last executing test programs: 8.504355574s ago: executing program 4 (id=3191): poll(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) fgetxattr(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=""/2, 0x2) socket$inet6(0xa, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) open(&(0x7f0000000080)='./bus\x00', 0x143462, 0x0) mount(&(0x7f0000000180)=@filename='\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 7.335696235s ago: executing program 4 (id=3196): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, 0x0, 0x0) 6.094397925s ago: executing program 4 (id=3204): syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920000000109021b1901000000d40904"], 0x0) 5.367282859s ago: executing program 2 (id=3210): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000080)=@udp}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000480)={r0, &(0x7f0000001480), 0x0}, 0x20) 5.1356309s ago: executing program 2 (id=3213): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x4030582b, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000080)={{{@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8001}, {}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x4}}, 0xe8) sendmmsg(r6, &(0x7f0000000180), 0x400000000000077, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x4}, 0x5) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}}, 0x0) 4.070563669s ago: executing program 2 (id=3216): socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x10000, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101842, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r3, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) readv(r3, &(0x7f0000000740)=[{&(0x7f0000000400)=""/47, 0x2000042f}], 0x1) 2.992888724s ago: executing program 4 (id=3219): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010400000000000000060000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000003c0)="fef58551a1896339dc3f0adf33c9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.81820846s ago: executing program 2 (id=3221): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) 2.651773512s ago: executing program 4 (id=3223): mknod(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) tee(r0, 0xffffffffffffffff, 0x3, 0x0) 2.54036564s ago: executing program 1 (id=3224): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) chmod(&(0x7f0000000080)='./file0\x00', 0x0) 2.50273925s ago: executing program 3 (id=3225): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0x100000001, 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@abs, 0x6e) creat(&(0x7f0000000000)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) 2.443662244s ago: executing program 4 (id=3226): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x0, 0x8, 0xb}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000e400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0xa68d7c519e842ff1}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) 2.405408255s ago: executing program 1 (id=3227): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000150a0102000000b9cbe8be4f3a"], 0x14}}, 0x0) 2.326406291s ago: executing program 1 (id=3228): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f0000000280)='p', 0x1, 0xc000, 0x0, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000002c0)={0x9}, 0x20) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x0, 0x0, 0x0) 2.267897889s ago: executing program 1 (id=3229): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x87}, 0x48) 2.131786862s ago: executing program 1 (id=3230): syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920000000109021b1901000000d40904"], 0x0) 2.00660529s ago: executing program 0 (id=3232): read$msr(0xffffffffffffffff, &(0x7f0000001340)=""/102378, 0x7706c522012798af) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x1, 0x0, &(0x7f0000000100)=""/47, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000500)=""/69, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000016c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) dup(0xffffffffffffffff) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af00, &(0x7f00000000c0)) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000180)=r1) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0x1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000380)={0x0, r1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x17, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000000a0000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.883641368s ago: executing program 0 (id=3233): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='./bus/file0\x00', 0x0) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file1\x00') r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000180)=""/105, 0x69) 1.817832462s ago: executing program 0 (id=3234): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r2, 0xc0984124, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) 1.577845343s ago: executing program 3 (id=3235): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) unshare(0x60400) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)={@map=r1, r2, 0x6, 0x7, 0x8, @prog_id}, 0x20) 1.427784352s ago: executing program 3 (id=3236): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) read$alg(r1, &(0x7f0000001e00)=""/4108, 0x100c) sendmsg$alg(r1, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000c00)="b50c860006b5926227dda76a3d629aa2", 0x10}], 0x1}, 0x0) 1.304831388s ago: executing program 3 (id=3237): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r0) socket$packet(0x11, 0x3, 0x300) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) socket$can_raw(0x1d, 0x3, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@map, 0xffffffffffffffff, 0x0, 0x0, 0x4, @prog_fd}, 0x20) 1.200059762s ago: executing program 3 (id=3238): socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setrlimit(0x9, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000300)={'#! ', './file0', [{0x20, '\xefL\x9d'}, {0x20, '\xfd\xe93_o\x89\xa8|\xcd\x9a\x1a\xcf\xfc\v\xdc\xfc\xc7.c.U\xf1\xaa\xbd!D\xcc\xec\xe1\x1d\a\xa6\x8f\xa1\x1b\x1d\xd3\fwos=\xa4\xd2IE*\xf3\b%S\xae\x17C\xb3\xbax2\x06\x00\xee\x11\xb1\xff\xff\x87\xa05\xaf\x96\xcaH\x8a\xb1\xe1\xb3\x15\x0f\x8eCk\xd9/\xc2\xf3E\xc3\x01\x02\xbc\"\x85\xac\xec\x10\x18\xba\x89\x9e\x85<,\xbe0\xa0\x1a\xfcAPB\xb5\x03]\aX\x8c\x06{\x92[VEc\xf8#\xddGVm\xae\x11P\x04z\xb2\xfd\xe7\xe9\x90\xf79U&^\x0f\xe2\x7f\xecT7|w{\xa3m\xcbI\xbc\xd9=\x98I|\x8c\xf1\xae\xfe\x82\x1a0\x06\xfa\xefQ[S\xa6\xb6\x8eei\x9e}\xfe\x83\x98\xe5\xa9&\xab\x05l[\xdb\x8e\xcd\x99\xa6A\x1cx\xefw\xf5\xa0\xdd\x1e\xac59\b\x94\x88`X6^\xf4\xcc\x91\xb2\xca\xe8\n\x05\xeb\x05\xc0\xccG\x13'}]}, 0x17c) shmctl$IPC_RMID(0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r3, 0x112, 0xb, 0x0, &(0x7f0000000240)) 1.135648096s ago: executing program 0 (id=3239): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f0000000280)='p', 0x1, 0xc000, 0x0, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000002c0)={0x9}, 0x20) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x0, 0x0, 0x0) 213.056919ms ago: executing program 2 (id=3240): r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x20}}, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000240)="2a79d0569992a608c6d013f131aa4858eae18e881e6752d1349e2c8a24b3e44f452732674d6ee43343423cdad929f0c7406544c6233bfca508cae5bc646f7a", 0x3f}], 0x1, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x7b8b3000) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000040)={0x2, 0x0, @private}, 0x10, 0x0, 0x0, &(0x7f0000000300)}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@loopback, @remote, @mcast2, 0xaa, 0xd1, 0xfff7, 0x500, 0x6, 0x40000000}) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$P9_RREAD(r4, &(0x7f0000000380)={0x1009, 0x75, 0x0, {0xffe, "58b5b8ea0317c4524f3a429c4ffcc8df23a6516bfd08a5110552fe503234ea867f2afb3aac6659b6561558c71b79ad529d315b3c0042e246e22cc940551f4f36e651d6a78e97b555eb0e26eeb3fada864152f3be63109a97479dfb8c3aacda4e864393d58bbbf96d0b9591158b250f69ca4c87d7fc49859a265af495f94bd11109692855ed3e377c8299d5b596505bcc62b8e2241f1fd0d7f02fbd5080dff161bc474f3397e8734f812ccee33a572af2cdefe9a01df2351f39ce762405607f436e8c29ffe007cc5aa90d82117a2b8bf8de7cd75ed9689a415e0bfa9d822472b79c8c66ed04e3e97f3558135dd6d8a2460bb3da12366c718872efd2267256dd2045468a210b2cd9aa3bbbdecb7263226cc49e8a0333e966f6c4debdfc9a448c09317abde83d40527cb77acf21ccb0c796a77919a3580c52fa4032cfbce9454996a409a9ea368bce50f970b4ad8a6b21363973f982021c19bed57ea6369b27a90073d761b04649fac314ea21829fb415c67e68fff4e4257130381e46e6d1c00a1d2760a0a6a1ebd01ffed0221a438a54d3b14e6ed7163dc4eaa94f4b72760666a7a15499cd1690469427e64674bcfeaebe79966c2e91f1a26cfdf0c0f4c59e7d4ed0cb37e63a28a7c0ac07fb090bbc7f3c8256d7d4480410dc68df5a470797229732e51096ad1efc1cc2fd1fc4e5a56f9be218cda40ad6140967f8de09d735f3c7be001c65dade163f3581f79cfe21d5503fc211b50b9cfc53fa550ce7679c1d16199f3b49265d16ca93c8811cca301e5ad131acb476ab5961c0e9e12f2c6f5e3003ac4f738e31241134d6c3bb249ce339c06c992407feda298740f7884129967aecf25efc9ac76e69f9171af5336306cda6c4425fb9ec5bff15123b53b78a3a94f179a3ab5a3edbc74591e662607f12a74e839ca0e88432b34bc810773a92c03b2487f5fc6fcb93aff8cf3efe6d508da7fa9412fcddb0278d3223738020974d34010c6cf7e98a5fad028f064b19d508479b57a33430bfc2ce1ba09df454dcce89a6abacc413808093753e94f1976264855014092fb57ef6ed4b7f4da0a3d6062be2324b648c7e26953636db18600128c1b7a7a03a570ffe500eaba6fdfc7e6444dc68c2f2bcd8f6a6617d678613f295fb92f0fe15b1c19f75d58e6603403ce8bbe7371eb1985f2b8ebad447b708cfb56ae3debf86dfffba970007fc351101bc28804a8ea451e0a915e5660b69ec63955a1876f591e601bd3247b714b43abf6d374764ad7f9f0b68137ae53407037e20e10e0b1dfbb8ad391bf9154dd0a7a916b7b1f86dd32bb6d42c2300759be35bc9faaf1e09f818898a682e9e05d9251651017f5b455946d7733c7853a61335365ecb9d0101511c5bba97cc4876d80c24f230a83bfd442001dfc19e3dbbe07fa9b07fd71482c202d76b2ae2c1b00af8fe0a06dae9e220c0fc121dd392f40a9f529580c24e60dd562feb2386f62aa1b7dd50f88def8eda62ffd0aa5809b4b1b97cbbe79ab33d0af6cdb45e86bbc46e1e368ac8e1a287ab34aede6172f5534ba8b0d7cad3b5dc2987ac68928698dd1eedfc97746a00439964f63fef19f8a3fb57e652fbeb91009a414e34a36bf14e7206097aaffa54bf1ceffdcb51fac9d3dee5581a3f69f419232bf86d29fc5b15607762af238e5e7eab2cddbf6df2bcd0726c8be3d6244b1d75d105e05c6c1b88b7c479d5b5ec0d1ba4c087f284804994393d2ce3f7c6c1bbfe45a2d7894fb3a75d9d70cb4f4540ac5c8ff8220028b3aad6571ecc41b345dbe6c852b42a89afb5f57340e5d406cd11f28e958763f921bf1d5b86a6059bece6bfd1e7894441471215a1ed87968d2e454a67b5ddedb38c424476c025eb503023be9a24cdeb4af5fe098d870661924778508b77612a9d1bad5cd182bbdadcebd23d292a9b2ae1c096f722afdbb9fc1f1a68a8ad429ec862b13d2015bd4f1b0b3b9aa862474d9bbff6a079bb2b2e64ad84bd7237f49521d27761659c040ca0f86970de8e72a1e060cc141bcd14017787a5b183568728fe44131d302dcd93014de45eabe774c074eff2e27329b36321b2f06e567a1bc6c27884751b5ad4ee2be29e02a57eba3a3c95fecef8ab642b5c73415a0aaeb5516f83bbabdcbd51d95a623b6509c8131c15768352806dd67d392118079d9d7ed82afe4b99513c3a94f310c6297b18fdb502fffae434ac872560e0462d9644230198e75a484bffb924978f7f62a5224daa3529644e6969f0cd274e7443bf79e56c2905d67db23e07de7515097a27f6a144eb4d26a65bdc8895c4bf0b92393c486fbcd6cb3649b72f9e085dfc709893d1c895f303691b700e4b3ea9e69d9a790c9f574f70b01d35a3c5e2a1b87b8a27967b51e5419597ef64e6ae27a49d1fbcf0e59734ac75c5f397e8b653b12d5eece80ec1db62001ac7a1389445e64955ead68eb818ea49c9c6249ff5224c31bc8a1e87b710ea8b7e950acf43eaff8eff71cfb5031073e32712eacd2075976c5277d7b2ad85e4320e8ce1df38d90d6842c83506d8e6e8f0de6344fac95797e90d7ef9ebf3b3b6101326f227a10fb486b16d9d7eff9638371118a44de71cdf8bcf6ece73b53f45f7b8164ffe6544eb0e5ac822765de000bc6d35aaa41202343d9673a46e1cdffb49bd98130dab8607970fae5a9b65aa6b822c01e12382ab7edc79c38089b6cfeb6c23d14dbccd4da8642675808554d7387929405c5e7b626780c2686557945558fe382496350c5af143f3eb523396fe42121853ca41d18165cec8bae7d2a62e2bce24a1ac9407d0bc59dba18bb17072198216d817bc44cfe08fac9c38714dafb96405f4f4884c79dfbf68b11f3f5a2f72502783a2abc8ac5bde1d7113b016d0248fb03b146155c5271ac2daa0d5f6c0a3145fdb1fe32d1c38b850b788aaf5cbc85c1991c765acb9c5ed642844bc637829d16be8151d0940115a046ba8d913fd6530e3754300c02976e93985c03ef670ea21b50af0aa60a1a9f5d76ee438ece133802943b3e4c62b0ad2da154ccf6d67784c86f72c061d71b082b00d645c9a5f8fa02fb3274204c8d815219dc518711117366cdcf5e54b4db04d867420b6afb926a1e3190e83acefa527faa7d48f5d6bd30b3c3f020b4a16d5193a942f3d81bca49deea1e98e00dd139f0a1029a3a871647586543fb5f2044154ecad6920a473db34f3242355662a6d7a08b93c8fc1be5fd799a8bad72a04f56ae6ff2c70259bc509408b6951d36c4a7a9b0d57aae4c246ea824823cab406f38506abe861b158c1bddc0014b42813668da3274541c2df1591223e31bc88f9ea827783affbcc4e04a86675b7580809ce10cbd420abe987e08c43cd4264765896c96111376dc3daa2f9ad97ea28846e0aecbd0c74bc1ed5d111e36e3e7c3b5d141750d4003f8223788c72781fce15d2f862f04e8b63f3d397a0b8d3010f5ee354a883f0117a58b609cf4dbcdb5b2a375c0b16a9eb7d96af7594d68ebe2186e12d3c9a9e16f06e58b490a44f4cae9251aee4c8943094e8ed3ed19fd0c46b397eb98d638b9ae07294de8746d4100c039a6968ca6d32bef8dced057550829eb7cdab2fe26e10d0e51abd97fb2fdec6311b48e8553832c36f68addd5d0acd3bd2383a123482e0fdd80f916a8b2fdd2b9b7160ce27915c58d4cadbd795f3bd588308a2122adb9993f17b441a8517c67d3667b8533496c3092b3f9e2b2b08207f0563e7eb82df85367c0e1690c8572f982a9d7259a301e72e2d66ef01d4cd7b1745bc275aa446b66988e631eba3aad4ea35014a7940949064b7acf5e3748895280f272dfccd98279e6058037a16fcd4c238d4cd8d2d442e07eb43d8bed93d673cfcd32c3379fae2d85fca2f9fd78a72844c91b30751e66d8458e7a43a88d1566a1f43d45ef12cf1cbf4788d6e85c713c9341294db2b28a40bf18acb4b643cb95c59b3e8efddeb23e1771e7ed01f84d42e8e5df5a5d7b7fd6e3cb826fad6fd3b28dd0634827d8576b47f14059c7e4699cd18e5d745235e25896e3c8517becae4cf30ddc64d7c90b201ccb0ffcefbb9492383f183abcc666a5a525053dec33feef1822bd19e526007e8a5f048dfb7955af3ec50de82f9d98969f9c2f898d9ec22e49e1d2379048b639886ee23cc02e981a32aab4aca81e98879499d785329d4675ce41f84c1fdf0905db2bb545c592be19e32dd37f8d1ee44112541e5474859604a1ace9e2f9f65b1f2e28d3c8556c365ebaa06c0ea3feeb700ad31db130d1506aee261a804db5226f0a8d07317b2a79f6c3d17a5c4ad7c90e49e8c19464186d671ad89ba17cb3ca3fcc2fa5918074097e393b5befe99c868ba90edb2555edda55a10bb998f44eda76bc6f048ca4a23abce7a8bebfd17ad1a5fa1bee5a56d43b2d34bd1733ad0be3f981d4cc4cbeccfd7e76a994590baae4eaadeb9b5741e7d5700f12e206519dd374f7510e84e0da106200cca1427d78523765052cea6e984d02c2c26631304dad762798a2c83c8b617be55ffec4a0b61e4376362c5b9bfc04205accdbe74a51b7d79f48db7fd6bf0529dc39c72b858c0fabc9c51e77f6579abe60219c9bad75625c0203bd1ae9f77f18ae78d2741318693df58d28f1153d1daaaa7d2616431f6583fe7de1c7fbde1003bb02cdbe8996cb6de9c9db4e7a048d0ae936a14735dd41bf13da2072f4316490f467b16e85cfa448e409ab933556e7c93b7c0e838f87ba0c884c08c8adfd162f2ecc3c2eb76b17200536b2ad19ba18ecb114feadd2908790fd82f2c6a6c800de7e5dfad9e6374c93122e8972907a52c309b5389237bdd90c6c85c8ad4f9f2ace55ee6d4f71c174b73079b0abe4c49cae327414d91ad4e39a38a56ef4dec8351e812036c86722a63459fffa2eb4eac86479b1b4c68dabd62b0e76230c07209e3c5f62f788adb0f76d0ca486b7b3d59e1d4c9953bc5195fa99face5309f15bf6d9736e09bc39461c01e8319d4aa9ac15b90a80b062ccd941e1acd7c9e92fad4750556f29ce34eb96fa1dc5f324553253de45b34eed8d82ac96999f0f90d1381e6028ccb63e661a1e6403223e94f88a36163dde4aab64e0dec271c7c2010f6ba5a279a78aa2827af7c4df960d39aa0e580455394c89e3e9da21ad1c683dd783b0dcbe3b6139759baed179cf1756ef143f1ba70a0f779db07718b2c7c019f699e89c0e65a5222ebe49721b47bb1e8b29e4dbca0f77618e5c4821264506654e2f717456f123e643fc8aedb6270fc5c919f569dba853e3c44b1c3819264ca8fbb2594f1e0e1ac06172967406a9cd74f3eca09d5f416959267125febe0b296791d437aed9fddbc134a3dd6faf27b8b1a23e6eb99be9af3a09d6bc43aa9b09c9d61b27fb08f9455128db1cb817c93365e523cd921d2146741fecc33642f945d9d35a5c20181ceec4799d2e665ba81705e86be67e91b56853b3d8661067c04d188c7792e49f10525db3ce2ec45f9ab8d73e1d16501f9fbdcdb1e7fef642c15df917ba12130712e7d610af47b3eb785ae232549eaa136f829706c75ab2bb9a321b8853b523835878953732095b126e5af560ee6324180cf924a9e8bad1ce1400691ba1590398063e3edca58c4d67e8e2102f570c3289459ef686db8d7860b8fdb68dd9e863c7d6824a1b10ee2e6692a8dd234e7562f44690428e3a7f0309df571d042ebb067bbc90eb1a9b3866787eb71e2c3e827a12fec6e6a6184e06151e1c8789d75cffd9d2a2065ca01b163394c9beb49e7fa1bccdbfd30cfef62b3e4ad54a86736"}}, 0x1009) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r3, 0x400, 0x1) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x5451, 0x0) close_range(r1, 0xffffffffffffffff, 0x2) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x4001, 0x3, 0x4e0, 0x0, 0xb, 0x148, 0x0, 0x148, 0x448, 0x240, 0x240, 0x448, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00'}, 0x0, 0x2c8, 0x2f0, 0x0, {0xff0f000000000000}, [@common=@inet=@socket1={{0x28, 'socket\x00', 0x2}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x448}}, {{@uncond, 0xec010000, 0x138, 0x158, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv6=@private2, [], @ipv6=@local, [], @ipv4=@broadcast, [], @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x540) 207.557444ms ago: executing program 1 (id=3241): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000079db8540da0b77010b7d000000010902120001000000000904e95a162864aea743d17ad571"], 0x0) io_uring_setup(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) r1 = openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='+pids'], 