last executing test programs: 6.462280371s ago: executing program 3 (id=5102): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000280)=0x3fa8, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000016000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2002}, [@IFLA_IFNAME={0x14, 0x3, 'wg2\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) 6.045275945s ago: executing program 2 (id=5107): unshare(0x480) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="7f96be1030f2a6a5e2c9b768ae8349417d7b72e2dfe0002c43ae001897d43052cae96064b5", 0x25}], 0x1}, 0x8010) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f0000000080)={0x3ff}, 0x0, 0x0) 6.044805554s ago: executing program 3 (id=5108): r0 = socket(0x10, 0x80002, 0x0) flock(0xffffffffffffffff, 0xa556a814575266ed) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, 0x0, 0x5865}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8, 0xf}]}}]}, 0x38}}, 0x4000) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r5, @ANYRESHEX, @ANYRES16=r4, @ANYBLOB="80d7d084a2256e59f6b9eb304b1b4bb7ccbd66cc5766a5eff001847fbb960197e6a7e9a7bd9ff705016984fbcce5d5e7ad90e98839869ddc3ff65f3020dd3d9f55027d4550afc2afc2d3b2dd6e7533c46d21e4632eb57bc5448ba8255f473adfaf64a6ea073b451a14b9f7de8cf1b22659314aebfbeca264afb0d1a5c6a6"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r4, 0x6, 0x1f, 0x0, 0x20000000) 5.921143043s ago: executing program 3 (id=5109): syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793b10d10501200004010203010902120001000000000904"], 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000500], 0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}, 0x298) syz_usb_connect(0x2, 0x0, 0x0, &(0x7f00000008c0)={0xa, &(0x7f0000000740)={0xa, 0x6, 0x110, 0xd, 0x2, 0x5, 0x97, 0x59}, 0x3f, &(0x7f0000000780)={0x5, 0xf, 0x3f, 0x4, [@ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0xe, 0xf000, 0x0, [0x140]}, @ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x9, 0x6, 0x401, 0xf00, 0x7, [0xff0000, 0x0, 0xff000f, 0xe7, 0xc0, 0xff0f]}, @ptm_cap={0x3}]}, 0x1, [{0xe4, &(0x7f00000007c0)=@string={0xe4, 0x3, "53ff795e2ff48124a568ef58000a0215bb29bde51de3ead71bfebf3231edc7f3927cf08d20eb49891b3e9913aed6a80545ea64835c0f09739866600c08bf53b7098746b43b64b015f38f88dca224f126fb238fe64044cf467878bbe6d6ffa2a46a8276787c449a4a4740409214fa42a347ba3c21b4390265c02e1231eb945931fddcbcedb8a234943c8cfeb794c916ea70fe7abe890e27de3862339165f9a2050a496b18229f42f1e47c81a7cbf2e92f5b80a6052b89f826453f8192b085b38d93c8dc8823a560869bf1353ad1284f831c6de2f2ff3559cd9a6c26170c82817f1d45"}}]}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f000086fff4)) r5 = getpid() r6 = getpid() kcmp$KCMP_EPOLL_TFD(r5, r6, 0x7, r1, &(0x7f00000000c0)={r4, r3, 0x1000000}) 5.096743677s ago: executing program 2 (id=5111): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000100)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x803}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xd}]}, 0x4c}, 0x1, 0x0, 0x0, 0x50}, 0x24048010) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000140)) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, 0x6, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x10) socket$igmp(0x2, 0x3, 0x2) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x414042, 0xe) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, &(0x7f00000002c0)={0x3, {{0xa, 0x4e22, 0x8001, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}}, {{0xa, 0x4e23, 0x100, @local, 0x2}}}, 0x108) ioctl$sock_SIOCADDDLCI(r3, 0x8980, &(0x7f0000000400)={'ip_vti0\x00', 0xff}) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000440)=0xcb, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, 0x0, 0x0) r4 = fsopen(&(0x7f00000005c0)='iso9660\x00', 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f00000007c0)={0x50002000}) syz_emit_vhci(&(0x7f0000000800)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}, {0x127, 0x8, 0x4, 0x7}}}, 0xa) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000840), &(0x7f0000000880)=0x4) sendto$inet6(r5, &(0x7f00000008c0)="5b5922ad5e6d7accaa1dda286edf1caacfe4f41278faea0e2d8c570dee15975dff73d4c0c58dde9f202dac7531bff80629ebf08aec91058379974127b7a6f2f1743280fc25b6cee29f28b1490e5ca176cb71119cab53677160b9d11ceed524b8b16dcacd3cb649ba816b1ba3d9878889d5d5ed61814c7c9d9588e9f8b7c91ab484c15e776d8d6301b6de58150756ad81215868f9b55e10cc109f368230b189ac3483324209b676c0bf19e1c0b6bd7ae4d509284403509ade4d3ba2cc98b231befc599fd5bb0495ae9b3d9a7bf424", 0xce, 0x20000000, &(0x7f00000009c0)={0xa, 0x4e21, 0x1, @mcast2, 0x1}, 0x1c) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r2) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000500)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0xa001}, 0xfffffff8, &(0x7f0000000480)={&(0x7f0000000a80)={0x8c, r6, 0x201, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x33}, @void, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8}, @NL80211_ATTR_VENDOR_DATA={0x60, 0xc5, "08df1d80c7caef19d835b65148438ae153f4c78c73311a3d41d468251a426004cfb90c61cdf7b8fcab66f0ac7f20864782936ea089d467916f97801d46bedd5fa0044564a1f8515173f07e3c325a4311fa66b8e94580d8b266a71856"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4}, 0x404c084) openat$nullb(0xffffffffffffff9c, &(0x7f0000001bc0), 0x40, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) setsockopt$inet6_dccp_int(r2, 0x21, 0x10, &(0x7f0000001c00)=0x9, 0x4) openat(r2, &(0x7f0000001c40)='./file0\x00', 0x0, 0x1) r7 = semget$private(0x0, 0x4, 0x200) semctl$GETNCNT(r7, 0x3, 0xe, &(0x7f0000001c80)=""/22) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001cc0), 0x2, 0x0) close_range(r4, r8, 0x0) 4.989789554s ago: executing program 2 (id=5112): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) (async) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="593bac7c7ba5166ba78998c3130bfdba44b2d14a1202aca23f58e1e02a401992fd19685df0afb9b2b372ee53d13f6ca11e94707c25f029c0ad1833c07d6af86bdebc7c26660ea78f2583e030bcd7b680cae08b9557fa331ba2e24af4927134532b7bda0051cd8fbbdad053cf0cb24930b32ee31340de4a7d0a408664fe18f5", 0x7f}, {&(0x7f00000001c0)='K', 0x1}], 0x2}, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000140)={0x28, 0x10002, 0x0, r3, 0x200, 0x7, 0xa, 0x30182e}) syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) (async) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) (async) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000c00)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r4, 0x0, &(0x7f0000000c00)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00@\x00'], 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, 0x0) syz_usb_control_io$printer(r4, 0x0, &(0x7f00000015c0)={0x34, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000006ccf4f7da8df00a655637b8700005e78cc8cef3910651f49daaec02a87397b1c1461b3713505bb97af77e1907d2fbfd15d5e18164f838165ee29158de3664ccea523573439edb201d5e78f1ec66d943b461eeb8a2274d2eb0ed8b8c1baf711d5425be1d1adcc87d5895254f5332dad3db4894f492d18c2e99883636d667872ebd5d5c5cf394644f9e1e2847dde392a0783a57d198f46990de7bd1127f2d0f0a049105514"], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$printer(r4, 0x0, &(0x7f00000015c0)={0x34, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000006ccf4f7da8df00a655637b8700005e78cc8cef3910651f49daaec02a87397b1c1461b3713505bb97af77e1907d2fbfd15d5e18164f838165ee29158de3664ccea523573439edb201d5e78f1ec66d943b461eeb8a2274d2eb0ed8b8c1baf711d5425be1d1adcc87d5895254f5332dad3db4894f492d18c2e99883636d667872ebd5d5c5cf394644f9e1e2847dde392a0783a57d198f46990de7bd1127f2d0f0a049105514"], 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x8000003d) syz_usb_control_io$cdc_ncm(r4, &(0x7f0000000780)={0x14, &(0x7f0000000cc0)=ANY=[@ANYRES8=r0], &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000a80)={0x44, &(0x7f00000007c0)={0x40, 0x9, 0xf5, "788b3b13ec5c43a9404f8ce5f2e62c4b62031886b38fb62c4c57aa88d6241e54d1430fc37c040f46c86758faa437029e358bada7345a610b23b8d7704dce80ac97d6fe5f0bf7ee64ade3074674ebbb2ed34ff5dcfaeba69eee8341b3dae93a8f9e6c5e4f6d607f14a4f00bae36c5ecd0839a0a3075ba5bfb2937d59484752a7bc9554ab5a24bdc6ce447a05a329e62485a001a08bd7494beb39dfe98627a24706b1d282a3aae594ba9d5166cf0f421576c441cb87e0b0e09c89e0ba2d7166db3fdec81306992cca9a38fb62de8d774f2a94d450d4ae50eb89ac3a5712e35de6b3625e5a3ad31a6e0a8a866df77592ef948981a9b12"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0x7e}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0xb2}, &(0x7f0000000940)={0x20, 0x80, 0x1c, {0x3, 0xbf, 0xffff, 0x77b9, 0x1, 0x8, 0x8, 0x9, 0x0, 0x4081, 0x7fff, 0xfab2}}, &(0x7f0000000980)={0x20, 0x85, 0x4, 0xeb3}, &(0x7f00000009c0)={0x20, 0x83, 0x2}, &(0x7f0000000a00)={0x20, 0x87, 0x18, 0x1}, &(0x7f0000000a40)={0x20, 0x89, 0x2}}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a, 0x0, 0xffffffffffffffff, 0xfffffffffffffef6, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a, 0x0, 0xffffffffffffffff, 0xfffffffffffffef6, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000480)={r6, 0xffffffffffffffff, 0xd}, 0x14) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000480)={r6, 0xffffffffffffffff, 0xd}, 0x14) lsetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='user.incfs.size\x00', 0x0, 0x0, 0x0) (async) lsetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='user.incfs.size\x00', 0x0, 0x0, 0x0) 4.635081237s ago: executing program 3 (id=5115): socket$nl_netfilter(0x10, 0x3, 0xc) getuid() r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000012c0)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)={0x0, 0x0, 0x100000}, 0x20) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r2, &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000280)={0x0, 0x0, 0x100000}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) getuid() (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f00000012c0)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) (async) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)={0x0, 0x0, 0x100000}, 0x20) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) mount_setattr(r2, &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000280)={0x0, 0x0, 0x100000}, 0x20) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) 3.743994247s ago: executing program 4 (id=5121): r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000180)={0x0, 0x6, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x9909e5, 0x4, '\x00', @p_u16=0x0}}) 3.526612365s ago: executing program 4 (id=5123): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0xf09, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x18, 0x2, [@TCA_RED_PARMS={0x14}]}}]}, 0x44}}, 0x0) 3.397952856s ago: executing program 4 (id=5126): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind$vsock_stream(r4, &(0x7f0000000000)={0x10}, 0x10) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000880)={0x1c, r3, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 3.090377823s ago: executing program 4 (id=5130): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_sctp(0xa, 0x0, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) pread64(0xffffffffffffffff, &(0x7f0000000040)=""/172, 0xac, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000100)) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="02f0ffffffffffffbf000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00'], 0x50) 2.553103811s ago: executing program 3 (id=5133): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0xc0bc5310, 0x0) 2.128110343s ago: executing program 4 (id=5137): r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0) connect$inet6(r1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) r2 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000c00)="d0e030806dd906298a72aab246444e6f9673270c3f4219a7e02f66142f730ab0e877fb2cbb02e8b2651a7cf72b3e0068c3078a5040a5d05da2cbbbe2a4f9598b4758bccadeb12fe9d3b24072d90d7ef623", 0x51}], 0x1}}], 0x1, 0x0) add_key(&(0x7f0000000340)='dns_resolver\x00', &(0x7f0000000540)={'syz', 0x1}, &(0x7f0000000580)="fb9c", 0xfffff, r2) 2.121358507s ago: executing program 3 (id=5138): r0 = socket$key(0xf, 0x3, 0x2) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) 1.813497998s ago: executing program 1 (id=5141): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, 0x0, &(0x7f0000000000)) 1.812560746s ago: executing program 2 (id=5142): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x0, 0x0, 0x0, "41661c61d9b36cb74d7d86671eacf04be3a08353efa3641776f56cfcffffff0677bc6fefb4abb542241c23cb090000006a8dfe2500c44f5400"}, 0xd8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x141803) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0b041000e0ff030002004788aa", 0xd, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000000)={r6, 0x1, 0x6, @local}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001000)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000019c0)) sendmmsg$inet(r1, &(0x7f0000001b00)=[{{&(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000040), 0x0, &(0x7f0000000300)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xfffffffb}}, @ip_tos_int={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xba}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1f}}, @ip_retopts={{0x38, 0x0, 0x7, {[@generic={0x7, 0x9, "5b2bc86267c9e9"}, @generic={0x88, 0xe, "e75253b3dfa365cedc7bfa0e"}, @cipso={0x86, 0xe, 0xffffffffffffffff, [{0x5, 0x8, "8a6a42efef47"}]}, @ssrr={0x89, 0x3, 0x64}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffffffc1}}, @ip_retopts={{0x84, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x34, 0x55, 0x3, 0xf, [{@dev={0xac, 0x14, 0x14, 0x36}, 0x5}, {@broadcast, 0xfffffff7}, {@multicast1, 0x5}, {@remote, 0x7}, {@multicast2, 0x7}, {@broadcast, 0x80000000}]}, @timestamp={0x44, 0x1c, 0x52, 0x0, 0x0, [0x9, 0x5, 0x101, 0x76e7, 0x3, 0x9]}, @ssrr={0x89, 0x13, 0x3b, [@multicast2, @empty, @empty, @multicast1]}, @generic={0x0, 0xa, "c1e9ea0c93242cdf"}, @rr={0x7, 0x7, 0xb6, [@rand_addr=0x64010100]}]}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0xd2, [@multicast2]}, @ra={0x94, 0x4, 0x1}]}}}], 0x170}}, {{&(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010100, @rand_addr=0x64010101}}}, @ip_ttl={{0x14}}], 0x38}}, {{&(0x7f00000007c0)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000800)="c3ab84e86e27292cc68f3ba70554aac4a58d634ae1893b0b635ac6dfecee78f483fab7d73c7ff9a66958635985532b80c7e6617a8d58c88d45a54492153374d2083b4026f16cde98551aa402451cf8bf0d4969840c3870f8a77d42f27f9a9d751e98dc5080b3c5feac4dfbcf4a510d1b82732061995d33b0a75c97bd94cd0ac679af192da2a819c365fb186b364f3c615b175b6b77e67fb5aa54080087909ce956", 0xa1}], 0x1, &(0x7f0000000900)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x401}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7b04}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x43}}}}, @ip_retopts={{0x34, 0x0, 0x7, {[@ssrr={0x89, 0xf, 0xe7, [@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x11}, @dev={0xac, 0x14, 0x14, 0x3a}]}, @timestamp_prespec={0x44, 0x14, 0xb5, 0x3, 0x1, [{@loopback, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}}}], 0xd0}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a40)}, {&(0x7f0000000b40)="79035d7558f1d8b718284c3ab7f68b6647920933c060a9feef92c3de1d8165bc704043980d27e67cf90297127b19af3c54b7177949814611974e51a53a42da7d6606d060c218a646eddb114c89c25263c45494227409ea47d6dd05ac224077a4218350787982f14639a5339a4ae249ccfbff8d7d34cef64f2ab892dbe11bfc792a28fa4a68b17ec6960074cc68cc03ec624b300de9cdd69da92f245eebb30aa73eb95319cdf952e11178edca5f8e9348bbf6e4effa11a1cc0e91178be6ca302988e60de1", 0xc4}, {&(0x7f0000000c40)="449646ccee7764ceac36982d64d818aae534e205ab1b1ba67d2ad1658839af838405aef54916d3ccd65d64e40d6b798bc44b9ba035b6158339c395709c650fc2eb253d86e18b64575e7ff2d8e80ae7305bce0d637c093c3cf5efa7eb9a3a7494dc9b0f82f539a04f6696b257a382269bf5d3190d21081efaba7b1f643ef88d342441dd60ee26cf279ff4d56270ee6ab18ec3eca4d0", 0x95}], 0x3}}, {{&(0x7f0000000d80)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000ec0)=[{&(0x7f0000000dc0)="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", 0xfc}], 0x1, &(0x7f0000000f00)}}, {{&(0x7f0000000f40)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000fc0), 0x0, &(0x7f0000001040)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4b}}, @ip_ttl={{0x14, 0x0, 0x2, 0xd591}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @multicast1, @remote}}}, @ip_retopts={{0x80, 0x0, 0x7, {[@timestamp={0x44, 0x8, 0x0, 0x0, 0x9, [0x6]}, @rr={0x7, 0x7, 0xeb, [@empty]}, @timestamp={0x44, 0x10, 0xe, 0x0, 0x3, [0x8, 0x0, 0x9]}, @timestamp_prespec={0x44, 0x2c, 0xeb, 0x3, 0x4, [{@local, 0x3f}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@remote, 0x2}, {@empty, 0x1f}, {@private=0xa010101, 0x22da}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x13, 0x3d, [@private, @remote, @broadcast, @dev={0xac, 0x14, 0x14, 0x2d}]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x7, 0x4f, [@remote]}]}}}], 0xd0}}, {{&(0x7f0000001140)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000013c0)=[{&(0x7f0000001180)="67c4613c39ea1104fa68a41f89f5543f96b625dff4f840375d8962f302dcf22dd3d0f022c2052b203d00a5e8617564bf9c34f4284db8de4803e7e2781c92", 0x3e}, {&(0x7f0000001200)="fb45234b0e0e5930dd4a6938cc9eb1dd016c0792ecd371b7b5f1300b94018666de632e8a12853250f0f9979a7efea4a1aac3a836c96bf87a3fb69548176f404966edbf21cb967aec960ef56ae4", 0x4d}, {&(0x7f0000001280)="53e839bd3a0bb88e65691b42eace56d08d0fbdc5b1d91713", 0x18}, {&(0x7f00000012c0)="c647aec029983f705165a5a4d7f7497e5a4c72a84c1930560e1fed003ea70d33ad602dda76c8fd4a921681dec5364441f258b0585f7d5fe84955747198714ec0d058884f8269a935ed5c810b42371394926a6926003a496220c408788edc", 0x5e}, {&(0x7f0000001340)="8a884c58b23edf1613a6", 0xa}, {&(0x7f0000001380)}], 