5284] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 298.175915][ T5284] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.184532][ T5284] usb 5-1: Product: syz [ 298.188795][ T5284] usb 5-1: Manufacturer: syz [ 298.193562][ T5284] usb 5-1: SerialNumber: syz [ 298.491909][ T29] audit: type=1326 audit(1727299988.350:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11526 comm="syz.1.2176" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x0 [ 298.842828][ T5284] usb 5-1: 0:2 : does not exist [ 299.012421][T11542] ptrace attach of ""[11543] was attempted by "./syz-executor exec"[11542] [ 299.072785][ T5280] usb 5-1: USB disconnect, device number 21 [ 299.531469][ T5282] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 299.745863][ T5282] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 299.783043][ T5282] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 299.799011][ T5282] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 299.822202][ T5282] usb 4-1: config 0 interface 0 has no altsetting 0 [ 299.846563][ T5282] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 299.861992][ T5282] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 299.888779][ T5282] usb 4-1: config 0 interface 0 has no altsetting 0 [ 299.909465][ T5282] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 299.951343][ T5282] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 299.969373][ T5282] usb 4-1: config 0 interface 0 has no altsetting 0 [ 299.999791][ T5282] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 300.016929][ T5282] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 300.039783][ T5282] usb 4-1: config 0 interface 0 has no altsetting 0 [ 300.061554][ T5282] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 300.079743][T11543] coredump: 168(syz.3.2182): written to core: VMAs: 3, size 33554432; core: 33556937 bytes, pos 33558528 [ 300.093712][ T5282] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 300.121161][ T5282] usb 4-1: config 0 interface 0 has no altsetting 0 [ 300.147712][ T5282] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 300.189106][ T5282] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 300.233014][ T5282] usb 4-1: config 0 interface 0 has no altsetting 0 [ 300.268465][ T5282] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 300.319687][ T5282] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 300.362356][ T5282] usb 4-1: config 0 interface 0 has no altsetting 0 [ 300.382520][ T5282] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 300.415421][ T5282] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 300.447435][ T5282] usb 4-1: config 0 interface 0 has no altsetting 0 [ 300.479834][ T5282] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 300.510252][ T5282] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 300.549622][ T5282] usb 4-1: Product: syz [ 300.555937][ T5282] usb 4-1: Manufacturer: syz [ 300.581724][ T5282] usb 4-1: SerialNumber: syz [ 300.592055][ T5282] usb 4-1: config 0 descriptor?? [ 300.617120][ T5282] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 300.781157][ T5284] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 300.928110][ C0] usb 4-1: yurex_control_callback - control failed: -71 [ 300.928606][ T1849] usb 4-1: USB disconnect, device number 25 [ 300.950715][ T1849] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 300.961186][ T5284] usb 2-1: Using ep0 maxpacket: 32 [ 300.970964][ T5284] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 300.980777][ T5284] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 301.022683][ T5284] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 301.032157][ T5284] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.040287][ T5284] usb 2-1: Product: syz [ 301.066970][ T5284] usb 2-1: Manufacturer: syz [ 301.087416][ T5284] usb 2-1: SerialNumber: syz [ 301.325323][ T5284] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 27 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 301.518205][ T5284] usb 2-1: USB disconnect, device number 27 [ 301.527353][ T5284] usblp0: removed [ 301.732783][ T29] audit: type=1326 audit(1727299991.590:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11624 comm="syz.4.2217" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x0 [ 302.194322][T11645] input: syz1 as /devices/virtual/input/input20 [ 303.203503][ T5228] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 303.212543][ T9] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 303.213037][ T5228] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 303.231471][ T5228] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 303.248045][ T5228] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 303.261359][ T5228] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 303.269321][ T5228] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 303.390862][ T9] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 