last executing test programs: 12.553039381s ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000061108a000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000040095"], &(0x7f0000000440)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5}]}, 0x30}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x80012, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xb}, 0x48) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) syz_usb_disconnect(r4) ioctl$AUTOFS_IOC_FAIL(r5, 0x9361, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x80, 0x200, 0xb4, 0x60, r0, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x0, 0x5}, 0x48) 9.42825314s ago: executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000000200)='V', 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) syz_emit_vhci(&(0x7f0000005e00)=ANY=[@ANYBLOB='%I'], 0x7) socket$inet6(0xa, 0x0, 0x0) mbind(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x0, 0x0, 0x0) 8.570649317s ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000061108a000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000040095"], &(0x7f0000000440)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5}]}, 0x30}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x80012, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xb}, 0x48) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x80, 0x200, 0xb4, 0x60, r0, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x0, 0x5}, 0x48) 6.964904938s ago: executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x4, &(0x7f0000000240)=[{0x3, 0x0, 0x9}, {0x8, 0x1}, {0x0, 0x81, 0x20, 0x800}, {0xfff, 0x5c, 0x3, 0x101}]}, 0x10) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000280)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/custom0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) r4 = dup(0xffffffffffffffff) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000100)={r6}, 0x8) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f00000002c0)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f0000000440), 0x8) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000004c0)={0x0, 0x9, 0x640617f8, 0xd5f2, 0x3, 0x8000, 0x7, 0x0, {r9, @in={{0x2, 0x0, @multicast1}}, 0x4, 0x4, 0x2, 0x1}}, &(0x7f0000000100)=0xb0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000700)=ANY=[@ANYBLOB="020000000000000001000040000000000300000048762331"]) r10 = dup3(r3, r2, 0x0) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r12 = openat2(r4, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380)={0x2, 0x80, 0x2}, 0x18) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r12, 0x84, 0x8, &(0x7f0000000400), &(0x7f0000000580)=0x4) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r11, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000480)={0x10, 0x0, &(0x7f0000000800)=[@release, @acquire={0x40046305, 0x3}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000001980)={0xc, 0x0, &(0x7f0000000080)=[@free_buffer], 0x0, 0x0, 0x0}) fcntl$dupfd(r0, 0x0, r1) 6.813104251s ago: executing program 1: syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'gretap0\x00', &(0x7f0000000480)={'syztnl1\x00', 0x0, 0x40, 0x40, 0xfffffffb, 0x0, {{0xc, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x22}, @rand_addr, {[@timestamp_addr={0x44, 0x1c, 0x0, 0x1, 0x4, [{@local, 0xfffffff9}, {@multicast1, 0xff}, {@private=0xa010100, 0x6}]}]}}}}}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000000000a008d12", @ANYRES32=0x0, @ANYBLOB="1400020000000000000000000000000000000001"], 0x2c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x6, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0xfffffd6e}, {&(0x7f0000019740)=""/242}], 0x2, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000019640)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000c57000), 0x0) ioctl$UFFDIO_ZEROPAGE(r4, 0xc018aa06, &(0x7f0000000380)={{&(0x7f00007db000/0x2000)=nil, 0x2000}}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000380)={'#! ', './file0', [], 0xa, "7c22ff090000008cde700f0cc2d26b3c681641cdbf1fb4d4aa1ecd06be4090c967f7dd2ad472c4624ce1bd8fd60d90bae014f78b18146ed69fa5a6d461431b7e713e351f42935795b277adbf"}, 0x4) r5 = dup(r3) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000340)="0f01cb0f07660fc7710e0f5ccd3e0f320f20a73e65660fc2a9019c3ef4abbad004ec", 0x22}], 0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, r5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, 0x0, &(0x7f00002bf000)='syzkaller\x00'}, 0x90) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x8) 6.315710684s ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000061108a000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000040095"], &(0x7f0000000440)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5}]}, 0x30}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x80012, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xb}, 0x48) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) syz_usb_disconnect(r4) ioctl$AUTOFS_IOC_FAIL(r5, 0x9361, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x80, 0x200, 0xb4, 0x60, r0, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x0, 0x5}, 0x48) 4.550993155s ago: executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback={0xff00000000000000}}, 0x1c) r2 = eventfd2(0x0, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = dup3(r3, r2, 0x0) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000240)={0x1d, r6, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r5, &(0x7f000009de80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x4c}}, 0x0) readv(r5, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000340)=""/48, 0x30}], 0x2) 3.890170431s ago: executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001440)={0x54, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @probe_response={{{}, {}, @broadcast, @device_b, @from_mac=@broadcast}, 0x0, @random, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void}}]}, 0x54}}, 0x0) 3.824705787s ago: executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, 0x0, 0xffffffffffffff5f) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x1}, 0x10) listen(r1, 0x0) ppoll(&(0x7f00000000c0)=[{r0, 0x8124, 0x3a1}, {r1, 0x0, 0x64}], 0x2, 0x0, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@local, 0x0, r3}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000140)={@mcast2, @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4050000ffe0f50571101800000000006600000000800080950000000000000072c2f98cb7333011f1cf97f165ac0dc8c84c1ed04a84f6243cec3706bd2d671c2c28c7a0bd13871d815bbc06c2fa221f1a91d63e4bdbf3cbdd4ff4738d969857122ea180b8b25ad6c006c3e4e86dd319c92d683f6d593cb860187c7640045af58adcfc943a215f12b50493e62b5a127771fc659f39d1470e7d85"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r5, 0xffffffffffffffff, 0x5, 0x0, @val=@perf_event={0x2}}, 0x40) 3.676631037s ago: executing program 3: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'gretap0\x00', &(0x7f0000000480)={'syztnl1\x00', 0x0, 0x40, 0x40, 0xfffffffb, 0x0, {{0xc, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x22}, @rand_addr, {[@timestamp_addr={0x44, 0x1c, 0x0, 0x1, 0x4, [{@local, 0xfffffff9}, {@multicast1, 0xff}, {@private=0xa010100, 0x6}]}]}}}}}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000000000a008d12", @ANYRES32=0x0, @ANYBLOB="1400020000000000000000000000000000000001"], 0x2c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x6, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0xfffffd6e}, {&(0x7f0000019740)=""/242}], 0x2, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000019640)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000c57000), 0x0) ioctl$UFFDIO_ZEROPAGE(r4, 0xc018aa06, &(0x7f0000000380)={{&(0x7f00007db000/0x2000)=nil, 0x2000}}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000380)={'#! ', './file0', [], 0xa, "7c22ff090000008cde700f0cc2d26b3c681641cdbf1fb4d4aa1ecd06be4090c967f7dd2ad472c4624ce1bd8fd60d90bae014f78b18146ed69fa5a6d461431b7e713e351f42935795b277adbf"}, 0x4) r5 = dup(r3) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000340)="0f01cb0f07660fc7710e0f5ccd3e0f320f20a73e65660fc2a9019c3ef4abbad004ec", 0x22}], 0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, r5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, 0x0, &(0x7f00002bf000)='syzkaller\x00'}, 0x90) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x8) 3.598046183s ago: executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, 0x0, 0xffffffffffffff5f) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x1}, 0x10) listen(r1, 0x0) ppoll(&(0x7f00000000c0)=[{r0, 0x8124, 0x3a1}, {r1, 0x0, 0x64}], 0x2, 0x0, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@local, 0x0, r3}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000140)={@mcast2, @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x40, 0x0, 0x8003, 0x400, 0x0, 0x4400046, r3}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4050000ffe0f50571101800000000006600000000800080950000000000000072c2f98cb7333011f1cf97f165ac0dc8c84c1ed04a84f6243cec3706bd2d671c2c28c7a0bd13871d815bbc06c2fa221f1a91d63e4bdbf3cbdd4ff4738d969857122ea180b8b25ad6c006c3e4e86dd319c92d683f6d593cb860187c7640045af58adcfc943a215f12b50493e62b5a127771fc659f39d1470e7d85"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r5, 0xffffffffffffffff, 0x5, 0x0, @val=@perf_event={0x2}}, 0x40) 3.448710164s ago: executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000300)=@bridge_delneigh={0x30, 0x1c, 0xc07, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x80}, [@NDA_LLADDR={0xa, 0x2, @multicast}, @NDA_VLAN={0x6, 0x5, 0x1}]}, 0x30}}, 0x0) 3.373216436s ago: executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x64, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_codel={{0xa}, {0x34, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_LIMIT={0x8}, @TCA_CODEL_TARGET={0x8, 0x1, 0x3}, @TCA_CODEL_LIMIT={0x8, 0x2, 0xfffffffc}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x800}]}}]}, 0x64}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0x7, &(0x7f0000004080), 0x0) accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, 0x10, 0xb, 0x0, 0x0, {0x3}, [@nested={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, 0x2c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x3, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000"], 0x7c}}, 0x0) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="04230500c9"], 0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x83, &(0x7f0000000040)={r9}, 0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000240)=@assoc_id=r9, &(0x7f0000000280)=0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}]}}}]}, 0x3c}}, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) close(r11) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r11, 0x0, 0x4ffe6, 0x0) 3.259240719s ago: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) 3.118470903s ago: executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text16={0x10, &(0x7f0000000300)="0f20d86635200000000f22d8360f634a003e66660f38812df081980001ecaa0fc7bee7b9d7baf80c66b89a76a58a66efbafc0cb8c1bfef3e660fdd980e0065660ffb6f000f01d1", 0x47}], 0x1, 0x0, 0x0, 0x0) 2.878742917s ago: executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xffffffffffffff0a, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) ioctl$USBDEVFS_DISCARDURB(r3, 0x550b, &(0x7f0000000300)=0x5) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$packet(r4, &(0x7f0000000440)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r4, &(0x7f0000000280)="4103092cc1f7480401020200c52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) r7 = socket$inet6(0xa, 0x5, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r9 = semget(0x0, 0x0, 0x100) semop(r9, &(0x7f0000000040)=[{0x0, 0x2, 0x800}, {0x2, 0x4, 0x800}, {0x0, 0xfff, 0x1000}, {0x0, 0xaf70}], 0x4) setsockopt$inet_int(r8, 0x0, 0xf, &(0x7f0000000340)=0x6, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x0, @multicast2}, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}], 0x2c) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x3}, &(0x7f0000000200)=0xc) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000240)={0x7, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100000e9000000e9000000000000030005000000000002000000ac1414000000000000000000030006000000000002"], 0x50}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000001480)={r10, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x6b1b, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x81}]}, &(0x7f0000000080)=0x10) ioctl$IOMMU_GET_HW_INFO(r0, 0x3b8a, &(0x7f00000004c0)={0x28, 0x0, r2, 0xfffffffffffffccc, &(0x7f0000001640)=""/4109}) 2.686500625s ago: executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@bridge_delneigh={0x30, 0x1c, 0xc07, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x80}, [@NDA_LLADDR={0xa, 0x2, @multicast}, @NDA_VLAN={0x6, 0x5, 0x1}]}, 0x30}}, 0x0) 2.493336133s ago: executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x80, {0x80, 0x0, "02a3032718cadc34f93c507a320e94de67bf81575a4d61d2f9be3cbc0693752d4d4621e9a0276c30c4ab37cb6a85f74cecdf6e0c9d6ee261cd96f8575c110e2e18a139dece33acee60e2f8ace6350545ed8dbc4f87ef7af2852fe0554c2cad587f3d81dae3114fa52c4556f9fb6e25ee505012c33fa23110b30a8d3db816"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x81044804, &(0x7f0000000700)={0x3}) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x5c, @string={0x5c, 0x3, "9e8ee66b5f053342cb4115940584de403c07c54b56e2047396cec99be97d29bde31342d91db98805769d5fbbba8e71f0a2484ef595547f4408fd2c2a9d120d0211a0d87afdfef13dd0522d01ea7b06d20a67c0e8b114873b1843"}}, 0x0, 0x0, 0x0}, 0x0) 2.339795961s ago: executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x80, {0x80, 0x0, "02a3032718cadc34f93c507a320e94de67bf81575a4d61d2f9be3cbc0693752d4d4621e9a0276c30c4ab37cb6a85f74cecdf6e0c9d6ee261cd96f8575c110e2e18a139dece33acee60e2f8ace6350545ed8dbc4f87ef7af2852fe0554c2cad587f3d81dae3114fa52c4556f9fb6e25ee505012c33fa23110b30a8d3db816"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000700)={0x3}) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x5c, @string={0x5c, 0x3, "9e8ee66b5f053342cb4115940584de403c07c54b56e2047396cec99be97d29bde31342d91db98805769d5fbbba8e71f0a2484ef595547f4408fd2c2a9d120d0211a0d87afdfef13dd0522d01ea7b06d20a67c0e8b114873b1843"}}, 0x0, 0x0, 0x0}, 0x0) 1.983406899s ago: executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001440)={0x54, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @probe_response={{{}, {}, @broadcast, @device_b, @from_mac=@broadcast}, 0x0, @random, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void}}]}, 0x54}}, 0x0) 1.86917755s ago: executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, 0x0, 0xffffffffffffff5f) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x1}, 0x10) listen(r1, 0x0) ppoll(&(0x7f00000000c0)=[{r0, 0x8124, 0x3a1}, {r1, 0x0, 0x64}], 0x2, 0x0, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@local, 0x0, r3}) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4050000ffe0f50571101800000000006600000000800080950000000000000072c2f98cb7333011f1cf97f165ac0dc8c84c1ed04a84f6243cec3706bd2d671c2c28c7a0bd13871d815bbc06c2fa221f1a91d63e4bdbf3cbdd4ff4738d969857122ea180b8b25ad6c006c3e4e86dd319c92d683f6d593cb860187c7640045af58adcfc943a215f12b50493e62b5a127771fc659f39d1470e7d85"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r4, 0xffffffffffffffff, 0x5, 0x0, @val=@perf_event={0x2}}, 0x40) 1.757256604s ago: executing program 0: syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'gretap0\x00', &(0x7f0000000480)={'syztnl1\x00', 0x0, 0x40, 0x40, 0xfffffffb, 0x0, {{0xc, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x22}, @rand_addr, {[@timestamp_addr={0x44, 0x1c, 0x0, 0x1, 0x4, [{@local, 0xfffffff9}, {@multicast1, 0xff}, {@private=0xa010100, 0x6}]}]}}}}}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000000000a008d12", @ANYRES32=0x0, @ANYBLOB="1400020000000000000000000000000000000001"], 0x2c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x6, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0xfffffd6e}, {&(0x7f0000019740)=""/242}], 0x2, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000019640)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000c57000), 0x0) ioctl$UFFDIO_ZEROPAGE(r4, 0xc018aa06, &(0x7f0000000380)={{&(0x7f00007db000/0x2000)=nil, 0x2000}}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000380)={'#! ', './file0', [], 0xa, "7c22ff090000008cde700f0cc2d26b3c681641cdbf1fb4d4aa1ecd06be4090c967f7dd2ad472c4624ce1bd8fd60d90bae014f78b18146ed69fa5a6d461431b7e713e351f42935795b277adbf"}, 0x4) r5 = dup(r3) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000340)="0f01cb0f07660fc7710e0f5ccd3e0f320f20a73e65660fc2a9019c3ef4abbad004ec", 0x22}], 0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, r5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, 0x0, &(0x7f00002bf000)='syzkaller\x00'}, 0x90) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x8) 848.858975ms ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000061108a000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000040095"], &(0x7f0000000440)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5}]}, 0x30}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x80012, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xb}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x80, 0x200, 0xb4, 0x60, r0, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x0, 0x5}, 0x48) 685.197958ms ago: executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, 0x0, 0xffffffffffffff5f) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x1}, 0x10) listen(r1, 0x0) ppoll(&(0x7f00000000c0)=[{r0, 0x8124, 0x3a1}, {r1, 0x0, 0x64}], 0x2, 0x0, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@local, 0x0, r3}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000140)={@mcast2, @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x40, 0x0, 0x8003, 0x400, 0x0, 0x4400046, r3}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4050000ffe0f50571101800000000006600000000800080950000000000000072c2f98cb7333011f1cf97f165ac0dc8c84c1ed04a84f6243cec3706bd2d671c2c28c7a0bd13871d815bbc06c2fa221f1a91d63e4bdbf3cbdd4ff4738d969857122ea180b8b25ad6c006c3e4e86dd319c92d683f6d593cb860187c7640045af58adcfc943a215f12b50493e62b5a127771fc659f39d1470e7d85"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r5, 0xffffffffffffffff, 0x5, 0x0, @val=@perf_event={0x2}}, 0x40) 566.712639ms ago: executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000300)=@bridge_delneigh={0x30, 0x1c, 0xc07, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x80}, [@NDA_LLADDR={0xa, 0x2, @multicast}, @NDA_VLAN={0x6, 0x5, 0x1}]}, 0x30}}, 0x0) 489.531178ms ago: executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) 439.091083ms ago: executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text16={0x10, &(0x7f0000000300)="0f20d86635200000000f22d8360f634a003e66660f38812df081980001ecaa0fc7bee7b9d7baf80c66b89a76a58a66efbafc0cb8c1bfef3e660fdd980e0065660ffb6f000f01d1", 0x47}], 0x1, 0x0, 0x0, 0x0) 278.212953ms ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000061108a000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000040095"], &(0x7f0000000440)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5}]}, 0x30}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x80012, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xb}, 0x48) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) syz_usb_disconnect(r4) ioctl$AUTOFS_IOC_FAIL(r5, 0x9361, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x80, 0x200, 0xb4, 0x60, r0, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x0, 0x5}, 0x48) 108.291614ms ago: executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x42, 0x0) close(r0) r1 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%Q\x1ae\xe0\x00\x00\x00\x00\xfb\xff\xf0^)pR\x854G\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\xad;\xf5\xc8\xfc7?WS\xd6\x91\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5\x00\x00\x00\x00#\x80z8\xff\x03\x00\x00\x00\x00\x00\x00\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\'\xb5\xe0m\x1cV\x00', 0x1) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) write$binfmt_script(r0, &(0x7f00000003c0)={'#! ', './file0', [{0x20, '[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec'}]}, 0x95) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r2 = socket$kcm(0x10, 0x2, 0x4) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 0s ago: executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}}, 0x0, 0x0, 0x4d, 0x0, "d0e6b89c3aacb1611620ba9f2e136a5d0d16bc560aa5ab11b558ad8d359c97aaeafc2be90611f63f6b8daf2e5217a4652f3ade8b28e4c88a9685903a280d857885c664a611e6072c2f00"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000580)={@in6={{0xa, 0x0, 0x0, @ipv4}}, 0x0, 0x0, 0x8, 0x0, "3edebfd9d9c69fccc97e267cda73c288e6d68d55404b8650665aac2b4ebda5be628e46918100d9e3c3d81b9d1c1a636418559dc298520cfef7ecd84f40fd90d0c7d26a8020030e610d9cde746e045d21"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000780)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, "0ff149a78f80ac9adca99adfad21bb0fdf7ee95a471a714a9a2de48e1cbc1e63d8bbd4f17ed88b509f0467cfea19936ddb29ae5ec84d79f235af22cdf654be15c8687c19f548e28a27882bf5b5a5524a"}, 0xd8) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000580), 0x801, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c00f7e05f3b243aa1915b61679cc19925eac86ca0a1b7d7ff293a2c5f3ba4a0711abc398587bdd7cbab4470c64b82a77a43bd44ec8a0cfef827af7ec8ed700c785edf89092ae8918303f8c4efa79e94e08247d0c77df0d4620b859c691ca88c06ca9d74704a39e8303619ab587d3f81bb1f2ba6c574c0ee24512a2e9bd085eb78470ff3528f9e90b4d79876fee64dc0dc490c391d747710c7f2cc31d487d9a9d8943ad9b93edbd2bff0438045c6ad52c061f4d5b6a928d65c6ccb088e2e6a219e7bb6f55da87e9518901f7d0e2e800939f0d8985b5b0771e52d61c8cf0f3ac46670f438ad"]) tee(r0, r0, 0x6, 0xf) read$FUSE(r2, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r6, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) ioctl$LOOP_CLR_FD(r4, 0x4c01) bind$tipc(r5, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) bind$tipc(r5, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) lseek(r7, 0x0, 0x2) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) kernel console output (not intermixed with test programs): [ 259.596715][ T9287] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 259.744210][ T8] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 259.771913][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.815832][ T8] usb 2-1: Product: syz [ 259.820052][ T8] usb 2-1: Manufacturer: syz [ 259.843534][ T8] usb 2-1: SerialNumber: syz [ 259.855849][ T8] usb 2-1: config 0 descriptor?? [ 259.918027][ T9296] syzkaller0: entered allmulticast mode [ 260.100089][ T8] usb 2-1: USB disconnect, device number 25 [ 261.714926][ T9312] hub 5-0:1.0: USB hub found [ 261.719995][ T9312] hub 5-0:1.0: 1 port detected [ 262.431936][ T9320] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 262.516009][ T9320] 8021q: adding VLAN 0 to HW filter on device bond5 [ 262.534320][ T9322] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 262.957523][ T8] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 263.030718][ T9331] syzkaller0: entered allmulticast mode [ 263.171412][ T8] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 263.196529][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.220560][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.231834][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 263.289813][ T8] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 263.303592][ T8] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 263.322422][ T8] usb 2-1: Manufacturer: syz [ 263.344400][ T8] usb 2-1: config 0 descriptor?? [ 263.783723][ T8] appleir 0003:05AC:8243.002B: item fetching failed at offset 0/1 [ 263.826120][ T8] appleir 0003:05AC:8243.002B: parse failed [ 263.842342][ T8] appleir 0003:05AC:8243.002B: probe with driver appleir failed with error -22 [ 263.856327][ T9351] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 263.965333][ T9351] 8021q: adding VLAN 0 to HW filter on device bond1 [ 263.993514][ T9354] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 264.125885][ T9348] hub 5-0:1.0: USB hub found [ 264.138995][ T9348] hub 5-0:1.0: 1 port detected [ 264.355527][ T8] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 264.446967][ T9363] pim6reg1: entered promiscuous mode [ 264.464155][ T9363] pim6reg1: entered allmulticast mode [ 264.570573][ T8] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 264.596166][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.636877][ T8] usb 4-1: Product: syz [ 264.641285][ T8] usb 4-1: Manufacturer: syz [ 264.660438][ T8] usb 4-1: SerialNumber: syz [ 264.815609][ T8] usb 4-1: config 0 descriptor?? [ 265.057208][ T8] usb 4-1: USB disconnect, device number 23 [ 265.455610][ T9368] syzkaller0: entered allmulticast mode [ 265.693295][ T5174] usb 2-1: USB disconnect, device number 26 [ 267.161839][ T9390] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 267.288717][ T9390] 8021q: adding VLAN 0 to HW filter on device bond2 [ 267.316530][ T9392] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 267.467306][ T9396] pim6reg1: entered promiscuous mode [ 267.473127][ T9396] pim6reg1: entered allmulticast mode [ 267.689826][ T9402] syzkaller0: entered allmulticast mode [ 268.226942][ T5169] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 268.243967][ T9406] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 268.438443][ T5169] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 268.455881][ T5169] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.483420][ T5169] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.503138][ T5169] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 268.541774][ T5169] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 268.552163][ T5169] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 268.576864][ T5169] usb 4-1: Manufacturer: syz [ 268.599231][ T5169] usb 4-1: config 0 descriptor?? [ 268.998963][ T9429] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 269.031280][ T5169] appleir 0003:05AC:8243.002C: item fetching failed at offset 0/1 [ 269.043787][ T5169] appleir 0003:05AC:8243.002C: parse failed [ 269.062369][ T5169] appleir 0003:05AC:8243.002C: probe with driver appleir failed with error -22 [ 269.095196][ T9429] 8021q: adding VLAN 0 to HW filter on device bond6 [ 269.115279][ T5196] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 269.153255][ T9432] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 269.370386][ T5196] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 269.421793][ T5196] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.455932][ T5196] usb 1-1: Product: syz [ 269.460113][ T5196] usb 1-1: Manufacturer: syz [ 269.477770][ T5196] usb 1-1: SerialNumber: syz [ 269.492313][ T5196] usb 1-1: config 0 descriptor?? [ 269.614586][ T9436] syzkaller0: entered allmulticast mode [ 269.713172][ T8] usb 1-1: USB disconnect, device number 37 [ 270.789590][ T5127] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 270.800731][ T5127] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 270.815990][ T5127] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 270.836025][ T5127] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 270.844862][ T5127] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 270.852350][ T5127] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 270.927535][ T9445] pim6reg1: entered promiscuous mode [ 270.932893][ T9445] pim6reg1: entered allmulticast mode [ 270.948298][ T5169] usb 4-1: USB disconnect, device number 24 [ 271.421125][ T9446] chnl_net:caif_netlink_parms(): no params data found [ 271.604259][ T9446] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.620785][ T9446] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.637496][ T9446] bridge_slave_0: entered allmulticast mode [ 271.651771][ T9446] bridge_slave_0: entered promiscuous mode [ 271.676643][ T9446] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.694277][ T9446] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.709604][ T9446] bridge_slave_1: entered allmulticast mode [ 271.723830][ T9446] bridge_slave_1: entered promiscuous mode [ 271.760697][ T9468] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 271.968204][ T9468] 8021q: adding VLAN 0 to HW filter on device bond3 [ 272.100971][ T9469] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 272.139331][ T9446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.207903][ T9446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.396643][ T9477] syzkaller0: entered allmulticast mode [ 272.436463][ T9446] team0: Port device team_slave_0 added [ 272.520167][ T9446] team0: Port device team_slave_1 added [ 272.777068][ T9446] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.800610][ T9446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.885151][ T5127] Bluetooth: hci5: command tx timeout [ 272.903329][ T9446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.956785][ T9446] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.963800][ T9446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.995258][ T9446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.130230][ T9446] hsr_slave_0: entered promiscuous mode [ 273.171524][ T9446] hsr_slave_1: entered promiscuous mode [ 273.184082][ T9446] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 273.202124][ T9446] Cannot create hsr debugfs directory [ 273.215986][ T5196] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 273.437924][ T5196] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 273.484012][ T5196] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.542024][ T5196] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.580326][ T5196] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 273.624983][ T5196] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 273.648075][ T5196] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 273.674236][ T5196] usb 1-1: Manufacturer: syz [ 273.702163][ T5196] usb 1-1: config 0 descriptor?? [ 273.804073][ T9446] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.049585][ T9446] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.121909][ T5196] appleir 0003:05AC:8243.002D: item fetching failed at offset 0/1 [ 274.155625][ T5196] appleir 0003:05AC:8243.002D: parse failed [ 274.196683][ T5196] appleir 0003:05AC:8243.002D: probe with driver appleir failed with error -22 [ 274.253888][ T9446] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.446806][ T9446] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.910246][ T9446] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 274.948756][ T9446] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 274.964895][ T5127] Bluetooth: hci5: command tx timeout [ 275.022759][ T9446] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 275.119601][ T9446] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 275.616009][ T9446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.705572][ T9517] pim6reg1: entered promiscuous mode [ 275.722128][ T9517] pim6reg1: entered allmulticast mode [ 275.766983][ T9446] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.815118][ T929] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 275.823729][ T5174] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.830956][ T5174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.936234][ T5172] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.943501][ T5172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.996003][ T5174] usb 1-1: USB disconnect, device number 38 [ 276.072488][ T929] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 276.097852][ T929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.108706][ T929] usb 2-1: Product: syz [ 276.114183][ T929] usb 2-1: Manufacturer: syz [ 276.121834][ T929] usb 2-1: SerialNumber: syz [ 276.155243][ T929] usb 2-1: config 0 descriptor?? [ 276.177479][ T9521] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 276.311626][ T9521] 8021q: adding VLAN 0 to HW filter on device bond9 [ 276.353357][ T9523] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 276.398192][ T9526] syzkaller0: entered allmulticast mode [ 276.402336][ T5174] usb 2-1: USB disconnect, device number 27 [ 276.548210][ T9446] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.621647][ T9446] veth0_vlan: entered promiscuous mode [ 276.665124][ T9446] veth1_vlan: entered promiscuous mode [ 276.777070][ T9446] veth0_macvtap: entered promiscuous mode [ 276.823724][ T9446] veth1_macvtap: entered promiscuous mode [ 276.857995][ T9446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.880968][ T9446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.903909][ T9446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.932479][ T9446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.952805][ T9446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.974708][ T9446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.994197][ T9446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.009971][ T9446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.043573][ T9446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.064781][ T5125] Bluetooth: hci5: command tx timeout [ 277.076730][ T9446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.171289][ T9446] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.223130][ T9446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.255753][ T9446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.287417][ T9446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.314783][ T9446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.339608][ T9446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.352298][ T9446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.394855][ T9446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.426225][ T9446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.447996][ T9446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.477736][ T9446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.523803][ T9446] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.599624][ T9446] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.624746][ T9446] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.676103][ T9446] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.715192][ T9446] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.745137][ T5200] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 277.976560][ T5200] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 278.022328][ T5200] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.057034][ T5200] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.102656][ T5200] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 278.109857][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.160743][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.173143][ T5200] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 278.189728][ T5200] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 278.219992][ T5200] usb 5-1: Manufacturer: syz [ 278.251986][ T5200] usb 5-1: config 0 descriptor?? [ 278.303096][ T2483] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.337343][ T2483] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.567250][ T5125] Bluetooth: hci3: command 0x0406 tx timeout [ 278.699862][ T5200] appleir 0003:05AC:8243.002E: item fetching failed at offset 0/1 [ 278.732739][ T5200] appleir 0003:05AC:8243.002E: parse failed [ 278.762666][ T9562] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 278.768425][ T5200] appleir 0003:05AC:8243.002E: probe with driver appleir failed with error -22 [ 278.883878][ T9562] 8021q: adding VLAN 0 to HW filter on device bond7 [ 279.046757][ T9562] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 279.124808][ T5127] Bluetooth: hci5: command tx timeout [ 279.257744][ T9566] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 279.342884][ T9566] 8021q: adding VLAN 0 to HW filter on device bond8 [ 279.390873][ T9568] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 279.510959][ T9570] syzkaller0: entered allmulticast mode [ 280.473350][ T5174] usb 5-1: USB disconnect, device number 26 [ 280.673915][ T9598] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 280.768374][ T9598] 8021q: adding VLAN 0 to HW filter on device bond9 [ 280.828689][ T9600] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 280.977981][ T5174] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 281.116671][ T9602] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 281.239412][ T5174] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 281.250741][ T5174] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.262220][ T5174] usb 5-1: Product: syz [ 281.268540][ T5174] usb 5-1: Manufacturer: syz [ 281.274749][ T5174] usb 5-1: SerialNumber: syz [ 281.305095][ T9602] 8021q: adding VLAN 0 to HW filter on device bond10 [ 281.305788][ T5174] usb 5-1: config 0 descriptor?? [ 281.363719][ T9604] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 281.425322][ T9606] syzkaller0: entered allmulticast mode [ 281.559823][ T5196] usb 5-1: USB disconnect, device number 27 [ 281.807519][ T9616] syzkaller0: entered allmulticast mode [ 282.066398][ T9628] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 282.139212][ T9628] 8021q: adding VLAN 0 to HW filter on device bond4 [ 282.196728][ T9628] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 282.208639][ T5169] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 282.314259][ T9636] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 282.381165][ T9636] 8021q: adding VLAN 0 to HW filter on device bond5 [ 282.403551][ T9636] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 282.430071][ T5169] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 282.450074][ T5169] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.462929][ T5169] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.478510][ T5169] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 282.494106][ T5169] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 282.504869][ T5169] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 282.513100][ T5169] usb 2-1: Manufacturer: syz [ 282.521356][ T5169] usb 2-1: config 0 descriptor?? [ 282.957285][ T5169] appleir 0003:05AC:8243.002F: item fetching failed at offset 0/1 [ 282.978454][ T5169] appleir 0003:05AC:8243.002F: parse failed [ 282.997749][ T5169] appleir 0003:05AC:8243.002F: probe with driver appleir failed with error -22 [ 283.171445][ T9647] syzkaller0: entered allmulticast mode [ 283.942690][ T9659] syzkaller0: entered allmulticast mode [ 284.938123][ T929] usb 2-1: USB disconnect, device number 28 [ 285.036041][ T9682] syzkaller0: entered allmulticast mode [ 285.865800][ T5196] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 286.124691][ T5196] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 286.168489][ T5196] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.205556][ T9699] syzkaller0: entered allmulticast mode [ 286.209507][ T5196] usb 5-1: Product: syz [ 286.238354][ T5196] usb 5-1: Manufacturer: syz [ 286.247142][ T9702] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 286.258586][ T5196] usb 5-1: SerialNumber: syz [ 286.306903][ T5196] usb 5-1: config 0 descriptor?? [ 286.552920][ T929] usb 5-1: USB disconnect, device number 28 [ 286.862215][ T9711] syzkaller0: entered allmulticast mode [ 288.527223][ T9742] syzkaller0: entered allmulticast mode [ 288.685098][ T5174] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 288.899513][ T5174] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 288.923441][ T5174] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.942969][ T5174] usb 4-1: Product: syz [ 288.952449][ T5174] usb 4-1: Manufacturer: syz [ 288.964843][ T5174] usb 4-1: SerialNumber: syz [ 288.979527][ T5174] usb 4-1: config 0 descriptor?? [ 289.261160][ T5174] usb 4-1: USB disconnect, device number 25 [ 290.034942][ T45] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 290.098124][ T9783] syzkaller0: entered allmulticast mode [ 290.266501][ T45] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 290.302405][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.329223][ T45] usb 5-1: Product: syz [ 290.333453][ T45] usb 5-1: Manufacturer: syz [ 290.392354][ T45] usb 5-1: SerialNumber: syz [ 290.429890][ T45] usb 5-1: config 0 descriptor?? [ 290.675517][ T929] usb 5-1: USB disconnect, device number 29 [ 291.864893][ T5174] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 292.034847][ T5174] usb 4-1: device descriptor read/64, error -71 [ 292.309197][ T9817] syzkaller0: entered allmulticast mode [ 292.315914][ T5174] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 292.496770][ T5174] usb 4-1: device descriptor read/64, error -71 [ 292.552648][ T9823] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 292.615239][ T5174] usb usb4-port1: attempt power cycle [ 292.974436][ T29] audit: type=1326 audit(1718757310.946:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9830 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3385e7cf29 code=0x7ffc0000 [ 293.034743][ T5174] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 293.057833][ T29] audit: type=1326 audit(1718757310.976:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9830 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3385e7cf29 code=0x7ffc0000 [ 293.105533][ T5174] usb 4-1: device descriptor read/8, error -71 [ 293.114170][ T29] audit: type=1326 audit(1718757310.976:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9830 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3385e7cf29 code=0x7ffc0000 [ 293.163386][ T29] audit: type=1326 audit(1718757310.976:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9830 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f3385e7cf29 code=0x7ffc0000 [ 293.240919][ T29] audit: type=1326 audit(1718757310.976:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9830 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3385e7cf29 code=0x7ffc0000 [ 293.324948][ T29] audit: type=1326 audit(1718757310.976:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9830 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3385e7cf29 code=0x7ffc0000 [ 293.395714][ T5174] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 293.408671][ T29] audit: type=1326 audit(1718757310.986:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9830 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f3385e7cf29 code=0x7ffc0000 [ 293.448619][ T29] audit: type=1326 audit(1718757310.986:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9830 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3385e7cf29 code=0x7ffc0000 [ 293.474758][ T5174] usb 4-1: device descriptor read/8, error -71 [ 293.507440][ T29] audit: type=1326 audit(1718757310.986:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9830 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3385e7cf29 code=0x7ffc0000 [ 293.530907][ T9852] syzkaller0: entered allmulticast mode [ 293.545643][ T29] audit: type=1326 audit(1718757310.986:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9830 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3385e7cf29 code=0x7ffc0000 [ 293.598454][ T5174] usb usb4-port1: unable to enumerate USB device [ 293.924867][ T5125] Bluetooth: hci0: command 0x0406 tx timeout [ 293.933801][ T45] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 294.014738][ T5174] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 294.129173][ T45] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 294.150155][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.172083][ T45] usb 5-1: Product: syz [ 294.190695][ T45] usb 5-1: Manufacturer: syz [ 294.207710][ T45] usb 5-1: SerialNumber: syz [ 294.230150][ T5174] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 294.230666][ T45] usb 5-1: config 0 descriptor?? [ 294.274755][ T5174] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.293166][ T5174] usb 1-1: Product: syz [ 294.316726][ T5174] usb 1-1: Manufacturer: syz [ 294.343327][ T5174] usb 1-1: SerialNumber: syz [ 294.375682][ T5174] usb 1-1: config 0 descriptor?? [ 294.483960][ T45] usb 5-1: USB disconnect, device number 30 [ 294.662117][ T5169] usb 1-1: USB disconnect, device number 39 [ 294.752728][ T9871] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 294.814186][ T9872] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 294.947227][ T9874] fuse: Unknown parameter 'C0x0000000000000005' [ 295.274709][ T5169] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 295.467081][ T5169] usb 1-1: Using ep0 maxpacket: 8 [ 295.480909][ T5169] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 6797, setting to 1024 [ 295.502363][ T5169] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 295.523887][ T5169] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 295.544704][ T5169] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 295.568272][ T5169] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 295.592700][ T5169] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.605132][ T5169] usb 1-1: Product: syz [ 295.609344][ T5169] usb 1-1: Manufacturer: syz [ 295.613970][ T5169] usb 1-1: SerialNumber: syz [ 295.632897][ T9858] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 295.889728][ T5169] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 40 if 0 alt 0 proto 2 vid 0x0525 pid 0xA4A8 [ 295.903089][ T9892] syzkaller0: entered allmulticast mode [ 295.926161][ T5169] usb 1-1: USB disconnect, device number 40 [ 295.964105][ T5169] usblp0: removed [ 296.324877][ T5173] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 296.512303][ T5173] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 296.539018][ T5173] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.559901][ T5173] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.582557][ T5173] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 296.612628][ T5173] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 296.630385][ T5173] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 296.644003][ T5173] usb 4-1: Manufacturer: syz [ 296.680606][ T5173] usb 4-1: config 0 descriptor?? [ 296.802097][ T9903] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 297.068329][ T9909] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 297.132443][ T5173] appleir 0003:05AC:8243.0030: item fetching failed at offset 0/1 [ 297.166314][ T5173] appleir 0003:05AC:8243.0030: parse failed [ 297.172383][ T5173] appleir 0003:05AC:8243.0030: probe with driver appleir failed with error -22 [ 297.248689][ T9916] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 297.424788][ T5174] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 297.541211][ T9920] netdevsim netdevsim0: Direct firmware load for  failed with error -2 [ 297.565547][ T9920] netdevsim netdevsim0: Falling back to sysfs fallback for:  [ 297.645082][ T5174] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 297.656217][ T5174] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 297.683042][ T5174] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 297.724906][ T5174] usb 2-1: config 0 interface 0 has no altsetting 0 [ 297.741906][ T5174] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 297.764920][ T5174] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 297.795566][ T5174] usb 2-1: config 0 interface 0 has no altsetting 0 [ 297.820625][ T5174] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 297.861675][ T5174] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 297.894770][ T5174] usb 2-1: config 0 interface 0 has no altsetting 0 [ 297.911471][ T5174] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 297.920880][ T5174] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 297.963328][ T5174] usb 2-1: config 0 interface 0 has no altsetting 0 [ 297.980384][ T5174] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 298.017880][ T5174] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 298.042536][ T5174] usb 2-1: config 0 interface 0 has no altsetting 0 [ 298.075920][ T5174] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 298.097805][ T5174] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 298.124669][ T5174] usb 2-1: config 0 interface 0 has no altsetting 0 [ 298.136875][ T5174] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 298.148023][ T5174] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 298.159995][ T5174] usb 2-1: config 0 interface 0 has no altsetting 0 [ 298.161295][ T5125] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 298.186934][ T5125] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 298.195427][ T5125] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 298.206101][ T5125] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 298.209183][ T5174] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 298.214049][ T2483] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.238780][ T5125] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 298.248409][ T5125] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 298.250015][ T5174] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 298.301885][ T5174] usb 2-1: config 0 interface 0 has no altsetting 0 [ 298.330516][ T5174] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 298.377271][ T5174] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 298.390833][ T2483] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.424085][ T5174] usb 2-1: Product: syz [ 298.434908][ T5174] usb 2-1: Manufacturer: syz [ 298.449643][ T5174] usb 2-1: SerialNumber: syz [ 298.474139][ T5174] usb 2-1: config 0 descriptor?? [ 298.502653][ T5174] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 298.556742][ T2483] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.669278][ T2483] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.706450][ T5174] usb 2-1: USB disconnect, device number 29 [ 298.733457][ T9911] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 298.752399][ T5174] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 298.964754][ T5196] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 299.079360][ T2483] bridge_slave_1: left allmulticast mode [ 299.094779][ T2483] bridge_slave_1: left promiscuous mode [ 299.100676][ T2483] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.115746][ T5173] usb 4-1: USB disconnect, device number 30 [ 299.159258][ T5196] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 299.181767][ T5196] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.191170][ T2483] bridge_slave_0: left allmulticast mode [ 299.201458][ T5196] usb 1-1: Product: syz [ 299.204869][ T2483] bridge_slave_0: left promiscuous mode [ 299.211312][ T5196] usb 1-1: Manufacturer: syz [ 299.220937][ T5196] usb 1-1: SerialNumber: syz [ 299.221634][ T2483] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.236713][ T5196] usb 1-1: config 0 descriptor?? [ 299.454798][ T5173] usb 1-1: USB disconnect, device number 41 [ 299.826626][ T929] usb 4-1: new low-speed USB device number 31 using dummy_hcd [ 299.985360][ T929] usb 4-1: device descriptor read/64, error -71 [ 300.251236][ T2483] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 300.274780][ T929] usb 4-1: new low-speed USB device number 32 using dummy_hcd [ 300.290534][ T2483] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 300.309251][ T2483] bond0 (unregistering): Released all slaves [ 300.324971][ T5125] Bluetooth: hci2: command tx timeout [ 300.446341][ T929] usb 4-1: device descriptor read/64, error -71 [ 300.517376][ T2483] bond1 (unregistering): Released all slaves [ 300.571232][ T929] usb usb4-port1: attempt power cycle [ 300.686880][ T2483] bond2 (unregistering): Released all slaves [ 300.824100][ T2483] bond3 (unregistering): Released all slaves [ 301.007397][ T929] usb 4-1: new low-speed USB device number 33 using dummy_hcd [ 301.045960][ T2483] bond4 (unregistering): Released all slaves [ 301.072701][ T929] usb 4-1: device descriptor read/8, error -71 [ 301.345448][ T929] usb 4-1: new low-speed USB device number 34 using dummy_hcd [ 301.366289][ T2483] bond5 (unregistering): Released all slaves [ 301.417997][ T929] usb 4-1: device descriptor read/8, error -71 [ 301.545721][ T929] usb usb4-port1: unable to enumerate USB device [ 301.710819][ T2483] bond6 (unregistering): Released all slaves [ 302.188888][ T2483] bond7 (unregistering): Released all slaves [ 302.245766][ T9926] chnl_net:caif_netlink_parms(): no params data found [ 302.404098][ T9953] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 302.415090][ T5125] Bluetooth: hci2: command tx timeout [ 302.489117][ T9961] fuse: Unknown parameter 'C0x0000000000000005' [ 302.809638][ T9965] netdevsim netdevsim3: Direct firmware load for  failed with error -2 [ 302.824931][ T5172] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 302.835142][ T9965] netdevsim netdevsim3: Falling back to sysfs fallback for:  [ 302.974715][ T5173] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 303.047140][ T5172] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.080076][ T5172] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.111626][ T5172] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 303.153130][ T5172] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.174280][ T5173] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 303.195326][ T5173] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.201446][ T5172] usb 2-1: config 0 descriptor?? [ 303.222157][ T2483] hsr_slave_0: left promiscuous mode [ 303.235243][ T5173] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.245521][ T2483] hsr_slave_1: left promiscuous mode [ 303.256161][ T2483] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 303.266235][ T5173] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 303.271570][ T2483] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.304090][ T5173] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 303.318962][ T2483] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 303.336243][ T5173] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 303.343504][ T2483] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.344346][ T5173] usb 1-1: Manufacturer: syz [ 303.367471][ T5173] usb 1-1: config 0 descriptor?? [ 303.450917][ T2483] veth1_macvtap: left promiscuous mode [ 303.461909][ T2483] veth0_macvtap: left promiscuous mode [ 303.468087][ T2483] veth1_vlan: left promiscuous mode [ 303.473690][ T2483] veth0_vlan: left promiscuous mode [ 303.654864][ T5172] cm6533_jd 0003:0D8C:0022.0031: unknown main item tag 0x0 [ 303.672502][ T5172] cm6533_jd 0003:0D8C:0022.0031: unknown main item tag 0x0 [ 303.712089][ T5172] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0031/input/input11 [ 303.780772][ T5172] cm6533_jd 0003:0D8C:0022.0031: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 303.808167][ T5173] appleir 0003:05AC:8243.0032: item fetching failed at offset 0/1 [ 303.839173][ T5173] appleir 0003:05AC:8243.0032: parse failed [ 303.866451][ T5173] appleir 0003:05AC:8243.0032: probe with driver appleir failed with error -22 [ 303.896293][ T5168] usb 2-1: USB disconnect, device number 30 [ 304.484990][ T5125] Bluetooth: hci2: command tx timeout [ 304.687508][ T2483] team0 (unregistering): Port device team_slave_1 removed [ 304.802341][ T2483] team0 (unregistering): Port device team_slave_0 removed [ 305.563571][ T9926] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.571224][ T9926] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.604964][ T9926] bridge_slave_0: entered allmulticast mode [ 305.619357][ T9926] bridge_slave_0: entered promiscuous mode [ 305.671064][ T9926] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.711551][ T5172] usb 1-1: USB disconnect, device number 42 [ 305.723097][ T9926] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.771782][ T9926] bridge_slave_1: entered allmulticast mode [ 305.848146][ T9926] bridge_slave_1: entered promiscuous mode [ 306.019941][ T9926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.057962][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 306.057980][ T29] audit: type=1326 audit(1718757324.026:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10006 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3385e7cf29 code=0x0 [ 306.099068][ T9926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.240968][ T9926] team0: Port device team_slave_0 added [ 306.263314][ T9926] team0: Port device team_slave_1 added [ 306.274855][ T5168] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 306.381190][ T9926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.404296][ T9926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.454845][ T9926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.477993][ T9926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.490175][ T5168] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 306.498856][ T9926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.507240][ T5168] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.534861][ T5173] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 306.566217][ T5125] Bluetooth: hci2: command tx timeout [ 306.573716][ T5168] usb 2-1: Product: syz [ 306.585648][ T5168] usb 2-1: Manufacturer: syz [ 306.591042][ T9926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.604345][ T5168] usb 2-1: SerialNumber: syz [ 306.642449][ T5168] usb 2-1: config 0 descriptor?? [ 306.735019][ T5173] usb 4-1: Using ep0 maxpacket: 8 [ 306.748260][ T5173] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=8f.3b [ 306.757657][ T9926] hsr_slave_0: entered promiscuous mode [ 306.767419][ T5173] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.769219][ T9926] hsr_slave_1: entered promiscuous mode [ 306.795633][ T9926] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 306.799357][ T5173] usb 4-1: config 0 descriptor?? [ 306.805712][ T9926] Cannot create hsr debugfs directory [ 306.822102][ T5173] ch9200 4-1:0.0: probe with driver ch9200 failed with error -22 [ 306.877105][ T5168] usb 2-1: USB disconnect, device number 31 [ 307.174362][T10024] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 308.031545][ T9926] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 308.067947][ T9926] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 308.096715][ T9926] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 308.138183][ T9926] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 308.560751][ T9926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.638144][ T9926] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.703614][ T5196] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.710819][ T5196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.800348][ T5196] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.807659][ T5196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.068318][ T5173] usb 4-1: USB disconnect, device number 35 [ 309.206752][T10050] netdevsim netdevsim1: Direct firmware load for  failed with error -2 [ 309.245818][T10050] netdevsim netdevsim1: Falling back to sysfs fallback for:  [ 309.290617][ T9926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.557980][ T9926] veth0_vlan: entered promiscuous mode [ 309.618614][T10063] fuse: Unknown parameter 'C0x0000000000000005' [ 309.622996][ T9926] veth1_vlan: entered promiscuous mode [ 309.799956][ T9926] veth0_macvtap: entered promiscuous mode [ 309.874140][ T9926] veth1_macvtap: entered promiscuous mode [ 309.935291][ T5168] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 309.947374][ T9926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.969359][ T9926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.997831][ T9926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.046699][ T9926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.067736][ T9926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.099342][ T9926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.132015][ T9926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.168226][ T9926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.196729][ T5168] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.201493][ T9926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.221355][ T5168] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.251572][ T5168] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 310.256703][ T9926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.281436][ T5168] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.312946][ T5168] usb 4-1: config 0 descriptor?? [ 310.313300][ T9926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 310.410949][ T9926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.450066][ T9926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.483515][ T9926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.527842][ T9926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.572990][ T9926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.606264][ T9926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.628009][ T9926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.652288][ T9926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.685816][ T9926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.729591][ T9926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.776421][ T5168] cm6533_jd 0003:0D8C:0022.0033: unknown main item tag 0x0 [ 310.779119][ T9926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 310.820617][ T5168] cm6533_jd 0003:0D8C:0022.0033: unknown main item tag 0x0 [ 310.831088][T10086] Cannot find add_set index 0 as target [ 310.856147][ T5168] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0022.0033/input/input12 [ 310.882924][ T9926] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.920761][ T5168] cm6533_jd 0003:0D8C:0022.0033: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 310.925048][ T9926] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.987085][ T9926] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.014258][ T9926] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.036497][ T8] usb 4-1: USB disconnect, device number 36 [ 311.176217][T10093] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 311.431659][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.470031][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.504991][ T5174] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 311.572563][ T2483] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.603920][ T2483] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.721816][ T5174] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 311.760606][ T5174] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.779136][ T5174] usb 1-1: Product: syz [ 311.783364][ T5174] usb 1-1: Manufacturer: syz [ 311.814892][ T5174] usb 1-1: SerialNumber: syz [ 311.826627][ T5174] usb 1-1: config 0 descriptor?? [ 311.862511][T10110] syzkaller0: entered allmulticast mode [ 311.964941][ T5173] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 312.134801][ T5174] usb 1-1: USB disconnect, device number 43 [ 312.180520][ T5173] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 312.211950][ T5173] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.243195][ T5173] usb 2-1: Product: syz [ 312.252551][ T5173] usb 2-1: Manufacturer: syz [ 312.273431][ T5173] usb 2-1: SerialNumber: syz [ 312.293248][ T5173] usb 2-1: config 0 descriptor?? [ 312.299139][ T5196] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 312.495869][ T5196] usb 4-1: Using ep0 maxpacket: 8 [ 312.505322][ T5196] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=8f.3b [ 312.531485][ T5196] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.542201][ T5173] usb 2-1: USB disconnect, device number 32 [ 312.578903][T10128] netdevsim netdevsim2: Direct firmware load for  failed with error -2 [ 312.593072][ T5196] usb 4-1: config 0 descriptor?? [ 312.615779][ T5196] ch9200 4-1:0.0: probe with driver ch9200 failed with error -22 [ 312.631019][T10128] netdevsim netdevsim2: Falling back to sysfs fallback for:  [ 314.307341][T10160] fuse: Unknown parameter 'C0x0000000000000005' [ 314.734933][ T5174] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 314.908384][ T45] usb 4-1: USB disconnect, device number 37 [ 314.983660][T10166] syzkaller0: entered allmulticast mode [ 315.020730][ T5174] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.058925][ T5174] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.082217][ T5174] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 315.101966][ T5174] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.120866][ T5174] usb 1-1: config 0 descriptor?? [ 315.556724][ T5174] cm6533_jd 0003:0D8C:0022.0034: unknown main item tag 0x0 [ 315.595756][ T5174] cm6533_jd 0003:0D8C:0022.0034: unknown main item tag 0x0 [ 315.623237][ T5174] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.0034/input/input13 [ 315.644779][ T929] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 315.683469][ T5174] cm6533_jd 0003:0D8C:0022.0034: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 315.749888][T10185] dccp_invalid_packet: P.type (CLOSE) not Data || [Data]Ack, while P.X == 0 [ 315.805845][ T5174] usb 1-1: USB disconnect, device number 44 [ 315.864273][ T929] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 315.876900][ T929] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.888569][ T929] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.899015][ T929] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 315.917223][ T929] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 315.929522][ T929] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 315.961243][ T929] usb 2-1: Manufacturer: syz [ 315.977639][ T929] usb 2-1: config 0 descriptor?? [ 316.031631][T10184] kvm: emulating exchange as write [ 316.322131][T10191] capability: warning: `syz-executor.3' uses 32-bit capabilities (legacy support in use) [ 316.390059][ T29] audit: type=1326 audit(1718757334.356:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10189 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe191e7cf29 code=0x0 [ 316.392572][ T929] appleir 0003:05AC:8243.0035: item fetching failed at offset 0/1 [ 316.511743][ T929] appleir 0003:05AC:8243.0035: parse failed [ 316.534490][ T929] appleir 0003:05AC:8243.0035: probe with driver appleir failed with error -22 [ 316.657386][T10201] syzkaller0: entered allmulticast mode [ 316.764729][ T45] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 316.795031][ T5173] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 316.966976][ T45] usb 5-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 316.984769][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.997678][ T5173] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 317.015704][ T5173] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.025086][ T45] usb 5-1: config 0 descriptor?? [ 317.044201][ T5173] usb 4-1: Product: syz [ 317.050018][ T5173] usb 4-1: Manufacturer: syz [ 317.059395][ T5173] usb 4-1: SerialNumber: syz [ 317.077304][ T5173] usb 4-1: config 0 descriptor?? [ 317.290103][ T5168] usb 4-1: USB disconnect, device number 38 [ 317.452720][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.459715][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.194706][ T929] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 318.352046][ T5173] usb 2-1: USB disconnect, device number 33 [ 318.410356][ T929] usb 1-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 318.428397][ T929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.437873][ T929] usb 1-1: Product: syz [ 318.442352][ T929] usb 1-1: Manufacturer: syz [ 318.447458][ T929] usb 1-1: SerialNumber: syz [ 318.476106][ T929] usb 1-1: config 0 descriptor?? [ 318.767185][T10217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.801239][T10217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.973942][ T929] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 319.005102][ T929] asix 1-1:0.0: probe with driver asix failed with error -71 [ 319.041304][ T929] usb 1-1: USB disconnect, device number 45 [ 319.382672][ T45] usb 5-1: string descriptor 0 read error: -71 [ 319.401318][ T45] ldusb 5-1:0.0: Interrupt in endpoint not found [ 319.439615][ T45] usb 5-1: USB disconnect, device number 31 [ 319.547505][T10227] netlink: 'syz-executor.4': attribute type 22 has an invalid length. [ 319.730600][T10222] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 320.171154][T10234] vhci_hcd: default hub control req: 2300 v0002 i0002 l0 [ 320.278936][T10237] syzkaller0: entered allmulticast mode [ 320.904875][ T5168] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 321.122832][ T5168] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 321.163152][ T5168] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.230049][ T5168] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.262607][ T5168] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 321.291823][ T5168] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 321.306021][ T5168] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 321.316078][ T5168] usb 1-1: Manufacturer: syz [ 321.323245][ T5168] usb 1-1: config 0 descriptor?? [ 321.544986][ T929] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 321.678935][ T5174] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 321.761757][ T5168] appleir 0003:05AC:8243.0036: item fetching failed at offset 0/1 [ 321.785174][ T929] usb 2-1: Using ep0 maxpacket: 8 [ 321.796774][ T929] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 321.810269][ T5168] appleir 0003:05AC:8243.0036: parse failed [ 321.816268][ T929] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 321.826609][ T5168] appleir 0003:05AC:8243.0036: probe with driver appleir failed with error -22 [ 321.837188][ T929] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 321.850455][ T929] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 321.864125][ T929] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 321.875184][ T929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.897447][ T5174] usb 5-1: Using ep0 maxpacket: 32 [ 321.905243][ T5174] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 321.924054][ T5174] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 321.942420][ T5174] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 321.962314][ T5174] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 321.988624][ T5174] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 322.005614][ T5174] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 322.022197][ T5174] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 322.031959][ T5174] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.044313][ T5174] usb 5-1: config 0 descriptor?? [ 322.091930][ T929] usb 2-1: GET_CAPABILITIES returned 0 [ 322.104669][ T929] usbtmc 2-1:16.0: can't read capabilities [ 322.266365][ T5174] usblp 5-1:0.0: usblp1: USB Bidirectional printer dev 32 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 322.294289][ T5174] usb 2-1: USB disconnect, device number 34 [ 322.690958][ T929] usb 5-1: USB disconnect, device number 32 [ 322.708424][ T929] usblp1: removed [ 323.235772][ T5168] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 323.445812][ T5168] usb 4-1: Using ep0 maxpacket: 8 [ 323.460766][ T5168] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=8f.3b [ 323.474688][ T5168] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.488755][ T5168] usb 4-1: config 0 descriptor?? [ 323.494982][ T5169] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 323.496653][ T5168] ch9200 4-1:0.0: probe with driver ch9200 failed with error -22 [ 323.528897][T10270] syzkaller0: entered allmulticast mode [ 323.601608][ T5173] usb 1-1: USB disconnect, device number 46 [ 323.710998][ T5169] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 323.732252][ T5169] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.758937][ T5169] usb 2-1: config 0 descriptor?? [ 323.772594][ T5169] cp210x 2-1:0.0: cp210x converter detected [ 323.984816][T10268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.002445][T10268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.251627][ T5169] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 324.542370][ T5169] usb 2-1: cp210x converter now attached to ttyUSB0 [ 325.456043][T10303] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 325.854772][ T5174] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 325.862131][T10309] syzkaller0: entered allmulticast mode [ 326.020396][ T5168] usb 4-1: USB disconnect, device number 39 [ 326.074723][ T5174] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 326.119361][ T5174] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.149776][ T5174] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.196063][ T5174] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 326.244698][ T5174] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 326.267050][ T5174] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 326.308045][ T5174] usb 5-1: Manufacturer: syz [ 326.332481][ T5174] usb 5-1: config 0 descriptor?? [ 326.362808][ T45] usb 2-1: USB disconnect, device number 35 [ 326.390393][ T45] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 326.454083][ T45] cp210x 2-1:0.0: device disconnected [ 326.771816][ T5174] appleir 0003:05AC:8243.0037: item fetching failed at offset 0/1 [ 326.800161][ T5174] appleir 0003:05AC:8243.0037: parse failed [ 326.813399][ T5174] appleir 0003:05AC:8243.0037: probe with driver appleir failed with error -22 [ 326.884804][ T45] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 327.101732][ T45] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 327.118120][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.135220][ T45] usb 2-1: Product: syz [ 327.153344][ T45] usb 2-1: Manufacturer: syz [ 327.162937][ T45] usb 2-1: SerialNumber: syz [ 327.171162][ T45] usb 2-1: config 0 descriptor?? [ 327.357163][T10325] syz-executor.0: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 327.363745][ T2483] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.398274][ T5200] usb 2-1: USB disconnect, device number 36 [ 327.416745][T10325] CPU: 0 PID: 10325 Comm: syz-executor.0 Not tainted 6.10.0-rc3-syzkaller-00044-g2ccbdf43d5e7 #0 [ 327.427306][T10325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 327.437405][T10325] Call Trace: [ 327.440720][T10325] [ 327.443685][T10325] dump_stack_lvl+0x241/0x360 [ 327.448416][T10325] ? __pfx_dump_stack_lvl+0x10/0x10 [ 327.453661][T10325] ? __pfx__printk+0x10/0x10 [ 327.458298][T10325] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 327.464760][T10325] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 327.471314][T10325] warn_alloc+0x278/0x410 [ 327.475693][T10325] ? stack_depot_save_flags+0x29/0x830 [ 327.481198][T10325] ? __vmalloc_node_range_noprof+0x10b/0x1460 [ 327.487317][T10325] ? __pfx_warn_alloc+0x10/0x10 [ 327.492256][T10325] ? kasan_save_track+0x3f/0x80 [ 327.497166][T10325] ? __kasan_kmalloc+0x98/0xb0 [ 327.501972][T10325] ? xsk_setsockopt+0x598/0x950 [ 327.506870][T10325] ? do_sock_setsockopt+0x3af/0x720 [ 327.512079][T10325] ? __sys_setsockopt+0x1ae/0x250 [ 327.517113][T10325] ? __x64_sys_setsockopt+0xb5/0xd0 [ 327.522329][T10325] ? do_syscall_64+0xf3/0x230 [ 327.527020][T10325] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.533140][T10325] __vmalloc_node_range_noprof+0x130/0x1460 [ 327.539093][T10325] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 327.545454][T10325] ? __kasan_kmalloc+0x98/0xb0 [ 327.550241][T10325] ? xskq_create+0x54/0x170 [ 327.554767][T10325] vmalloc_user_noprof+0x74/0x80 [ 327.559715][T10325] ? xskq_create+0xb6/0x170 [ 327.564230][T10325] xskq_create+0xb6/0x170 [ 327.568578][T10325] xsk_init_queue+0xa1/0x100 [ 327.573199][T10325] xsk_setsockopt+0x598/0x950 [ 327.577892][T10325] ? __pfx_xsk_setsockopt+0x10/0x10 [ 327.583107][T10325] ? __pfx_lock_acquire+0x10/0x10 [ 327.588142][T10325] ? aa_sock_opt_perm+0x79/0x120 [ 327.593094][T10325] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 327.598662][T10325] ? security_socket_setsockopt+0x87/0xb0 [ 327.604416][T10325] ? __pfx_xsk_setsockopt+0x10/0x10 [ 327.609629][T10325] do_sock_setsockopt+0x3af/0x720 [ 327.614703][T10325] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 327.620260][T10325] ? __fget_files+0x29/0x470 [ 327.624872][T10325] ? __fget_files+0x3f6/0x470 [ 327.629582][T10325] __sys_setsockopt+0x1ae/0x250 [ 327.634444][T10325] __x64_sys_setsockopt+0xb5/0xd0 [ 327.639480][T10325] do_syscall_64+0xf3/0x230 [ 327.644012][T10325] ? clear_bhb_loop+0x35/0x90 [ 327.648706][T10325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.654628][T10325] RIP: 0033:0x7f3385e7cf29 [ 327.659060][T10325] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 327.678763][T10325] RSP: 002b:00007f33859ff0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 327.687236][T10325] RAX: ffffffffffffffda RBX: 00007f3385fb3f80 RCX: 00007f3385e7cf29 [ 327.695236][T10325] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 327.703231][T10325] RBP: 00007f3385eec074 R08: 0000000000000020 R09: 0000000000000000 [ 327.711218][T10325] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 327.719221][T10325] R13: 000000000000000b R14: 00007f3385fb3f80 R15: 00007f33860dfaa8 [ 327.727231][T10325] [ 327.766636][T10325] Mem-Info: [ 327.769909][T10325] active_anon:23925 inactive_anon:0 isolated_anon:0 [ 327.769909][T10325] active_file:0 inactive_file:46405 isolated_file:0 [ 327.769909][T10325] unevictable:768 dirty:7 writeback:0 [ 327.769909][T10325] slab_reclaimable:9574 slab_unreclaimable:102570 [ 327.769909][T10325] mapped:19272 shmem:7190 pagetables:822 [ 327.769909][T10325] sec_pagetables:0 bounce:0 [ 327.769909][T10325] kernel_misc_reclaimable:0 [ 327.769909][T10325] free:1362113 free_pcp:6098 free_cma:0 [ 327.890970][T10325] Node 0 active_anon:94700kB inactive_anon:0kB active_file:0kB inactive_file:185552kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:77088kB dirty:28kB writeback:0kB shmem:27224kB shmem_thp:2048kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11684kB pagetables:3088kB sec_pagetables:0kB all_unreclaimable? no [ 328.018040][T10325] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 328.052866][ T2483] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.100881][T10325] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 328.202182][T10325] lowmem_reserve[]: 0 2571 2571 0 0 [ 328.208246][T10325] Node 0 DMA32 free:1524556kB boost:0kB min:35108kB low:43884kB high:52660kB reserved_highatomic:0KB active_anon:95144kB inactive_anon:0kB active_file:0kB inactive_file:185232kB unevictable:1536kB writepending:28kB present:3129332kB managed:2659880kB mlocked:0kB bounce:0kB free_pcp:572kB local_pcp:292kB free_cma:0kB [ 328.299670][ T2483] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.329684][T10325] lowmem_reserve[]: 0 0 0 0 0 [ 328.334488][T10325] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:320kB unevictable:0kB writepending:0kB present:1048576kB managed:360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 328.370170][ T29] audit: type=1326 audit(1718757346.346:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10330 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59baa7cf29 code=0x0 [ 328.409689][T10325] lowmem_reserve[]: 0 0 0 0 0 [ 328.414499][T10325] Node 1 Normal free:3942868kB boost:0kB min:54788kB low:68484kB high:82180kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:2808kB local_pcp:2052kB free_cma:0kB [ 328.478445][ T2483] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.495330][T10325] lowmem_reserve[]: 0 0 0 0 0 [ 328.506347][T10325] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 328.564555][T10325] Node 0 DMA32: 440*4kB (UM) 762*8kB (UME) 567*16kB (UME) 290*32kB (UME) 80*64kB (UME) 100*128kB (UME) 46*256kB (UME) 17*512kB (UME) 7*1024kB (ME) 1*2048kB (U) 353*4096kB (UM) = 1519712kB [ 328.565006][T10325] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 328.565143][T10325] Node 1 Normal: 1*4kB (U) 4*8kB (UM) 7*16kB (U) 10*32kB (U) 6*64kB (UM) 1*128kB (U) 0*256kB 1*512kB (U) 1*1024kB (U) 6*2048kB (UM) 959*4096kB (M) = 3942868kB [ 328.565355][T10325] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 328.565376][T10325] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 328.565396][T10325] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 328.565416][T10325] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 328.565436][T10325] 53597 total pagecache pages [ 328.565446][T10325] 0 pages in swap cache [ 328.565456][T10325] Free swap = 124336kB [ 328.565466][T10325] Total swap = 124996kB [ 328.565477][T10325] 2097051 pages RAM [ 328.565486][T10325] 0 pages HighMem/MovableOnly [ 328.565495][T10325] 400871 pages reserved [ 328.565505][T10325] 0 pages cma reserved [ 328.585247][ T5168] usb 5-1: USB disconnect, device number 33 [ 328.762576][T10336] syzkaller0: entered allmulticast mode [ 329.072397][ T2483] bridge_slave_1: left allmulticast mode [ 329.072433][ T2483] bridge_slave_1: left promiscuous mode [ 329.072679][ T2483] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.136729][ T5169] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 329.151287][ T2483] bridge_slave_0: left allmulticast mode [ 329.151319][ T2483] bridge_slave_0: left promiscuous mode [ 329.151540][ T2483] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.193918][ T5127] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 329.197742][ T5127] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 329.206610][ T5127] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 329.217127][ T5127] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 329.220363][ T5127] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 329.221135][ T5127] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 329.333609][ T5169] usb 1-1: Using ep0 maxpacket: 8 [ 329.364081][ T5169] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=8f.3b [ 329.364124][ T5169] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.375486][ T5169] usb 1-1: config 0 descriptor?? [ 329.398693][ T5169] ch9200 1-1:0.0: probe with driver ch9200 failed with error -22 [ 329.484658][ T45] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 329.667192][ T45] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 329.888340][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.931982][ T45] usb 5-1: config 0 descriptor?? [ 329.948811][ T45] cp210x 5-1:0.0: cp210x converter detected [ 330.172749][T10347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.217020][T10347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.257658][ T29] audit: type=1326 audit(1718757348.236:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10352 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59baa7cf29 code=0x7ffc0000 [ 330.319837][ T29] audit: type=1326 