0x6}}, {{&(0x7f0000001440)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000001500)}}, {{&(0x7f0000001540)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000001780)=[{&(0x7f0000001580)="510975e3ea161bf01e5728914afad16c8334dfe2de5e972dd5c8bacc306443d8e5bd17dcfdf826897f6d83900a9f137b2a5f6ca06e08b3448356e41dd5b24ee935fb", 0x42}, {&(0x7f0000001700)="b53ea44c33cb181cd1388e571f364ba62da73b8da4ebbabed86396807b3268665b29ea8805dfdf5a18e9272edc67540d9b5cde48a5482e62f57fb9056859f4112c5bdbbe79f82268847e4396cadbb1dff4e12ba3ab1ec6cded050775142153686f83dae907", 0x65}], 0x2, &(0x7f00000017c0)=[@ip_retopts={{0x70, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x54, 0x0, 0x3, 0x8, [{@broadcast, 0xaca}, {@multicast1, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@private=0xa010100}, {@multicast2, 0x100}, {@local, 0xdbd1}, {@broadcast, 0x101}, {@local, 0x5}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x84}, {@broadcast, 0x2}]}, @generic={0x44, 0xb, "2009017aecf87f0f61"}, @noop]}}}, @ip_retopts={{0x28, 0x0, 0x7, {[@rr={0x7, 0x17, 0xd2, [@empty, @multicast1, @empty, @loopback, @empty]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0xb0}}, {{&(0x7f0000001880)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001980)=[{&(0x7f00000018c0)="bfbc9e0545ebe10d8923231560839140b579b8950b110ea47b035a6f127d97a5a0177668375f24eb0fa71a1efc4dc2a7d10f7c964c975ea4d1c133bb641e814da74b50632a6194603abe9cd78f4f3e4d3810c62f1f8ac5b2f907a1a444504c5b889880b435cf92cfef7a5810e203b3587849db5b52b077c5e91189301d389ffe1d5af530bf29cd2ecaf312388d3f0a3c9f130b39aae634bafe81f81375", 0x9d}], 0x1}}], 0xa, 0x804) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r8}, 0x10) setfsuid(0x0) r9 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x542) write$hidraw(r9, &(0x7f0000000340)='\x00\x00', 0x2) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r11, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000b0000040"]) ioctl$KVM_RUN(r11, 0xae80, 0x0) 1.638352727s ago: executing program 1 (id=5143): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newlink={0x44, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 1.521207949s ago: executing program 1 (id=5145): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10030}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}]}}}]}, 0x3c}}, 0x0) 1.486394376s ago: executing program 0 (id=5146): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x81, 0x40, 0x8, 0xff, 0x1, 0xe5, 0x81, 0x31, 0x2, 0x12, 0x1, 0xff, 0x0, 0x5}, 0xe) 1.362236613s ago: executing program 4 (id=5147): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_pidfd_open(0x0, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a3b370086d04ae085811010203010902"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) 1.348694017s ago: executing program 2 (id=5148): r0 = getpid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='lp\x00', 0x3) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) getresuid(&(0x7f00000000c0), &(0x7f0000001240), &(0x7f0000001280)) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfffffd9d) write$9p(r2, &(0x7f0000000cc0)="b140866f74dd5d7351b8b45b5fdb5cb3972d1b4bece3706960d3dbf19dffcaba1c726f3411a6e871649ed3d66e4c66bf75a8a0443aa15b933a45c51dddcb9d04ba19dcc06ab157606d39414910752562c7fe29f2d551fca6d766064fa10544b8abf484f6b8dc5ba5a662d3b980d63a944e76cbdf1bb6838f3f45092a8dbbfb1d9325b5829d58a3de78f41800144b", 0x8e) sendfile(r1, r2, 0x0, 0x8000002b) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) ioctl$PTP_SYS_OFFSET_EXTENDED(r2, 0xc4c03d09, &(0x7f00000005c0)={0x16}) fcntl$setownex(r2, 0xf, &(0x7f0000000080)={0x1, r0}) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000180)={0x80000000, 0x0, 0x0, 0x0, 0xfe, "78a4a500000003ffff40ffffffdf00"}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000a80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf0, 0xf0, 0xc, [@struct={0x8, 0x0, 0x0, 0x4, 0x1, 0x2}, @struct={0x0, 0x4, 0x0, 0x4, 0x1, 0xfffffffa, [{0x3, 0x2, 0x8000}, {0x7, 0x4, 0x1}, {0xa, 0x1, 0xa}, {0xe, 0x5, 0x2}]}, @union={0x5, 0x8, 0x0, 0x5, 0x1, 0x200, [{0x4, 0x2, 0x4}, {0x7, 0x3, 0x6}, {0xb, 0x0, 0x2}, {0xf, 0x0, 0x1}, {0x2, 0x0, 0xf7d4}, {0x4, 0x3, 0x10000}, {0xf, 0x5}, {0xc, 0x3, 0x8}]}, @enum={0xd, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x2}, {0x1}]}, @enum={0x2, 0x1, 0x0, 0x6, 0x4, [{0x8, 0x76}]}, @ptr={0xb, 0x0, 0x0, 0x2, 0x3}]}, {0x0, [0x5f, 0x30, 0x30, 0x2e, 0x0, 0x5f, 0x2e, 0x2e, 0x30, 0x61]}}, &(0x7f0000000480)=""/255, 0x114, 0xff, 0x1, 0x10001, 0x10000, @value=r2}, 0x28) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="0500000000000000000000000000000600000000000000000000000024f61c30f0a17caac857bb68c836dfae30c293f460b8ffeafd81460c62218d02571108105ce8447a6630e1da1879"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x12, &(0x7f0000000d80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.33184938s ago: executing program 1 (id=5149): r0 = socket$alg(0x26, 0x5, 0x0) fstat(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r1, 0x0) r2 = socket(0xa, 0x801, 0x0) getsockopt(r2, 0x29, 0x40, 0x0, &(0x7f0000001ffc)) 1.270393378s ago: executing program 0 (id=5150): r0 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000380)=""/197, 0xc5}], 0x1}, 0x0, 0x80002101}) io_uring_enter(r0, 0xd81, 0x0, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000200)='~', 0xc5) 1.211432962s ago: executing program 0 (id=5151): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000000180)={{0x0}, 0x0, 0x2f}, 0x20) 1.105256877s ago: executing program 0 (id=5152): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x1}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 1.054253814s ago: executing program 1 (id=5153): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x13, 0xe, &(0x7f0000004180)=ANY=[@ANYBLOB="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", @ANYRESOCT=r0], 0x0, 0x100000, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, 0x0) mkdir(0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) socket(0x8000000010, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = dup(r5) ioctl$KVM_SET_MSRS(r6, 0xc048aeca, &(0x7f0000000580)=ANY=[@ANYRES16=r2]) 922.340015ms ago: executing program 0 (id=5154): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x7800, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @multicast2}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x42d00) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 389.208801ms ago: executing program 0 (id=5155): socket$inet6(0xa, 0x3, 0x3c) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) write$dsp(r0, &(0x7f0000000080)="db", 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x0, 0x0, 0x0, 0x9, 0xffffffff}]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 174.216987ms ago: executing program 2 (id=5156): unshare(0x68040200) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000000)={@broadcast, @local}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000e80)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, r3, 0x1}}, 0x18) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0xfffffffc, @private2, 0xe}, r3}}, 0x30) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000000206010100000000140000000000000005000100070000000900020073797a30000000000c0007800800124000000000050005000a000000050004000000000012000300686173683a6e65742c706f727400"], 0x58}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c000000040605000000000000000000030004000900020073797a3200000000090002000100000000000000050001000700000005000100070000000900020073797a310000000005000100070000000900020073797a30"], 0x5c}}, 0x0) r4 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) timerfd_create(0x5, 0x40000) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x0) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, 0x0, 0x0) writev(r5, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='8\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000100001000000240026a6a7a528db3bc71f933543fd790180060005004e230000060001000200000008000300ac1414aa0800060001000000e9e209cc3606465cac788ffc70579eb0ee7da602e61312b409c8a0ee5d11"], 0x38}}, 0x0) 0s ago: executing program 1 (id=5157): prctl$PR_SET_IO_FLUSHER(0x41, 0x3) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0x0) r2 = fcntl$dupfd(r1, 0x406, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x200000f, 0x12, r2, 0x0) kernel console output (not intermixed with test programs): : unset [1, 0] type 2 family 0 port 6081 - 0 [ 1591.744046][T11802] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1591.835579][T27245] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1591.879033][T31686] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4868'. [ 1591.888141][T31686] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4868'. [ 1591.986490][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1592.103533][T27245] bridge_slave_1: left allmulticast mode [ 1592.109539][T27245] bridge_slave_1: left promiscuous mode [ 1592.115239][T27245] bridge0: port 2(bridge_slave_1) entered disabled state [ 1592.131026][T27245] bridge_slave_0: left allmulticast mode [ 1592.136829][T27245] bridge_slave_0: left promiscuous mode [ 1592.153264][T27245] bridge0: port 1(bridge_slave_0) entered disabled state [ 1592.177692][T27245] bond_slave_0: left promiscuous mode [ 1592.185299][T27245] bond_slave_1: left promiscuous mode [ 1592.312240][T28843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1592.321393][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1592.969108][T28842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1593.019030][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1593.308798][T31704] Invalid logical block size (34) [ 1593.516499][T27245] team0: Port device macvlan2 removed [ 1593.536060][T31710] fuse: Bad value for 'fd' [ 1593.543861][T27245] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1593.566748][T27245] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1593.581025][T27245] bond0 (unregistering): Released all slaves [ 1593.605394][T27245] bond1 (unregistering): Released all slaves [ 1593.669396][T31714] fuse: Unknown parameter 'user_i00000000000000000000' [ 1593.843815][T21433] Bluetooth: hci0: command tx timeout [ 1593.897660][T31723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1593.932526][T31684] chnl_net:caif_netlink_parms(): no params data found [ 1594.060301][ T1661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1594.524426][T31737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1594.765145][T27245] hsr_slave_0: left promiscuous mode [ 1594.771379][T27245] hsr_slave_1: left promiscuous mode [ 1594.868927][ T5283] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1594.932421][T27245] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1594.969816][T27245] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1595.019964][T27245] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1595.027572][T27245] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1595.056708][T27245] veth1_macvtap: left promiscuous mode [ 1595.062468][T27245] veth0_macvtap: left promiscuous mode [ 1595.068121][T27245] veth1_vlan: left promiscuous mode [ 1595.073626][T27245] veth0_vlan: left promiscuous mode [ 1595.080454][ T5283] usb 3-1: too many configurations: 65, using maximum allowed: 8 [ 1595.089937][ T5283] usb 3-1: config 0 has no interfaces? [ 1595.102228][T20844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1595.120823][ T5283] usb 3-1: config 0 has no interfaces? [ 1595.127391][ T5283] usb 3-1: config 0 has no interfaces? [ 1595.134396][ T5283] usb 3-1: config 0 has no interfaces? [ 1595.142237][ T5283] usb 3-1: config 0 has no interfaces? [ 1595.150238][ T5283] usb 3-1: config 0 has no interfaces? [ 1595.157550][ T5283] usb 3-1: config 0 has no interfaces? [ 1595.173004][ T5283] usb 3-1: config 0 has no interfaces? [ 1595.193221][ T5283] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 1595.219759][ T5283] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1595.241004][ T5283] usb 3-1: config 0 descriptor?? [ 1595.248311][T31764] fuse: Unknown parameter 'user_id00000000000000000000' [ 1595.465624][T20844] usb 3-1: USB disconnect, device number 34 [ 1595.609194][ T25] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1595.780805][ T25] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1595.792085][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1595.807845][ T25] usb 4-1: New USB device found, idVendor=468c, idProduct=90ea, bcdDevice=99.6d [ 1595.818295][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1595.826508][ T25] usb 4-1: Product: syz [ 1595.830953][ T25] usb 4-1: Manufacturer: syz [ 1595.835585][ T25] usb 4-1: SerialNumber: syz [ 1595.843840][ T25] usb 4-1: config 0 descriptor?? [ 1595.855661][ T25] usb 4-1: Found UVC 0.00 device syz (468c:90ea) [ 1595.863174][ T25] usb 4-1: No valid video chain found. [ 1595.908933][T21433] Bluetooth: hci0: command tx timeout [ 1595.918804][T20844] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1595.970281][T27245] team0 (unregistering): Port device team_slave_1 removed [ 1596.024141][T27245] team0 (unregistering): Port device team_slave_0 removed [ 1596.075657][T20844] usb 2-1: config 0 has an invalid interface number: 163 but max is 0 [ 1596.088341][T20844] usb 2-1: config 0 has no interface number 0 [ 1596.101052][T20844] usb 2-1: New USB device found, idVendor=2c7c, idProduct=030c, bcdDevice=5d.5c [ 1596.110875][T20844] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1596.139302][ T25] net_ratelimit: 2 callbacks suppressed [ 1596.139324][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1596.177328][T31770] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4891'. [ 1596.191801][T20844] usb 2-1: config 0 descriptor?? [ 1596.356738][T31773] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=536872256 (1073744512 ns) > initial count (152 ns). Using initial count to start timer. [ 1596.394801][T31774] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=536872256 (1073744512 ns) > initial count (152 ns). Using initial count to start timer. [ 1596.657953][T26990] usb 4-1: USB disconnect, device number 84 [ 1597.208978][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1597.877136][T31684] bridge0: port 1(bridge_slave_0) entered blocking state [ 1597.887411][T31684] bridge0: port 1(bridge_slave_0) entered disabled state [ 1597.903995][T31684] bridge_slave_0: entered allmulticast mode [ 1597.913105][T31684] bridge_slave_0: entered promiscuous mode [ 1597.981552][T21433] Bluetooth: hci0: command tx timeout [ 1598.025223][T31684] bridge0: port 2(bridge_slave_1) entered blocking state [ 1598.050469][T31684] bridge0: port 2(bridge_slave_1) entered disabled state [ 1598.061641][T28842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1598.069990][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1598.079333][T31684] bridge_slave_1: entered allmulticast mode [ 1598.086775][T31684] bridge_slave_1: entered promiscuous mode [ 1598.198345][T31684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1598.219045][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1598.253632][T31684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1598.272260][T31792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1598.279434][T20844] usb 2-1: string descriptor 0 read error: -71 [ 1598.312035][T20844] option 2-1:0.163: GSM modem (1-port) converter detected [ 1598.359197][T20844] usb 2-1: USB disconnect, device number 71 [ 1598.386161][T20844] option 2-1:0.163: device disconnected [ 1598.439618][T31799] fuse: Unknown parameter 'user_id00000000000000000000' [ 1598.463102][T31684] team0: Port device team_slave_0 added [ 1598.565038][T31684] team0: Port device team_slave_1 added [ 1598.724596][T28842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1598.886617][T31684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1598.940880][T31684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1599.133728][T31684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1599.184574][T31684] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1599.218320][T31684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1599.252742][T31684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1599.274467][T20844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1599.438951][ T25] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1599.464356][T31684] hsr_slave_0: entered promiscuous mode [ 1599.494556][T31684] hsr_slave_1: entered promiscuous mode [ 1599.519428][T31684] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1599.536079][T31684] Cannot create hsr debugfs directory [ 1599.588853][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 1599.602704][ T25] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1599.620308][ T25] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1599.654577][ T25] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1599.690233][ T25] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1599.731158][ T25] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1599.741402][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1599.988810][ T25] usb 3-1: GET_CAPABILITIES returned 0 [ 1600.036282][ T25] usbtmc 3-1:16.0: can't read capabilities [ 1600.058732][T21433] Bluetooth: hci0: command tx timeout [ 1600.239651][T31852] fuse: Unknown parameter 'user_id00000000000000000000' [ 1600.301213][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1600.379297][T26990] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1600.560107][T26990] usb 2-1: Using ep0 maxpacket: 32 [ 1600.591960][T26990] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1600.773725][T31684] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1600.794970][T20844] usb 3-1: USB disconnect, device number 35 [ 1600.850836][T31684] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1600.917674][T31684] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1600.973391][T31684] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1601.018721][T26990] usb 