303.399594][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.420894][ T9] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 303.431484][ T9] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 303.439774][ T9] usb 2-1: Manufacturer: syz [ 303.458078][ T9] usb 2-1: config 0 descriptor?? [ 303.541547][ T9] rc_core: IR keymap rc-hauppauge not found [ 303.561654][ T9] Registered IR keymap rc-empty [ 303.586445][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 303.620827][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input21 [ 303.805904][T11683] chnl_net:caif_netlink_parms(): no params data found [ 303.942383][ T9] usb 2-1: USB disconnect, device number 28 [ 303.954226][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.149055][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.225896][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.274015][T11683] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.290478][T11683] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.299130][T11683] bridge_slave_0: entered allmulticast mode [ 304.307178][T11683] bridge_slave_0: entered promiscuous mode [ 304.346082][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.368802][T11683] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.376122][ T5282] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 304.402448][T11683] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.410007][T11683] bridge_slave_1: entered allmulticast mode [ 304.417894][T11683] bridge_slave_1: entered promiscuous mode [ 304.466979][T11683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.479266][T11683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.567527][ T5282] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.597778][ T5282] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.611148][ T5282] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 304.620241][ T5282] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.632458][ T5282] usb 5-1: config 0 descriptor?? [ 304.654611][T11683] team0: Port device team_slave_0 added [ 304.697925][T11683] team0: Port device team_slave_1 added [ 304.795148][T11683] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.811334][T11683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.850388][T11683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.902077][T11683] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.922657][T11683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.955701][T11683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.030295][ T11] bridge_slave_1: left allmulticast mode [ 305.047955][ T11] bridge_slave_1: left promiscuous mode [ 305.057723][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.080824][ T11] bridge_slave_0: left allmulticast mode [ 305.090693][ T11] bridge_slave_0: left promiscuous mode [ 305.106599][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.172379][ T5282] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 305.181551][ T5282] cp2112 0003:10C4:EA90.0012: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 305.363780][ T5228] Bluetooth: hci1: command tx timeout [ 305.373645][ T5282] cp2112 0003:10C4:EA90.0012: Part Number: 0x82 Device Version: 0xFE [ 305.574694][ T5282] cp2112 0003:10C4:EA90.0012: error requesting SMBus config [ 305.618288][ T5282] cp2112 0003:10C4:EA90.0012: probe with driver cp2112 failed with error -71 [ 305.662459][ T5282] usb 5-1: USB disconnect, device number 22 [ 306.019502][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 306.031300][ T9] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 306.032118][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 306.050915][ T11] bond0 (unregistering): Released all slaves [ 306.084542][T11683] hsr_slave_0: entered promiscuous mode [ 306.108030][T11683] hsr_slave_1: entered promiscuous mode [ 306.158453][T11683] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 306.181195][T11683] Cannot create hsr debugfs directory [ 306.221397][ T9] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 306.245351][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.278459][ T9] usb 4-1: config 0 descriptor?? [ 306.701165][ T29] audit: type=1326 audit(1727299996.540:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11764 comm="syz.1.2271" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 306.763866][ T29] audit: type=1326 audit(1727299996.540:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11764 comm="syz.1.2271" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 306.807519][ T11] hsr_slave_0: left promiscuous mode [ 306.814096][ T11] hsr_slave_1: left promiscuous mode [ 306.819643][ T29] audit: type=1326 audit(1727299996.550:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11764 comm="syz.1.2271" exe="/root/syz-executor" sig=0 arch=40000003 syscall=286 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 306.861835][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.874422][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.894788][ T29] audit: type=1326 audit(1727299996.550:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11764 comm="syz.1.2271" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 306.923375][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.945758][ T29] audit: type=1326 audit(1727299996.550:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11764 comm="syz.1.2271" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 306.945937][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.970212][ T29] audit: type=1326 audit(1727299996.550:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11764 comm="syz.1.2271" exe="/root/syz-executor" sig=0 arch=40000003 syscall=288 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 307.029787][ T29] audit: type=1326 audit(1727299996.550:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11764 comm="syz.1.2271" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 307.056775][ T29] audit: type=1326 audit(1727299996.550:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11764 comm="syz.1.2271" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 307.092785][ T11] veth1_macvtap: left promiscuous mode [ 307.098464][ T11] veth0_macvtap: left promiscuous mode [ 307.105876][ T11] veth1_vlan: left promiscuous mode [ 307.147110][ T11] veth0_vlan: left promiscuous mode [ 307.395538][ T9] pegasus 4-1:0.0: probe with driver pegasus failed with error -71 [ 307.424950][ T9] usb 4-1: USB disconnect, device number 26 [ 307.441275][ T5228] Bluetooth: hci1: command tx timeout [ 307.760709][ T11] team0 (unregistering): Port device team_slave_1 removed [ 307.822044][ T11] team0 (unregistering): Port device team_slave_0 removed [ 308.459017][T11769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2272'. [ 309.032427][T11811] netlink: 'syz.2.2286': attribute type 13 has an invalid length. [ 309.063038][T11811] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 309.096984][T11811] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 309.105717][T11811] gretap1: entered promiscuous mode [ 309.117861][T11811] gretap1: entered allmulticast mode [ 309.389784][T11683] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 309.470281][T11683] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 309.521429][ T5228] Bluetooth: hci1: command tx timeout [ 309.528741][T11683] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 309.614827][T11683] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 309.951723][T11683] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.030499][T11683] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.069111][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.076420][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.116483][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.123706][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.326811][T11862] syzkaller1: entered promiscuous mode [ 310.355140][T11862] syzkaller1: entered allmulticast mode [ 310.454680][T11683] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 310.493306][T11683] veth0_vlan: entered promiscuous mode [ 310.505410][T11683] veth1_vlan: entered promiscuous mode [ 310.535229][T11683] veth0_macvtap: entered promiscuous mode [ 310.583509][T11683] veth1_macvtap: entered promiscuous mode [ 310.626277][T11683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.705320][T11683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.731237][T11683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.743371][T11683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.753357][T11683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.763942][T11683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.774159][T11683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.786900][T11683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.798665][T11683] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 310.990527][T11683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.013354][T11683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.063376][T11683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.120410][T11683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.174652][T11683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.225382][T11683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.270011][T11683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.318203][T11683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.398274][T11683] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 311.466606][T11683] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.511203][T11683] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.563781][T11683] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.601625][ T5228] Bluetooth: hci1: command tx timeout [ 311.617027][T11683] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.951472][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.994559][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.042616][T11911] syz_tun: entered promiscuous mode [ 312.079543][T11911] batadv_slave_0: entered promiscuous mode [ 312.117199][T11911] syz_tun: left promiscuous mode [ 312.138475][T11911] batadv_slave_0: left promiscuous mode [ 312.294009][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.315605][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.423739][T10367] bond0: (slave syz_tun): Releasing backup interface [ 312.971120][ T5282] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 313.141245][ T5282] usb 5-1: Using ep0 maxpacket: 8 [ 313.158760][ T5282] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 313.179237][ T5282] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.199387][ T5282] usb 5-1: Product: syz [ 313.209797][ T5282] usb 5-1: Manufacturer: syz [ 313.226264][ T5282] usb 5-1: SerialNumber: syz [ 313.252369][ T5282] usb 5-1: config 0 descriptor?? [ 313.272496][ T5282] gspca_main: sq930x-2.14.0 probing 2770:930c [ 314.188072][ T62] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.427310][ T5282] gspca_sq930x: reg_w 0105 0f00 failed -71 [ 314.502347][ T62] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.673318][ T5240] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 314.698537][ T5282] gspca_sq930x: Sensor ov9630 not yet treated [ 314.713465][ T5240] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 314.722413][ T5282] sq930x 5-1:0.0: probe with driver sq930x failed with error -22 [ 314.733317][ T62] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.757033][ T5240] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 314.764446][ T5282] usb 5-1: USB disconnect, device number 23 [ 314.842602][ T5240] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 314.850958][ T5240] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 314.862314][ T5240] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 315.072250][ T62] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.255703][ T62] bridge_slave_1: left allmulticast mode [ 315.271658][ T62] bridge_slave_1: left promiscuous mode [ 315.278250][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.295633][ T62] bridge_slave_0: left allmulticast mode [ 315.306097][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.351184][ T1849] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 315.358959][ T5280] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 315.522803][ T5280] usb 5-1: Using ep0 maxpacket: 8 [ 315.530802][ T1849] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 315.540617][ T5280] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 315.556644][ T5280] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 315.566636][ T1849] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.594929][ T5280] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 315.612789][ T1849] usb 2-1: config 0 descriptor?? [ 315.627456][ T5280] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 315.646440][ T5280] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 315.660589][ T5280] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.887460][ T5280] usb 5-1: GET_CAPABILITIES returned 0 [ 315.893315][ T5280] usbtmc 5-1:16.0: can't read capabilities [ 316.034457][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 316.048003][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 316.054172][ T5282] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 316.065402][ T1849] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 316.074729][ T62] bond0 (unregistering): Released all slaves [ 316.103830][T11984] syz_tun: entered promiscuous mode [ 316.114942][ T9] usb 5-1: USB disconnect, device number 24 [ 316.130098][T11984] batadv_slave_0: entered promiscuous mode [ 316.182192][T11984] syz_tun: left promiscuous mode [ 316.199084][T11984] batadv_slave_0: left promiscuous mode [ 316.229029][ T5282] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.245735][ T5282] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.256339][ T5282] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 316.280107][T11967] chnl_net:caif_netlink_parms(): no params data found [ 316.287246][ T5282] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 316.303147][ T5282] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.318072][ T5282] usb 3-1: config 0 descriptor?? [ 316.652289][T11967] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.659519][T11967] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.711345][T11967] bridge_slave_0: entered allmulticast mode [ 316.728117][T11967] bridge_slave_0: entered promiscuous mode [ 316.770812][ T1849] gs_usb 2-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 316.786972][ T5282] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 316.796314][ T1849] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71 [ 316.818293][ T1849] usb 2-1: USB disconnect, device number 29 [ 316.865529][ T5282] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 316.952958][ T62] hsr_slave_0: left promiscuous mode [ 316.961685][ T5240] Bluetooth: hci0: command tx timeout [ 316.972058][ T62] hsr_slave_1: left promiscuous mode [ 317.006271][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 317.014294][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 317.026703][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 317.034390][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 317.054516][ T5282] usb 3-1: USB disconnect, device number 23 [ 317.090531][ T62] veth1_macvtap: left promiscuous mode [ 317.102824][ T62] veth0_macvtap: left promiscuous mode [ 317.112868][ T62] veth1_vlan: left promiscuous mode [ 317.123186][ T62] veth0_vlan: left promiscuous mode [ 317.363165][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.370105][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.184819][ T62] team0 (unregistering): Port device team_slave_1 removed [ 318.254018][ T9] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 318.273757][T12044] netlink: 'syz.2.2357': attribute type 3 has an invalid length. [ 318.285635][ T62] team0 (unregistering): Port device team_slave_0 removed [ 318.416027][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 318.429249][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 318.449025][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 318.467630][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 318.490459][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 318.500392][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.518300][ T9] usb 5-1: config 0 descriptor?? [ 318.524971][T12037] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 318.860355][T11967] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.867861][T11967] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.879072][T11967] bridge_slave_1: entered allmulticast mode [ 318.889524][T11967] bridge_slave_1: entered promiscuous mode [ 318.951420][ T9] plantronics 0003:047F:FFFF.0014: unknown main item tag 0xd [ 318.960512][ T9] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving [ 318.975135][T12031] syz_tun: entered promiscuous mode [ 318.982670][T12031] batadv_slave_0: entered promiscuous mode [ 318.995892][T12031] syz_tun: left promiscuous mode [ 318.995994][ T9] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 319.018922][T12031] batadv_slave_0: left promiscuous mode [ 319.042038][ T5240] Bluetooth: hci0: command tx timeout [ 319.195138][T11967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.230433][T11967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.258343][T12053] netlink: 'syz.1.2362': attribute type 3 has an invalid length. [ 319.270391][ T5280] usb 5-1: USB disconnect, device number 25 [ 319.316258][T12053] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2362'. [ 319.402513][T11967] team0: Port device team_slave_0 added [ 319.423297][T11967] team0: Port device team_slave_1 added [ 319.529634][T11967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.548228][T11967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.599917][T11967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.640276][T11967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.658581][T11967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.688038][T11967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.832821][T11967] hsr_slave_0: entered promiscuous mode [ 319.891906][T11967] hsr_slave_1: entered promiscuous mode [ 320.628696][ T5240] Bluetooth: hci3: unexpected subevent 0x19 length: 16 < 28 [ 320.732485][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.035798][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.122159][ T5240] Bluetooth: hci0: command tx timeout [ 321.162454][T11967] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 321.234353][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.294046][T11967] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 321.318399][T12113] [ 321.320780][T12113] ====================================================== [ 321.327959][T12113] WARNING: possible circular locking dependency detected [ 321.335007][T12113] 6.11.0-syzkaller-10622-gaa486552a110 #0 Not tainted [ 321.341801][T12113] ------------------------------------------------------ [ 321.348848][T12113] syz.1.2381/12113 is trying to acquire lock: [ 321.355232][T12113] ffff88807e3aea18 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_lock_killable+0x1d/0x70 [ 321.364964][T12113] [ 321.364964][T12113] but task is already holding lock: [ 321.372359][T12113] ffff88805bd3b708 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: shmem_file_write_iter+0x80/0x120 [ 321.380375][ T5228] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 321.383133][T12113] [ 321.383133][T12113] which lock already depends on the new lock. [ 321.383133][T12113] [ 321.383145][T12113] [ 321.383145][T12113] the existing dependency chain (in reverse order) is: [ 321.383154][T12113] [ 321.383154][T12113] -> #1 (&sb->s_type->i_mutex_key#12 [ 321.390569][ T5228] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 321.400623][T12113] ){+.