0x6) 191.120761ms ago: executing program 0 (id=3242): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fanotify_mark(0xffffffffffffffff, 0x1, 0x3, 0xffffffffffffffff, 0x0) 127.675331ms ago: executing program 3 (id=3243): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2}, 0x40) syz_emit_ethernet(0xe80, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x4, 0x5}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x5}}}}}}}, 0x0) 27.088978ms ago: executing program 0 (id=3244): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000200000000000000000818110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) 0s ago: executing program 2 (id=3245): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) uname(&(0x7f0000000080)) kernel console output (not intermixed with test programs): il, usb_ep_enable returned -22 [ 517.487301][T12485] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 517.722295][ T5144] usb 3-1: can't set config #4, error -71 [ 517.777105][ T5144] usb 3-1: USB disconnect, device number 23 [ 518.578891][ T9] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 518.781044][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 518.814592][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 518.852383][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 518.908679][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 518.934997][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.969373][ T9] usb 1-1: config 0 descriptor?? [ 519.005229][T12515] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 519.165903][T12524] binder: BINDER_SET_CONTEXT_MGR already set [ 519.172346][T12524] binder: 12521:12524 ioctl 4018620d 20000100 returned -16 [ 519.415221][ T5091] Bluetooth: hci2: command 0x0406 tx timeout [ 519.613071][T12515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.654319][T12515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 520.176341][ T9] plantronics 0003:047F:FFFF.0015: unknown main item tag 0xd [ 520.202130][ T9] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving [ 520.216883][ T9] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 520.481065][T12539] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2146'. [ 520.784071][ T8] usb 1-1: USB disconnect, device number 33 [ 522.395627][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 522.395646][ T29] audit: type=1400 audit(2000000233.099:1920): lsm=SMACK fn=smack_task_setscheduler action=denied subject="N" object="_" requested=w pid=12557 comm="syz.1.2152" opid=12557 ocomm="syz.1.2152" [ 522.640598][T12567] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 523.453756][T12591] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2163'. [ 525.608718][ T46] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 526.021456][T12611] input: syz0 as /devices/virtual/input/input31 [ 526.107106][ T5103] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 526.162164][ T46] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 526.335843][ T46] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 526.370031][ T46] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 526.380879][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 526.390108][ T46] usb 2-1: SerialNumber: syz [ 526.456997][T12614] wg1: entered promiscuous mode [ 526.593544][T11680] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 526.614521][ T46] usb 2-1: can't set config #1, error -71 [ 526.645185][ T46] usb 2-1: USB disconnect, device number 28 [ 526.838711][T11680] usb 3-1: Using ep0 maxpacket: 16 [ 526.854088][T11680] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 526.904030][T11680] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 526.954680][T11680] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 526.989949][T11680] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.034604][T11680] usb 3-1: config 0 descriptor?? [ 527.268667][T11680] usbhid 3-1:0.0: can't add hid device: -71 [ 527.277204][T11680] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 527.305935][T11680] usb 3-1: USB disconnect, device number 24 [ 527.618649][ T9] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 528.427431][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 528.457054][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 528.515188][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 528.562111][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.583380][ T9] usb 1-1: config 0 descriptor?? [ 528.766061][T12648] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 528.993769][T12657] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2188'. [ 529.130863][T12662] syz.3.2190: attempt to access beyond end of device [ 529.130863][T12662] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 529.161300][T12662] FAT-fs (nbd3): unable to read boot sector [ 529.312630][ T9] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 529.372452][ T9] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 529.443501][ T8] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 529.651575][ T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 529.687253][ T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 529.739801][ T8] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 529.760495][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 529.800930][ T8] usb 3-1: SerialNumber: syz [ 530.270461][ T8] usb 3-1: 0:2 : does not exist [ 530.318070][ T8] usb 3-1: unit 5 not found! [ 530.513496][ T8] usb 3-1: USB disconnect, device number 25 [ 530.880623][T11119] udevd[11119]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 535.224359][T12692] 9pnet: Found fid 0 not clunked [ 535.479475][T12696] binder: 12695:12696 ioctl c0306201 0 returned -14 [ 535.539410][ T5091] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 535.548992][ T5091] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 535.567400][ T5091] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 535.576523][ T5091] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 535.592576][ T5091] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 535.606538][ T5091] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 535.615277][ T5091] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 536.466224][T12704] chnl_net:caif_netlink_parms(): no params data found [ 536.913625][ T2410] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.008728][ T9] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 537.027830][T12704] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.047790][T12704] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.065473][T12704] bridge_slave_0: entered allmulticast mode [ 537.077131][T12704] bridge_slave_0: entered promiscuous mode [ 537.104456][T12726] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2209'. [ 537.151546][ T2410] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.188633][T12704] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.201947][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 537.206870][T12704] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.224926][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 537.235433][T12704] bridge_slave_1: entered allmulticast mode [ 537.253114][T12704] bridge_slave_1: entered promiscuous mode [ 537.255745][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 537.284654][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 537.318032][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 537.348110][ T2410] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.359044][ T46] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 537.368853][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.402993][ T9] usb 2-1: config 0 descriptor?? [ 537.570313][ T46] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 537.593160][ T2410] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.617623][ T46] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 537.659511][ T46] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 537.678654][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 537.686928][ T5091] Bluetooth: hci6: command tx timeout [ 537.698004][T12704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 537.709264][ T46] usb 3-1: SerialNumber: syz [ 537.761590][T12704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 537.818030][ T9] plantronics 0003:047F:FFFF.0017: ignoring exceeding usage max [ 537.862813][ T9] plantronics 0003:047F:FFFF.0017: No inputs registered, leaving [ 537.897680][T12704] team0: Port device team_slave_0 added [ 537.909385][ T9] plantronics 0003:047F:FFFF.0017: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 537.971685][T12704] team0: Port device team_slave_1 added [ 538.058826][ T46] usb 3-1: 0:2 : does not exist [ 538.073570][ T5103] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 538.076453][ T46] usb 3-1: unit 5 not found! [ 538.106264][ T5103] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 538.118776][ T5103] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 538.141505][ T5103] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 538.157203][ T5103] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 538.166858][ T5103] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 538.220088][ T46] usb 3-1: USB disconnect, device number 26 [ 538.258306][T12704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 538.299666][T12704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 538.382789][T12704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 538.433892][T12704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 538.463410][T12704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 538.518466][T12704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 538.548328][ T2410] bridge_slave_1: left allmulticast mode [ 538.556395][T11119] udevd[11119]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 538.573186][ T2410] bridge_slave_1: left promiscuous mode [ 538.594139][ T2410] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.630561][ T2410] bridge_slave_0: left allmulticast mode [ 538.652645][ T2410] bridge_slave_0: left promiscuous mode [ 538.670908][ T2410] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.789688][ T5091] Bluetooth: hci6: command tx timeout [ 540.249287][ T5091] Bluetooth: hci4: command tx timeout [ 540.550749][ T2410] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 540.566754][ T2410] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 540.583764][ T2410] bond0 (unregistering): Released all slaves [ 540.801602][T12634] plantronics 0003:047F:FFFF.0016: timeout initializing reports [ 540.888223][ T46] usb 2-1: USB disconnect, device number 29 [ 541.119032][ T5144] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 541.225981][T12704] hsr_slave_0: entered promiscuous mode [ 541.273735][T12704] hsr_slave_1: entered promiscuous mode [ 541.307673][T12704] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 541.329082][T12704] Cannot create hsr debugfs directory [ 541.349725][ T5144] usb 4-1: Using ep0 maxpacket: 32 [ 541.392100][ T5144] usb 4-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=ac.b4 [ 541.430390][ T5144] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.451566][ T5144] usb 4-1: Product: syz [ 541.455772][ T5144] usb 4-1: Manufacturer: syz [ 541.469294][ T5144] usb 4-1: SerialNumber: syz [ 541.539733][ T5144] usb 4-1: config 0 descriptor?? [ 541.589292][ T2410] hsr_slave_0: left promiscuous mode [ 541.610929][ T9] usb 1-1: USB disconnect, device number 34 [ 541.650364][ T2410] hsr_slave_1: left promiscuous mode [ 541.687982][ T2410] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 541.708427][ T2410] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 541.755039][ T5144] usb 4-1: USB disconnect, device number 32 [ 541.767242][ T2410] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 541.806775][ T2410] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 541.838676][ T5091] Bluetooth: hci6: command tx timeout [ 541.877032][ T2410] veth1_macvtap: left promiscuous mode [ 541.885782][ T2410] veth0_macvtap: left promiscuous mode [ 541.893768][ T2410] veth1_vlan: left promiscuous mode [ 541.903075][ T2410] veth0_vlan: left promiscuous mode [ 542.319663][ T5091] Bluetooth: hci4: command tx timeout [ 542.347019][ T2410] pimreg (unregistering): left allmulticast mode [ 543.188516][ T2410] team0 (unregistering): Port device team_slave_1 removed [ 543.306125][ T2410] team0 (unregistering): Port device team_slave_0 removed [ 543.918775][ T5091] Bluetooth: hci6: command tx timeout [ 544.399063][ T5091] Bluetooth: hci4: command tx timeout [ 544.538462][T12791] kvm: Disabled LAPIC found during irq injection [ 544.873945][T12730] chnl_net:caif_netlink_parms(): no params data found [ 545.168826][ T5144] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 545.254242][ T2410] IPVS: stop unused estimator thread 0... [ 545.388779][ T5144] usb 4-1: Using ep0 maxpacket: 32 [ 545.418262][ T5144] usb 4-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=ac.b4 [ 545.462679][ T5144] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.496882][ T5144] usb 4-1: Product: syz [ 545.512217][ T5144] usb 4-1: Manufacturer: syz [ 545.534327][ T5144] usb 4-1: SerialNumber: syz [ 545.568442][ T5144] usb 4-1: config 0 descriptor?? [ 545.641585][T12730] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.673451][T12730] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.711610][T12730] bridge_slave_0: entered allmulticast mode [ 545.736102][T12730] bridge_slave_0: entered promiscuous mode [ 545.761924][T12730] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.781479][T12730] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.811353][T12730] bridge_slave_1: entered allmulticast mode [ 545.857191][T12730] bridge_slave_1: entered promiscuous mode [ 545.874876][ T927] usb 4-1: USB disconnect, device number 33 [ 546.480225][ T5091] Bluetooth: hci4: command tx timeout [ 546.884448][ T2410] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.907516][ T2410] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 549.694603][T12730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 549.862185][ T2410] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.875370][ T2410] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 549.924468][T12730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 549.941207][T12841] kvm: Disabled LAPIC found during irq injection [ 550.152802][ T2410] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.189233][ T2410] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 550.291717][T12730] team0: Port device team_slave_0 added [ 550.378849][T12730] team0: Port device team_slave_1 added [ 550.532427][ T2410] bond0: (slave netdevsim0): Releasing backup interface [ 550.577685][ T2410] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.665653][ T2410] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 550.797380][T12730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 550.827248][T12730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 550.872182][T12870] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2243'. [ 550.922449][T12730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 551.035411][T12704] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 551.104671][T12730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 551.226176][T12730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 551.315546][T12730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 552.147238][T12704] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 552.241895][T12704] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 552.293558][T12881] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2245'. [ 552.330039][T12704] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 552.342840][T12881] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2245'. [ 552.575430][T12730] hsr_slave_0: entered promiscuous mode [ 553.383680][T12730] hsr_slave_1: entered promiscuous mode [ 553.404942][T12730] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 553.419007][T12730] Cannot create hsr debugfs directory [ 553.896543][ T2410] team0: left allmulticast mode [ 553.909510][ T2410] team_slave_0: left allmulticast mode [ 553.932511][ T2410] team_slave_1: left allmulticast mode [ 553.938346][ T2410] bridge0: port 3(team0) entered disabled state [ 554.239820][ T2410] bridge_slave_0: left allmulticast mode [ 554.245662][ T2410] bridge_slave_0: left promiscuous mode [ 554.298988][ T2410] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.342853][T12917] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2252'. [ 554.484615][T12903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2249'. [ 556.125543][ T2410] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 556.149421][ T2410] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 556.173946][ T2410] bond0 (unregistering): Released all slaves [ 556.925716][ T2410] hsr_slave_0: left promiscuous mode [ 556.961137][ T2410] hsr_slave_1: left promiscuous mode [ 556.982401][ T2410] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 556.998896][ T2410] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 557.018395][ T2410] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 557.038699][ T2410] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 557.101832][ T5093] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 557.107038][ T2410] veth1_macvtap: left promiscuous mode [ 557.130302][ T2410] veth0_macvtap: left promiscuous mode [ 557.145115][ T2410] veth1_vlan: left promiscuous mode [ 557.167836][ T2410] veth0_vlan: left promiscuous mode [ 557.318829][ T5093] usb 3-1: Using ep0 maxpacket: 32 [ 557.349232][ T5093] usb 3-1: config index 0 descriptor too short (expected 26, got 18) [ 557.370316][ T5093] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 557.408296][ T5093] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.456454][ T5093] usb 3-1: config 0 descriptor?? [ 557.493139][ T5093] as10x_usb: device has been detected [ 557.525286][ T5093] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 557.628192][ T5093] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 557.787636][ T5093] as10x_usb: error during firmware upload part1 [ 557.827229][ T5093] Registered device nBox DVB-T Dongle [ 557.836471][T12983] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 557.857358][ T5093] usb 3-1: USB disconnect, device number 27 [ 557.992055][ T5093] Unregistered device nBox DVB-T Dongle [ 558.067756][ T5093] as10x_usb: device has been disconnected [ 559.326438][ T2410] team_slave_1 (unregistering): left promiscuous mode [ 559.356951][ T2410] team0 (unregistering): Port device team_slave_1 removed [ 559.498454][ T2410] team_slave_0 (unregistering): left promiscuous mode [ 559.532687][ T2410] team0 (unregistering): Port device team_slave_0 removed [ 561.359363][T12704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 561.588664][ T8] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 561.751166][T12704] 8021q: adding VLAN 0 to HW filter on device team0 [ 561.801696][ T927] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.808903][ T927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 561.817987][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 561.830798][ T8] usb 3-1: config 0 has an invalid interface number: 68 but max is 0 [ 561.868865][ T8] usb 3-1: config 0 has no interface number 0 [ 561.881313][ T927] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.888528][ T927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 561.957791][ T8] usb 3-1: New USB device found, idVendor=0af0, idProduct=d033, bcdDevice=e0.05 [ 561.980120][T13019] netlink: 'syz.3.2278': attribute type 5 has an invalid length. [ 561.994251][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.029242][ T8] usb 3-1: Product: syz [ 562.090915][ T8] usb 3-1: Manufacturer: syz [ 562.108676][ T8] usb 3-1: SerialNumber: syz [ 562.146466][ T8] usb 3-1: config 0 descriptor?? [ 562.304790][T12730] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 562.371118][T12730] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 562.546729][ T2410] IPVS: stop unused estimator thread 0... [ 562.590632][T12730] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 562.658931][T12730] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 563.201682][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.209734][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.507300][T12704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 563.591432][T12730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 563.672472][T12730] 8021q: adding VLAN 0 to HW filter on device team0 [ 563.703050][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.710279][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 563.724393][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.731611][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 564.416053][T12704] veth0_vlan: entered promiscuous mode [ 564.434045][ T5136] usb 3-1: USB disconnect, device number 28 [ 564.522854][T12704] veth1_vlan: entered promiscuous mode [ 564.693733][T12704] veth0_macvtap: entered promiscuous mode [ 564.733926][T12730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 564.780390][T12704] veth1_macvtap: entered promiscuous mode [ 564.837534][T12704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 564.864694][T13082] netlink: 'syz.2.2289': attribute type 3 has an invalid length. [ 564.874287][T12704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.896878][T13082] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2289'. [ 564.906295][T12704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 564.940647][T12704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.997260][T12704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 565.032606][T12704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.062139][T12704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 565.095449][T12704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.137388][T12704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 565.159011][ T927] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 565.172365][T12704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 565.206890][T12704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.231191][T12704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 565.252333][T12704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.271439][T12704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 565.298739][T12704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.318618][T12704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 565.341219][T12704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.370198][T12704] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 565.380865][ T927] usb 2-1: Using ep0 maxpacket: 8 [ 565.426890][ T927] usb 2-1: New USB device found, idVendor=0930, idProduct=87e6, bcdDevice=a7.d2 [ 565.455026][ T927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.483657][ T927] usb 2-1: config 0 descriptor?? [ 565.509751][T12704] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.538774][T12704] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.547513][T12704] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.592532][T12704] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.705917][T12730] veth0_vlan: entered promiscuous mode [ 565.752431][ T5144] usb 2-1: USB disconnect, device number 30 [ 565.814486][T12730] veth1_vlan: entered promiscuous mode [ 565.926629][ T2410] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.964606][ T2410] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 568.411669][T12730] veth0_macvtap: entered promiscuous mode [ 570.568812][T12730] veth1_macvtap: entered promiscuous mode [ 570.607916][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 570.655807][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 570.751666][T12730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 570.789325][T12730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.828748][T12730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 570.888644][T12730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.898500][T12730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 570.980490][T12730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.008633][T12730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 571.039838][T12730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.068620][T12730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 571.082154][T13119] netfs: Couldn't get user pages (rc=-14) [ 571.109616][T13119] netfs: Zero-sized read [R=7] [ 571.114520][T12730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.133200][T12730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 571.253806][T12730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 571.298636][T12730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.308483][T12730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 571.348794][T12730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.375633][T13126] Invalid option length (1048255) for dns_resolver key [ 571.378812][T12730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 571.427705][T12730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.459410][T12730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 571.488775][T12730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.528632][T12730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 571.556566][T12730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.590524][T12730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 571.650386][T12730] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.679197][T12730] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.693362][T12730] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.729907][T12730] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.984157][ T2410] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 572.025811][ T2410] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 572.201682][T12384] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 572.210602][T12384] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 579.014790][T13191] netlink: 'syz.2.2318': attribute type 1 has an invalid length. [ 580.919659][T13225] netlink: 'syz.0.2330': attribute type 1 has an invalid length. [ 581.201779][T13241] lo: entered promiscuous mode [ 583.288699][ T1057] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 583.300272][T13284] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2354'. [ 583.488841][ T1057] usb 4-1: Using ep0 maxpacket: 32 [ 583.506841][ T1057] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 583.536926][ T1057] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 583.577682][ T1057] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 583.596854][ T1057] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.616050][ T1057] usb 4-1: config 0 descriptor?? [ 583.631213][ T1057] hub 4-1:0.0: USB hub found [ 583.847281][ T1057] hub 4-1:0.0: 1 port detected [ 584.182594][ T1057] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 584.198325][ T1057] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 584.214117][ T1057] usbhid 4-1:0.0: can't add hid device: -71 [ 584.221419][ T1057] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 585.820160][ T1057] usb 4-1: USB disconnect, device number 34 [ 585.977119][ T5091] Bluetooth: hci2: unexpected event for opcode 0x1002 [ 586.347136][T13329] kvm: kvm [13328]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x1 [ 586.464585][T13338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2370'. [ 586.484806][T13338] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2370'. [ 586.521396][T13338] block nbd0: Unsupported socket: shutdown callout must be supported. [ 586.559539][T13342] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 588.923038][T13372] netlink: 'syz.3.2379': attribute type 10 has an invalid length. [ 588.948192][T13372] team0: Device ipvlan1 failed to register rx_handler [ 589.050027][T13377] syzkaller1: entered promiscuous mode [ 589.055543][T13377] syzkaller1: entered allmulticast mode [ 589.710042][T13393] sg_write: data in/out 624/1 bytes for SCSI command 0xcb-- guessing data in; [ 589.710042][T13393] program syz.3.2385 not setting count and/or reply_len properly [ 589.789432][T13393] netlink: 'syz.3.2385': attribute type 10 has an invalid length. [ 589.797330][T13393] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2385'. [ 589.809839][T13393] bridge0: port 3(gretap0) entered blocking state [ 589.816700][T13393] bridge0: port 3(gretap0) entered disabled state [ 589.824207][T13393] gretap0: entered allmulticast mode [ 589.837615][T13393] gretap0: entered promiscuous mode [ 589.846547][T13393] bridge0: port 3(gretap0) entered blocking state [ 589.853165][T13393] bridge0: port 3(gretap0) entered forwarding state [ 590.006085][ T5091] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 590.015226][ T5091] Bluetooth: hci2: Injecting HCI hardware error event [ 590.030087][ T5091] Bluetooth: hci2: hardware error 0x00 [ 590.279770][T13392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2386'. [ 590.341866][T13392] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2386'. [ 590.368650][T13392] block nbd0: Unsupported socket: shutdown callout must be supported. [ 590.571595][T13401] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x2 [ 590.702169][ T29] audit: type=1326 audit(2000000301.329:1921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13396 comm="syz.0.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3399175f19 code=0x7ffc0000 [ 590.838658][ T29] audit: type=1326 audit(2000000301.329:1922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13396 comm="syz.0.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3399175f19 code=0x7ffc0000 [ 590.992229][T13411] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 591.053988][T13412] netlink: 'syz.4.2393': attribute type 29 has an invalid length. [ 591.109647][T13412] netlink: 'syz.4.2393': attribute type 29 has an invalid length. [ 591.718953][T13422] 8021q: VLANs not supported on lo [ 592.078703][ T5091] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 592.139305][T13433] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2402'. [ 592.600804][ T61] Bluetooth: hci0: Frame reassembly failed (-90) [ 594.639124][ T5103] Bluetooth: hci0: command 0xfc11 tx timeout [ 594.647409][ T5091] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 596.025451][T13503] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x2 [ 596.751651][T13530] loop0: detected capacity change from 0 to 7 [ 596.799090][T13530] Dev loop0: unable to read RDB block 7 [ 596.804706][T13530] loop0: AHDI p2 p3 p4 [ 596.838227][T13530] loop0: partition table partially beyond EOD, truncated [ 596.855943][T13530] loop0: p2 start 808463477 is beyond EOD, truncated [ 596.864299][T13530] loop0: p3 start 6514546 is beyond EOD, truncated [ 597.202670][T13543] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2440'. [ 597.262331][T13543] netlink: 'syz.3.2440': attribute type 7 has an invalid length. [ 597.602278][T13543] vxlan0: entered promiscuous mode [ 597.998929][ T927] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 598.201533][ T927] usb 1-1: Using ep0 maxpacket: 8 [ 598.230448][ T927] usb 1-1: New USB device found, idVendor=0471, idProduct=0311, bcdDevice=81.d5 [ 598.243249][ T927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.267082][ T927] usb 1-1: Product: syz [ 598.272297][ T927] usb 1-1: Manufacturer: syz [ 598.277059][ T927] usb 1-1: SerialNumber: syz [ 598.319437][ T927] usb 1-1: config 0 descriptor?? [ 598.333761][ T927] pwc: Philips PCVC740K (ToUCam Pro)/PCVC840 (ToUCam II) USB webcam detected. [ 598.515810][T13566] input: syz0 as /devices/virtual/input/input32 [ 598.681878][T13539] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2438'. [ 598.705328][T13538] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2438'. [ 598.842063][ T927] pwc: Failed to set LED on/off time (-71) [ 598.869574][ T927] pwc: send_video_command error -71 [ 598.886625][ T927] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 598.896880][ T927] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 598.935167][ T927] usb 1-1: USB disconnect, device number 35 [ 600.699117][T13599] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2456'. [ 600.728609][T13599] netlink: 'syz.0.2456': attribute type 7 has an invalid length. [ 600.762384][T13599] vxlan0: entered promiscuous mode [ 602.148976][T13609] mkiss: ax0: crc mode is auto. [ 602.395406][T13613] kvm: vcpu 0: requested 32 ns lapic timer period limited to 200000 ns [ 602.452512][T13613] kvm: pic: non byte write [ 603.638900][T13641] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2470'. [ 604.151670][T13641] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 604.172742][T13647] bridge0: port 3(bond1) entered blocking state [ 604.263012][T13647] bridge0: port 3(bond1) entered disabled state [ 604.365991][T13647] bond1: entered allmulticast mode [ 604.642726][T13647] bridge2: entered allmulticast mode [ 604.667870][T13647] bond1: entered promiscuous mode [ 604.708756][T13647] bridge2: entered promiscuous mode [ 605.388879][T11680] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 605.591350][T11680] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 605.615463][T11680] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 605.635996][T11680] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 605.651677][T11680] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 605.667478][T11680] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 605.677072][T11680] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.713387][T11680] usb 2-1: config 0 descriptor?? [ 606.147355][T11680] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving [ 606.178305][T11680] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 606.366984][T13689] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2485'. [ 606.448183][ T5093] usb 2-1: USB disconnect, device number 31 [ 606.536694][T13689] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 606.612630][T13694] bridge0: port 3(bond1) entered blocking state [ 606.632810][T13694] bridge0: port 3(bond1) entered disabled state [ 606.663440][T13694] bond1: entered allmulticast mode [ 606.683215][T13694] bridge1: entered allmulticast mode [ 606.699494][T13694] bond1: entered promiscuous mode [ 606.716074][T13694] bridge1: entered promiscuous mode [ 610.375757][T13742] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2499'. [ 610.742003][T13748] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 611.378733][ T927] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 611.608862][ T927] usb 2-1: Using ep0 maxpacket: 32 [ 611.653422][ T927] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 611.682270][ T927] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 611.728104][ T927] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 611.796386][ T927] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 611.851443][ T927] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 611.926571][ T927] usb 2-1: config 0 interface 0 has no altsetting 0 [ 611.970160][ T927] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 612.022717][ T927] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 612.052740][ T927] usb 2-1: Product: syz [ 612.081410][ T927] usb 2-1: Manufacturer: syz [ 612.088107][T13772] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2511'. [ 612.096276][ T927] usb 2-1: SerialNumber: syz [ 612.124675][ T927] usb 2-1: config 0 descriptor?? [ 612.140559][ T927] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 612.196198][ T927] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 612.424684][T13758] ldusb 2-1:0.0: Couldn't submit interrupt_in_urb -90 [ 612.447442][ T5136] usb 2-1: USB disconnect, device number 32 [ 612.481275][ T5136] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 613.607947][T13784] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 616.498905][ T5144] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 616.683803][T13811] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2523'. [ 616.703202][ T5144] usb 3-1: config index 0 descriptor too short (expected 106, got 36) [ 616.718757][ T5144] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 616.768599][ T5144] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 616.791464][ T5144] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 616.835267][ T5144] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.852695][T13816] tipc: Started in network mode [ 616.879602][ T5144] usb 3-1: config 0 descriptor?? [ 616.886334][T13816] tipc: Node identity 080211, cluster identity 4711 [ 616.949190][T13816] tipc: Enabled bearer , priority 10 [ 617.037516][T13820] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2527'. [ 617.397428][ T5144] corsair 0003:1B1C:1B3E.0019: failed to start in urb: -90 [ 617.457389][ T5144] corsair 0003:1B1C:1B3E.0019: hidraw0: USB HID v0.00 Device [HID 1b1c:1b3e] on usb-dummy_hcd.2-1/input0 [ 617.501163][T13803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 617.575036][T13803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 617.743729][T11680] usb 3-1: USB disconnect, device number 29 [ 618.114073][ T5136] tipc: Node number set to 134353152 [ 621.676987][T13862] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2538'. [ 622.860553][T13875] usb usb8: usbfs: process 13875 (syz.1.2542) did not claim interface 0 before use [ 623.213285][T13882] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2544'. [ 624.795247][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.059636][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.384688][T13906] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 627.985706][T13949] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 629.350591][T13967] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2569'. [ 629.378716][T13967] netlink: 'syz.0.2569': attribute type 5 has an invalid length. [ 629.439434][T13967] : entered promiscuous mode [ 629.938848][T13979] blktrace: Concurrent blktraces are not allowed on loop7 [ 630.028740][ T5144] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 630.243316][ T5144] usb 3-1: config 0 interface 0 has no altsetting 0 [ 630.261244][ T5144] usb 3-1: New USB device found, idVendor=249c, idProduct=932c, bcdDevice=f9.1b [ 630.297348][ T5144] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.324110][ T5144] usb 3-1: config 0 descriptor?? [ 630.342569][ T5144] usb 3-1: selecting invalid altsetting 0 [ 630.359917][ T5144] usb 3-1: can't set first interface for hiFace device. [ 630.394655][ T5144] snd-usb-hiface 3-1:0.0: probe with driver snd-usb-hiface failed with error -5 [ 630.593194][ T5144] usb 3-1: USB disconnect, device number 30 [ 631.584067][T13996] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 632.067777][ T5091] Bluetooth: hci3: command 0x0406 tx timeout [ 632.242164][ T5144] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 632.582019][ T927] kernel write not supported for file bpf-prog (pid: 927 comm: kworker/1:2) [ 632.652516][ T5144] usb 4-1: Using ep0 maxpacket: 8 [ 632.660525][ T5144] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 632.687802][ T5144] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 632.719372][ T5144] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 632.734441][ T5144] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 632.778676][ T5144] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 632.853949][ T5144] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 632.876761][ T5144] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.979206][T14020] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2585'. [ 633.145177][ T5144] usb 4-1: GET_CAPABILITIES returned 0 [ 633.176404][ T5144] usbtmc 4-1:16.0: can't read capabilities [ 633.211647][T14026] hub 9-0:1.0: USB hub found [ 633.310417][T14026] hub 9-0:1.0: 8 ports detected [ 633.371327][ T5144] usb 4-1: USB disconnect, device number 35 [ 633.514270][T14034] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 634.030097][T14049] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2598'. [ 634.183910][T14053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 634.205251][T14053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 634.557998][T14069] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 634.768699][ T1057] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 634.859584][T14076] hub 9-0:1.0: USB hub found [ 634.873811][T14076] hub 9-0:1.0: 8 ports detected [ 634.959257][ T1057] usb 4-1: Using ep0 maxpacket: 8 [ 634.978487][ T1057] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 635.008936][ T1057] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 635.055920][ T1057] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 635.096169][ T1057] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 635.149290][ T1057] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 635.211984][ T1057] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 635.247748][ T1057] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.532227][ T1057] usb 4-1: usb_control_msg returned -32 [ 635.553959][ T1057] usbtmc 4-1:16.0: can't read capabilities [ 636.091689][T14096] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 636.296410][T14104] usbtmc 4-1:16.0: usb_clear_halt returned -32 [ 636.305682][T14107] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 636.522710][ T1057] usb 4-1: USB disconnect, device number 36 [ 638.143715][T14140] blktrace: Concurrent blktraces are not allowed on loop3 [ 641.541761][ T5136] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 641.738736][ T5136] usb 4-1: device descriptor read/64, error -71 [ 642.058657][ T5136] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 642.478968][ T5136] usb 4-1: device descriptor read/64, error -71 [ 642.687286][ T5136] usb usb4-port1: attempt power cycle [ 642.851437][ T5144] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 643.078908][ T5144] usb 3-1: Using ep0 maxpacket: 16 [ 643.107967][ T5144] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 643.129501][ T5144] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 643.149900][ T5136] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 643.172951][ T5144] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 643.199901][ T5144] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 643.233303][ T5144] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.233666][ T5136] usb 4-1: device descriptor read/8, error -71 [ 643.274897][ T5144] usb 3-1: config 0 descriptor?? [ 643.568885][ T5136] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 643.632980][ T5136] usb 4-1: device descriptor read/8, error -71 [ 643.764872][ T5144] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 643.784990][ T5136] usb usb4-port1: unable to enumerate USB device [ 643.793093][ T5144] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 643.810837][ T5144] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 643.828114][ T5144] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 643.902720][ T5144] microsoft 0003:045E:07DA.001A: No inputs registered, leaving [ 644.048771][ T5144] microsoft 0003:045E:07DA.001A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 644.188678][ T5144] microsoft 0003:045E:07DA.001A: no inputs found [ 644.233189][ T5144] microsoft 0003:045E:07DA.001A: could not initialize ff, continuing anyway [ 645.168161][ T5091] Bluetooth: hci4: command tx timeout [ 645.250856][ T5144] usb 3-1: USB disconnect, device number 31 [ 645.470639][T14224] bond0: entered promiscuous mode [ 645.475688][T14224] bond_slave_0: entered promiscuous mode [ 645.526002][T14224] bond_slave_1: entered promiscuous mode [ 645.620829][T14223] bond0: (slave bond_slave_0): Releasing backup interface [ 645.779581][T14223] bond_slave_0: left promiscuous mode [ 645.843233][T14222] bond0: left promiscuous mode [ 645.848030][T14222] bond_slave_1: left promiscuous mode [ 646.095246][T14232] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2659'. [ 646.209119][ T5136] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 647.075328][ T5136] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 647.137852][ T5136] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 647.161433][ T5136] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 647.193755][ T5136] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 647.213270][ T5136] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.234379][ T5136] usb 3-1: config 0 descriptor?? [ 647.667910][ T5136] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 647.701075][ T5136] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 647.713714][ T5136] plantronics 0003:047F:FFFF.001B: No inputs registered, leaving [ 647.731829][ T1057] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 647.769186][ T5136] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 648.006940][ T1057] usb 1-1: device descriptor read/64, error -71 [ 648.020141][ T5144] usb 3-1: USB disconnect, device number 32 [ 648.298750][ T1057] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 648.478705][ T1057] usb 1-1: device descriptor read/64, error -71 [ 648.629275][ T1057] usb usb1-port1: attempt power cycle [ 649.078843][ T1057] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 649.099443][ T5169] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 649.129354][ T1057] usb 1-1: device descriptor read/8, error -71 [ 649.208926][ T5138] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 649.315888][ T5169] usb 5-1: Using ep0 maxpacket: 8 [ 649.348040][ T5169] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 649.367031][ T5169] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 649.397745][ T5169] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 649.398671][ T5138] usb 3-1: Using ep0 maxpacket: 8 [ 649.412884][ T1057] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 649.423935][ T5169] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 649.445460][ T5138] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 649.459348][ T5169] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 649.466084][ T5138] usb 3-1: config 0 has no interface number 0 [ 649.496980][ T5169] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 649.498901][ T1057] usb 1-1: device descriptor read/8, error -71 [ 649.519237][ T5138] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 101, changing to 10 [ 649.524501][ T5169] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.546880][ T5138] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 59093, setting to 1024 [ 649.578791][ T5138] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 649.599202][ T5138] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.622372][ T5138] usb 3-1: config 0 descriptor?? [ 649.630319][T14259] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 649.652605][ T5138] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 649.663479][ T1057] usb usb1-port1: unable to enumerate USB device [ 649.826320][ T5169] usb 5-1: usb_control_msg returned -32 [ 649.849612][ T5169] usbtmc 5-1:16.0: can't read capabilities [ 650.010902][ T5138] usb 3-1: USB disconnect, device number 33 [ 650.016863][ C0] iowarrior 3-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 650.156112][ T5138] iowarrior 3-1:0.1: I/O-Warror #0 now disconnected [ 651.363715][ T46] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 651.580566][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 651.608083][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 651.639586][ T46] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 651.684641][ T46] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 651.716272][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.751453][ T46] usb 1-1: config 0 descriptor?? [ 652.629061][ T1057] usb 5-1: USB disconnect, device number 18 [ 652.977203][ T46] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 652.987820][ T46] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 652.996051][ T46] plantronics 0003:047F:FFFF.001C: No inputs registered, leaving [ 653.021114][ T46] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 653.081140][ T46] usb 1-1: USB disconnect, device number 40 [ 653.168942][T14320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2688'. [ 653.178347][T14320] netlink: 'syz.2.2688': attribute type 14 has an invalid length. [ 653.210764][T14320] netlink: 'syz.2.2688': attribute type 12 has an invalid length. [ 653.241471][T14320] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 653.250326][T14320] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 653.259105][T14320] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 653.268037][T14320] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 653.405910][T14320] vxlan0: entered promiscuous mode [ 654.423412][T14328] netlink: 'syz.0.2691': attribute type 3 has an invalid length. [ 654.448946][T14328] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.2691'. [ 655.886679][T14360] fuse: Unknown parameter '00000000000000000000' [ 656.666610][ T46] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 656.868158][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 657.168974][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 657.280743][ T46] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 657.294032][ T46] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 657.303237][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.400003][ T46] usb 1-1: config 0 descriptor?? [ 658.288305][ T46] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 658.311488][ T46] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 658.324994][ T46] plantronics 0003:047F:FFFF.001D: No inputs registered, leaving [ 658.349069][ T46] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 658.399533][ T46] usb 1-1: USB disconnect, device number 41 [ 658.533004][ T29] audit: type=1326 audit(2000000369.239:1923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14391 comm="syz.1.2714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e99d75f19 code=0x7ffc0000 [ 658.621619][ T29] audit: type=1326 audit(2000000369.239:1924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14391 comm="syz.1.2714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e99d75f19 code=0x7ffc0000 [ 658.685285][ T29] audit: type=1326 audit(2000000369.239:1925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14391 comm="syz.1.2714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0e99d75f19 code=0x7ffc0000 [ 658.763200][ T29] audit: type=1326 audit(2000000369.239:1926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14391 comm="syz.1.2714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e99d75f19 code=0x7ffc0000 [ 658.900872][ T29] audit: type=1326 audit(2000000369.249:1927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14391 comm="syz.1.2714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f0e99d75f19 code=0x7ffc0000 [ 658.977341][T14407] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2718'. [ 658.994985][T14407] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2718'. [ 659.000678][ T29] audit: type=1326 audit(2000000369.309:1928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14391 comm="syz.1.2714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e99d75f19 code=0x7ffc0000 [ 659.095739][ T29] audit: type=1326 audit(2000000369.309:1929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14391 comm="syz.1.2714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e99d75f19 code=0x7ffc0000 [ 659.170011][ T29] audit: type=1326 audit(2000000369.309:1930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14394 comm="syz.1.2714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0e99da7f05 code=0x7ffc0000 [ 659.230690][ T29] audit: type=1326 audit(2000000369.459:1931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14394 comm="syz.1.2714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f0e99d75f19 code=0x7ffc0000 [ 659.239909][ T927] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 659.449290][ T927] usb 4-1: device descriptor read/64, error -71 [ 659.583327][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 659.770339][ T927] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 659.950789][ T927] usb 4-1: device descriptor read/64, error -71 [ 660.226571][ T5144] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 660.235633][ T927] usb usb4-port1: attempt power cycle [ 661.114705][ T5144] usb 5-1: Using ep0 maxpacket: 8 [ 661.157742][ T5144] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 661.185814][ T5144] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 661.234240][ T5144] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 661.294180][ T5144] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 661.329906][ T5144] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 661.357390][ T5144] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 661.366193][ T5144] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 661.378404][ T5144] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 661.391091][ T5144] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 661.402780][ T927] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 661.411991][ T5144] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 661.426858][ T5144] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 661.434870][ T5144] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 661.458371][ T927] usb 4-1: device descriptor read/8, error -71 [ 661.467386][ T5144] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 661.480046][ T5144] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 661.491732][ T5144] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 661.509395][ T5144] usb 5-1: string descriptor 0 read error: -22 [ 661.515957][ T5144] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 661.526140][ T5144] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.543799][ T5144] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 661.598926][T14421] Bluetooth: hci0: command 0x1003 tx timeout [ 661.609778][ T5091] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 661.921349][ T927] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 662.561333][ T5091] Bluetooth: hci6: command 0x0406 tx timeout [ 662.734789][T14431] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 662.789108][T14431] syzkaller0: entered promiscuous mode [ 662.801362][T14431] syzkaller0: entered allmulticast mode [ 662.990542][ T927] usb 4-1: device not accepting address 44, error -71 [ 662.997963][ T5138] usb 5-1: USB disconnect, device number 19 [ 663.000236][ T927] usb usb4-port1: unable to enumerate USB device [ 663.039531][ T54] Bluetooth: hci4: command 0x0406 tx timeout [ 666.468749][ T8] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 666.628871][ T8] usb 2-1: device descriptor read/64, error -71 [ 666.902266][ T8] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 667.066153][ T8] usb 2-1: device descriptor read/64, error -71 [ 667.199194][ T8] usb usb2-port1: attempt power cycle [ 667.618777][ T8] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 667.667736][ T8] usb 2-1: device descriptor read/8, error -71 [ 667.938836][ T8] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 667.971222][ T8] usb 2-1: device descriptor read/8, error -71 [ 668.112287][ T8] usb usb2-port1: unable to enumerate USB device [ 668.156332][T14454] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2732'. [ 668.167134][T14454] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2732'. [ 668.392552][T14482] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2743'. [ 668.422240][T14482] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2743'. [ 668.465044][T14482] macvlan0: entered promiscuous mode [ 668.501728][T14482] batadv_slave_0: entered promiscuous mode [ 668.511353][T14482] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network [ 668.695765][T14490] syzkaller0: entered promiscuous mode [ 668.758859][T14490] syzkaller0: entered allmulticast mode [ 670.704426][T14521] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2756'. [ 670.726957][T14521] NCSI netlink: No device for ifindex 0 [ 674.237546][T14512] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2750'. [ 674.255423][T14512] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2750'. [ 674.780795][ T927] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 675.029050][ T927] usb 3-1: Using ep0 maxpacket: 8 [ 675.132815][ T927] usb 3-1: New USB device found, idVendor=061d, idProduct=c120, bcdDevice=e3.67 [ 675.281874][ T927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.372366][ T927] usb 3-1: config 0 descriptor?? [ 675.381005][ T927] quatech2 3-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 675.582109][ T927] usb 3-1: qt2_attach - failed to power on unit: -71 [ 675.611629][ T927] quatech2 3-1:0.0: probe with driver quatech2 failed with error -71 [ 675.664074][ T927] usb 3-1: USB disconnect, device number 34 [ 675.736953][ C0] eth0: bad gso: type: 1, size: 1408 [ 675.884951][T14585] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2778'. [ 675.947628][T14585] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2778'. [ 676.312000][ T8] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 676.538632][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 676.552085][ T8] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 676.562805][ T8] usb 1-1: config 0 has no interface number 0 [ 676.930035][ T8] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 101, changing to 10 [ 676.944282][ T8] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 59093, setting to 1024 [ 676.958702][ T8] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 676.968344][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.038441][ T8] usb 1-1: config 0 descriptor?? [ 677.115845][T14587] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 677.179058][ T8] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 677.262633][T14601] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 677.317851][T14601] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 678.253153][ T927] usb 1-1: USB disconnect, device number 42 [ 678.253185][ C1] iowarrior 1-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 678.310307][ T927] iowarrior 1-1:0.1: I/O-Warror #0 now disconnected [ 679.799925][T14624] block nbd0: shutting down sockets [ 680.028875][ T8] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 680.289794][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 680.301731][ T8] usb 4-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=e7.87 [ 681.084155][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.108004][ T8] usb 4-1: probing VID:PID(2201:012C) [ 681.108698][ T927] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 681.132073][ T8] usb 4-1: Could not find two sets of bulk-in/out endpoint pairs [ 681.190977][ C0] eth0: bad gso: type: 1, size: 1408 [ 681.330528][ T8] vub300 4-1:32.0: probe with driver vub300 failed with error -22 [ 681.346948][ T8] usb 4-1: USB disconnect, device number 45 [ 681.529233][ T927] usb 1-1: Using ep0 maxpacket: 8 [ 681.537347][ T927] usb 1-1: New USB device found, idVendor=061d, idProduct=c120, bcdDevice=e3.67 [ 681.565840][ T927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.600691][ T927] usb 1-1: config 0 descriptor?? [ 681.663688][ T927] quatech2 1-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 681.978958][ T927] usb 1-1: qt2_attach - failed to power on unit: -71 [ 681.985780][ T927] quatech2 1-1:0.0: probe with driver quatech2 failed with error -71 [ 682.755999][ T927] usb 1-1: USB disconnect, device number 43 [ 683.065111][T14659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 683.197800][T14659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 686.088439][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.095889][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.242136][T14706] netlink: 'syz.3.2815': attribute type 1 has an invalid length. [ 686.267153][T14706] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2815'. [ 686.639597][ T5136] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 686.853399][ T5136] usb 4-1: config 0 has an invalid interface number: 18 but max is 0 [ 686.909027][ T5136] usb 4-1: config 0 has no interface number 0 [ 686.915280][ T5136] usb 4-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 686.940991][ T5136] usb 4-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 686.958494][ T5136] usb 4-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 686.967969][ T5136] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 687.003432][ T5136] usb 4-1: Manufacturer: syz [ 687.027304][ T5136] usb 4-1: config 0 descriptor?? [ 687.049774][ T46] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 687.269282][ T46] usb 1-1: Using ep0 maxpacket: 32 [ 687.280416][ T46] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 687.333846][ T46] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 687.357777][ T46] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 687.395230][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.465092][ T46] hub 1-1:4.0: USB hub found [ 687.492737][ T5136] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.18/0003:054C:03D5.001E/input/input33 [ 687.639007][ T5136] sony 0003:054C:03D5.001E: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.3-1/input18 [ 687.668763][ T46] hub 1-1:4.0: 2 ports detected [ 688.142713][ T46] hub 1-1:4.0: set hub depth failed [ 688.227481][ T46] usb 1-1: USB disconnect, device number 44 [ 690.131655][ T5136] usb 4-1: USB disconnect, device number 46 [ 692.132933][T14803] netlink: 'syz.3.2841': attribute type 1 has an invalid length. [ 692.171308][T14803] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2841'. [ 692.498635][ T5169] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 692.881582][ T5169] usb 4-1: config 0 has an invalid interface number: 18 but max is 0 [ 692.891755][ T5169] usb 4-1: config 0 has no interface number 0 [ 692.899196][ T5169] usb 4-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 692.910578][ T5169] usb 4-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 692.923459][ T5169] usb 4-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 692.934056][ T5169] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 692.946169][ T5169] usb 4-1: Manufacturer: syz [ 692.948756][ T5136] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 692.981269][ T5169] usb 4-1: config 0 descriptor?? [ 692.990869][ T29] audit: type=1326 audit(2000000403.679:1932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14806 comm="syz.1.2843" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e99d75f19 code=0x0 [ 693.229385][ T5136] usb 5-1: Using ep0 maxpacket: 8 [ 693.264330][ T5136] usb 5-1: New USB device found, idVendor=061d, idProduct=c120, bcdDevice=e3.67 [ 693.298461][ T5136] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.383171][ T5136] usb 5-1: config 0 descriptor?? [ 693.410994][ T5136] quatech2 5-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 693.414501][ T5169] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.18/0003:054C:03D5.001F/input/input34 [ 693.543689][ T5169] sony 0003:054C:03D5.001F: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.3-1/input18 [ 693.637038][ T5136] usb 5-1: qt2_attach - failed to power on unit: -71 [ 693.665413][ T5136] quatech2 5-1:0.0: probe with driver quatech2 failed with error -71 [ 693.724274][ T5136] usb 5-1: USB disconnect, device number 20 [ 694.890132][ T5136] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 695.129507][ T5136] usb 5-1: Using ep0 maxpacket: 8 [ 695.181885][ T5136] usb 5-1: config 0 has no interfaces? [ 695.215712][ T5136] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 695.268628][ T5136] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.276670][ T5136] usb 5-1: Product: syz [ 695.308682][ T5136] usb 5-1: Manufacturer: syz [ 695.380151][ T5136] usb 5-1: SerialNumber: syz [ 695.384330][T14852] tipc: Enabled bearer , priority 0 [ 695.535872][ T927] usb 4-1: USB disconnect, device number 47 [ 695.535984][ T5136] usb 5-1: config 0 descriptor?? [ 700.032341][T14854] tipc: Resetting bearer [ 700.065889][ T5136] usb 5-1: USB disconnect, device number 21 [ 704.762449][ T5169] tipc: Resetting bearer [ 704.820621][T14854] tipc: Resetting bearer [ 705.172599][T14871] syz.4.2863: attempt to access beyond end of device [ 705.172599][T14871] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 705.226492][T14871] FAT-fs (nbd4): unable to read boot sector [ 705.310518][ T29] audit: type=1326 audit(2000000416.019:1933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14868 comm="syz.1.2864" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e99d75f19 code=0x0 [ 706.544505][ T5103] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 706.571926][ T5103] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 706.582033][ T5103] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 706.636699][ T5103] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 706.649830][ T5103] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 706.666818][ T5103] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 708.678694][ T927] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 708.718811][ T5103] Bluetooth: hci0: command tx timeout [ 708.908715][ T927] usb 5-1: Using ep0 maxpacket: 8 [ 708.948461][ T927] usb 5-1: config 0 has no interfaces? [ 708.963236][ T927] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 708.978631][ T927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.996855][ T927] usb 5-1: Product: syz [ 709.005949][ T927] usb 5-1: Manufacturer: syz [ 709.018846][ T927] usb 5-1: SerialNumber: syz [ 709.039551][ T927] usb 5-1: config 0 descriptor?? [ 709.719146][ T46] usb 5-1: USB disconnect, device number 22 [ 710.573095][T14854] tipc: Disabling bearer [ 710.799028][ T5103] Bluetooth: hci0: command tx timeout [ 712.082107][T14889] chnl_net:caif_netlink_parms(): no params data found [ 712.166394][T14943] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3832186367 (7664372734 ns) > initial count (4194304 ns). Using initial count to start timer. [ 712.486793][T14957] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 712.928762][ T5103] Bluetooth: hci0: command tx timeout [ 713.505912][T14960] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2883'. [ 713.536289][T14960] netlink: 'syz.1.2883': attribute type 30 has an invalid length. [ 713.631341][ C0] eth0: bad gso: type: 1, size: 1408 [ 713.742049][T14889] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.760519][T14889] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.778940][T14889] bridge_slave_0: entered allmulticast mode [ 713.804335][T14889] bridge_slave_0: entered promiscuous mode [ 713.844591][T14889] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.859820][T14889] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.874803][T14889] bridge_slave_1: entered allmulticast mode [ 713.900501][T14889] bridge_slave_1: entered promiscuous mode [ 714.043423][T14889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 714.089989][T14889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 714.367051][T14889] team0: Port device team_slave_0 added [ 714.428519][T14889] team0: Port device team_slave_1 added [ 714.557338][T14889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 714.571631][T14889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 714.615390][T14889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 714.638789][T14889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 714.646046][T14889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 