audit(1718757348.266:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10352 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59baa7cf29 code=0x7ffc0000 [ 330.497726][ T45] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 330.659122][ T2483] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 330.698712][ T2483] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 330.749316][ T2483] bond0 (unregistering): Released all slaves [ 330.789370][ T45] usb 5-1: cp210x converter now attached to ttyUSB0 [ 331.042237][ T2483] bond1 (unregistering): Released all slaves [ 331.283544][ T2483] bond2 (unregistering): Released all slaves [ 331.295061][ T5125] Bluetooth: hci4: command tx timeout [ 331.552281][ T2483] bond3 (unregistering): Released all slaves [ 331.780546][ T5168] usb 1-1: USB disconnect, device number 47 [ 331.875854][ T2483] bond4 (unregistering): Released all slaves [ 332.122477][ T2483] bond5 (unregistering): Released all slaves [ 332.146778][T10351] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 332.162417][T10353] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 332.275250][ T5168] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 332.313926][ T5173] usb 5-1: USB disconnect, device number 34 [ 332.365945][ T5173] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 332.417520][ T5173] cp210x 5-1:0.0: device disconnected [ 332.510996][ T5168] usb 1-1: Using ep0 maxpacket: 8 [ 332.547469][ T5168] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 332.571428][ T5168] usb 1-1: config 0 has no interfaces? [ 332.585311][ T5168] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 332.612421][ T5168] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.644289][ T5168] usb 1-1: config 0 descriptor?? [ 333.035755][ T2483] hsr_slave_0: left promiscuous mode [ 333.063635][ T2483] hsr_slave_1: left promiscuous mode [ 333.108637][ T2483] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.131487][ T2483] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 333.185120][ T2483] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 333.192615][ T2483] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 333.364807][ T5125] Bluetooth: hci4: command tx timeout [ 333.379821][ T2483] veth1_macvtap: left promiscuous mode [ 333.400714][ T2483] veth0_macvtap: left promiscuous mode [ 333.420487][ T2483] veth1_vlan: left promiscuous mode [ 333.450243][ T2483] veth0_vlan: left promiscuous mode [ 334.381298][ T2483] team0 (unregistering): Port device team_slave_1 removed [ 334.470049][ T2483] team0 (unregistering): Port device team_slave_0 removed [ 334.947795][ T5174] usb 1-1: USB disconnect, device number 48 [ 335.405606][ T5174] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 335.453412][ T5125] Bluetooth: hci4: command tx timeout [ 335.628277][ T5174] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 335.703875][ T5174] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.779671][T10396] syzkaller0: entered allmulticast mode [ 335.785930][ T5174] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.843094][ T5174] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 335.921287][ T5174] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 335.952422][ T5174] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 335.961779][T10348] chnl_net:caif_netlink_parms(): no params data found [ 335.994450][ T5174] usb 1-1: Manufacturer: syz [ 336.041080][ T5174] usb 1-1: config 0 descriptor?? [ 336.484625][ T5174] appleir 0003:05AC:8243.0038: item fetching failed at offset 0/1 [ 336.506131][ T5174] appleir 0003:05AC:8243.0038: parse failed [ 336.564831][ T5174] appleir 0003:05AC:8243.0038: probe with driver appleir failed with error -22 [ 336.590649][T10348] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.643235][T10348] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.685211][ T29] audit: type=1326 audit(1718757354.656:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10416 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f864587cf29 code=0x7ffc0000 [ 336.712224][T10348] bridge_slave_0: entered allmulticast mode [ 336.749933][T10348] bridge_slave_0: entered promiscuous mode [ 336.749951][ T29] audit: type=1326 audit(1718757354.696:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10416 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f864587cf29 code=0x7ffc0000 [ 336.800372][T10348] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.844188][ T29] audit: type=1326 audit(1718757354.696:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10416 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f864587cf29 code=0x7ffc0000 [ 336.854822][T10348] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.936375][T10348] bridge_slave_1: entered allmulticast mode [ 337.018711][T10348] bridge_slave_1: entered promiscuous mode [ 337.151878][T10348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.184054][T10348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.289211][T10348] team0: Port device team_slave_0 added [ 337.320683][T10348] team0: Port device team_slave_1 added [ 337.344793][ T929] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 337.422543][T10348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.444044][T10348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.483225][T10348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.524840][ T5125] Bluetooth: hci4: command tx timeout [ 337.535663][T10348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.558455][T10348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.584663][ T929] usb 2-1: Using ep0 maxpacket: 8 [ 337.591477][ T929] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=8f.3b [ 337.604938][ T929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.620213][T10348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.642227][ T929] usb 2-1: config 0 descriptor?? [ 337.659423][ T929] ch9200 2-1:0.0: probe with driver ch9200 failed with error -22 [ 337.681885][T10430] fuse: Bad value for 'fd' [ 337.750300][T10348] hsr_slave_0: entered promiscuous mode [ 337.773723][T10348] hsr_slave_1: entered promiscuous mode [ 337.787091][T10348] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 337.812133][T10348] Cannot create hsr debugfs directory [ 337.857898][ T5200] usb 2-1: USB disconnect, device number 37 [ 338.047007][ T5173] usb 1-1: USB disconnect, device number 49 [ 338.205090][T10443] fuse: Bad value for 'group_id' [ 338.224675][ T5174] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 338.441366][ T5174] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 338.476609][ T5174] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.520115][ T5174] usb 5-1: config 0 descriptor?? [ 338.557241][ T5174] cp210x 5-1:0.0: cp210x converter detected [ 338.788940][T10436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.846286][T10436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.043896][ T5173] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 339.098885][ T5174] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 339.281214][ T5173] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.303208][T10348] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 339.327836][ T5173] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 339.353379][ T5174] usb 5-1: cp210x converter now attached to ttyUSB0 [ 339.364869][ T5173] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.400597][ T5173] usb 2-1: config 0 descriptor?? [ 339.423533][T10348] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 339.442459][T10348] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 339.463523][T10348] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 339.548031][T10463] syzkaller0: entered allmulticast mode [ 339.712570][T10449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.760115][T10449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.937719][ T5173] usbhid 2-1:0.0: can't add hid device: -71 [ 339.958940][ T5173] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 339.994072][ T5173] usb 2-1: USB disconnect, device number 38 [ 339.997858][T10348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.157872][T10348] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.216607][ T5170] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.223781][ T5170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.332700][ T5170] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.339894][ T5170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.667660][T10348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.958991][T10348] veth0_vlan: entered promiscuous mode [ 341.002803][T10348] veth1_vlan: entered promiscuous mode [ 341.046305][ T5168] usb 5-1: USB disconnect, device number 35 [ 341.130634][ T5168] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 341.187466][T10348] veth0_macvtap: entered promiscuous mode [ 341.234469][ T5168] cp210x 5-1:0.0: device disconnected [ 341.254014][T10348] veth1_macvtap: entered promiscuous mode [ 341.372168][T10348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.447170][T10348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.492801][T10348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.555092][T10348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.595249][T10348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.643036][T10348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.670533][T10348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.704015][T10348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.758167][T10348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.830450][T10348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.921677][T10348] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.996912][T10348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.016538][ T5170] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 342.050905][T10348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.114486][T10348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.164138][T10348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.208288][T10348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.245873][ T5170] usb 5-1: Using ep0 maxpacket: 8 [ 342.250676][T10348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.275627][ T5170] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 342.298803][T10348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.301835][ T5170] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 342.342118][T10348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.348025][ T5170] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 342.369408][ T5170] usb 5-1: config 250 has no interface number 0 [ 342.384689][ T5170] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 342.422642][T10348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.433508][ T5170] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 342.490666][T10348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.493335][ T5170] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 342.548108][T10348] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.552587][ T5170] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 342.605160][ T5170] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 342.632516][T10348] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.659551][ T5170] usb 5-1: config 250 interface 228 has no altsetting 0 [ 342.691195][ T5170] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 342.703070][T10348] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.710925][ T5170] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 342.753583][ T5170] usb 5-1: Product: syz [ 342.766985][T10348] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.782781][ T5170] usb 5-1: SerialNumber: syz [ 342.785591][T10348] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.818481][ T5170] hub 5-1:250.228: bad descriptor, ignoring hub [ 342.849248][ T5170] hub 5-1:250.228: probe with driver hub failed with error -5 [ 343.030839][ T5170] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 36 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 343.257201][T10496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.273652][ T2462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.305842][T10496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.327019][ T2462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.456107][ T5170] usb 5-1: USB disconnect, device number 36 [ 343.462270][ T2462] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.490775][ T5170] usblp0: removed [ 343.506610][ T2462] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.614816][ T45] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 343.826837][ T45] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 343.846610][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.864502][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.888903][ T45] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 343.908250][ T45] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 343.925832][ T45] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 343.944481][ T45] usb 1-1: Manufacturer: syz [ 343.955871][ T45] usb 1-1: config 0 descriptor?? [ 344.062546][ T929] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 344.265074][ T929] usb 4-1: Using ep0 maxpacket: 32 [ 344.286620][ T929] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 344.316259][ T929] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 344.366351][ T929] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 344.379235][ T45] appleir 0003:05AC:8243.0039: item fetching failed at offset 0/1 [ 344.404132][ T929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 344.426402][ T45] appleir 0003:05AC:8243.0039: parse failed [ 344.432457][ T45] appleir 0003:05AC:8243.0039: probe with driver appleir failed with error -22 [ 344.436162][ T929] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 344.465201][ T5196] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 344.486178][ T929] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 344.525619][ T929] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 344.550222][ T929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.577262][ T929] usb 4-1: config 0 descriptor?? [ 344.622038][T10545] bond0: entered promiscuous mode [ 344.641032][T10545] bond_slave_0: entered promiscuous mode [ 344.664491][T10545] bond_slave_1: entered promiscuous mode [ 344.676987][ T5196] usb 5-1: Using ep0 maxpacket: 8 [ 344.704417][ T5196] usb 5-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=8f.3b [ 344.734307][ T5196] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.774334][ T5196] usb 5-1: config 0 descriptor?? [ 344.808139][ T929] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 40 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 344.815313][ T5196] ch9200 5-1:0.0: probe with driver ch9200 failed with error -22 [ 345.020647][ T5196] usb 5-1: USB disconnect, device number 37 [ 345.198997][T10554] syzkaller0: entered allmulticast mode [ 345.655862][T10569] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 346.241700][ T5168] usb 4-1: USB disconnect, device number 40 [ 346.277005][ T5168] usblp0: removed [ 346.364706][ T5200] usb 1-1: USB disconnect, device number 50 [ 346.900062][ T5200] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 347.116140][ T5200] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 347.142961][ T5200] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.204012][ T5200] usb 1-1: config 0 descriptor?? [ 347.236687][ T5200] cp210x 1-1:0.0: cp210x converter detected [ 347.439614][T10588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.460715][T10588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.693986][ T5200] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 347.953329][ T5200] usb 1-1: cp210x converter now attached to ttyUSB0 [ 349.593768][ T5196] usb 1-1: USB disconnect, device number 51 [ 349.626333][ T5196] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 349.666989][ T5196] cp210x 1-1:0.0: device disconnected [ 349.894991][ T929] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 350.096681][ T929] usb 2-1: Using ep0 maxpacket: 8 [ 350.115358][ T5196] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 350.125936][ T929] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=8f.3b [ 350.150393][ T929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.184688][ T5173] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 350.185616][ T929] usb 2-1: config 0 descriptor?? [ 