+.}-{3:3}: [ 321.400650][T12113] lock_acquire+0x1ed/0x550 [ 321.400685][T12113] down_write+0x99/0x220 [ 321.412134][ T5228] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 321.417234][T12113] process_measurement+0x439/0x1fb0 [ 321.425750][ T5228] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 321.428044][T12113] ima_file_mmap+0x13d/0x2b0 [ 321.428073][T12113] security_mmap_file+0x7e7/0xa40 [ 321.434099][ T5228] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 321.437879][T12113] __se_sys_remap_file_pages+0x6e6/0xa50 [ 321.445638][ T5228] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 321.450543][T12113] __do_fast_syscall_32+0xb4/0x110 [ 321.450579][T12113] do_fast_syscall_32+0x34/0x80 [ 321.450605][T12113] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 321.450636][T12113] [ 321.450636][T12113] -> #0 (&mm->mmap_lock){++++}-{3:3}: [ 321.450674][T12113] validate_chain+0x18ef/0x5920 [ 321.450698][T12113] __lock_acquire+0x1384/0x2050 [ 321.450729][T12113] lock_acquire+0x1ed/0x550 [ 321.450760][T12113] down_read_killable+0xca/0xd30 [ 321.450790][T12113] mmap_read_lock_killable+0x1d/0x70 [ 321.540875][T12113] lock_mm_and_find_vma+0x29c/0x2f0 [ 321.540917][T12113] exc_page_fault+0x1bf/0x8c0 [ 321.540942][T12113] asm_exc_page_fault+0x26/0x30 [ 321.557210][T12113] fault_in_readable+0x165/0x2b0 [ 321.562718][T12113] fault_in_iov_iter_readable+0x229/0x280 [ 321.568998][T12113] generic_perform_write+0x259/0x6d0 [ 321.574843][T12113] shmem_file_write_iter+0xf9/0x120 [ 321.580611][T12113] vfs_write+0xa6d/0xc90 [ 321.585423][T12113] ksys_write+0x183/0x2b0 [ 321.590326][T12113] __do_fast_syscall_32+0xb4/0x110 [ 321.596024][T12113] do_fast_syscall_32+0x34/0x80 [ 321.601415][T12113] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 321.608293][T12113] [ 321.608293][T12113] other info that might help us debug this: [ 321.608293][T12113] [ 321.618524][T12113] Possible unsafe locking scenario: [ 321.618524][T12113] [ 321.626068][T12113] CPU0 CPU1 [ 321.631433][T12113] ---- ---- [ 321.636795][T12113] lock(&sb->s_type->i_mutex_key#12); [ 321.642268][T12113] lock(&mm->mmap_lock); [ 321.649498][T12113] lock(&sb->s_type->i_mutex_key#12); [ 321.657501][T12113] rlock(&mm->mmap_lock); [ 321.661924][T12113] [ 321.661924][T12113] *** DEADLOCK *** [ 321.661924][T12113] [ 321.670072][T12113] 3 locks held by syz.1.2381/12113: [ 321.675272][T12113] #0: ffff88807c5bf438 (&f->f_pos_lock){+.+.}-{3:3}, at: fdget_pos+0x24e/0x320 [ 321.684372][T12113] #1: ffff88805beda420 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 321.693305][T12113] #2: ffff88805bd3b708 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: shmem_file_write_iter+0x80/0x120 [ 321.704471][T12113] [ 321.704471][T12113] stack backtrace: [ 321.710357][T12113] CPU: 0 UID: 0 PID: 12113 Comm: syz.1.2381 Not tainted 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 321.720767][T12113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 321.730928][T12113] Call Trace: [ 321.734221][T12113] [ 321.737152][T12113] dump_stack_lvl+0x241/0x360 [ 321.741841][T12113] ? __pfx_dump_stack_lvl+0x10/0x10 [ 321.747135][T12113] ? __pfx__printk+0x10/0x10 [ 321.751842][T12113] print_circular_bug+0x13a/0x1b0 [ 321.756877][T12113] check_noncircular+0x36a/0x4a0 [ 321.761825][T12113] ? __pfx_check_noncircular+0x10/0x10 [ 321.767304][T12113] ? lockdep_lock+0x123/0x2b0 [ 321.772013][T12113] ? __pfx_validate_chain+0x10/0x10 [ 321.777274][T12113] validate_chain+0x18ef/0x5920 [ 321.782144][T12113] ? mark_lock+0x9a/0x360 [ 321.786485][T12113] ? __pfx_validate_chain+0x10/0x10 [ 321.791701][T12113] ? __pfx___calc_delta+0x10/0x10 [ 321.796741][T12113] ? sched_clock+0x4a/0x70 [ 321.801169][T12113] ? update_curr+0x8aa/0xd80 [ 321.805763][T12113] ? __pfx___calc_delta+0x10/0x10 [ 321.810826][T12113] ? mark_lock+0x9a/0x360 [ 321.815162][T12113] __lock_acquire+0x1384/0x2050 [ 321.820132][T12113] lock_acquire+0x1ed/0x550 [ 321.824744][T12113] ? mmap_read_lock_killable+0x1d/0x70 [ 321.830212][T12113] ? __pfx_lock_acquire+0x10/0x10 [ 321.835251][T12113] ? __pfx___might_resched+0x10/0x10 [ 321.840549][T12113] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 321.846887][T12113] ? __pfx_try_to_wake_up+0x10/0x10 [ 321.852133][T12113] ? lockdep_hardirqs_on+0x99/0x150 [ 321.857337][T12113] down_read_killable+0xca/0xd30 [ 321.862378][T12113] ? mmap_read_lock_killable+0x1d/0x70 [ 321.867857][T12113] ? wake_up_q+0xdc/0x120 [ 321.872207][T12113] ? cmp_ex_search+0x74/0xa0 [ 321.876827][T12113] ? mmap_read_lock_killable+0x1d/0x70 [ 321.882288][T12113] ? bsearch+0x98/0xc0 [ 321.886365][T12113] ? __pfx_down_read_killable+0x10/0x10 [ 321.891919][T12113] ? search_extable+0xb3/0x100 [ 321.896691][T12113] ? __pfx_search_extable+0x10/0x10 [ 321.901908][T12113] ? fault_in_readable+0x165/0x2b0 [ 321.907070][T12113] ? __pfx_down_read_trylock+0x10/0x10 [ 