714.686648][T14889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 714.863808][T14988] kvm: vcpu 0: requested 32 ns lapic timer period limited to 200000 ns [ 715.006273][ T5103] Bluetooth: hci0: command tx timeout [ 715.107048][T14995] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 715.357984][T14993] kvm: pic: non byte write [ 715.434094][T14889] hsr_slave_0: entered promiscuous mode [ 715.465765][T14889] hsr_slave_1: entered promiscuous mode [ 715.521900][T14889] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 715.789640][T14889] Cannot create hsr debugfs directory [ 716.138923][T11680] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 716.341210][T15008] input: syz0 as /devices/virtual/input/input35 [ 716.342249][T11680] usb 2-1: config 1 interface 0 altsetting 253 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 716.416620][T11680] usb 2-1: config 1 interface 0 has no altsetting 0 [ 716.439292][T11680] usb 2-1: New USB device found, idVendor=9b25, idProduct=0021, bcdDevice= 0.00 [ 716.478513][T11680] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.581920][T14889] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.701708][T15012] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2898'. [ 716.720193][T15012] netlink: 'syz.0.2898': attribute type 30 has an invalid length. [ 716.821394][T14889] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.003525][T14889] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.086544][T11680] usb 2-1: string descriptor 0 read error: -71 [ 717.100415][T11680] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -32 [ 717.140191][T11680] usb 2-1: USB disconnect, device number 37 [ 717.236545][T14889] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.563433][T14889] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 717.590056][T14889] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 717.613965][T14889] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 717.643787][T14889] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 717.984832][T14889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 718.053186][T14889] 8021q: adding VLAN 0 to HW filter on device team0 [ 718.206802][T11680] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.214008][T11680] bridge0: port 1(bridge_slave_0) entered forwarding state [ 718.307541][T11680] bridge0: port 2(bridge_slave_1) entered blocking state [ 718.314802][T11680] bridge0: port 2(bridge_slave_1) entered forwarding state [ 719.182639][T14889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 719.303561][T14889] veth0_vlan: entered promiscuous mode [ 719.336642][T15048] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2909'. [ 719.366803][T15048] netlink: 'syz.1.2909': attribute type 30 has an invalid length. [ 719.402411][T14889] veth1_vlan: entered promiscuous mode [ 719.520828][T14889] veth0_macvtap: entered promiscuous mode [ 719.556759][T14889] veth1_macvtap: entered promiscuous mode [ 719.753280][T14889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 719.838814][T14889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 719.852844][T14889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 719.894671][T14889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.193235][T14889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 720.439204][T14889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.468629][T14889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 720.488758][T14889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.513358][T14889] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 720.545148][T15056] bridge0: port 1(bridge_slave_0) entered disabled state [ 720.553145][T15056] bridge0: entered allmulticast mode [ 720.601814][T14889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 720.658690][T14889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.728945][T14889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 720.758907][T14889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.785239][T14889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 720.808621][T14889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.828659][T14889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 720.868679][T14889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.910018][T14889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 720.941255][T14889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.973548][T14889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 721.012590][T14889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.410419][T14889] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 721.649157][T14889] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.688963][T14889] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.728702][T14889] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.778655][T14889] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.028854][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 722.036714][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 722.250133][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 722.304794][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 722.448355][T15090] kvm: vcpu 0: requested 88 ns lapic timer period limited to 200000 ns [ 722.497410][T15090] kvm: pic: non byte write [ 723.018319][T15088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2925'. [ 726.200822][ T927] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 726.352089][T15132] batadv0: entered promiscuous mode [ 726.381803][T15133] serio: Serial port ptm0 [ 726.384638][T15134] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 726.429324][ T927] usb 3-1: Using ep0 maxpacket: 8 [ 726.462042][ T927] usb 3-1: New USB device found, idVendor=046d, idProduct=0850, bcdDevice=6b.da [ 726.489179][ T927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.517174][ T927] usb 3-1: config 0 descriptor?? [ 726.953299][T15118] usb usb9: usbfs: interface 0 claimed by hub while 'syz.2.2936' sets config #0 [ 727.032474][ T927] usb 3-1: string descriptor 0 read error: -71 [ 727.061321][ T927] gspca_main: STV06xx-2.14.0 probing 046d:0850 [ 727.094555][ T927] usb 3-1: unknown interface protocol 0xe6, assuming v1 [ 727.108701][ T927] usb 3-1: cannot find UAC_HEADER [ 727.157721][ T927] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 727.182580][ T927] usb 3-1: USB disconnect, device number 35 [ 727.339281][ T5091] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 727.352524][ T5091] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 727.362161][ T5091] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 727.380038][ T5091] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 727.389532][ T5091] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 727.397814][ T5091] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 727.470663][T14888] udevd[14888]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 728.014876][T15147] chnl_net:caif_netlink_parms(): no params data found [ 728.058759][ T9] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 728.289382][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 728.298724][T11680] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 728.322180][ T9] usb 4-1: config 0 has no interfaces? [ 728.330711][ T5091] Bluetooth: hci4: command 0x0406 tx timeout [ 728.334498][ T9] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 728.349861][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.361893][T15147] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.397741][T15147] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.439663][ T9] usb 4-1: config 0 descriptor?? [ 728.455627][T15147] bridge_slave_0: entered allmulticast mode [ 728.482438][T15147] bridge_slave_0: entered promiscuous mode [ 728.526254][T15147] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.535413][T11680] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 728.575946][T11680] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 728.581850][T15171] input: syz0 as /devices/virtual/input/input36 [ 728.598856][T15147] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.606131][T15147] bridge_slave_1: entered allmulticast mode [ 728.612730][T11680] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 728.647036][T15147] bridge_slave_1: entered promiscuous mode [ 728.665222][ T9] usb 4-1: USB disconnect, device number 48 [ 728.685128][T11680] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.727851][T15160] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 728.842123][T15147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 728.883685][T15147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 729.051198][T15147] team0: Port device team_slave_0 added [ 729.080814][T15147] team0: Port device team_slave_1 added [ 729.170382][T15147] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 729.187672][T15147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 729.250863][T15147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 729.299252][T15174] bridge0: entered promiscuous mode [ 729.304733][T15174] macsec1: entered promiscuous mode [ 729.329179][T15174] macsec1: entered allmulticast mode [ 729.334507][T15174] bridge0: entered allmulticast mode [ 729.369403][T15174] bridge0: left allmulticast mode [ 729.378052][T15174] bridge0: left promiscuous mode [ 729.449073][ T5103] Bluetooth: hci2: command tx timeout [ 729.525911][T15147] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 729.558502][T15147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 729.597758][T15147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 729.597997][T11680] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 729.635622][T11680] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input37 [ 729.804604][ T927] usb 2-1: USB disconnect, device number 38 [ 729.804709][ C0] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 729.941273][T15147] hsr_slave_0: entered promiscuous mode [ 729.958027][T15147] hsr_slave_1: entered promiscuous mode [ 729.969764][T15147] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 729.988078][T15147] Cannot create hsr debugfs directory [ 730.532896][ T29] audit: type=1326 audit(2000000441.239:1934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15187 comm="syz.3.2958" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff451175f19 code=0x0 [ 731.011713][T15147] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.320776][T15147] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.528787][ T5103] Bluetooth: hci2: command tx timeout [ 732.271315][T15147] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.605047][T15147] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.744671][ T12] bridge_slave_1: left allmulticast mode [ 732.784121][ T12] bridge_slave_1: left promiscuous mode [ 732.809593][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 732.861601][ T12] bridge_slave_0: left allmulticast mode [ 732.867294][ T12] bridge_slave_0: left promiscuous mode [ 732.970010][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 733.602268][ T5103] Bluetooth: hci2: command tx timeout [ 735.019327][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 735.045659][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 735.085155][ T12] bond0 (unregistering): Released all slaves [ 735.139193][T15225] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.146550][T15225] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.160679][T15225] bridge0: entered allmulticast mode [ 735.269799][T15235] netlink: 'syz.0.2975': attribute type 21 has an invalid length. [ 735.301720][T15235] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2975'. [ 735.625632][T15251] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 735.633493][T15251] vhci_hcd: invalid port number 10 [ 735.638735][T15251] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 735.658141][T15251] overlayfs: missing 'lowerdir' [ 735.714818][ T5103] Bluetooth: hci2: command tx timeout [ 736.488734][T15147] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 736.556124][T15147] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 736.617855][T15147] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 736.849407][T15147] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 736.988428][ T12] hsr_slave_0: left promiscuous mode [ 737.050877][ T12] hsr_slave_1: left promiscuous mode [ 737.138438][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 737.162371][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 737.191782][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 737.229562][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 737.393468][ T12] veth0_macvtap: left promiscuous mode [ 737.418978][ T12] veth1_vlan: left promiscuous mode [ 737.424345][ T12] veth0_vlan: left promiscuous mode [ 738.390375][T15290] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 738.397959][T15290] vhci_hcd: invalid port number 10 [ 738.404066][T15290] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 738.423902][T15290] overlayfs: missing 'lowerdir' [ 739.276429][T15298] netlink: 'syz.1.2995': attribute type 3 has an invalid length. [ 739.294604][T15298] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2995'. [ 739.687352][ T12] team0 (unregistering): Port device team_slave_1 removed [ 739.757255][ T12] team0 (unregistering): Port device team_slave_0 removed [ 740.799419][T15292] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2994'. [ 740.899933][T15312] netlink: 47 bytes leftover after parsing attributes in process `syz.2.3001'. [ 741.002035][T15316] input: syz0 as /devices/virtual/input/input38 [ 741.390328][T15323] tipc: Enabled bearer , priority 10 [ 741.851311][T15147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 742.006647][T15147] 8021q: adding VLAN 0 to HW filter on device team0 [ 742.515791][ T5169] tipc: Node number set to 10005162 [ 742.934353][ T5144] bridge0: port 1(bridge_slave_0) entered blocking state [ 742.941630][ T5144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 742.954107][ T5144] bridge0: port 2(bridge_slave_1) entered blocking state [ 742.961284][ T5144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 743.883105][T15147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 743.900763][T15352] kvm: vcpu 0: requested 32 ns lapic timer period limited to 200000 ns [ 744.021820][T15352] kvm: pic: non byte write [ 744.735182][T15147] veth0_vlan: entered promiscuous mode [ 744.805068][T15147] veth1_vlan: entered promiscuous mode [ 744.972194][T15147] veth0_macvtap: entered promiscuous mode [ 745.012806][T15147] veth1_macvtap: entered promiscuous mode [ 745.148420][T15147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 745.187188][T15147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.236062][T15147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 745.272202][T15147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.313462][T15147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 745.336815][T15147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.360316][T15147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 745.390272][T15147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.406910][T15147] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 745.431481][T15370] netlink: 47 bytes leftover after parsing attributes in process `syz.1.3014'. [ 745.501194][T15147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 745.562914][T15147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.639306][T15147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 745.688577][T15147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.735073][T15147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 745.765920][T15147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.786578][T15147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 745.807594][T15147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.837518][T15147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 745.898582][T15147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.948672][T15147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 746.655384][T15147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 746.755384][T15147] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 746.795027][T15147] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.848646][T15147] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.857555][T15147] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.887731][T15147] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.402629][T15387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3020'. [ 747.746058][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.758865][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.901571][ T5103] Bluetooth: hci3: unexpected event for opcode 0x200a [ 747.934669][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 747.981594][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 