350.215084][ T929] ch9200 2-1:0.0: probe with driver ch9200 failed with error -22 [ 350.306657][ T5196] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 350.333595][ T5196] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.359955][ T5196] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.391574][ T5196] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 350.425757][ T5174] usb 2-1: USB disconnect, device number 39 [ 350.426727][ T5173] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 350.451454][ T5196] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 350.467632][ T5173] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.477165][ T5196] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 350.493425][ T5196] usb 1-1: Manufacturer: syz [ 350.500773][ T5173] usb 5-1: Product: syz [ 350.513348][ T5173] usb 5-1: Manufacturer: syz [ 350.523072][ T5196] usb 1-1: config 0 descriptor?? [ 350.531625][ T5173] usb 5-1: SerialNumber: syz [ 350.552537][ T5173] usb 5-1: config 0 descriptor?? [ 350.788524][ T5173] usb 5-1: USB disconnect, device number 38 [ 350.816129][ T929] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 350.955302][ T5196] appleir 0003:05AC:8243.003A: item fetching failed at offset 0/1 [ 350.983708][ T5196] appleir 0003:05AC:8243.003A: parse failed [ 351.010978][ T5196] appleir 0003:05AC:8243.003A: probe with driver appleir failed with error -22 [ 351.037461][ T929] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 351.071339][ T929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.093730][ T929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.115334][ T929] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 351.146348][ T929] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 351.166445][ T929] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 351.183381][ T929] usb 4-1: Manufacturer: syz [ 351.199315][ T929] usb 4-1: config 0 descriptor?? [ 351.632147][ T929] appleir 0003:05AC:8243.003B: No inputs registered, leaving [ 351.672199][ T929] appleir 0003:05AC:8243.003B: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 352.762173][ T5196] usb 1-1: USB disconnect, device number 52 [ 354.154005][ T5173] usb 4-1: USB disconnect, device number 41 [ 354.978173][ T5196] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 355.194683][ T5196] usb 2-1: Using ep0 maxpacket: 8 [ 355.204495][ T5196] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=8f.3b [ 355.220937][ T5196] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.266030][ T5196] usb 2-1: config 0 descriptor?? [ 355.288646][ T5196] ch9200 2-1:0.0: probe with driver ch9200 failed with error -22 [ 355.494987][ T5196] usb 2-1: USB disconnect, device number 40 [ 355.857652][ T5168] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 356.065049][ T5168] usb 4-1: Using ep0 maxpacket: 8 [ 356.118459][ T5168] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 356.145044][ T5168] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 356.167607][ T5168] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 356.213843][ T5168] usb 4-1: New USB device found, idVendor=0001, idProduct=8000, bcdDevice= 0.00 [ 356.224637][ T5168] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 356.238376][ T5168] usb 4-1: SerialNumber: syz [ 356.254818][T10678] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 356.276211][ T5168] hub 4-1:1.0: bad descriptor, ignoring hub [ 356.292697][ T5168] hub 4-1:1.0: probe with driver hub failed with error -5 [ 356.426248][ T45] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 356.474091][T10678] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 356.493533][ T5174] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 356.647374][ T45] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 356.696834][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.714869][ T929] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 356.733360][ T5174] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 356.749941][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.757940][ T5174] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 356.786921][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 356.790691][ T5174] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 356.829586][ T5174] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.870900][ T45] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 356.891509][T10682] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 356.907209][ T45] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 356.931277][ T929] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 356.942288][ T45] usb 2-1: Manufacturer: syz [ 356.953359][ T929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.972413][T10691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.983343][ T45] usb 2-1: config 0 descriptor?? [ 357.009083][ T929] usb 1-1: Product: syz [ 357.021878][T10691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.027371][ T929] usb 1-1: Manufacturer: syz [ 357.051789][ T929] usb 1-1: SerialNumber: syz [ 357.081200][ T929] usb 1-1: config 0 descriptor?? [ 357.168850][ T5174] usb 5-1: USB disconnect, device number 39 [ 357.330952][ T929] usb 1-1: USB disconnect, device number 53 [ 357.402501][ T5168] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 357.460685][ T45] appleir 0003:05AC:8243.003C: item fetching failed at offset 0/1 [ 357.486106][ T45] appleir 0003:05AC:8243.003C: parse failed [ 357.492184][ T45] appleir 0003:05AC:8243.003C: probe with driver appleir failed with error -22 [ 357.495164][ T5168] usb 4-1: USB disconnect, device number 42 [ 357.944797][ T929] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 358.154777][ T929] usb 1-1: Using ep0 maxpacket: 8 [ 358.176460][ T929] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 6797, setting to 1024 [ 358.222167][ T929] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 358.247539][ T929] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 358.298079][ T929] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 358.348048][ T929] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 358.361291][ T929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.390904][ T929] usb 1-1: Product: syz [ 358.417645][ T929] usb 1-1: Manufacturer: syz [ 358.449505][ T929] usb 1-1: SerialNumber: syz [ 358.464406][T10684] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 358.521265][T10709] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.530551][T10709] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.688570][ T929] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 54 if 0 alt 0 proto 2 vid 0x0525 pid 0xA4A8 [ 358.728223][ T929] usb 1-1: USB disconnect, device number 54 [ 358.758252][ T929] usblp0: removed [ 359.167234][ T45] usb 2-1: USB disconnect, device number 41 [ 359.765380][ T45] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 359.974648][ T45] usb 2-1: Using ep0 maxpacket: 8 [ 360.003220][ T45] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=8f.3b [ 360.035433][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.095937][ T45] usb 2-1: config 0 descriptor?? [ 360.122565][ T45] ch9200 2-1:0.0: probe with driver ch9200 failed with error -22 [ 360.339924][ T5170] usb 2-1: USB disconnect, device number 42 [ 361.008785][T10733] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 361.064925][T10733] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 361.185287][T10733] fuse: Bad value for 'fd' [ 361.828009][ T5200] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 361.928058][ T45] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 362.037280][ T5200] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 362.067547][ T5200] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.101544][ T5200] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.112634][ T5200] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 362.127768][ T5200] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 362.141421][ T45] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 362.151932][ T5200] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 362.164795][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.181748][ T5200] usb 2-1: Manufacturer: syz [ 362.189142][ T45] usb 5-1: Product: syz [ 362.202041][ T45] usb 5-1: Manufacturer: syz [ 362.212585][ T45] usb 5-1: SerialNumber: syz [ 362.218510][ T5200] usb 2-1: config 0 descriptor?? [ 362.250823][ T45] usb 5-1: config 0 descriptor?? [ 362.433397][T10759] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'. [ 362.487447][ T45] usb 5-1: USB disconnect, device number 40 [ 362.717739][ T5200] appleir 0003:05AC:8243.003D: item fetching failed at offset 0/1 [ 362.736281][ T5200] appleir 0003:05AC:8243.003D: parse failed [ 362.743367][ T5200] appleir 0003:05AC:8243.003D: probe with driver appleir failed with error -22 [ 364.554321][ T5170] usb 2-1: USB disconnect, device number 43 [ 366.147399][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.425315][ T929] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 366.463320][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.665572][ T929] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 366.692073][ T929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.709699][ T929] usb 1-1: Product: syz [ 366.713957][ T929] usb 1-1: Manufacturer: syz [ 366.742124][ T929] usb 1-1: SerialNumber: syz [ 366.764056][ T929] usb 1-1: config 0 descriptor?? [ 366.784133][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.015465][ T929] usb 1-1: USB disconnect, device number 55 [ 367.028970][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.534041][ T35] bridge_slave_1: left allmulticast mode [ 367.563305][ T35] bridge_slave_1: left promiscuous mode [ 367.579450][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.609650][ T35] bridge_slave_0: left allmulticast mode [ 367.618911][ T35] bridge_slave_0: left promiscuous mode [ 367.635204][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.678316][ T5127] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 367.688574][ T5127] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 367.697156][ T5127] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 367.710084][ T5127] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 367.717951][ T5127] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 367.725412][ T5127] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 369.021902][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 369.040801][ T35] bond_slave_0: left promiscuous mode [ 369.060211][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 369.087493][ T35] bond_slave_1: left promiscuous mode [ 369.108010][ T35] bond0 (unregistering): Released all slaves [ 369.573885][ T35] bond1 (unregistering): Released all slaves [ 369.764785][ T5127] Bluetooth: hci0: command tx timeout [ 369.888253][ T35] bond2 (unregistering): Released all slaves [ 370.108856][ T35] bond3 (unregistering): Released all slaves [ 370.274435][ T35] bond4 (unregistering): Released all slaves [ 370.483495][ T35] bond5 (unregistering): Released all slaves [ 370.679234][ T35] bond6 (unregistering): Released all slaves [ 370.891387][ T35] bond7 (unregistering): Released all slaves [ 371.082036][ T35] bond8 (unregistering): Released all slaves [ 371.274141][ T35] bond9 (unregistering): Released all slaves [ 371.507044][ T35] bond10 (unregistering): Released all slaves [ 371.842566][ T35] ɶƣ0GCTw: left promiscuous mode [ 371.847337][ T5127] Bluetooth: hci0: command tx timeout [ 372.494696][ T5200] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 372.642237][T10849] chnl_net:caif_netlink_parms(): no params data found [ 372.702984][ T5200] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 372.765722][ T5200] usb 4-1: config 0 has an invalid interface number: 15 but max is 8 [ 372.773884][ T5200] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 372.822312][ T5200] usb 4-1: config 0 has no interface number 0 [ 372.836781][ T35] hsr_slave_0: left promiscuous mode [ 372.853205][ T5200] usb 4-1: config 0 interface 15 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 372.874752][ T35] hsr_slave_1: left promiscuous mode [ 372.882939][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 372.895040][ T5200] usb 4-1: config 0 interface 15 has no altsetting 0 [ 372.904925][ T5174] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 372.913319][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 372.922171][ T5200] usb 4-1: config 0 has an invalid interface number: 15 but max is 8 [ 372.943820][ T5200] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 372.956524][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 372.972659][ T5200] usb 4-1: config 0 has no interface number 0 [ 372.993081][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.013083][ T5200] usb 4-1: config 0 interface 15 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 373.036764][ T5200] usb 4-1: config 0 interface 15 has no altsetting 0 [ 373.067924][ T5200] usb 4-1: config 0 has an invalid interface number: 15 but max is 8 [ 373.096841][ T5200] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 373.132780][ T5200] usb 4-1: config 0 has no interface number 0 [ 373.141907][ T35] veth1_macvtap: left promiscuous mode [ 373.171884][ T5200] usb 4-1: config 0 interface 15 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 373.184309][ T35] veth0_macvtap: left promiscuous mode [ 373.200590][ T5174] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 373.215443][ T35] veth1_vlan: left promiscuous mode [ 373.219133][ T5200] usb 4-1: config 0 interface 15 has no altsetting 0 [ 373.240585][ T35] veth0_vlan: left promiscuous mode [ 373.248456][ T5174] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.249707][ T5200] usb 4-1: config 0 has an invalid interface number: 15 but max is 8 [ 373.293073][ T5174] usb 5-1: Product: syz [ 373.304456][ T5200] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 373.309854][ T5174] usb 5-1: Manufacturer: syz [ 373.338057][ T5200] usb 4-1: config 0 has no interface number 0 [ 373.358899][ T5174] usb 5-1: SerialNumber: syz [ 373.363771][ T5200] usb 4-1: config 0 interface 15 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 373.412439][ T5174] usb 5-1: config 0 descriptor?? [ 373.414994][ T5200] usb 4-1: config 0 interface 15 has no altsetting 0 [ 373.452270][ T5200] usb 4-1: config 0 has an invalid interface number: 15 but max is 8 [ 373.482949][ T5200] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 373.514858][ T5200] usb 4-1: config 0 has no interface number 0 [ 373.541026][ T5200] usb 4-1: config 0 interface 15 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 373.584830][ T5200] usb 4-1: config 0 interface 15 has no altsetting 0 [ 373.611238][ T5200] usb 4-1: config 0 has an invalid interface number: 15 but max is 8 [ 373.660590][ T5200] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 373.698452][ T5200] usb 4-1: config 0 has no interface number 0 [ 373.704715][ T929] usb 5-1: USB disconnect, device number 41 [ 373.739226][ T5200] usb 4-1: config 0 interface 15 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 373.797462][ T5200] usb 4-1: config 0 interface 15 has no altsetting 0 [ 373.831916][ T5200] usb 4-1: config 0 has an invalid interface number: 15 but max is 8 [ 373.872970][ T5200] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 373.909519][ T5200] usb 4-1: config 0 has no interface number 0 [ 373.924771][ T5127] Bluetooth: hci0: command tx timeout [ 373.932951][ T5200] usb 4-1: config 0 interface 15 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 373.999761][ T5200] usb 4-1: config 0 interface 15 has no altsetting 0 [ 374.037821][ T5200] usb 4-1: config 0 has an invalid interface number: 15 but max is 8 [ 374.068359][ T5200] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 374.095277][ T5200] usb 4-1: config 0 has no interface number 0 [ 374.122022][ T5200] usb 4-1: config 0 interface 15 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 374.154949][ T5200] usb 4-1: config 0 interface 15 has no altsetting 0 [ 374.199275][ T5200] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 374.238215][ T5200] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 374.266326][ T5200] usb 4-1: Product: syz [ 374.285150][ T5200] usb 4-1: Manufacturer: syz [ 374.305669][ T5200] usb 4-1: SerialNumber: syz [ 374.344084][ T5200] usb 4-1: config 0 descriptor?? [ 374.388621][ T5200] yurex 4-1:0.15: USB YUREX device now attached to Yurex #0 [ 375.259432][ T35] team0 (unregistering): Port