2-1: config 125 has an invalid interface number: 27 but max is 0 [ 1601.027078][T26990] usb 2-1: config 125 has no interface number 0 [ 1601.033786][T26990] usb 2-1: config 125 interface 27 altsetting 24 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1601.046157][T26990] usb 2-1: config 125 interface 27 altsetting 24 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1601.057501][T26990] usb 2-1: config 125 interface 27 altsetting 24 endpoint 0x8A has invalid maxpacket 50534, setting to 1024 [ 1601.069149][T26990] usb 2-1: config 125 interface 27 altsetting 24 has an invalid descriptor for endpoint zero, skipping [ 1601.080466][T26990] usb 2-1: config 125 interface 27 altsetting 24 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1601.093783][T26990] usb 2-1: config 125 interface 27 has no altsetting 0 [ 1601.108353][ T5329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1601.137243][T26990] usb 2-1: New USB device found, idVendor=1199, idProduct=68aa, bcdDevice=a4.70 [ 1601.146710][T26990] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1601.154818][T26990] usb 2-1: Product: syz [ 1601.159089][T26990] usb 2-1: Manufacturer: syz [ 1601.163742][T26990] usb 2-1: SerialNumber: syz [ 1601.173102][T31848] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1601.200395][ T8] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1601.263463][ T5283] net_ratelimit: 1 callbacks suppressed [ 1601.263485][ T5283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1601.299971][T31684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1601.318576][T31684] 8021q: adding VLAN 0 to HW filter on device team0 [ 1601.332478][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 1601.339682][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1601.341416][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1601.440314][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 1601.460638][ T8] usb 4-1: config 1 interface 0 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 22 [ 1601.494822][ T8] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1601.519257][T31684] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1601.529789][T31684] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1601.569394][T31684] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1601.579648][ T8] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1601.583754][ T1069] bridge0: port 2(bridge_slave_1) entered blocking state [ 1601.596072][ T1069] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1601.603886][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1601.612469][ T8] usb 4-1: SerialNumber: syz [ 1601.818283][T31684] veth0_vlan: entered promiscuous mode [ 1601.897231][ T8] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 1601.908371][ T8] cdc_acm 4-1:1.0: This needs exactly 3 endpoints [ 1601.930110][ T8] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -22 [ 1601.941084][T31684] veth1_vlan: entered promiscuous mode [ 1601.948085][ T8] usb 4-1: USB disconnect, device number 85 [ 1601.993759][T26990] hub 2-1:125.27: bad descriptor, ignoring hub [ 1602.000256][T26990] hub 2-1:125.27: probe with driver hub failed with error -5 [ 1602.028432][T26990] sierra 2-1:125.27: Sierra USB modem converter detected [ 1602.032853][ T29] kauditd_printk_skb: 208 callbacks suppressed [ 1602.032872][ T29] audit: type=1326 audit(1727924219.563:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31877 comm="syz.0.4915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276d17dff9 code=0x7ffc0000 [ 1602.071893][T26990] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 1602.092013][T31684] veth0_macvtap: entered promiscuous mode [ 1602.113192][T31684] veth1_macvtap: entered promiscuous mode [ 1602.141396][ T29] audit: type=1326 audit(1727924219.603:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31877 comm="syz.0.4915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276d17dff9 code=0x7ffc0000 [ 1602.179804][T26990] usb 2-1: USB disconnect, device number 72 [ 1602.181714][T31684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1602.214180][T26990] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1602.234221][T26990] sierra 2-1:125.27: device disconnected [ 1602.243788][ T29] audit: type=1326 audit(1727924219.603:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31877 comm="syz.0.4915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f276d17dff9 code=0x7ffc0000 [ 1602.268614][T31684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1602.285502][T31684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1602.296122][T31684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1602.313488][ T29] audit: type=1326 audit(1727924219.603:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31877 comm="syz.0.4915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276d17dff9 code=0x7ffc0000 [ 1602.337356][T31684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1602.350425][T31684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1602.360527][ T29] audit: type=1326 audit(1727924219.603:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31877 comm="syz.0.4915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276d17dff9 code=0x7ffc0000 [ 1602.384608][T31684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1602.395768][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1602.405698][T31889] loop8: detected capacity change from 0 to 7 [ 1602.408813][T31684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1602.419928][T31889] Dev loop8: unable to read RDB block 7 [ 1602.423058][ T29] audit: type=1326 audit(1727924219.603:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31877 comm="syz.0.4915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f276d17dff9 code=0x7ffc0000 [ 1602.434434][T31889] loop8: unable to read partition table [ 1602.451398][T31684] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1602.471404][T31684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1602.503526][ T29] audit: type=1326 audit(1727924219.603:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31877 comm="syz.0.4915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276d17dff9 code=0x7ffc0000 [ 1602.511830][T31889] loop8: partition table beyond EOD, [ 1602.529432][T31684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1602.547514][T31889] truncated [ 1602.562887][T31889] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 1602.562887][T31889] ) failed (rc=-5) [ 1602.570315][T31684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1602.586853][ T29] audit: type=1326 audit(1727924219.603:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31877 comm="syz.0.4915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276d17dff9 code=0x7ffc0000 [ 1602.616551][T31684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1602.632933][ T29] audit: type=1326 audit(1727924219.633:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31877 comm="syz.0.4915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f276d17dff9 code=0x7ffc0000 [ 1602.655652][T31684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1602.676460][T31684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1602.688191][T31684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1602.699005][ T29] audit: type=1326 audit(1727924219.633:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31877 comm="syz.0.4915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276d17dff9 code=0x7ffc0000 [ 1602.721645][T31684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1602.737440][T31684] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1602.751145][T26990] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1602.923863][T31684] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1602.939351][T26990] usb 3-1: Using ep0 maxpacket: 32 [ 1602.953820][T31684] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1602.963093][T26990] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1602.977437][T31684] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1602.988809][T26990] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1603.010808][T31684] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1603.029702][T26990] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1603.064028][T26990] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1603.083946][T26990] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1603.106838][T26990] usb 3-1: config 0 descriptor?? [ 1603.149374][T31893] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1603.159428][T26990] hub 3-1:0.0: USB hub found [ 1603.356273][T27245] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1603.383966][T26990] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1603.419099][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1603.643075][T27245] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1603.788430][T26990] hid-generic 0003:046D:C314.0064: item fetching failed at offset 0/1 [ 1603.816189][T26990] hid-generic 0003:046D:C314.0064: probe with driver hid-generic failed with error -22 [ 1603.826172][ T2513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1603.826422][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1603.871737][T27245] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1603.964718][ T5283] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1603.992942][T31889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1604.081945][T31893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1604.121078][T11802] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1604.130004][T31893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1604.151574][T11802] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1604.160079][ T5283] usb 4-1: Using ep0 maxpacket: 8 [ 1604.165609][T11802] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1604.175751][T11802] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1604.182767][T27245] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1604.197029][T11802] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1604.204578][ T5283] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1604.215714][T11802] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1604.232892][ T5283] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1604.243210][ T5283] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1604.253736][ T5283] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1604.260457][ T1069] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1604.269682][ T5283] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1604.284068][ T5283] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1604.337414][ T1069] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1604.454333][ T1069] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1604.463743][ T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1604.489303][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1604.508844][ T5283] usb 4-1: GET_CAPABILITIES returned 0 [ 1604.518824][ T1069] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1604.535266][ T5283] usbtmc 4-1:16.0: can't read capabilities [ 1604.907828][T27245] bridge_slave_1: left allmulticast mode [ 1604.915701][T27245] bridge_slave_1: left promiscuous mode [ 1604.927635][T27245] bridge0: port 2(bridge_slave_1) entered disabled state [ 1604.958342][T27245] bridge_slave_0: left allmulticast mode [ 1604.988354][T27245] bridge_slave_0: left promiscuous mode [ 1605.017579][T27245] bridge0: port 1(bridge_slave_0) entered disabled state [ 1605.018916][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1605.268818][ T8] usb 4-1: USB disconnect, device number 86 [ 1605.579351][T26990] usb 3-1: USB disconnect, device number 36 [ 1605.784137][T31945] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4924'. [ 1606.304504][T21433] Bluetooth: hci1: command tx timeout [ 1606.561070][ T25] net_ratelimit: 2 callbacks suppressed [ 1606.561088][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1606.833477][T27245] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1606.846800][T27245] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1606.858166][T27245] bond0 (unregistering): Released all slaves [ 1606.865214][T26990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1606.873712][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1606.917660][T31949] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4925'. [ 1607.269171][T31978] loop8: detected capacity change from 0 to 7 [ 1607.278111][T31978] Dev loop8: unable to read RDB block 7 [ 1607.293558][T31978] loop8: unable to read partition table [ 1607.305700][T31978] loop8: partition table beyond EOD, truncated [ 1607.325221][T31978] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 1607.325221][T31978] ) failed (rc=-5) [ 1607.379376][ T25] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1607.434594][T31921] chnl_net:caif_netlink_parms(): no params data found [ 1607.487900][T27245] hsr_slave_0: left promiscuous mode [ 1607.530606][T27245] hsr_slave_1: left promiscuous mode [ 1607.557738][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 1607.588461][T27245] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1607.609036][ T1661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1607.628124][ T25] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1607.655714][T27245] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1607.664266][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.664323][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.698445][ T25] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1607.723049][ T25] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1607.740609][T27245] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1607.752229][ T25] usb 4-1: Product: syz [ 1607.768239][ T25] usb 4-1: Manufacturer: syz [ 1607.787342][ T25] usb 4-1: SerialNumber: syz [ 1607.792777][T27245] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1607.877625][ T25] usb 4-1: config 0 descriptor?? [ 1608.001155][T31975] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1608.166573][T27245] veth1_vlan: left promiscuous mode [ 1608.180070][T27245] veth0_vlan: left promiscuous mode [ 1608.300850][ T25] usb 4-1: USB disconnect, device number 87 [ 1608.380342][T21433] Bluetooth: hci1: command tx timeout [ 1608.603338][T32006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1608.619591][T20844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1608.644919][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1608.654668][T32007] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1608.664650][T32006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1608.710594][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1608.748259][T32004] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1608.788938][ T25] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1608.960107][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 1608.970238][ T25] usb 4-1: config 167 has too many interfaces: 202, using maximum allowed: 32 [ 1608.979581][ T25] usb 4-1: config 167 has 1 interface, different from the descriptor's value: 202 [ 1608.992215][ T25] usb 4-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice=fe.29 [ 1609.015387][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1609.025292][ T25] usb 4-1: Product: syz [ 1609.036781][ T25] usb 4-1: Manufacturer: syz [ 1609.041881][ T25] usb 4-1: SerialNumber: syz [ 1609.064943][ T25] dvb-usb: found a 'Unknown USB1.1 DVB-T device ???? please report the name to the author' in warm state. [ 1609.076951][ T25] dvb-usb: bulk message failed: -22 (3/0) [ 1609.114905][ T25] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1609.127562][ T25] dvbdev: DVB: registering new adapter (Unknown USB1.1 DVB-T device ???? please report the name to the author) [ 1609.145470][ T25] usb 4-1: media controller created [ 1609.165358][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1609.198777][ T1661] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1609.206968][ T25] dvb-usb: bulk message failed: -22 (6/0) [ 1609.213007][ T25] dvb-usb: no frontend was attached by 'Unknown USB1.1 DVB-T device ???? please report the name to the author' [ 1609.236321][ T25] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input90 [ 1609.249779][ T25] dvb-usb: schedule remote query interval to 150 msecs. [ 1609.256798][ T25] dvb-usb: bulk message failed: -22 (3/0) [ 1609.268028][T31975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1609.284837][ T25] dvb-usb: Unknown USB1.1 DVB-T device ???? please report the name to the author successfully initialized and connected. [ 1609.308110][T31975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1609.383853][ T1661] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 1609.410126][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 1609.415452][T32014] fuse: Bad value for 'fd' [ 1609.416097][ T1661] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1609.429538][T27245] team0 (unregistering): Port device team_slave_1 removed [ 1609.438729][ T25] dvb-usb: error while querying for an remote control event. [ 1609.446803][ T1661] usb 3-1: can't read configurations, error -61 [ 1609.447733][T32014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1609.475609][T32014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1609.533154][T27245] team0 (unregistering): Port device team_slave_0 removed [ 1609.594482][T20844] usb 4-1: USB disconnect, device number 88 [ 1609.600688][ T1661] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1609.652624][T20844] dvb-usb: Unknown USB1.1 DVB-T device ???? please successfully deinitialized and disconnected. [ 1609.770826][ T1661] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 1609.781198][ T1661] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1609.789749][ T1661] usb 3-1: can't read configurations, error -61 [ 1609.814038][ T1661] usb usb3-port1: attempt power cycle [ 1610.163304][ T1661] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1610.199358][ T1661] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 1610.240087][ T1661] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1610.247761][ T1661] usb 3-1: can't read configurations, error -61 [ 1610.408782][ T1661] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1610.453086][ T1661] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 1610.462578][T21433] Bluetooth: hci1: command tx timeout [ 1610.493028][ T1661] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1610.512478][ T1661] usb 3-1: can't read configurations, error -61 [ 1610.543451][ T1661] usb usb3-port1: unable to enumerate USB device [ 1610.593184][T31921] bridge0: port 1(bridge_slave_0) entered blocking state [ 1610.600800][T31921] bridge0: port 1(bridge_slave_0) entered disabled state [ 1610.614559][T31921] bridge_slave_0: entered allmulticast mode [ 1610.635593][T31921] bridge_slave_0: entered promiscuous mode [ 1610.664132][T31921] bridge0: port 2(bridge_slave_1) entered blocking state [ 1610.701966][T31921] bridge0: port 2(bridge_slave_1) entered disabled state [ 1610.740110][T31921] bridge_slave_1: entered allmulticast mode [ 1610.790500][T31921] bridge_slave_1: entered promiscuous mode [ 1610.848997][ T1661] usb 4-1: new full-speed USB device number 89 using dummy_hcd [ 1611.001004][ T1661] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1611.009672][ T1661] usb 4-1: not running at top speed; connect to a high speed hub [ 1611.108347][ T1661] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 1611.168715][ T1661] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1611.176981][ T1661] usb 4-1: can't read configurations, error -61 [ 1611.274168][T31921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1611.310063][ T1661] usb 4-1: new full-speed USB device number 90 using dummy_hcd [ 1611.378525][T31921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1611.470700][ T1661] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1611.483802][ T1661] usb 4-1: not running at top speed; connect to a high speed hub [ 1611.497640][ T1661] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 1611.519427][ T1661] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1611.531514][ T1661] usb 4-1: can't read configurations, error -61 [ 1611.545316][ T1661] usb usb4-port1: attempt power cycle [ 1611.618090][T31921] team0: Port device team_slave_0 added [ 1611.642098][T31921] team0: Port device team_slave_1 added [ 1611.711107][T31921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1611.718306][T31921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1611.748830][T20844] net_ratelimit: 7 callbacks suppressed [ 1611.748852][T20844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1611.758882][T31921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1611.782968][T31921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1611.791289][T31921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1611.820724][T31921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1611.918816][ T25] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1611.926823][ T1661] usb 4-1: new full-speed USB device number 91 using dummy_hcd [ 1611.961879][T31921] hsr_slave_0: entered promiscuous mode [ 1611.975138][ T1661] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1611.985756][ T1661] usb 4-1: not running at top speed; connect to a high speed hub [ 1612.016892][T31921] hsr_slave_1: entered promiscuous mode [ 1612.026448][ T1661] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 1612.059556][ T1661] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1612.073067][T31921] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1612.084275][ T1661] usb 4-1: can't read configurations, error -61 [ 1612.087233][T31921] Cannot create hsr debugfs directory [ 1612.091418][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 1612.114884][ T25] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 1612.130470][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1612.146492][ T25] usb 5-1: Product: syz [ 1612.151458][ T25] usb 5-1: Manufacturer: syz [ 1612.156123][ T25] usb 5-1: SerialNumber: syz [ 1612.179713][ T25] usb 5-1: config 0 descriptor?? [ 1612.198242][ T25] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 1612.217350][ T25] usb 5-1: Detected FT232B [ 1612.228951][ T1661] usb 4-1: new full-speed USB device number 92 using dummy_hcd [ 1612.261886][ T1661] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1612.271688][ T1661] usb 4-1: not running at top speed; connect to a high speed hub [ 1612.287878][ T1661] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 1612.300453][ T1661] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1612.313710][ T1661] usb 4-1: can't read configurations, error -61 [ 1612.353520][ T1661] usb usb4-port1: unable to enumerate USB device [ 1612.405965][T32051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1612.437886][T32051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1612.473065][ T25] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1612.499551][ T25] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1612.523527][ T25] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1612.540201][T21433] Bluetooth: hci1: command tx timeout [ 1612.556587][ T25] usb 5-1: USB disconnect, device number 67 [ 1612.571672][ T25] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1612.581751][ T25] ftdi_sio 5-1:0.0: device disconnected [ 1612.645614][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1612.654302][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1612.726506][T32079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1612.739498][T32079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1612.754907][T32079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1612.764881][T32079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1612.777839][T32079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1612.788245][T32080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1612.807107][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1612.887188][T32083] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 1613.055214][T31921] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1613.091133][T31921] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1613.127436][T31921] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1613.159220][T31921] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1613.444215][T31921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1613.514356][T31921] 8021q: adding VLAN 0 to HW filter on device team0 [ 1613.541443][ T25] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1613.557987][ T1069] bridge0: port 1(bridge_slave_0) entered blocking state [ 1613.565185][ T1069] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1613.577870][ T1069] bridge0: port 2(bridge_slave_1) entered blocking state [ 1613.585069][ T1069] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1613.596893][T32106] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4958'. [ 1613.693186][T31921] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1613.720723][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 1613.735629][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1613.760091][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1613.767497][T31921] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1613.782717][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1613.810294][ T25] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1613.829581][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1613.851309][ T25] usb 3-1: config 0 descriptor?? [ 1613.906463][T31921] veth0_vlan: entered promiscuous mode [ 1613.932253][T31921] veth1_vlan: entered promiscuous mode [ 1613.969178][T31921] veth0_macvtap: entered promiscuous mode [ 1613.979951][T31921] veth1_macvtap: entered promiscuous mode [ 1614.025278][T31921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1614.051100][T31921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1614.109495][T31921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1614.162172][T31921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1614.185545][T31921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1614.214375][T31921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1614.233554][T31921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1614.258353][T31921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1614.281023][ T25] HID 045e:07da: Invalid code 65791 type 1 [ 1614.286763][T31921] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1614.333961][T31921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1614.337990][ T25] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0065/input/input91 [ 1614.382898][T31921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1614.403190][T31921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1614.428703][T31921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1614.436097][ T25] microsoft 0003:045E:07DA.0065: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 1614.467536][T31921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1614.476504][ T25] usb 3-1: USB disconnect, device number 41 [ 1614.487343][T31921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1614.505560][T31921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1614.517848][T31921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1614.533844][T31921] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1614.595310][T31921] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1614.639506][T31921] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1614.678753][T31921] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1614.691971][T31921] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1614.847777][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1614.873928][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1614.936330][T27245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1614.964507][T27245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1615.064569][ T8] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1615.238875][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 1615.261108][ T8] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 1615.289182][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1615.306388][ T8] usb 5-1: Product: syz [ 1615.339757][ T5285] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1615.347740][ T8] usb 5-1: Manufacturer: syz [ 1615.369447][ T8] usb 5-1: SerialNumber: syz [ 1615.391347][ T8] usb 5-1: config 0 descriptor?? [ 1615.406390][ T8] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 1615.414751][ T8] usb 5-1: Detected FT232B [ 1615.502529][T32158] netlink: 'syz.2.4968': attribute type 1 has an invalid length. [ 1615.510815][T32158] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1615.518051][T32158] IPv6: NLM_F_CREATE should be set when creating new route [ 1615.558769][ T5285] usb 2-1: Using ep0 maxpacket: 16 [ 1615.580988][ T5285] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1615.618864][ T25] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1615.628952][T32139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1615.640845][T32139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1615.656904][ T5285] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 1615.685109][ T8] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1615.696223][ T8] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1615.712377][ T5285] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1615.723722][ T8] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1615.801188][ T25] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1615.820536][ T5285] usb 2-1: Product: syz [ 1615.848966][ T8] usb 5-1: USB disconnect, device number 68 [ 1615.852598][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1615.854918][ T5285] usb 2-1: Manufacturer: syz [ 1615.854940][ T5285] usb 2-1: SerialNumber: syz [ 1615.899775][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1615.917077][ T5285] usb 2-1: config 0 descriptor?? [ 1615.927748][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1615.953141][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 1615.953156][ T29] audit: type=1326 audit(1727924233.483:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32171 comm="syz.0.4973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276d17dff9 code=0x7ffc0000 [ 1616.008902][ T25] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1616.018519][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1616.028951][ T8] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1616.040963][ T25] usb 4-1: config 0 descriptor?? [ 1616.064702][ T5285] pegasus_notetaker 2-1:0.0: Invalid number of endpoints [ 1616.097573][ T29] audit: type=1326 audit(1727924233.523:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32171 comm="syz.0.4973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f276d17dff9 code=0x7ffc0000 [ 1616.121801][ T8] ftdi_sio 5-1:0.0: device disconnected [ 1616.138991][ T5285] pegasus_notetaker 2-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 1616.177458][ T29] audit: type=1326 audit(1727924233.523:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32171 comm="syz.0.4973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276d17dff9 code=0x7ffc0000 [ 1616.284576][ T29] audit: type=1326 audit(1727924233.523:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32171 comm="syz.0.4973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f276d17dff9 code=0x7ffc0000 [ 1616.355452][ T29] audit: type=1326 audit(1727924233.523:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32171 comm="syz.0.4973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276d17dff9 code=0x7ffc0000 [ 1616.382000][ T5285] usb 2-1: USB disconnect, device number 73 [ 1616.404162][ T29] audit: type=1326 audit(1727924233.523:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32171 comm="syz.0.4973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276d17dff9 code=0x7ffc0000 [ 1616.457201][ T29] audit: type=1326 audit(1727924233.533:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32171 comm="syz.0.4973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f276d17dff9 code=0x7ffc0000 [ 1616.475223][ T25] plantronics 0003:047F:FFFF.0066: ignoring exceeding usage max [ 1616.517161][ T25] plantronics 0003:047F:FFFF.0066: No inputs registered, leaving [ 1616.524474][ T29] audit: type=1326 audit(1727924233.533:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32171 comm="syz.0.4973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276d17dff9 code=0x7ffc0000 [ 1616.563833][ T29] audit: type=1326 audit(1727924233.533:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32171 comm="syz.0.4973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276d17dff9 code=0x7ffc0000 [ 1616.570645][ T25] plantronics 0003:047F:FFFF.0066: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1616.586415][ C0] vkms_vblank_simulate: vblank timer overrun [ 1616.749956][T20844] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1616.909013][T20844] usb 5-1: Using ep0 maxpacket: 16 [ 1616.925201][T20844] usb 5-1: config 1 interface 0 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 22 [ 1616.952952][T20844] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1616.975199][T20844] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1616.990716][T20844] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1617.012005][T20844] usb 5-1: SerialNumber: syz [ 1617.100071][ T46] net_ratelimit: 13 callbacks suppressed [ 1617.100094][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1617.273208][T32209] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4979'. [ 1617.293834][T20844] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 1617.327164][T20844] cdc_acm 5-1:1.0: This needs exactly 3 endpoints [ 1617.354212][T20844] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -22 [ 1617.405306][T20844] usb 5-1: USB disconnect, device number 69 [ 1617.617792][T32222] fuse: Unknown parameter '0x0000000000000003' [ 1617.815073][ T29] audit: type=1326 audit(1727924235.343:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32228 comm="syz.2.4984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda9e57dff9 code=0x7ffc0000 [ 1618.149777][T20844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1618.310772][T32241] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4985'. [ 1618.388894][T26990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1618.397215][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1618.766911][T32259] FAULT_INJECTION: forcing a failure. [ 1618.766911][T32259] name failslab, interval 1, probability 0, space 0, times 0 [ 1618.783532][ T46] usb 4-1: USB disconnect, device number 93 [ 1618.812919][T32259] CPU: 0 UID: 0 PID: 32259 Comm: syz.3.4990 Not tainted 6.12.0-rc1-syzkaller-00042-gf23aa4c0761a #0 [ 1618.823746][T32259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1618.833840][T32259] Call Trace: [ 1618.837137][T32259] [ 1618.840084][T32259] dump_stack_lvl+0x241/0x360 [ 1618.844790][T32259] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1618.849999][T32259] ? __pfx__printk+0x10/0x10 [ 1618.854616][T32259] ? fs_reclaim_acquire+0x93/0x140 [ 1618.859747][T32259] ? __pfx___might_resched+0x10/0x10 [ 1618.865050][T32259] ? dynamic_dname+0x141/0x1b0 [ 1618.869830][T32259] should_fail_ex+0x3b0/0x4e0 [ 1618.874531][T32259] ? tomoyo_encode+0x26f/0x540 [ 1618.879311][T32259] should_failslab+0xac/0x100 [ 1618.884006][T32259] ? tomoyo_encode+0x26f/0x540 [ 1618.888783][T32259] __kmalloc_noprof+0xd8/0x400 [ 1618.893566][T32259] tomoyo_encode+0x26f/0x540 [ 1618.898173][T32259] ? __pfx_anon_inodefs_dname+0x10/0x10 [ 1618.903727][T32259] tomoyo_realpath_from_path+0x59e/0x5e0 [ 1618.909381][T32259] tomoyo_path_number_perm+0x23a/0x880 [ 1618.914857][T32259] ? tomoyo_path_number_perm+0x208/0x880 [ 1618.920503][T32259] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1618.926523][T32259] ? __fget_files+0x29/0x470 [ 1618.931140][T32259] ? __fget_files+0x3f3/0x470 [ 1618.935833][T32259] security_file_ioctl+0xc6/0x2a0 [ 1618.940891][T32259] __se_sys_ioctl+0x47/0x170 [ 1618.945500][T32259] do_syscall_64+0xf3/0x230 [ 1618.950011][T32259] ? clear_bhb_loop+0x35/0x90 [ 1618.954704][T32259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1618.960619][T32259] RIP: 0033:0x7f063997dff9 [ 1618.965071][T32259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1618.984686][T32259] RSP: 002b:00007f063a6a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1618.993119][T32259] RAX: ffffffffffffffda RBX: 00007f0639b35f80 RCX: 00007f063997dff9 [ 1619.001104][T32259] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1619.009105][T32259] RBP: 00007f063a6a6090 R08: 0000000000000000 R09: 0000000000000000 [ 1619.017085][T32259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1619.025068][T32259] R13: 0000000000000000 R14: 00007f0639b35f80 R15: 00007f0639c5fa28 [ 1619.033102][T32259] [ 1619.036168][ C0] vkms_vblank_simulate: vblank timer overrun [ 1619.069918][T32259] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1619.179817][T20844] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1619.378923][T20844] usb 2-1: Using ep0 maxpacket: 32 [ 1619.389545][T20844] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1619.399770][ T46] usb 5-1: new full-speed USB device number 70 using dummy_hcd [ 1619.411898][T20844] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1619.412086][T32274] loop8: detected capacity change from 0 to 7 [ 1619.430000][T20844] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1619.438440][T20844] usb 2-1: Product: syz [ 1619.442864][T20844] usb 2-1: Manufacturer: syz [ 1619.444198][T32274] Dev loop8: unable to read RDB block 7 [ 1619.447584][T20844] usb 2-1: SerialNumber: syz [ 1619.458773][T32274] loop8: unable to read partition table [ 1619.468971][T32274] loop8: partition table beyond EOD, truncated [ 1619.475828][T20844] usb 2-1: config 0 descriptor?? [ 1619.481941][T32274] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 1619.481941][T32274] ) failed (rc=-5) [ 1619.496312][T32264] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1619.561097][ T46] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1619.571473][ T46] usb 5-1: not running at top speed; connect to a high speed hub [ 1619.581250][ T46] usb 5-1: config 115 has an invalid interface number: 67 but max is 2 [ 1619.592915][ T46] usb 5-1: config 115 has an invalid interface number: 230 but max is 2 [ 1619.605667][ T46] usb 5-1: config 115 has an invalid interface number: 93 but max is 2 [ 1619.616646][ T46] usb 5-1: config 115 has no interface number 0 [ 1619.625574][ T46] usb 5-1: config 115 has no interface number 1 [ 1619.632465][ T46] usb 5-1: config 115 has no interface number 2 [ 1619.639286][ T46] usb 5-1: config 115 interface 67 has no altsetting 0 [ 1619.646230][ T46] usb 5-1: config 115 interface 230 has no altsetting 0 [ 1619.653530][ T46] usb 5-1: config 115 interface 93 has no altsetting 0 [ 1619.663651][ T46] usb 5-1: New USB device found, idVendor=1164, idProduct=0602, bcdDevice=aa.60 [ 1619.673964][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1619.682549][ T46] usb 5-1: Product: syz [ 1619.687889][ T46] usb 5-1: Manufacturer: syz [ 1619.693059][ T46] usb 5-1: SerialNumber: syz [ 1619.763263][ T1661] usb 2-1: USB disconnect, device number 74 [ 1620.238878][ T5285] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1620.425083][ T5285] usb 2-1: Using ep0 maxpacket: 8 [ 1620.438157][ T5285] usb 2-1: config 167 has too many interfaces: 202, using maximum allowed: 32 [ 1620.453745][ T5285] usb 2-1: config 167 has 1 interface, different from the descriptor's value: 202 [ 1620.497919][ T5285] usb 2-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice=fe.29 [ 1620.523282][ T5285] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1620.544739][ T5285] usb 2-1: Product: syz [ 1620.553439][ T5285] usb 2-1: Manufacturer: syz [ 1620.571622][ T5285] usb 2-1: SerialNumber: syz [ 1620.593334][ T5285] dvb-usb: found a 'Unknown USB1.1 DVB-T device ???? please report the name to the author' in warm state. [ 1620.621727][ T5285] dvb-usb: bulk message failed: -22 (3/0) [ 1620.662162][ T5285] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1620.682317][ T5285] dvbdev: DVB: registering new adapter (Unknown USB1.1 DVB-T device ???? please report the name to the author) [ 1620.730552][ T5285] usb 2-1: media controller created [ 1620.771038][ T5285] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1620.800026][T32264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1620.838069][ T5285] dvb-usb: bulk message failed: -22 (6/0) [ 1620.845142][ T5285] dvb-usb: no frontend was attached by 'Unknown USB1.1 DVB-T device ???? please report the name to the author' [ 1620.857280][T32264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1620.948177][ T5285] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input92 [ 1620.984388][T32281] fuse: Bad value for 'fd' [ 1621.022961][ T5285] dvb-usb: schedule remote query interval to 150 msecs. [ 1621.053111][T32281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1621.058816][ T5285] dvb-usb: bulk message failed: -22 (3/0) [ 1621.088732][ T5285] dvb-usb: Unknown USB1.1 DVB-T device ???? please report the name to the author successfully initialized and connected. [ 1621.127956][T32281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1621.208867][ T5285] dvb-usb: bulk message failed: -22 (1/0) [ 1621.214845][ T5285] dvb-usb: error while querying for an remote control event. [ 1621.402975][ T5235] dvb-usb: bulk message failed: -22 (1/0) [ 1621.432176][ T5235] dvb-usb: error while querying for an remote control event. [ 1621.450375][ T5285] usb 2-1: USB disconnect, device number 75 [ 1621.523306][T11802] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1621.536182][T11802] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1621.555015][T11802] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1621.566904][T11802] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1621.587783][T11802] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1621.601015][T11802] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1621.617887][ T5285] dvb-usb: Unknown USB1.1 DVB-T device ???? please successfully deinitialized and disconnected. [ 1621.814861][ T46] pvrusb2: Hardware description: Gotview USB 2.0 DVD Deluxe [ 1621.834829][ T46] usb 5-1: selecting invalid altsetting 0 [ 1621.844390][ T2039] pvrusb2: Invalid write control endpoint [ 1621.855600][ T46] pvrusb2: Hardware description: Gotview USB 2.0 DVD Deluxe [ 1621.863324][ T46] usb 5-1: selecting invalid altsetting 0 [ 1621.871623][ T46] pvrusb2: Hardware description: Gotview USB 2.0 DVD Deluxe [ 1621.880964][ T46] usb 5-1: selecting invalid altsetting 0 [ 1621.919065][ T46] usb 5-1: USB disconnect, device number 70 [ 1621.927778][ T2039] pvrusb2: Invalid write control endpoint [ 1621.933713][ T2039] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1621.943863][ T2039] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1621.951538][ T2039] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1621.982539][ T2039] pvrusb2: Device being rendered inoperable [ 1622.000200][ T2039] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1622.007627][ T2039] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1622.059453][ T2039] pvrusb2: Attached sub-driver cx25840 [ 1622.149442][ T2039] pvrusb2: Attempted to execute control transfer when device not ok [ 1622.157866][ T2039] pvrusb2: Attempted to execute control transfer when device not ok [ 1622.166314][ T2039] pvrusb2: Attempted to execute control transfer when device not ok [ 1622.174527][ T2039] pvrusb2: Attempted to execute control transfer when device not ok [ 1622.178273][T32283] chnl_net:caif_netlink_parms(): no params data found [ 1622.182836][ T2039] pvrusb2: Module ID 4 (tuner) for device Gotview USB 2.0 DVD Deluxe failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 1622.287893][ T2039] TUNER: Unable to find symbol tda829x_probe() [ 1622.372195][ T2039] DVB: Unable to find symbol tda9887_attach() [ 1622.378328][ T2039] tuner: 1-0043: Tuner 4 found with type(s) Radio TV. [ 1622.396785][ T2039] pvrusb2: Attached sub-driver tuner [ 1622.402206][ T2039] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 1622.415249][ T2039] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 1622.432175][ T2039] pvrusb2: Invalid write control endpoint [ 1622.479545][T32283] bridge0: port 1(bridge_slave_0) entered blocking state [ 1622.492105][ T2039] pvrusb2: Invalid write control endpoint [ 1622.498087][ T2039] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1622.532141][ T2039] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1622.547973][ T2039] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1622.570023][T32283] bridge0: port 1(bridge_slave_0) entered disabled state [ 1622.630440][ T2039] pvrusb2: Device being rendered inoperable [ 1622.648348][ T2039] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1622.659146][T32283] bridge_slave_0: entered allmulticast mode [ 1622.669924][ T2039] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 1622.690024][T32283] bridge_slave_0: entered promiscuous mode [ 1622.697431][ T2039] pvrusb2: Attached sub-driver cx25840 [ 1622.737706][T32283] bridge0: port 2(bridge_slave_1) entered blocking state [ 1622.745520][T32283] bridge0: port 2(bridge_slave_1) entered disabled state [ 1622.764649][T32283] bridge_slave_1: entered allmulticast mode [ 1622.785310][T32283] bridge_slave_1: entered promiscuous mode [ 1622.810737][ T2039] pvrusb2: Attempted to execute control transfer when device not ok [ 1622.836123][ T2039] pvrusb2: Attempted to execute control transfer when device not ok [ 1622.853264][ T2039] pvrusb2: Attempted to execute control transfer when device not ok [ 1622.877312][T32283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1622.879880][ T2039] pvrusb2: Attempted to execute control transfer when device not ok [ 1622.916455][T32283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1622.918834][ T2039] pvrusb2: Module ID 4 (tuner) for device Gotview USB 2.0 DVD Deluxe failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 1623.145687][ T2039] TUNER: Unable to find symbol tda829x_probe() [ 1623.160140][T32314] kvm: user requested TSC rate below hardware speed [ 1623.184769][T32283] team0: Port device team_slave_0 added [ 1623.211386][T32283] team0: Port device team_slave_1 added [ 1623.292068][ T2039] DVB: Unable to find symbol tda9887_attach() [ 1623.304860][ T2039] tuner: 2-0043: Tuner 4 found with type(s) Radio TV. [ 1623.312761][T32310] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5000'. [ 1623.328959][ T2039] pvrusb2: Attached sub-driver tuner [ 1623.361497][ T2039] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 1623.420668][ T2039] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 1623.472865][ T2039] pvrusb2: Invalid write control endpoint [ 1623.523406][T32283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1623.565093][T32283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1623.654098][ T2039] pvrusb2: Invalid write control endpoint [ 1623.669542][T21433] Bluetooth: hci2: command tx timeout [ 1623.670162][ T2039] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1623.706213][T32283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1623.716345][ T2039] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1623.733196][T32283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1623.740367][T32283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1623.772327][T32283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1623.780689][ T2039] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1623.854061][T32283] hsr_slave_0: entered promiscuous mode [ 1623.869873][ T2039] pvrusb2: Device being rendered inoperable [ 1623.879468][T32283] hsr_slave_1: entered promiscuous mode [ 1623.885181][ T2039] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1623.904052][T32283] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1623.918078][ T2039] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 1623.938495][T32283] Cannot create hsr debugfs directory [ 1623.968379][ T2039] pvrusb2: Attached sub-driver cx25840 [ 1624.114764][ T2039] pvrusb2: Attempted to execute control transfer when device not ok [ 1624.153309][ T2039] pvrusb2: Attempted to execute control transfer when device not ok [ 1624.172395][ T2039] pvrusb2: Attempted to execute control transfer when device not ok [ 1624.196646][ T2039] pvrusb2: Attempted to execute control transfer when device not ok [ 1624.217505][ T2039] pvrusb2: Module ID 4 (tuner) for device Gotview USB 2.0 DVD Deluxe failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 1624.305025][ T2039] TUNER: Unable to find symbol tda829x_probe() [ 1624.537787][ T2039] DVB: Unable to find symbol tda9887_attach() [ 1624.546099][ T2039] tuner: 1-0043: Tuner 4 found with type(s) Radio TV. [ 1624.564584][ T2039] pvrusb2: Attached sub-driver tuner [ 1624.574967][ T2039] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 1624.596487][ T2039] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 1624.644174][T32283] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1624.774743][ T5235] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1624.791786][T32283] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1624.880487][T32283] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1624.948885][ T46] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1624.951166][ T5235] usb 2-1: Using ep0 maxpacket: 8 [ 1624.963549][ T5235] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1624.987808][ T5235] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1624.999498][ T5235] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1625.017079][ T5235] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1625.030316][ T5235] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1625.039516][ T5235] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1625.119500][ T46] usb 5-1: Using ep0 maxpacket: 32 [ 1625.130414][ T46] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1625.149979][ T46] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1625.165889][ T46] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1625.177380][ T46] usb 5-1: Product: syz [ 1625.178116][T32283] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1625.186692][ T46] usb 5-1: Manufacturer: syz [ 1625.197009][ T46] usb 5-1: SerialNumber: syz [ 1625.201446][T32283] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1625.217840][T32283] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1625.222743][ T46] usb 5-1: config 0 descriptor?? [ 1625.233683][T32283] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1625.236834][T32337] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1625.260977][ T5235] usb 2-1: GET_CAPABILITIES returned 0 [ 1625.270947][ T5235] usbtmc 2-1:16.0: can't read capabilities [ 1625.355352][T32283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1625.375365][T32283] 8021q: adding VLAN 0 to HW filter on device team0 [ 1625.386515][ T1069] bridge0: port 1(bridge_slave_0) entered blocking state [ 1625.393682][ T1069] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1625.413036][ T1069] bridge0: port 2(bridge_slave_1) entered blocking state [ 1625.420215][ T1069] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1625.476908][ T5235] usb 5-1: USB disconnect, device number 71 [ 1625.561435][T32283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1625.627938][T32283] veth0_vlan: entered promiscuous mode [ 1625.640744][T32283] veth1_vlan: entered promiscuous mode [ 1625.673235][T32283] veth0_macvtap: entered promiscuous mode [ 1625.684521][T32283] veth1_macvtap: entered promiscuous mode [ 1625.703407][T32283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1625.716603][T32283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1625.727322][T32283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1625.738665][T32283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1625.738921][T21433] Bluetooth: hci2: command tx timeout [ 1625.749444][T32283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1625.765234][T32283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1625.787097][T32283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1625.800102][T32283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1625.818056][T32283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1625.839167][T32283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1625.860686][T32283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1625.953918][ T1069] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1625.980111][ T5235] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1626.013218][T32283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1626.049036][T32283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1626.079150][T32283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1626.099085][T32283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1626.118777][T32283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1626.139213][T32283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1626.149457][ T5235] usb 5-1: Using ep0 maxpacket: 8 [ 1626.164192][T11802] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1626.169159][T32283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1626.182651][T32283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1626.193129][ T5235] usb 5-1: config 167 has too many interfaces: 202, using maximum allowed: 32 [ 1626.193352][T32283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1626.202332][T11802] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1626.222806][ T5235] usb 5-1: config 167 has 1 interface, different from the descriptor's value: 202 [ 1626.226844][T32283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1626.237261][T11802] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1626.251409][T32283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1626.253997][ T25] usb 2-1: USB disconnect, device number 76 [ 1626.270796][T32283] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1626.280120][T32283] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1626.289768][T32283] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1626.298721][ T5235] usb 5-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice=fe.29 [ 1626.308381][ T5235] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1626.317298][ T5235] usb 5-1: Product: syz [ 1626.322706][ T5235] usb 5-1: Manufacturer: syz [ 1626.328065][T11802] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1626.337386][T32283] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1626.348487][ T5235] usb 5-1: SerialNumber: syz [ 1626.354921][T11802] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1626.364701][T11802] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1626.374328][ T5235] dvb-usb: found a 'Unknown USB1.1 DVB-T device ???? please report the name to the author' in warm state. [ 1626.386622][ T5235] dvb-usb: bulk message failed: -22 (3/0) [ 1626.420738][ T5235] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1626.438934][ T5235] dvbdev: DVB: registering new adapter (Unknown USB1.1 DVB-T device ???? please report the name to the author) [ 1626.453427][ T5235] usb 5-1: media controller created [ 1626.472054][ T5235] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1626.492936][ T5235] dvb-usb: bulk message failed: -22 (6/0) [ 1626.498893][ T5235] dvb-usb: no frontend was attached by 'Unknown USB1.1 DVB-T device ???? please report the name to the author' [ 1626.512959][ T5235] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input94 [ 1626.528542][ T5235] dvb-usb: schedule remote query interval to 150 msecs. [ 1626.530060][ T1069] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1626.537123][ T5235] dvb-usb: bulk message failed: -22 (3/0) [ 1626.578901][ T5235] dvb-usb: Unknown USB1.1 DVB-T device ???? please report the name to the author successfully initialized and connected. [ 1626.592374][T32337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1626.645392][T32337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1626.690308][T26990] dvb-usb: bulk message failed: -22 (1/0) [ 1626.704092][T26990] dvb-usb: error while querying for an remote control event. [ 1626.757373][ T1069] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1626.779632][T32361] fuse: Bad value for 'fd' [ 1626.802871][T32361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1626.830688][T32361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1626.866153][ T46] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1626.879887][ T5235] dvb-usb: bulk message failed: -22 (1/0) [ 1626.886273][ T5235] dvb-usb: error while querying for an remote control event. [ 1626.887843][ T1069] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1626.918275][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1626.928182][ T5235] usb 5-1: USB disconnect, device number 72 [ 1626.964347][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1627.037563][ T5235] dvb-usb: Unknown USB1.1 DVB-T device ???? please successfully deinitialized and disconnected. [ 1627.043547][ T46] usb 2-1: Using ep0 maxpacket: 16 [ 1627.079316][T27245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1627.087250][T27245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1627.131496][ T46] usb 2-1: config 1 interface 0 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 22 [ 1627.140377][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 1627.140399][ T29] audit: type=1326 audit(1727924244.663:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32363 comm="syz.0.5018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276d17dff9 code=0x7ffc0000 [ 1627.184107][ T46] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1627.220217][ T46] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1627.226669][ T29] audit: type=1326 audit(1727924244.703:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32363 comm="syz.0.5018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276d17dff9 code=0x7ffc0000 [ 1627.241621][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1627.303919][ T46] usb 2-1: SerialNumber: syz [ 1627.312646][ T29] audit: type=1326 audit(1727924244.713:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32363 comm="syz.0.5018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f276d17dff9 code=0x7ffc0000 [ 1627.335084][ C1] vkms_vblank_simulate: vblank timer overrun [ 1627.384615][ T29] audit: type=1326 audit(1727924244.713:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32363 comm="syz.0.5018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276d17dff9 code=0x7ffc0000 [ 1627.410655][ T29] audit: type=1326 audit(1727924244.713:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32363 comm="syz.0.5018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276d17dff9 code=0x7ffc0000 [ 1627.482998][ T29] audit: type=1326 audit(1727924244.713:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32363 comm="syz.0.5018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f276d17dff9 code=0x7ffc0000 [ 1627.567278][ T1069] bridge_slave_1: left allmulticast mode [ 1627.585025][ T1069] bridge_slave_1: left promiscuous mode [ 1627.595138][ T1069] bridge0: port 2(bridge_slave_1) entered disabled state [ 1627.613527][ T29] audit: type=1326 audit(1727924244.713:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32363 comm="syz.0.5018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276d17dff9 code=0x7ffc0000 [ 1627.636206][ C1] vkms_vblank_simulate: vblank timer overrun [ 1627.648136][ T46] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 1627.667347][ T46] cdc_acm 2-1:1.0: This needs exactly 3 endpoints [ 1627.679692][ T1069] bridge_slave_0: left allmulticast mode [ 1627.685453][ T1069] bridge_slave_0: left promiscuous mode [ 1627.703405][ T1069] bridge0: port 1(bridge_slave_0) entered disabled state [ 1627.705179][ T46] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -22 [ 1627.746637][ T29] audit: type=1326 audit(1727924244.713:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32363 comm="syz.0.5018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276d17dff9 code=0x7ffc0000 [ 1627.769165][ C1] vkms_vblank_simulate: vblank timer overrun [ 1627.794973][ T46] usb 2-1: USB disconnect, device number 77 [ 1627.812088][ T29] audit: type=1326 audit(1727924244.713:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32363 comm="syz.0.5018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f276d17dff9 code=0x7ffc0000 [ 1627.838019][ C1] vkms_vblank_simulate: vblank timer overrun [ 1627.850749][T21433] Bluetooth: hci2: command tx timeout [ 1627.920186][ T29] audit: type=1326 audit(1727924244.713:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32363 comm="syz.0.5018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276d17dff9 code=0x7ffc0000 [ 1628.081509][ T5235] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1628.099809][T26990] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1628.267162][ T5235] usb 5-1: device descriptor read/64, error -71 [ 1628.297814][T26990] usb 4-1: Using ep0 maxpacket: 32 [ 1628.307915][T26990] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 1628.353407][T26990] usb 4-1: New USB device found, idVendor=0123, idProduct=0001, bcdDevice=4a.fe [ 1628.363778][T26990] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1628.374896][T26990] usb 4-1: Product: syz [ 1628.389415][T21433] Bluetooth: hci4: command tx timeout [ 1628.435684][T26990] usb 4-1: Manufacturer: syz [ 1628.492268][T26990] usb 4-1: SerialNumber: syz [ 1628.523962][T26990] usb 4-1: config 0 descriptor?? [ 1628.550531][ T5235] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1628.726118][ T5235] usb 5-1: device descriptor read/64, error -71 [ 1628.766050][T26990] usbtouchscreen 4-1:0.0: probe with driver usbtouchscreen failed with error -71 [ 1628.837849][T26990] usb 4-1: USB disconnect, device number 94 [ 1628.844405][ T5235] usb usb5-port1: attempt power cycle [ 1628.950449][ T1069] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1628.992551][ T1069] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1629.031156][ T1069] bond0 (unregistering): Released all slaves [ 1629.149312][T32359] chnl_net:caif_netlink_parms(): no params data found [ 1629.209660][ T5235] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1629.255955][ T5235] usb 5-1: device descriptor read/8, error -71 [ 1629.535925][ T5235] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1629.600912][ T5235] usb 5-1: device descriptor read/8, error -71 [ 1629.710153][T32359] bridge0: port 1(bridge_slave_0) entered blocking state [ 1629.717363][T32359] bridge0: port 1(bridge_slave_0) entered disabled state [ 1629.741656][ T5235] usb usb5-port1: unable to enumerate USB device [ 1629.768854][T32359] bridge_slave_0: entered allmulticast mode [ 1629.776004][T32359] bridge_slave_0: entered promiscuous mode [ 1629.843857][ T1069] hsr_slave_0: left promiscuous mode [ 1629.856231][ T1069] hsr_slave_1: left promiscuous mode [ 1629.864800][ T1069] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1629.875546][ T1069] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1629.890520][ T1069] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1629.899034][T21433] Bluetooth: hci2: command tx timeout [ 1629.906273][ T1069] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1629.960806][ T1069] veth1_macvtap: left promiscuous mode [ 1629.966673][ T1069] veth0_macvtap: left promiscuous mode [ 1629.972540][ T1069] veth1_vlan: left promiscuous mode [ 1629.978561][ T1069] veth0_vlan: left promiscuous mode [ 1630.468973][T21433] Bluetooth: hci4: command tx timeout [ 1630.854241][ T1069] team0 (unregistering): Port device team_slave_1 removed [ 1630.917668][ T1069] team0 (unregistering): Port device team_slave_0 removed [ 1631.104526][T26990] usb 5-1: new full-speed USB device number 77 using dummy_hcd [ 1631.300170][T26990] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1631.325305][T26990] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1631.334479][T26990] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 1631.364929][T26990] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1631.376306][T26990] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1631.417648][T32446] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1631.443307][T26990] hub 5-1:1.0: bad descriptor, ignoring hub [ 1631.450953][T26990] hub 5-1:1.0: probe with driver hub failed with error -5 [ 1631.458482][T26990] cdc_wdm 5-1:1.0: skipping garbage [ 1631.464256][T26990] cdc_wdm 5-1:1.0: skipping garbage [ 1631.490003][T26990] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1631.495982][T26990] cdc_wdm 5-1:1.0: Unknown control protocol [ 1631.665736][T32359] bridge0: port 2(bridge_slave_1) entered blocking state [ 1631.675897][T32359] bridge0: port 2(bridge_slave_1) entered disabled state [ 1631.685312][T32359] bridge_slave_1: entered allmulticast mode [ 1631.692295][T32359] bridge_slave_1: entered promiscuous mode [ 1631.749102][T20844] usb 5-1: USB disconnect, device number 77 [ 1631.911672][T32359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1631.961334][T32359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1632.126321][T20844] usb 5-1: new low-speed USB device number 78 using dummy_hcd [ 1632.163956][T32359] team0: Port device team_slave_0 added [ 1632.168803][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 1632.168824][ T29] audit: type=1326 audit(1727924249.693:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32452 comm="syz.3.5039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2b37dff9 code=0x7ffc0000 [ 1632.182566][T32359] team0: Port device team_slave_1 added [ 1632.313803][T20844] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1632.315780][ T29] audit: type=1326 audit(1727924249.693:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32452 comm="syz.3.5039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2b37dff9 code=0x7ffc0000 [ 1632.348677][T20844] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1632.395638][T32359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1632.403214][T20844] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 1632.403268][T20844] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1632.445062][ T29] audit: type=1326 audit(1727924249.693:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32452 comm="syz.3.5039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7c2b37dff9 code=0x7ffc0000 [ 1632.485859][T20844] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1632.498819][T32359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1632.539771][T21433] Bluetooth: hci4: command tx timeout [ 1632.558133][T32446] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1632.572914][ T29] audit: type=1326 audit(1727924249.693:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32452 comm="syz.3.5039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2b37dff9 code=0x7ffc0000 [ 1632.610034][T20844] hub 5-1:1.0: bad descriptor, ignoring hub [ 1632.648959][T32359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1632.654430][T20844] hub 5-1:1.0: probe with driver hub failed with error -5 [ 1632.681162][ T29] audit: type=1326 audit(1727924249.693:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32452 comm="syz.3.5039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2b37dff9 code=0x7ffc0000 [ 1632.681287][T20844] cdc_wdm 5-1:1.0: skipping garbage [ 1632.740254][T32359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1632.768721][T32359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1632.776440][T20844] cdc_wdm 5-1:1.0: skipping garbage [ 1632.806755][ T29] audit: type=1326 audit(1727924249.733:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32452 comm="syz.3.5039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7c2b37dff9 code=0x7ffc0000 [ 1632.851676][T32359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1632.870425][T20844] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1632.878802][ T29] audit: type=1326 audit(1727924249.733:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32452 comm="syz.3.5039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2b37dff9 code=0x7ffc0000 [ 1632.894503][T11802] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1632.913968][T11802] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1632.923237][T11802] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1632.926072][T20844] cdc_wdm 5-1:1.0: Unknown control protocol [ 1632.934453][T11802] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1632.945234][T11802] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1632.960624][T11802] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1633.028587][ T29] audit: type=1326 audit(1727924249.733:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32452 comm="syz.3.5039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7c2b37dff9 code=0x7ffc0000 [ 1633.121065][T20844] usb 5-1: USB disconnect, device number 78 [ 1633.193789][ T29] audit: type=1326 audit(1727924249.733:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32452 comm="syz.3.5039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2b37dff9 code=0x7ffc0000 [ 1633.344468][ T29] audit: type=1326 audit(1727924249.733:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32452 comm="syz.3.5039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f7c2b37dff9 code=0x7ffc0000 [ 1633.430398][T32359] hsr_slave_0: entered promiscuous mode [ 1633.502664][T32359] hsr_slave_1: entered promiscuous mode [ 1633.517770][T32359] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1633.533788][T32486] loop8: detected capacity change from 0 to 7 [ 1633.540934][T32359] Cannot create hsr debugfs directory [ 1633.541515][T32487] usb usb1: usbfs: process 32487 (syz.4.5045) did not claim interface 0 before use [ 1633.559773][T32486] Dev loop8: unable to read RDB block 7 [ 1633.583969][T32486] loop8: unable to read partition table [ 1633.618593][T32486] loop8: partition table beyond EOD, truncated [ 1633.654632][T32486] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 1633.654632][T32486] ) failed (rc=-5) [ 1633.822048][ T1069] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1633.849093][ T46] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1633.989122][ T1069] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1634.019028][ T46] usb 4-1: Using ep0 maxpacket: 32 [ 1634.027971][ T46] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1634.061913][T32496] binder: 32495:32496 ioctl 4018620d 0 returned -22 [ 1634.069161][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1634.119114][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1634.136634][ T46] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1634.143398][ T1069] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1634.166415][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1634.299769][ T46] usb 4-1: config 0 descriptor?? [ 1634.321039][T32512] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5052'. [ 1634.327512][T32488] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1634.346169][ T46] hub 4-1:0.0: USB hub found [ 1634.420628][ T1069] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1634.556886][ T46] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1634.619054][T11802] Bluetooth: hci4: command tx timeout [ 1634.629377][ T5329] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1634.714231][T32480] chnl_net:caif_netlink_parms(): no params data found [ 1634.820586][ T5329] usb 2-1: config 0 has an invalid interface number: 250 but max is 0 [ 1634.841580][ T5329] usb 2-1: config 0 has no interface number 0 [ 1634.847913][ T5329] usb 2-1: New USB device found, idVendor=0cf3, idProduct=1002, bcdDevice=4f.2c [ 1634.873634][ T5329] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1634.900845][ T5329] usb 2-1: config 0 descriptor?? [ 1634.962435][ T46] hid-generic 0003:046D:C314.0067: item fetching failed at offset 0/1 [ 1634.993237][ T46] hid-generic 0003:046D:C314.0067: probe with driver hid-generic failed with error -22 [ 1635.021836][T11802] Bluetooth: hci3: command tx timeout [ 1635.101833][ T5329] usb 2-1: reset high-speed USB device number 78 using dummy_hcd [ 1635.172997][T32486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1635.191373][T32486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1635.319236][ T1069] bridge_slave_1: left promiscuous mode [ 1635.325030][ T1069] bridge0: port 2(bridge_slave_1) entered disabled state [ 1635.335607][ T1069] bridge_slave_0: left allmulticast mode [ 1635.349156][ T46] usb 4-1: USB disconnect, device number 95 [ 1635.355266][ T1069] bridge_slave_0: left promiscuous mode [ 1635.364183][ T1069] bridge0: port 1(bridge_slave_0) entered disabled state [ 1635.666391][T32539] netlink: 'syz.4.5057': attribute type 1 has an invalid length. [ 1635.674950][T32539] netlink: 157116 bytes leftover after parsing attributes in process `syz.4.5057'. [ 1635.795231][ T1069] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 1635.821097][ T5329] usb 2-1: device descriptor read/64, error -71 [ 1635.906505][ T1069] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 1636.089033][ T5235] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1636.109425][ T5329] usb 2-1: reset high-speed USB device number 78 using dummy_hcd [ 1636.278181][ T5235] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x92, changing to 0x82 [ 1636.338831][ T5235] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1636.363258][ T5235] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1636.395432][ T5235] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1636.460044][ T5235] usb 5-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f [ 1636.538864][ T5235] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1636.553533][ T1069] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1636.588815][ T5235] usb 5-1: Product: syz [ 1636.593255][ T5235] usb 5-1: Manufacturer: syz [ 1636.598292][ T5235] usb 5-1: SerialNumber: syz [ 1636.619284][ T5235] usb 5-1: config 0 descriptor?? [ 1636.634186][T32551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1636.683921][ T1069] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1636.706324][ T5235] redrat3 5-1:0.0: Couldn't find all endpoints [ 1636.722915][T32551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1636.750058][ T1069] bond0 (unregistering): Released all slaves [ 1636.794351][ T1069] bond1 (unregistering): Released all slaves [ 1636.840391][ T1069] bond2 (unregistering): Released all slaves [ 1637.049308][T32480] bridge0: port 1(bridge_slave_0) entered blocking state [ 1637.057718][T32480] bridge0: port 1(bridge_slave_0) entered disabled state [ 1637.089643][T32480] bridge_slave_0: entered allmulticast mode [ 1637.105847][T11802] Bluetooth: hci3: command tx timeout [ 1637.135729][T32480] bridge_slave_0: entered promiscuous mode [ 1637.232134][T32539] pim6reg: entered allmulticast mode [ 1637.243245][T32540] pim6reg: left allmulticast mode [ 1637.398389][T20844] usb 2-1: USB disconnect, device number 78 [ 1637.456314][T32480] bridge0: port 2(bridge_slave_1) entered blocking state [ 1637.464716][T32480] bridge0: port 2(bridge_slave_1) entered disabled state [ 1637.479969][T32480] bridge_slave_1: entered allmulticast mode [ 1637.520218][ T25] usb 5-1: USB disconnect, device number 79 [ 1637.536475][T32480] bridge_slave_1: entered promiscuous mode [ 1637.904066][T32480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1638.052500][ T1069] hsr_slave_0: left promiscuous mode [ 1638.077269][ T1069] hsr_slave_1: left promiscuous mode [ 1638.104107][ T1069] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1638.159211][ T1069] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1638.239455][ T1069] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1638.274823][ T1069] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1638.347937][ T1069] veth1_macvtap: left promiscuous mode [ 1638.365570][ T1069] veth0_macvtap: left promiscuous mode [ 1638.377976][ T1069] veth1_vlan: left promiscuous mode [ 1639.210741][T11802] Bluetooth: hci3: command tx timeout [ 1639.245623][ T1069] team0 (unregistering): Port device team_slave_1 removed [ 1639.307597][ T1069] team0 (unregistering): Port device team_slave_0 removed [ 1639.976520][T32480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1640.003760][T32564] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5066'. [ 1640.035937][T32566] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5065'. [ 1640.060426][T32566] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1640.209425][T32480] team0: Port device team_slave_0 added [ 1640.338434][T32480] team0: Port device team_slave_1 added [ 1640.426864][T32359] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1640.474297][T32359] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1640.546218][T32359] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1640.654918][T32480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1640.666618][T32480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1640.717228][T32480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1640.739667][T32359] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1640.786178][T32582] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5071'. [ 1640.831946][T32480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1640.872336][T32480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1640.915038][T32480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1641.028976][ T1661] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1641.079340][T32480] hsr_slave_0: entered promiscuous mode [ 1641.095729][T32480] hsr_slave_1: entered promiscuous mode [ 1641.106837][T32480] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1641.116920][T32480] Cannot create hsr debugfs directory [ 1641.212816][ T1661] usb 4-1: Using ep0 maxpacket: 8 [ 1641.222244][T32595] xt_hashlimit: overflow, try lower: 3/0 [ 1641.238513][ T1661] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1641.259030][T11802] Bluetooth: hci3: command tx timeout [ 1641.277293][ T1661] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1641.291268][ T1661] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1641.326141][ T1661] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1641.347964][ T1661] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1641.371052][ T1661] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1641.528242][T32359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1641.619551][ T1661] usb 4-1: GET_CAPABILITIES returned 0 [ 1641.625148][ T1661] usbtmc 4-1:16.0: can't read capabilities [ 1641.695472][T32359] 8021q: adding VLAN 0 to HW filter on device team0 [ 1641.781669][T28844] bridge0: port 1(bridge_slave_0) entered blocking state [ 1641.788880][T28844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1641.912353][ T1069] bridge0: port 2(bridge_slave_1) entered blocking state [ 1641.919677][ T1069] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1642.067547][T32359] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1642.303590][T32359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1642.422773][ T1661] usb 4-1: USB disconnect, device number 96 [ 1642.435360][T32480] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1642.454440][T32480] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1642.465668][T32480] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1642.492092][T32359] veth0_vlan: entered promiscuous mode [ 1642.500907][T32480] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1642.546822][T32359] veth1_vlan: entered promiscuous mode [ 1642.608996][ T25] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1642.625636][T32359] veth0_macvtap: entered promiscuous mode [ 1642.651068][T32359] veth1_macvtap: entered promiscuous mode [ 1642.737926][T32359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1642.764163][T32359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1642.774664][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 1642.789109][T32359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1642.816203][ T25] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 1642.828802][T32359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1642.848774][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1642.856938][T32359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1642.879127][ T25] usb 2-1: Product: syz [ 1642.886287][ T25] usb 2-1: Manufacturer: syz [ 1642.891444][ T25] usb 2-1: SerialNumber: syz [ 1642.894195][T32359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1642.908543][ T25] usb 2-1: config 0 descriptor?? [ 1642.911053][T32359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1642.930158][ T25] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 1642.938218][T32359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1642.956898][ T25] usb 2-1: Detected FT232B [ 1642.960974][T32359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1642.982211][T32359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1643.084650][T32359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1643.099302][T32359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1643.128447][T32359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1643.139165][ T5329] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1643.164794][T32359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1643.209914][T32359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1643.271532][T32359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1643.282436][T32359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1643.294369][T32359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1643.312904][ T5329] usb 4-1: Using ep0 maxpacket: 16 [ 1643.318752][ T25] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1643.335474][ T5329] usb 4-1: config 1 interface 0 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 22 [ 1643.336603][ T25] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1643.361944][T32359] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1643.371338][ T25] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1643.372280][ T5329] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1643.394712][T32359] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1643.396179][ T25] usb 2-1: USB disconnect, device number 80 [ 1643.405815][T32359] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1643.429131][ T25] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1643.436651][T32359] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1643.444567][ T25] ftdi_sio 2-1:0.0: device disconnected [ 1643.453539][ T5329] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1643.470296][ T5329] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1643.478580][ T5329] usb 4-1: SerialNumber: syz [ 1643.597588][T32480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1643.723292][T32480] 8021q: adding VLAN 0 to HW filter on device team0 [ 1643.761449][ T5329] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 1643.787891][T27245] bridge0: port 1(bridge_slave_0) entered blocking state [ 1643.795114][T27245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1643.804356][ T5329] cdc_acm 4-1:1.0: This needs exactly 3 endpoints [ 1643.815118][ T5329] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -22 [ 1643.849842][T28844] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1643.868089][ T5329] usb 4-1: USB disconnect, device number 97 [ 1643.894655][T28844] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1643.925724][ T2513] bridge0: port 2(bridge_slave_1) entered blocking state [ 1643.932955][ T2513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1644.007570][T28844] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1644.015727][T28844] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1644.093800][T32480] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1644.236445][T32480] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1644.712281][T32681] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5087'. [ 1644.820250][T32678] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5087'. [ 1644.882472][T32480] veth0_vlan: entered promiscuous mode [ 1645.021167][T32480] veth1_vlan: entered promiscuous mode [ 1645.163219][T32698] FAULT_INJECTION: forcing a failure. [ 1645.163219][T32698] name failslab, interval 1, probability 0, space 0, times 0 [ 1645.189892][T32698] CPU: 1 UID: 0 PID: 32698 Comm: syz.4.5088 Not tainted 6.12.0-rc1-syzkaller-00042-gf23aa4c0761a #0 [ 1645.197407][T32480] veth0_macvtap: entered promiscuous mode [ 1645.200695][T32698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1645.200714][T32698] Call Trace: [ 1645.200724][T32698] [ 1645.200735][T32698] dump_stack_lvl+0x241/0x360 [ 1645.200768][T32698] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1645.232591][T32698] ? __pfx__printk+0x10/0x10 [ 1645.237198][T32698] ? __kmalloc_noprof+0xb0/0x400 [ 1645.242155][T32698] ? __pfx___might_resched+0x10/0x10 [ 1645.247477][T32698] should_fail_ex+0x3b0/0x4e0 [ 1645.252163][T32698] ? security_sk_alloc+0x53/0x360 [ 1645.257192][T32698] should_failslab+0xac/0x100 [ 1645.261885][T32698] ? security_sk_alloc+0x53/0x360 [ 1645.266911][T32698] __kmalloc_noprof+0xd8/0x400 [ 1645.271704][T32698] ? sk_prot_alloc+0x58/0x210 [ 1645.276389][T32698] security_sk_alloc+0x53/0x360 [ 1645.281250][T32698] sk_prot_alloc+0xfa/0x210 [ 1645.285757][T32698] sk_alloc+0x38/0x370 [ 1645.289853][T32698] inet_create+0x652/0xe70 [ 1645.294301][T32698] ? inet_create+0x9c/0xe70 [ 1645.298813][T32698] ? __sock_create+0x337/0x920 [ 1645.303609][T32698] __sock_create+0x490/0x920 [ 1645.308210][T32698] smc_create_clcsk+0x39/0x1b0 [ 1645.312976][T32698] __smc_create+0x174/0x1f0 [ 1645.317496][T32698] ? __sock_create+0x337/0x920 [ 1645.322373][T32698] __sock_create+0x490/0x920 [ 1645.326981][T32698] __sys_socket+0x150/0x3c0 [ 1645.331508][T32698] ? __pfx___sys_socket+0x10/0x10 [ 1645.336549][T32698] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1645.342983][T32698] ? do_syscall_64+0x100/0x230 [ 1645.347757][T32698] __x64_sys_socket+0x7a/0x90 [ 1645.352447][T32698] do_syscall_64+0xf3/0x230 [ 1645.356957][T32698] ? clear_bhb_loop+0x35/0x90 [ 1645.361671][T32698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1645.367612][T32698] RIP: 0033:0x7f5ceed7dff9 [ 1645.372049][T32698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1645.391686][T32698] RSP: 002b:00007f5cefbbe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1645.400106][T32698] RAX: ffffffffffffffda RBX: 00007f5ceef36058 RCX: 00007f5ceed7dff9 [ 1645.408081][T32698] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000002b [ 1645.416052][T32698] RBP: 00007f5cefbbe090 R08: 0000000000000000 R09: 0000000000000000 [ 1645.424021][T32698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1645.431992][T32698] R13: 0000000000000000 R14: 00007f5ceef36058 R15: 00007f5cef05fa28 [ 1645.440003][T32698] [ 1645.527384][T32480] veth1_macvtap: entered promiscuous mode [ 1645.589627][T32702] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5090'. [ 1645.783743][T32480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1645.829205][T32480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1645.839404][T32480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1645.850115][T32480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1645.893223][T32480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1645.942890][T32480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1645.955708][T32480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1645.972987][T32480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1645.991007][T32480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1646.006780][T32480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1646.018878][T32480] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1646.067544][T32480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1646.088195][T32480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1646.098537][T32480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1646.109604][T32480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1646.119538][T32480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1646.130019][T32480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1646.140165][T32480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1646.150662][T32480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1646.160587][T32480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1646.171113][T32480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1646.182515][T32480] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1646.190578][T26990] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1646.230604][T32714] pimreg3: entered allmulticast mode [ 1646.247937][T32480] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1646.256811][T32480] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1646.265910][T32480] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1646.274815][T32480] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1646.348909][ T46] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1646.399276][T27245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1646.432508][T27245] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1646.442951][T26990] usb 2-1: Using ep0 maxpacket: 16 [ 1646.461542][T26990] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 1646.470919][T26990] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1646.486096][T26990] usb 2-1: Product: syz [ 1646.506207][T27655] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1646.506601][T26990] usb 2-1: Manufacturer: syz [ 1646.516251][T27655] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1646.532794][T26990] usb 2-1: SerialNumber: syz [ 1646.535425][ T46] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 1646.553849][T26990] usb 2-1: config 0 descriptor?? [ 1646.560000][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14129, setting to 64 [ 1646.573385][T26990] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 1646.589965][T26990] usb 2-1: Detected FT232B [ 1646.597661][ T46] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1646.620574][ T46] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1646.653941][ T46] usb 5-1: Manufacturer: syz [ 1646.664750][ T46] usb 5-1: config 0 descriptor?? [ 1646.719138][ T25] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1646.759563][ T46] rc_core: IR keymap rc-hauppauge not found [ 1646.765989][ T46] Registered IR keymap rc-empty [ 1646.778864][ T46] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1646.801182][ T46] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input96 [ 1646.879554][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 1646.892099][T32716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1646.898822][T26990] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1646.911877][T26990] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1646.930243][T26990] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1646.939508][ T25] usb 4-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=b2.bf [ 1646.955354][T26990] usb 2-1: USB disconnect, device number 81 [ 1646.962857][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1646.983857][T32716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1647.007492][T26990] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1647.022438][ T25] usb 4-1: Product: syz [ 1647.026713][ T25] usb 4-1: SerialNumber: syz [ 1647.041094][T26990] ftdi_sio 2-1:0.0: device disconnected [ 1647.069445][ T25] usb 4-1: config 0 descriptor?? [ 1647.077043][ T5329] usb 5-1: USB disconnect, device number 80 [ 1647.283129][T20844] usb 4-1: USB disconnect, device number 98 [ 1647.675194][ T300] usb usb1: usbfs: process 300 (syz.2.5098) did not claim interface 0 before use [ 1647.715574][ T300] sctp: [Deprecated]: syz.2.5098 (pid 300) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1647.715574][ T300] Use struct sctp_sack_info instead [ 1647.945069][ T306] bridge_slave_0: left allmulticast mode [ 1647.950988][ T306] bridge_slave_0: left promiscuous mode [ 1647.956911][ T306] bridge0: port 1(bridge_slave_0) entered disabled state [ 1648.023540][ T306] bridge_slave_1: left allmulticast mode [ 1648.033867][ T306] bridge_slave_1: left promiscuous mode [ 1648.050010][ T306] bridge0: port 2(bridge_slave_1) entered disabled state [ 1648.088866][ T306] bond0: (slave bond_slave_0): Releasing backup interface [ 1648.114802][ T306] bond0: (slave bond_slave_1): Releasing backup interface [ 1648.175601][ T306] team0: Port device team_slave_0 removed [ 1648.188129][ T306] team0: Port device team_slave_1 removed [ 1648.195366][ T306] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1648.203993][ T306] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1648.216152][ T306] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1648.224539][ T306] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1648.267902][ T309] team0: Port device wg2 added [ 1648.378169][ T320] syz.3.5108(320): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 1648.388853][ T46] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1648.416038][ T320] netlink: 'syz.3.5108': attribute type 15 has an invalid length. [ 1648.548732][ T46] usb 2-1: Using ep0 maxpacket: 32 [ 1648.555473][ T46] usb 2-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xA7, changing to 0x87 [ 1648.567674][ T46] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 196, changing to 7 [ 1648.579325][ T46] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 42242, setting to 1024 [ 1648.593871][ T46] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1648.603552][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1648.617646][ T46] hub 2-1:4.0: bad descriptor, ignoring hub [ 1648.627582][ T46] hub 2-1:4.0: probe with driver hub failed with error -5 [ 1648.637869][ T46] usbhid 2-1:4.0: couldn't find an input interrupt endpoint [ 1648.718845][ T6506] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1648.869143][ T6506] usb 4-1: Using ep0 maxpacket: 16 [ 1648.882709][ T6506] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 1648.899291][ T6506] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1648.907526][ T6506] usb 4-1: Product: syz [ 1648.912821][ T6506] usb 4-1: Manufacturer: syz [ 1648.917791][ T6506] usb 4-1: SerialNumber: syz [ 1648.927852][ T6506] usb 4-1: config 0 descriptor?? [ 1648.940064][ T6506] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 1648.943948][ T5329] usb 2-1: USB disconnect, device number 82 [ 1648.948776][ T6506] usb 4-1: Detected FT232B [ 1649.148850][T26990] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1649.186783][ T6506] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1649.203827][ T6506] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1649.212850][ T6506] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1649.228490][ T6506] usb 4-1: USB disconnect, device number 99 [ 1649.247637][ T6506] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1649.267776][ T6506] ftdi_sio 4-1:0.0: device disconnected [ 1649.325146][T11802] Bluetooth: hci4: Malformed Event: 0x02 [ 1649.337302][T26990] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 1649.346569][T26990] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14129, setting to 64 [ 1649.365045][T26990] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1649.375580][T26990] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1649.384359][T26990] usb 5-1: Manufacturer: syz [ 1649.392176][T26990] usb 5-1: config 0 descriptor?? [ 1649.464525][ T333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1649.475863][T26990] rc_core: IR keymap rc-hauppauge not found [ 1649.482966][T26990] Registered IR keymap rc-empty [ 1649.490292][T26990] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1649.503161][ T333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1649.516198][T26990] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input97 [ 1649.604608][ T326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1649.629257][ T326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1649.646886][T26990] usb 5-1: USB disconnect, device number 81 [ 1649.709125][ T5329] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1649.837053][ T344] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5116'. [ 1649.848964][ T5329] usb 3-1: device descriptor read/64, error -71 [ 1650.029071][ T25] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1650.089022][ T5329] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1650.188903][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 1650.202772][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1650.227545][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1650.239332][ T5329] usb 3-1: device descriptor read/64, error -71 [ 1650.264949][ T25] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1650.311124][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1650.360309][ T5329] usb usb3-port1: attempt power cycle [ 1650.379188][ T25] usb 4-1: config 0 descriptor?? [ 1650.436770][ T25] hub 4-1:0.0: USB hub found [ 1650.636246][ T25] hub 4-1:0.0: 1 port detected [ 1650.718817][ T5329] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1650.742070][ T5329] usb 3-1: device descriptor read/8, error -71 [ 1650.984170][ T5329] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1651.019574][ T5329] usb 3-1: device descriptor read/8, error -71 [ 1651.139046][ T5329] usb usb3-port1: unable to enumerate USB device [ 1651.241256][ T25] hub 4-1:0.0: activate --> -90 [ 1651.300391][ T372] loop7: detected capacity change from 0 to 16384 [ 1651.465349][ T384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1651.509486][ T378] Invalid logical block size (1) [ 1651.514881][ T384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1651.784506][ T25] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 1651.791556][ T6506] usb 4-1: USB disconnect, device number 100 [ 1651.978798][T11802] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1651.987564][T11802] Bluetooth: hci4: Injecting HCI hardware error event [ 1651.996599][T21433] Bluetooth: hci4: hardware error 0x00 [ 1652.342287][ T397] Invalid option length (1046829) for dns_resolver key [ 1652.515973][ T2512] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1652.718091][ T2512] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1652.799881][ T411] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5144'. [ 1652.951911][ T2512] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1652.993035][T23059] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1653.016816][T23059] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1653.029290][T23059] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1653.068855][T23059] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1653.076588][T23059] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1653.084025][T23059] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1653.231812][ T2512] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1653.339711][ T8] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1653.520963][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 1653.537039][ T8] usb 5-1: config 0 has no interfaces? [ 1653.557376][ T8] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1653.577601][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1653.587248][ T8] usb 5-1: Product: syz [ 1653.591901][ T8] usb 5-1: Manufacturer: syz [ 1653.606421][ T8] usb 5-1: SerialNumber: syz [ 1653.622602][ T8] usb 5-1: config 0 descriptor?? [ 1653.715566][ T421] chnl_net:caif_netlink_parms(): no params data found [ 1654.159277][T21433] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1654.473331][ T456] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] PREEMPT SMP KASAN PTI [ 1654.486085][ T456] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 1654.494514][ T456] CPU: 1 UID: 0 PID: 456 Comm: syz.1.5157 Not tainted 6.12.0-rc1-syzkaller-00042-gf23aa4c0761a #0 [ 1654.505099][ T456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1654.515156][ T456] RIP: 0010:follow_pfnmap_start+0x1a7/0xfd0 [ 1654.521082][ T456] Code: 8d 9f 80 00 00 00 48 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 27 0d 1a 00 48 8b 1b 48 83 c3 58 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 0a 0d 1a 00 4c 8b 23 48 c7 c0 3c [ 1654.540729][ T456] RSP: 0018:ffffc9000463f100 EFLAGS: 00010202 [ 1654.546825][ T456] RAX: 000000000000000b RBX: 0000000000000058 RCX: 0000000000040000 [ 1654.554816][ T456] RDX: ffffc90012c2e000 RSI: 0000000000002028 RDI: ffffc9000463f1e0 [ 1654.562881][ T456] RBP: ffffc9000463f290 R08: ffffc9000463f311 R09: 0000000000000000 [ 1654.570865][ T456] R10: ffffc9000463f2f0 R11: fffff520008c7e63 R12: dffffc0000000000 [ 1654.578857][ T456] R13: 1ffff1100fda74bc R14: ffffc9000463f2e0 R15: ffff88807ed3a5d0 [ 1654.586871][ T456] FS: 00007fd43c2f76c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1654.595843][ T456] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1654.602455][ T456] CR2: 00007fd43b561160 CR3: 0000000021bf6000 CR4: 00000000003526f0 [ 1654.610445][ T456] Call Trace: [ 1654.613730][ T456] [ 1654.616661][ T456] ? __die_body+0x5f/0xb0 [ 1654.621004][ T456] ? die_addr+0xb0/0xe0 [ 1654.625166][ T456] ? exc_general_protection+0x3dd/0x5d0 [ 1654.630725][ T456] ? asm_exc_general_protection+0x26/0x30 [ 1654.636499][ T456] ? follow_pfnmap_start+0x1a7/0xfd0 [ 1654.641828][ T456] ? __pfx_follow_pfnmap_start+0x10/0x10 [ 1654.647478][ T456] ? __pfx_validate_chain+0x10/0x10 [ 1654.652685][ T456] ? __pfx_validate_chain+0x10/0x10 [ 1654.657920][ T456] get_pat_info+0x182/0x3f0 [ 1654.662429][ T456] ? __pfx_get_pat_info+0x10/0x10 [ 1654.667460][ T456] untrack_pfn+0x327/0x640 [ 1654.671886][ T456] ? __pfx_untrack_pfn+0x10/0x10 [ 1654.676832][ T456] ? unmap_vmas+0x1f1/0x5f0 [ 1654.681348][ T456] ? __pfx_lock_release+0x10/0x10 [ 1654.686395][ T456] unmap_single_vma+0x1f6/0x2b0 [ 1654.691277][ T456] unmap_vmas+0x3cc/0x5f0 [ 1654.695627][ T456] ? __pfx_unmap_vmas+0x10/0x10 [ 1654.700494][ T456] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1654.706498][ T456] ? tlb_gather_mmu+0x24e/0x310 [ 1654.711362][ T456] unmap_region+0x214/0x380 [ 1654.715967][ T456] ? __pfx_unmap_region+0x10/0x10 [ 1654.721035][ T456] ? __mas_set_range+0x133/0x3c0 [ 1654.725988][ T456] ? fput+0x1a8/0x230 [ 1654.729988][ T456] mmap_region+0x22f9/0x2990 [ 1654.734607][ T456] ? __pfx_mmap_region+0x10/0x10 [ 1654.739560][ T456] ? __asan_memset+0x23/0x50 [ 1654.744154][ T456] ? process_measurement+0x3ca/0x1fb0 [ 1654.749541][ T456] ? __pfx_lock_acquire+0x10/0x10 [ 1654.754586][ T456] ? mm_get_unmapped_area_vmflags+0xb9/0xf0 [ 1654.760787][ T456] ? bpf_lsm_mmap_addr+0x9/0x10 [ 1654.765641][ T456] ? security_mmap_addr+0x6f/0x250 [ 1654.770766][ T456] ? __get_unmapped_area+0x2ed/0x350 [ 1654.776064][ T456] do_mmap+0x8f0/0x1000 [ 1654.780234][ T456] ? __pfx_do_mmap+0x10/0x10 [ 1654.784833][ T456] ? __pfx_down_write_killable+0x10/0x10 [ 1654.790470][ T456] ? common_file_perm+0x1a6/0x210 [ 1654.795506][ T456] vm_mmap_pgoff+0x1dd/0x3d0 [ 1654.800109][ T456] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1654.805234][ T456] ? __fget_files+0x29/0x470 [ 1654.809834][ T456] ? __fget_files+0x3f3/0x470 [ 1654.814517][ T456] ? __fget_files+0x29/0x470 [ 1654.819124][ T456] ksys_mmap_pgoff+0x4eb/0x720 [ 1654.823998][ T456] ? __x64_sys_mmap+0x7f/0x140 [ 1654.828767][ T456] do_syscall_64+0xf3/0x230 [ 1654.833277][ T456] ? clear_bhb_loop+0x35/0x90 [ 1654.837960][ T456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1654.843869][ T456] RIP: 0033:0x7fd43b57dff9 [ 1654.848330][ T456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1654.868028][ T456] RSP: 002b:00007fd43c2f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1654.876449][ T456] RAX: ffffffffffffffda RBX: 00007fd43b735f80 RCX: 00007fd43b57dff9 [ 1654.884448][ T456] RDX: 000000000200000f RSI: 0000000000004000 RDI: 0000000020ff9000 [ 1654.892426][ T456] RBP: 00007fd43b5f0296 R08: 0000000000000005 R09: 0000000000000000 [ 1654.900406][ T456] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000 [ 1654.908381][ T456] R13: 0000000000000000 R14: 00007fd43b735f80 R15: 00007fd43b85fa28 [ 1654.916362][ T456] [ 1654.919383][ T456] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1654.924424][ T456] ---[ end trace 0000000000000000 ]--- [ 1654.958931][ T456] RIP: 0010:follow_pfnmap_start+0x1a7/0xfd0 [ 1655.011423][ T456] Code: 8d 9f 80 00 00 00 48 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 27 0d 1a 00 48 8b 1b 48 83 c3 58 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 0a 0d 1a 00 4c 8b 23 48 c7 c0 3c [ 1655.058653][ T456] RSP: 0018:ffffc9000463f100 EFLAGS: 00010202 [ 1655.064956][ T456] RAX: 000000000000000b RBX: 0000000000000058 RCX: 0000000000040000 [ 1655.109065][ T456] RDX: ffffc90012c2e000 RSI: 0000000000002028 RDI: ffffc9000463f1e0 [ 1655.117135][ T456] RBP: ffffc9000463f290 R08: ffffc9000463f311 R09: 0000000000000000 [ 1655.141658][ T456] R10: ffffc9000463f2f0 R11: fffff520008c7e63 R12: dffffc0000000000 [ 1655.177477][ T456] R13: 1ffff1100fda74bc R14: ffffc9000463f2e0 R15: ffff88807ed3a5d0 [ 1655.178857][T21433] Bluetooth: hci2: command tx timeout [ 1655.198680][ T456] FS: 00007fd43c2f76c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1655.219387][ T456] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1655.244887][ T456] CR2: 00007f5cefb9cf98 CR3: 0000000021bf6000 CR4: 00000000003526f0 [ 1655.268718][ T456] Kernel panic - not syncing: Fatal exception [ 1655.275271][ T456] Kernel Offset: disabled [ 1655.279606][ T456] Rebooting in 86400 seconds..