321.912622][T12113] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 321.919077][T12113] mmap_read_lock_killable+0x1d/0x70 [ 321.924374][T12113] lock_mm_and_find_vma+0x29c/0x2f0 [ 321.929587][T12113] exc_page_fault+0x1bf/0x8c0 [ 321.934277][T12113] asm_exc_page_fault+0x26/0x30 [ 321.939315][T12113] RIP: 0010:fault_in_readable+0x165/0x2b0 [ 321.945074][T12113] Code: b3 ff 4c 8d b3 ff 0f 00 00 48 89 d8 4d 01 e6 49 81 e6 00 f0 ff ff 49 39 c6 72 6b e8 95 cd b3 ff 4c 39 f3 74 6e 4c 89 64 24 10 <44> 8a 23 43 0f b6 04 2f 84 c0 75 18 44 88 64 24 40 48 81 c3 00 10 [ 321.964734][T12113] RSP: 0018:ffffc90009b77a20 EFLAGS: 00050246 [ 321.970907][T12113] RAX: ffffffff81e0e7d7 RBX: 0000000020357000 RCX: 0000000000040000 [ 321.978884][T12113] RDX: ffffc9000960b000 RSI: 000000000003ffff RDI: 0000000000040000 [ 321.986943][T12113] RBP: ffffc90009b77ad8 R08: ffffffff81e0e748 R09: ffffffff84b90999 [ 321.994920][T12113] R10: 0000000000000002 R11: ffff88801dbeda00 R12: 0000000000200000 [ 322.002901][T12113] R13: dffffc0000000000 R14: 0000000020401000 R15: 1ffff9200136ef4c [ 322.010877][T12113] ? fault_in_iov_iter_readable+0x49/0x280 [ 322.016690][T12113] ? fault_in_readable+0xf8/0x2b0 [ 322.021822][T12113] ? fault_in_readable+0x187/0x2b0 [ 322.027008][T12113] ? __pfx_fault_in_readable+0x10/0x10 [ 322.032477][T12113] ? folio_unlock+0x126/0x2f0 [ 322.037177][T12113] ? inode_to_bdi+0x69/0xf0 [ 322.041691][T12113] fault_in_iov_iter_readable+0x229/0x280 [ 322.047417][T12113] generic_perform_write+0x259/0x6d0 [ 322.052720][T12113] ? __pfx_generic_perform_write+0x10/0x10 [ 322.058552][T12113] ? mnt_put_write_access_file+0xbf/0x100 [ 322.064725][T12113] ? file_update_time+0x3be/0x430 [ 322.069787][T12113] shmem_file_write_iter+0xf9/0x120 [ 322.075038][T12113] vfs_write+0xa6d/0xc90 [ 322.079316][T12113] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 322.085134][T12113] ? __pfx_vfs_write+0x10/0x10 [ 322.089917][T12113] ? fdget_pos+0x24e/0x320 [ 322.094453][T12113] ksys_write+0x183/0x2b0 [ 322.098813][T12113] ? __pfx_ksys_write+0x10/0x10 [ 322.103781][T12113] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 322.110441][T12113] ? lockdep_hardirqs_on+0x99/0x150 [ 322.115656][T12113] __do_fast_syscall_32+0xb4/0x110 [ 322.120784][T12113] ? exc_page_fault+0x590/0x8c0 [ 322.125706][T12113] do_fast_syscall_32+0x34/0x80 [ 322.130578][T12113] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 322.137204][T12113] RIP: 0023:0xf749d579 [ 322.141399][T12113] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 322.161372][T12113] RSP: 002b:00000000f578656c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 322.170157][T12113] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000140 [ 322.178136][T12113] RDX: 000000000208e24b RSI: 0000000000000000 RDI: 0000000000000000 [ 322.186123][T12113] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 322.194123][T12113] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 322.202102][T12113] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 322.210107][T12113] [ 322.213196][ C0] vkms_vblank_simulate: vblank timer overrun [ 322.402416][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.750456][ T35] bridge_slave_1: left allmulticast mode [ 322.758662][ T35] bridge_slave_1: left promiscuous mode [ 322.764776][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.958486][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 322.969067][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 322.980190][ T35] bond0 (unregistering): Released all slaves [ 323.233695][ T35] hsr_slave_0: left promiscuous mode [ 323.240306][ T35] hsr_slave_1: left promiscuous mode [ 323.262584][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.270065][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.293309][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.300760][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.334221][ T35] veth1_macvtap: left promiscuous mode [ 323.339836][ T35] veth0_macvtap: left promiscuous mode [ 323.351154][ T35] veth1_vlan: left promiscuous mode [ 323.356489][ T35] veth0_vlan: left promiscuous mode [ 323.569130][ T35] team0 (unregistering): Port device team_slave_1 removed [ 323.587093][ T35] team0 (unregistering): Port device team_slave_0 removed [ 324.112778][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.187886][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.266782][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.336473][ T35] netdevsim netdevsim1  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.416106][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.457668][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.517217][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.577128][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.856088][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.906343][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.970773][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.038670][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.183160][ T35] bridge_slave_1: left allmulticast mode [ 325.188881][ T35] bridge_slave_1: left promiscuous mode [ 325.198590][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.207509][ T35] bridge_slave_0: left allmulticast mode [ 325.215452][ T35] bridge_slave_0: left promiscuous mode [ 325.222592][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.232973][ T35] bridge_slave_1: left allmulticast mode [ 325.239313][ T35] bridge_slave_1: left promiscuous mode [ 325.247525][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.256497][ T35] bridge_slave_0: left allmulticast mode [ 325.264676][ T35] bridge_slave_0: left promiscuous mode [ 325.270391][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.280307][ T35] bridge_slave_1: left allmulticast mode [ 325.287905][ T35] bridge_slave_1: left promiscuous mode [ 325.294711][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.305543][ T35] bridge_slave_0: left allmulticast mode [ 325.311266][ T35] bridge_slave_0: left promiscuous mode [ 325.317060][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.328463][ T35] bridge_slave_1: left allmulticast mode [ 325.334644][ T35] bridge_slave_1: left promiscuous mode [ 325.340945][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.351794][ T35] bridge_slave_0: left allmulticast mode [ 325.357527][ T35] bridge_slave_0: left promiscuous mode [ 325.367231][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.757500][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 325.767828][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 325.778692][ T35] bond0 (unregistering): Released all slaves [ 325.787703][ T35] bond1 (unregistering): Released all slaves [ 325.800042][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 325.810144][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 325.823644][ T35] bond0 (unregistering): Released all slaves [ 325.833686][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 325.844394][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 325.854724][ T35] bond0 (unregistering): Released all slaves [ 325.867364][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 325.878632][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 325.888937][ T35] bond0 (unregistering): Released all slaves [ 325.987266][ T35] tipc: Left network mode [ 326.368376][ T35] hsr_slave_0: left promiscuous mode [ 326.375283][ T35] hsr_slave_1: left promiscuous mode [ 326.386617][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.395706][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.404687][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.413007][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.423342][ T35] hsr_slave_0: left promiscuous mode [ 326.429047][ T35] hsr_slave_1: left promiscuous mode [ 326.434925][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.443083][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.450726][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.458263][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.468815][ T35] hsr_slave_0: left promiscuous mode [ 326.475657][ T35] hsr_slave_1: left promiscuous mode [ 326.482285][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.489798][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.499775][ T35] hsr_slave_0: left promiscuous mode [ 326.506553][ T35] hsr_slave_1: left promiscuous mode [ 326.512505][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.519914][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.528062][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.535831][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.547477][ T35] veth1_macvtap: left promiscuous mode [ 326.553183][ T35] veth0_macvtap: left promiscuous mode [ 326.558873][ T35] veth1_vlan: left promiscuous mode [ 326.564258][ T35] veth0_vlan: left promiscuous mode [ 326.570192][ T35] veth1_macvtap: left promiscuous mode [ 326.575809][ T35] veth0_macvtap: left promiscuous mode [ 326.581427][ T35] veth1_vlan: left promiscuous mode [ 326.586738][ T35] veth0_vlan: left promiscuous mode [ 326.593755][ T35] veth1_macvtap: left promiscuous mode [ 326.599269][ T35] veth0_macvtap: left promiscuous mode [ 326.604887][ T35] veth1_vlan: left promiscuous mode [ 326.610160][ T35] veth0_vlan: left promiscuous mode [ 326.850665][ T35] team0 (unregistering): Port device team_slave_1 removed [ 326.876337][ T35] team0 (unregistering): Port device team_slave_0 removed [ 327.055289][ T35] team0 (unregistering): Port device team_slave_1 removed [ 327.086476][ T35] team0 (unregistering): Port device team_slave_0 removed [ 327.266578][ T35] team0 (unregistering): Port device team_slave_1 removed [ 327.292664][ T35] team0 (unregistering): Port device team_slave_0 removed [ 327.455979][ T35] team0 (unregistering): Port device team_slave_1 removed [ 327.480927][ T35] team0 (unregistering): Port device team_slave_0 removed