device team_slave_1 removed [ 375.353467][ T35] team0 (unregistering): Port device team_slave_0 removed [ 375.361451][ T929] usb 4-1: USB disconnect, device number 43 [ 375.379360][ T929] yurex 4-1:0.15: USB YUREX #0 now disconnected [ 376.004797][ T5127] Bluetooth: hci0: command tx timeout [ 376.884484][T10849] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.909980][T10849] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.932542][T10849] bridge_slave_0: entered allmulticast mode [ 376.951290][T10849] bridge_slave_0: entered promiscuous mode [ 376.974470][T10849] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.993982][T10849] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.009640][T10849] bridge_slave_1: entered allmulticast mode [ 377.023151][T10849] bridge_slave_1: entered promiscuous mode [ 377.114760][ T5173] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 377.218731][T10849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.253158][T10849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.338624][ T5173] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 377.371073][T10849] team0: Port device team_slave_0 added [ 377.378886][ T5173] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.417888][ T5173] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 377.428902][T10849] team0: Port device team_slave_1 added [ 377.445034][ T5173] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 377.472162][ T5173] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 377.481527][ T5173] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 377.503902][ T5173] usb 1-1: Manufacturer: syz [ 377.514262][ T5173] usb 1-1: config 0 descriptor?? [ 377.565908][T10849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.599183][T10849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.628987][T10849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.668920][T10849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.684980][T10849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.784665][T10849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.973137][ T5173] appleir 0003:05AC:8243.003E: No inputs registered, leaving [ 378.026995][ T5173] appleir 0003:05AC:8243.003E: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 378.043446][T10849] hsr_slave_0: entered promiscuous mode [ 378.056081][T10849] hsr_slave_1: entered promiscuous mode [ 378.094446][T10849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 378.124902][T10849] Cannot create hsr debugfs directory [ 378.344853][ T5173] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 378.562426][ T5173] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 378.599654][ T5173] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.619675][ T5173] usb 4-1: Product: syz [ 378.632942][ T5173] usb 4-1: Manufacturer: syz [ 378.646797][ T5173] usb 4-1: SerialNumber: syz [ 378.671231][ T5173] usb 4-1: config 0 descriptor?? [ 378.888745][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.899130][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.912525][ T5173] usb 4-1: USB disconnect, device number 44 [ 379.463585][T10849] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 379.498121][T10849] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 379.549020][T10849] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 379.588338][T10849] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 379.863762][ T5196] usb 1-1: USB disconnect, device number 56 [ 380.127211][T10849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.231104][T10849] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.367320][ T5200] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.374487][ T5200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.472785][ T5196] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.479946][ T5196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.877560][T10849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.117204][T10849] veth0_vlan: entered promiscuous mode [ 381.174471][T10849] veth1_vlan: entered promiscuous mode [ 381.378254][T10849] veth0_macvtap: entered promiscuous mode [ 381.433786][T10849] veth1_macvtap: entered promiscuous mode [ 381.535262][T10849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.589328][T10849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.636149][T10849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.675791][T10849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.712826][T10849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.757318][T10849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.804813][T10849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.839245][T10849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.887289][T10849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.930558][T10849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.981389][T10849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 382.053374][T10849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.088715][T10849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.129500][T10849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.179086][T10849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.226628][T10849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.270823][T10849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.308306][T10849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.352517][T10849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.414726][T10849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.474736][T10849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.508208][T10849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 382.963983][T10849] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.989691][T10849] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.024367][T10849] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.040536][T10849] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.447456][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.467652][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.542724][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.576476][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.652804][ T5172] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 383.845079][ T5170] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 383.877563][ T5172] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 383.900390][ T5172] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 383.940333][ T5172] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 383.968498][ T5172] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 384.020672][ T5172] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 384.064161][ T5170] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 384.118952][ T5172] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 384.144349][ T5170] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.176034][ T5172] usb 1-1: Manufacturer: syz [ 384.192736][ T5170] usb 4-1: Product: syz [ 384.211069][ T5172] usb 1-1: config 0 descriptor?? [ 384.216191][ T5170] usb 4-1: Manufacturer: syz [ 384.228691][ T5170] usb 4-1: SerialNumber: syz [ 384.255510][ T5170] usb 4-1: config 0 descriptor?? [ 384.470660][ T5170] usb 4-1: USB disconnect, device number 45 [ 384.651143][ T5172] appleir 0003:05AC:8243.003F: No inputs registered, leaving [ 384.714829][ T5172] appleir 0003:05AC:8243.003F: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 384.974802][ T5165] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 385.144869][ T5165] usb 5-1: device descriptor read/64, error -71 [ 385.435575][ T5165] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 385.606183][ T5165] usb 5-1: device descriptor read/64, error -71 [ 385.745915][ T5165] usb usb5-port1: attempt power cycle [ 385.794388][T11135] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 386.174729][ T5165] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 386.228266][ T5165] usb 5-1: device descriptor read/8, error -71 [ 386.381375][ T5170] usb 1-1: USB disconnect, device number 57 [ 386.514723][ T5165] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 386.606918][ T5165] usb 5-1: device descriptor read/8, error -71 [ 386.805764][ T5165] usb usb5-port1: unable to enumerate USB device [ 388.024716][ T5172] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 388.223679][ T5172] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 388.263124][ T5172] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.310453][ T5172] usb 2-1: Product: syz [ 388.329004][ T5172] usb 2-1: Manufacturer: syz [ 388.344717][ T5172] usb 2-1: SerialNumber: syz [ 388.369143][ T5172] usb 2-1: config 0 descriptor?? [ 388.608557][T11192] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 388.642876][ T8] usb 2-1: USB disconnect, device number 44 [ 389.326461][ T5165] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 389.536995][ T5165] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 389.564105][ T5165] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.602586][ T5165] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 389.629756][ T5165] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 389.659801][ T5165] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 389.681972][ T5165] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 389.711955][ T5165] usb 5-1: Manufacturer: syz [ 389.739552][ T5165] usb 5-1: config 0 descriptor?? [ 390.186550][ T5165] appleir 0003:05AC:8243.0040: No inputs registered, leaving [ 390.232887][ T5165] appleir 0003:05AC:8243.0040: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 391.421594][T11225] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 391.614723][ T8] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 391.823400][ T8] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 391.840694][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.852492][ T8] usb 1-1: Product: syz [ 391.864663][ T8] usb 1-1: Manufacturer: syz [ 391.872609][ T8] usb 1-1: SerialNumber: syz [ 391.888668][ T8] usb 1-1: config 0 descriptor?? [ 392.081380][ T8] usb 5-1: USB disconnect, device number 46 [ 392.129839][ T5172] usb 1-1: USB disconnect, device number 58 [ 393.534468][T11259] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 394.204772][ T5173] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 394.419021][ T5173] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 394.460903][ T5173] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 394.491231][ T5173] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 394.530732][ T5173] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 394.557918][ T5173] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 394.569938][ T5173] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 394.581166][ T5173] usb 2-1: Manufacturer: syz [ 394.589254][ T5173] usb 2-1: config 0 descriptor?? [ 395.020554][ T5173] appleir 0003:05AC:8243.0041: No inputs registered, leaving [ 395.054071][ T5173] appleir 0003:05AC:8243.0041: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 396.167066][ T30] INFO: task kworker/0:3:932 blocked for more than 143 seconds. [ 396.181654][ T30] Not tainted 6.10.0-rc3-syzkaller-00044-g2ccbdf43d5e7 #0 [ 396.193555][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. 2024/06/19 00:36:54 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 396.216029][ T30] task:kworker/0:3 state:D stack:20176 pid:932 tgid:932 ppid:2 flags:0x00004000 [ 396.228723][ T5173] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 396.278407][ T30] Workqueue: usb_hub_wq hub_event [ 396.283523][ T30] Call Trace: [ 396.308983][ T30] [ 396.313198][ T30] __schedule+0x17e8/0x4a20 [ 396.324802][ T5125] Bluetooth: hci5: command 0x0406 tx timeout [ 396.345660][ T30] ? __pfx___schedule+0x10/0x10 [ 396.350590][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 396.427628][ T30] ? __pfx_lock_release+0x10/0x10 [ 396.432741][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 396.456129][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 396.461403][ T30] ? schedule+0x90/0x320 [ 396.472805][ T30] schedule+0x14b/0x320 [ 396.477205][ T30] schedule_timeout+0xb0/0x310 [ 396.482031][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 396.494572][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 396.500614][ T30] ? wait_for_completion+0x2fe/0x620 [ 396.520227][ T30] ? wait_for_completion+0x2fe/0x620 [ 396.532892][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 396.538542][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 396.543783][ T30] ? wait_for_completion+0x2fe/0x620 [ 396.561935][ T30] wait_for_completion+0x355/0x620 [ 396.574981][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 396.580686][ T30] ? __init_swait_queue_head+0xae/0x150 [ 396.594988][ T30] snd_card_free+0x12a/0x190 [ 396.599638][ T30] ? __pfx_snd_card_free+0x10/0x10 [ 396.616183][ T30] ? __wake_up_common_lock+0x18c/0x1e0 [ 396.623387][ T30] usb_unbind_interface+0x25e/0x940 [ 396.641510][ T30] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 396.655136][ T30] ? __pfx_usb_unbind_interface+0x10/0x10 [ 396.660977][ T30] device_release_driver_internal+0x503/0x7c0 [ 396.678946][ T30] bus_remove_device+0x34f/0x420 [ 396.683947][ T30] device_del+0x57a/0x9b0 [ 396.694586][ T30] ? __pfx_device_del+0x10/0x10 [ 396.699491][ T30] ? usb_disconnect+0x103/0x950 [ 396.704410][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 396.723179][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 396.742838][ T30] usb_disable_device+0x3bf/0x850 [ 396.749463][ T30] usb_disconnect+0x340/0x950 [ 396.754210][ T30] hub_event+0x1eb9/0x5150 [ 396.768725][ T30] ? debug_object_deactivate+0x2d5/0x390 [ 396.774450][ T30] ? __pfx_hub_event+0x10/0x10 [ 396.779986][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 396.794911][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 396.800975][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 396.819224][ T30] ? process_scheduled_works+0x945/0x1830 [ 396.832996][ T30] process_scheduled_works+0xa2c/0x1830 [ 396.843520][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 396.854734][ T30] ? assign_work+0x364/0x3d0 [ 396.859388][ T30] worker_thread+0x86d/0xd70 [ 396.864018][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 396.875219][ T30] ? __kthread_parkme+0x169/0x1d0 [ 396.880305][ T30] ? __pfx_worker_thread+0x10/0x10 [ 396.897735][ T30] kthread+0x2f0/0x390 [ 396.901860][ T30] ? __pfx_worker_thread+0x10/0x10 [ 396.914601][ T30] ? __pfx_kthread+0x10/0x10 [ 396.919248][ T30] ret_from_fork+0x4b/0x80 [ 396.934992][ T30] ? __pfx_kthread+0x10/0x10 [ 396.939639][ T30] ret_from_fork_asm+0x1a/0x30 [ 396.944466][ T30] [ 396.957939][ T30] INFO: task syz-executor.2:8905 blocked for more than 144 seconds. [ 396.981336][ T30] Not tainted 6.10.0-rc3-syzkaller-00044-g2ccbdf43d5e7 #0 [ 396.992683][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 397.013505][ T30] task:syz-executor.2 state:D stack:23608 pid:8905 tgid:8904 ppid:7255 flags:0x00000006 [ 397.024231][ T30] Call Trace: [ 397.034637][ T30] [ 397.037617][ T30] __schedule+0x17e8/0x4a20 [ 397.042184][ T30] ? __pfx___schedule+0x10/0x10 [ 397.056854][ T30] ? __pfx_lock_release+0x10/0x10 [ 397.062022][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 397.076589][ T30] ? schedule+0x90/0x320 [ 397.080886][ T30] schedule+0x14b/0x320 [ 397.103906][ T30] schedule_preempt_disabled+0x13/0x30 [ 397.127934][ T30] __mutex_lock+0x6a4/0xd70 [ 397.148620][ T30] ? __mutex_lock+0x527/0xd70 [ 397.153359][ T30] ? usbdev_open+0x156/0x780 [ 397.167928][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 397.173094][ T30] ? bus_find_device+0x29b/0x2f0 [ 397.188876][ T30] ? __pfx_bus_find_device+0x10/0x10 [ 397.194214][ T30] ? usbdev_open+0xa8/0x780 [ 397.211253][ T30] ? kmalloc_trace_noprof+0x19c/0x2c0 [ 397.221727][ T30] usbdev_open+0x156/0x780 [ 397.235128][ T30] ? __pfx_usbdev_open+0x10/0x10 [ 397.240121][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 397.256267][ T30] ? __pfx_exact_match+0x10/0x10 [ 397.261265][ T30] ? module_put+0x13a/0x2d0 [ 397.276007][ T30] chrdev_open+0x5b0/0x630 [ 397.280486][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 397.295982][ T30] ? security_file_open+0x5bc/0x730 [ 397.301320][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 397.319284][ T30] do_dentry_open+0x95a/0x1720 [ 397.324129][ T30] path_openat+0x289f/0x3280 [ 397.343374][ T30] ? mark_lock+0x9a/0x350 [ 397.353497][ T30] ? mark_lock+0x9a/0x350 [ 397.362710][ T30] ? __pfx_path_openat+0x10/0x10 [