748.103874][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 748.130237][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 748.747262][T15410] netlink: 47 bytes leftover after parsing attributes in process `syz.1.3026'. [ 750.090987][ T5103] Bluetooth: hci3: unexpected event for opcode 0x200a [ 751.122420][T15445] netlink: 'syz.1.3041': attribute type 3 has an invalid length. [ 751.173800][T15445] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.3041'. [ 752.531746][ T5091] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 752.547041][ T5091] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 752.556721][ T5091] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 752.566499][ T5091] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 752.595491][ T5091] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 752.615581][ T5091] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 753.009417][T15481] kernel read not supported for file /eth0 (pid: 15481 comm: syz.4.3048) [ 753.092261][ T29] audit: type=1800 audit(2000000463.789:1935): pid=15481 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.3048" name="eth0" dev="mqueue" ino=66887 res=0 errno=0 [ 753.233144][T15462] chnl_net:caif_netlink_parms(): no params data found [ 753.634270][ T9] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 754.484391][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 754.493626][ T9] usb 3-1: New USB device found, idVendor=249c, idProduct=932c, bcdDevice=f9.1b [ 754.518761][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.548947][T15462] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.556647][T15462] bridge0: port 1(bridge_slave_0) entered disabled state [ 754.576738][ T9] usb 3-1: config 0 descriptor?? [ 754.596343][T15462] bridge_slave_0: entered allmulticast mode [ 754.604533][ T9] usb 3-1: selecting invalid altsetting 0 [ 754.610580][T15462] bridge_slave_0: entered promiscuous mode [ 754.629024][ T9] usb 3-1: can't set first interface for hiFace device. [ 754.648633][ T9] snd-usb-hiface 3-1:0.0: probe with driver snd-usb-hiface failed with error -5 [ 754.678616][T15499] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.687881][T15499] bridge0: port 1(bridge_slave_0) entered disabled state [ 754.696242][T15499] bridge0: entered allmulticast mode [ 754.750989][ T5091] Bluetooth: hci6: command tx timeout [ 754.819680][T15462] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.821847][ T5136] usb 3-1: USB disconnect, device number 36 [ 754.826812][T15462] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.827081][T15462] bridge_slave_1: entered allmulticast mode [ 754.904459][T15462] bridge_slave_1: entered promiscuous mode [ 755.087978][T15462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 755.203510][T15462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 755.540575][T15462] team0: Port device team_slave_0 added [ 755.570543][T15462] team0: Port device team_slave_1 added [ 755.697229][ T5091] Bluetooth: hci3: unexpected event for opcode 0x200a [ 755.959780][ T1041] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.135515][T15462] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 756.153962][T15462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 756.207697][T15462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 756.382177][ T1057] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 756.809874][ T5091] Bluetooth: hci6: command tx timeout [ 757.055809][ T1057] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 757.077865][ T1057] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 757.111407][ T1041] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.142430][ T1057] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 757.154541][ T1057] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 757.166973][ T1057] usb 3-1: Manufacturer: syz [ 757.172658][T15534] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3067'. [ 757.186170][ T1057] usb 3-1: config 0 descriptor?? [ 757.256875][T15462] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 757.289163][T15462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 757.329586][T15462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 757.368746][ T1057] rc_core: IR keymap rc-hauppauge not found [ 757.374688][ T1057] Registered IR keymap rc-empty [ 757.390070][ T1057] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 757.418717][ T9] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 757.441465][ T1057] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input39 [ 757.445679][ T1041] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.608716][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 757.616023][ T9] usb 1-1: config 0 has an invalid descriptor of length 130, skipping remainder of the config [ 757.642742][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 757.675267][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 757.735429][ T9] usb 1-1: SerialNumber: syz [ 757.776921][ T9] usb 1-1: config 0 descriptor?? [ 757.855849][ T1041] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.881312][ T1057] usb 3-1: USB disconnect, device number 37 [ 757.946910][T15462] hsr_slave_0: entered promiscuous mode [ 757.961815][T15462] hsr_slave_1: entered promiscuous mode [ 757.978879][T15462] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 757.988584][T15462] Cannot create hsr debugfs directory [ 758.010366][ T9] usb 1-1: Found UVC 0.00 device (05ac:8501) [ 758.017323][ T9] usb 1-1: No valid video chain found. [ 758.045287][ T9] usb 1-1: USB disconnect, device number 45 [ 758.226316][ T5091] Bluetooth: hci3: unexpected event for opcode 0x200a [ 758.243128][ T1041] bridge_slave_1: left allmulticast mode [ 758.258957][ T1041] bridge_slave_1: left promiscuous mode [ 758.267951][ T1041] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.486575][ T1041] bridge_slave_0: left allmulticast mode [ 758.516274][ T1041] bridge_slave_0: left promiscuous mode [ 758.536737][ T1041] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.576348][ T29] audit: type=1326 audit(2000000469.279:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15560 comm="syz.2.3077" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f751e975f19 code=0x0 [ 758.878790][ T5091] Bluetooth: hci6: command tx timeout [ 758.959077][ T5136] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 759.185585][ T5136] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 759.200105][ T5136] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 759.220343][ T5136] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 759.238718][ T5136] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.279962][ T5136] usb 3-1: config 0 descriptor?? [ 759.564546][ T1041] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 759.601623][ T1041] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 759.623581][ T1041] bond0 (unregistering): Released all slaves [ 759.675764][T15559] tipc: Started in network mode [ 759.682180][T15559] tipc: Node identity str_len:, cluster identity 4711 [ 759.714580][T15559] tipc: Enabling of bearer rejected, failed to enable media [ 759.725889][ T5136] cm6533_jd 0003:0D8C:0022.0020: unknown main item tag 0x0 [ 759.758782][ T5136] cm6533_jd 0003:0D8C:0022.0020: unknown main item tag 0x0 [ 759.767757][ T5136] cm6533_jd 0003:0D8C:0022.0020: unknown main item tag 0x0 [ 759.789010][ T5136] cm6533_jd 0003:0D8C:0022.0020: unknown main item tag 0x0 [ 759.796824][ T5136] cm6533_jd 0003:0D8C:0022.0020: unknown main item tag 0x0 [ 759.816464][ T5136] cm6533_jd 0003:0D8C:0022.0020: No inputs registered, leaving [ 759.868870][ T5136] cm6533_jd 0003:0D8C:0022.0020: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 760.065280][ T5136] usb 3-1: USB disconnect, device number 38 [ 760.382320][ T1041] hsr_slave_0: left promiscuous mode [ 760.415904][ T1041] hsr_slave_1: left promiscuous mode [ 760.441138][ T1041] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 760.453446][ T1041] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 760.469496][ T1041] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 760.483704][ T1041] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 760.563765][ T1041] veth1_macvtap: left promiscuous mode [ 760.574124][ T1041] veth0_macvtap: left promiscuous mode [ 760.586720][ T1041] veth1_vlan: left promiscuous mode [ 760.597950][ T1041] veth0_vlan: left promiscuous mode [ 760.969294][ T5091] Bluetooth: hci6: command tx timeout [ 763.547101][T15626] ALSA: mixer_oss: invalid OSS volume '' [ 765.149447][ T1041] team0 (unregistering): Port device team_slave_1 removed [ 765.269282][ T1041] team0 (unregistering): Port device team_slave_0 removed [ 766.161658][T15618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3098'. [ 766.202918][T15641] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 768.086440][T15671] fuse: Unknown parameter '00000000000000000000' [ 768.140072][T15462] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 768.175747][T15462] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 768.215848][T15462] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 768.255544][T15462] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 768.285883][T15676] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 768.562923][T15462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 768.606608][T15462] 8021q: adding VLAN 0 to HW filter on device team0 [ 768.610355][T15683] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3122'. [ 768.646630][ T1057] bridge0: port 1(bridge_slave_0) entered blocking state [ 768.653858][ T1057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 768.687842][ T5136] bridge0: port 2(bridge_slave_1) entered blocking state [ 768.695050][ T5136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 770.316000][T15462] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 770.368905][T15668] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 770.469309][T15462] veth0_vlan: entered promiscuous mode [ 770.512720][T15462] veth1_vlan: entered promiscuous mode [ 770.588898][T15668] usb 5-1: Using ep0 maxpacket: 8 [ 770.596879][T15668] usb 5-1: config 0 has an invalid descriptor of length 130, skipping remainder of the config [ 770.625731][T15462] veth0_macvtap: entered promiscuous mode [ 770.668757][T15668] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 770.677839][T15668] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 770.693534][T15462] veth1_macvtap: entered promiscuous mode [ 770.739089][T15668] usb 5-1: SerialNumber: syz [ 770.753656][T15668] usb 5-1: config 0 descriptor?? [ 770.778912][T15462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 770.795578][T15462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 770.818701][T15462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 770.838578][T15462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 770.851073][T15462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 770.873371][T15462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 770.892339][T15462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 770.914188][T15462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 770.940788][T15462] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 771.001710][T15462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 771.018885][ T1057] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 771.026765][T15462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 771.047390][T15668] usb 5-1: Found UVC 0.00 device (05ac:8501) [ 771.055049][T15668] usb 5-1: No valid video chain found. [ 771.062441][T15462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 771.083949][T15668] usb 5-1: USB disconnect, device number 23 [ 771.093738][T15462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 771.124607][T15462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 771.145887][T15462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 771.166222][T15462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 771.186123][T15462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 771.208213][T15462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 771.221292][T15462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 771.231442][T15462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 771.242071][T15462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 771.253580][ T1057] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 771.271770][ T1057] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.272585][T15462] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 771.301698][ T1057] usb 1-1: config 0 descriptor?? [ 771.322582][T15462] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.359359][T15462] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.368149][T15462] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.403868][T15462] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.582692][T12384] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 771.620450][T12384] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 771.624518][T15725] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 771.663526][T15725] VFS: Can't find a romfs filesystem on dev nullb0. [ 771.663526][T15725] [ 771.681201][T15739] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 771.722062][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 771.743316][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 771.962682][ T1057] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 771.982251][ T1057] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 772.018769][ T1057] [drm:udl_init] *ERROR* Selecting channel failed [ 772.060163][ T1057] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 772.067343][ T1057] [drm] Initialized udl on minor 2 [ 772.130158][T15751] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3148'. [ 772.147857][ T1057] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 772.333753][ T1057] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 772.366529][T11680] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 775.922736][ T1057] usb 1-1: USB disconnect, device number 46 [ 775.938986][T11680] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 775.946957][T11680] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 777.046682][ T29] audit: type=1326 audit(2000000487.749:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15788 comm="syz.4.3160" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6315775f19 code=0x0 [ 777.358886][T11680] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 777.538748][ T5093] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 777.748757][ T5093] usb 4-1: Using ep0 maxpacket: 32 [ 777.867678][ T5093] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 777.982951][ T5093] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.081067][ T5093] usb 4-1: Product: syz [ 778.085272][ T5093] usb 4-1: Manufacturer: syz [ 778.128612][ T5093] usb 4-1: SerialNumber: syz [ 778.152384][ T5093] usb 4-1: config 0 descriptor?? [ 778.180544][ T5093] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 778.190171][T11680] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 778.199989][T11680] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.211803][T11680] usb 3-1: config 0 descriptor?? [ 778.338635][ T29] audit: type=1326 audit(2000000489.029:1938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15807 comm="syz.4.3167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6315775f19 code=0x7ffc0000 [ 778.388801][ T5093] gspca_stk1135: reg_w 0x2 err -71 [ 778.390403][ T29] audit: type=1326 audit(2000000489.029:1939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15807 comm="syz.4.3167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6315775f19 code=0x7ffc0000 [ 778.394984][ T5093] gspca_stk1135: serial bus timeout: status=0x00 [ 778.462925][ T5093] gspca_stk1135: Sensor write failed [ 778.478491][ T5093] gspca_stk1135: serial bus timeout: status=0x00 [ 778.500894][ T29] audit: type=1326 audit(2000000489.039:1940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15807 comm="syz.4.3167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6315775f19 code=0x7ffc0000 [ 778.501445][ T5093] gspca_stk1135: Sensor write failed [ 778.561861][ T5093] gspca_stk1135: serial bus timeout: status=0x00 [ 778.575015][ T5093] gspca_stk1135: Sensor read failed [ 778.587065][ T5093] gspca_stk1135: serial bus timeout: status=0x00 [ 778.592342][ T29] audit: type=1326 audit(2000000489.039:1941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15807 comm="syz.4.3167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6315775f19 code=0x7ffc0000 [ 778.602734][T15791] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 778.635129][ T5093] gspca_stk1135: Sensor read failed [ 778.652488][ T5093] gspca_stk1135: Detected sensor type unknown (0x0) [ 778.662561][ T29] audit: type=1326 audit(2000000489.039:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15807 comm="syz.4.3167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6315775f19 code=0x7ffc0000 [ 778.673957][ T5093] gspca_stk1135: serial bus timeout: status=0x00 [ 778.700432][T15791] VFS: Can't find a romfs filesystem on dev nullb0. [ 778.700432][T15791] [ 778.719309][T15816] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 778.736853][ T5093] gspca_stk1135: Sensor read failed [ 778.746457][ T29] audit: type=1326 audit(2000000489.049:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15807 comm="syz.4.3167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6315775f19 code=0x7ffc0000 [ 778.760681][ T5093] gspca_stk1135: serial bus timeout: status=0x00 [ 778.785223][ T29] audit: type=1326 audit(2000000489.159:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15807 comm="syz.4.3167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6315775f19 code=0x7ffc0000 [ 778.807758][ T5093] gspca_stk1135: Sensor read failed [ 778.818438][ T29] audit: type=1326 audit(2000000489.159:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15807 comm="syz.4.3167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f631576cf67 code=0x7ffc0000 [ 778.833142][ T5093] gspca_stk1135: serial bus timeout: status=0x00 [ 778.856697][ T5093] gspca_stk1135: Sensor write failed [ 778.871929][ T5093] gspca_stk1135: serial bus timeout: status=0x00 [ 778.904405][ T29] audit: type=1326 audit(2000000489.159:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15807 comm="syz.4.3167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6315711909 code=0x7ffc0000 [ 779.100908][ T5093] gspca_stk1135: Sensor write failed [ 779.107015][ T5093] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 779.118377][ T5093] usb 4-1: USB disconnect, device number 49 [ 779.166634][T11680] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 779.857258][T11680] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 779.878706][T11680] [drm:udl_init] *ERROR* Selecting channel failed [ 779.981411][T11680] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 780.018508][T11680] [drm] Initialized udl on minor 2 [ 780.043064][T11680] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 780.077421][T11680] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 780.109673][ T1057] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 780.239356][T11680] usb 3-1: USB disconnect, device number 39 [ 780.276285][ T1057] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 782.185702][ T29] kauditd_printk_skb: 76 callbacks suppressed [ 782.185721][ T29] audit: type=1326 audit(2000000492.759:2023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15860 comm="syz.2.3185" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f751e975f19 code=0x0 [ 783.518788][ T5103] Bluetooth: hci6: command tx timeout [ 783.606470][T15903] binder: 15894:15903 ioctl 4018620d 0 returned -22 [ 783.627686][T15907] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3201'. [ 783.891181][T15907] bond3: entered promiscuous mode [ 783.914749][T15912] lo: entered promiscuous mode [ 784.588188][T15912] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 784.654097][T15912] bond3: (slave lo): Enslaving as an active interface with an up link [ 784.676025][ T5093] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 784.719591][ T29] audit: type=1326 audit(2000000495.419:2024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15915 comm="syz.3.3203" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb85f175f19 code=0x0 [ 784.900076][ T5093] usb 1-1: device descriptor read/64, error -71 [ 785.090807][T15928] input: syz0 as /devices/virtual/input/input40 [ 785.189507][T11680] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 785.219481][ T5093] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 785.339078][T15932] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3208'. [ 785.390832][T11680] usb 5-1: Using ep0 maxpacket: 8 [ 785.398931][ T5093] usb 1-1: device descriptor read/64, error -71 [ 785.445792][T11680] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 785.480170][T11680] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 785.520251][T11680] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 785.547636][ T5093] usb usb1-port1: attempt power cycle [ 785.552157][T11680] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.613413][T11680] usb 5-1: config 0 descriptor?? [ 785.616048][ T29] audit: type=1326 audit(2000000496.319:2025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15939 comm="syz.3.3212" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb85f175f19 code=0x0 [ 786.168798][ T5093] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 786.733184][ T5093] usb 1-1: device descriptor read/8, error -71 [ 786.851648][ T5136] usb 5-1: USB disconnect, device number 24 [ 787.359404][ T5093] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 787.704085][ T5093] usb 1-1: config 0 has an invalid interface number: 233 but max is 0 [ 787.728680][ T5093] usb 1-1: config 0 has no interface number 0 [ 787.769394][ T5093] usb 1-1: config 0 interface 233 altsetting 90 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 787.791828][ T5093] usb 1-1: config 0 interface 233 has no altsetting 0 [ 787.808725][ T5093] usb 1-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 787.818443][ T5093] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.869755][ T5093] usb 1-1: config 0 descriptor?? [ 788.066236][ T1041] Bluetooth: hci0: Frame reassembly failed (-84) [ 788.112201][ T5093] usb 1-1: string descriptor 0 read error: -71 [ 788.131892][ T5093] ums-realtek 1-1:0.233: USB Mass Storage device detected [ 788.260632][ T5093] usb 1-1: USB disconnect, device number 50 [ 788.890606][ T5093] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 789.088654][ T5093] usb 2-1: Using ep0 maxpacket: 8 [ 789.102322][ T5093] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 789.110792][ T5093] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 789.155971][ T5093] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 789.178923][ T5093] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.200401][ T5093] usb 2-1: config 0 descriptor?? [ 789.439869][ T5093] usb 2-1: USB disconnect, device number 39 [ 790.078797][ T5103] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 790.661500][T16030] xt_bpf: check failed: parse error [ 790.738197][ C0] ================================================================== [ 790.746360][ C0] BUG: KASAN: slab-use-after-free in __dev_flush+0x6b/0x160 [ 790.753672][ C0] Read of size 8 at addr ffff88801e69f3e8 by task syz.3.3243/16032 [ 790.761579][ C0] [ 790.763922][ C0] CPU: 0 UID: 0 PID: 16032 Comm: syz.3.3243 Not tainted 6.10.0-syzkaller-12084-g28bbe4ea686a #0 [ 790.774420][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 790.784470][ C0] Call Trace: [ 790.787739][ C0] [ 790.790573][ C0] dump_stack_lvl+0x241/0x360 [ 790.795250][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 790.800550][ C0] ? __pfx__printk+0x10/0x10 [ 790.805152][ C0] ? _printk+0xd5/0x120 [ 790.809307][ C0] ? __virt_addr_valid+0x183/0x530 [ 790.814416][ C0] ? __virt_addr_valid+0x183/0x530 [ 790.819612][ C0] print_report+0x169/0x550 [ 790.824200][ C0] ? __virt_addr_valid+0x183/0x530 [ 790.829300][ C0] ? __virt_addr_valid+0x183/0x530 [ 790.834398][ C0] ? __virt_addr_valid+0x45f/0x530 [ 790.839500][ C0] ? __phys_addr+0xba/0x170 [ 790.844065][ C0] ? __dev_flush+0x6b/0x160 [ 790.848565][ C0] kasan_report+0x143/0x180 [ 790.853063][ C0] ? __dev_flush+0x6b/0x160 [ 790.857561][ C0] __dev_flush+0x6b/0x160 [ 790.861882][ C0] xdp_do_check_flushed+0x129/0x240 [ 790.867079][ C0] __napi_poll+0xe4/0x490 [ 790.871406][ C0] net_rx_action+0x89b/0x1240 [ 790.876091][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 790.881301][ C0] ? sched_clock+0x4a/0x70 [ 790.885728][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 790.892056][ C0] handle_softirqs+0x2c4/0x970 [ 790.896815][ C0] ? __irq_exit_rcu+0xf4/0x1c0 [ 790.901573][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 790.906860][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 790.912054][ C0] __irq_exit_rcu+0xf4/0x1c0 [ 790.916638][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 790.921833][ C0] irq_exit_rcu+0x9/0x30 [ 790.926069][ C0] common_interrupt+0xaa/0xd0 [ 790.930747][ C0] [ 790.933666][ C0] [ 790.936586][ C0] asm_common_interrupt+0x26/0x40 [ 790.941625][ C0] RIP: 0010:lock_is_held_type+0x13b/0x190 [ 790.947341][ C0] Code: 75 44 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 4c 41 f7 c4 00 02 00 00 74 01 fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 42 89 d8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f [ 790.966944][ C0] RSP: 0018:ffffc900098af698 EFLAGS: 00000206 [ 790.973010][ C0] RAX: a88dd52d90f8b300 RBX: 0000000000000000 RCX: ffff888020f19e00 [ 790.980977][ C0] RDX: 0000000000000000 RSI: ffffffff8bcae720 RDI: ffffffff8c1fcba0 [ 790.989215][ C0] RBP: 0000000000000001 R08: ffffffff92fcd837 R09: 1ffffffff25f9b06 [ 790.997191][ C0] R10: dffffc0000000000 R11: fffffbfff25f9b07 R12: 0000000000000246 [ 791.005161][ C0] R13: ffff888020f19e00 R14: 00000000ffffffff R15: ffffffff8e3376c0 [ 791.013141][ C0] __might_resched+0xa5/0x780 [ 791.017818][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 791.024140][ C0] ? __pfx___might_resched+0x10/0x10 [ 791.029427][ C0] ? kasan_quarantine_put+0xdc/0x230 [ 791.034700][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 791.039897][ C0] ? exit_mmap+0x645/0xc80 [ 791.044309][ C0] ? kmem_cache_free+0x145/0x350 [ 791.049248][ C0] exit_mmap+0x658/0xc80 [ 791.053511][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 791.058328][ C0] ? __asan_memset+0x23/0x50 [ 791.062931][ C0] ? uprobe_clear_state+0x277/0x290 [ 791.068126][ C0] ? mm_update_next_owner+0xa2/0x8a0 [ 791.073408][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 791.078608][ C0] __mmput+0x115/0x380 [ 791.082675][ C0] exit_mm+0x220/0x310 [ 791.086738][ C0] ? __pfx_exit_mm+0x10/0x10 [ 791.091409][ C0] ? taskstats_exit+0x326/0xa60 [ 791.096262][ C0] do_exit+0x9b2/0x27f0 [ 791.100521][ C0] ? __pfx_do_exit+0x10/0x10 [ 791.105137][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 791.110613][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 791.116603][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 791.122940][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 791.128052][ C0] do_group_exit+0x207/0x2c0 [ 791.132639][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 791.137840][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 791.143057][ C0] get_signal+0x1695/0x1730 [ 791.147577][ C0] ? __pfx_get_signal+0x10/0x10 [ 791.152437][ C0] arch_do_signal_or_restart+0x96/0x860 [ 791.157991][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 791.164143][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 791.170213][ C0] ? syscall_exit_to_user_mode+0xa3/0x370 [ 791.175928][ C0] syscall_exit_to_user_mode+0xc9/0x370 [ 791.181486][ C0] do_syscall_64+0x100/0x230 [ 791.186093][ C0] ? clear_bhb_loop+0x35/0x90 [ 791.190890][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 791.196805][ C0] RIP: 0033:0x7fb85f175f19 [ 791.201230][ C0] Code: Unable to access opcode bytes at 0x7fb85f175eef. [ 791.208240][ C0] RSP: 002b:00007fb85ff990f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 791.216784][ C0] RAX: fffffffffffffe00 RBX: 00007fb85f305f68 RCX: 00007fb85f175f19 [ 791.224745][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb85f305f68 [ 791.232707][ C0] RBP: 00007fb85f305f60 R08: 00007fb85ff996c0 R09: 00007fb85ff996c0 [ 791.240670][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb85f305f6c [ 791.248637][ C0] R13: 000000000000000b R14: 00007ffda854d380 R15: 00007ffda854d468 [ 791.256619][ C0] [ 791.259631][ C0] [ 791.261939][ C0] Allocated by task 15462: [ 791.266347][ C0] kasan_save_track+0x3f/0x80 [ 791.271019][ C0] __kasan_slab_alloc+0x66/0x80 [ 791.275859][ C0] kmem_cache_alloc_noprof+0x135/0x2a0 [ 791.281330][ C0] vm_area_dup+0x27/0x290 [ 791.285669][ C0] copy_mm+0xc7b/0x1f30 [ 791.289817][ C0] copy_process+0x187a/0x3dc0 [ 791.294486][ C0] kernel_clone+0x223/0x870 [ 791.298982][ C0] __x64_sys_clone+0x258/0x2a0 [ 791.303739][ C0] do_syscall_64+0xf3/0x230 [ 791.308233][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 791.314119][ C0] [ 791.316426][ C0] Freed by task 16032: [ 791.320478][ C0] kasan_save_track+0x3f/0x80 [ 791.325143][ C0] kasan_save_free_info+0x40/0x50 [ 791.330246][ C0] poison_slab_object+0xe0/0x150 [ 791.335169][ C0] __kasan_slab_free+0x37/0x60 [ 791.339925][ C0] kmem_cache_free+0x145/0x350 [ 791.344679][ C0] exit_mmap+0x645/0xc80 [ 791.348912][ C0] __mmput+0x115/0x380 [ 791.352972][ C0] exit_mm+0x220/0x310 [ 791.357027][ C0] do_exit+0x9b2/0x27f0 [ 791.361170][ C0] do_group_exit+0x207/0x2c0 [ 791.365752][ C0] get_signal+0x1695/0x1730 [ 791.370245][ C0] arch_do_signal_or_restart+0x96/0x860 [ 791.375778][ C0] syscall_exit_to_user_mode+0xc9/0x370 [ 791.381316][ C0] do_syscall_64+0x100/0x230 [ 791.385901][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 791.391789][ C0] [ 791.394101][ C0] The buggy address belongs to the object at ffff88801e69f3e0 [ 791.394101][ C0] which belongs to the cache vm_area_struct of size 184 [ 791.408403][ C0] The buggy address is located 8 bytes inside of [ 791.408403][ C0] freed 184-byte region [ffff88801e69f3e0, ffff88801e69f498) [ 791.422015][ C0] [ 791.424323][ C0] The buggy address belongs to the physical page: [ 791.430811][ C0] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1e69f [ 791.439560][ C0] memcg:ffff88802b3ab601 [ 791.443780][ C0] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 791.450878][ C0] page_type: 0xfdffffff(slab) [ 791.455560][ C0] raw: 00fff00000000000 ffff888015eefb40 dead000000000122 0000000000000000 [ 791.464162][ C0] raw: 0000000000000000 0000000000100010 00000001fdffffff ffff88802b3ab601 [ 791.472744][ C0] page dumped because: kasan: bad access detected [ 791.479157][ C0] page_owner tracks the page as allocated [ 791.484860][ C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 16020, tgid 16019 (syz.3.3238), ts 789604324059, free_ts 789579691994 [ 791.504219][ C0] post_alloc_hook+0x1f3/0x230 [ 791.508978][ C0] get_page_from_freelist+0x2e4c/0x2f10 [ 791.514513][ C0] __alloc_pages_noprof+0x256/0x6c0 [ 791.519702][ C0] alloc_slab_page+0x5f/0x120 [ 791.524366][ C0] allocate_slab+0x5a/0x2f0 [ 791.528859][ C0] ___slab_alloc+0xcd1/0x14b0 [ 791.533531][ C0] __slab_alloc+0x58/0xa0 [ 791.537852][ C0] kmem_cache_alloc_noprof+0x1c1/0x2a0 [ 791.543301][ C0] vm_area_dup+0x27/0x290 [ 791.547620][ C0] __split_vma+0x1a9/0xc30 [ 791.552031][ C0] do_vmi_align_munmap+0x433/0x18c0 [ 791.557224][ C0] do_vmi_munmap+0x261/0x2f0 [ 791.561807][ C0] mmap_region+0x72f/0x2090 [ 791.566350][ C0] do_mmap+0x8ad/0xfa0 [ 791.570409][ C0] vm_mmap_pgoff+0x1dd/0x3d0 [ 791.574988][ C0] do_syscall_64+0xf3/0x230 [ 791.579485][ C0] page last free pid 15668 tgid 15668 stack trace: [ 791.585968][ C0] free_unref_page+0xd19/0xea0 [ 791.590722][ C0] vfree+0x186/0x2e0 [ 791.594606][ C0] delayed_vfree_work+0x56/0x80 [ 791.599451][ C0] process_scheduled_works+0xa2c/0x1830 [ 791.604992][ C0] worker_thread+0x86d/0xd40 [ 791.609574][ C0] kthread+0x2f0/0x390 [ 791.613629][ C0] ret_from_fork+0x4b/0x80 [ 791.618044][ C0] ret_from_fork_asm+0x1a/0x30 [ 791.622805][ C0] [ 791.625117][ C0] Memory state around the buggy address: [ 791.630736][ C0] ffff88801e69f280: fb fb fb fb fb fc fc fc fc fc fc fc fc fa fb fb [ 791.638785][ C0] ffff88801e69f300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 791.646833][ C0] >ffff88801e69f380: fb fb fb fb fc fc fc fc fc fc fc fc fa fb fb fb [ 791.654877][ C0] ^ [ 791.662320][ C0] ffff88801e69f400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 791.670368][ C0] ffff88801e69f480: fb fb fb fc fc fc fc fc fc fc fc fa fb fb fb fb [ 791.678410][ C0] ================================================================== [ 791.686538][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 791.693748][ C0] CPU: 0 UID: 0 PID: 16032 Comm: syz.3.3243 Not tainted 6.10.0-syzkaller-12084-g28bbe4ea686a #0 [ 791.704178][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 791.714246][ C0] Call Trace: [ 791.717535][ C0] [ 791.720384][ C0] dump_stack_lvl+0x241/0x360 [ 791.725082][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 791.730294][ C0] ? __pfx__printk+0x10/0x10 [ 791.734913][ C0] ? vscnprintf+0x5d/0x90 [ 791.739261][ C0] panic+0x349/0x860 [ 791.743169][ C0] ? check_panic_on_warn+0x21/0xb0 [ 791.748293][ C0] ? __pfx_panic+0x10/0x10 [ 791.752721][ C0] ? mark_lock+0x9a/0x350 [ 791.757085][ C0] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 791.763009][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 791.768929][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 791.775285][ C0] ? print_report+0x502/0x550 [ 791.779990][ C0] check_panic_on_warn+0x86/0xb0 [ 791.785028][ C0] ? __dev_flush+0x6b/0x160 [ 791.789545][ C0] end_report+0x77/0x160 [ 791.793800][ C0] kasan_report+0x154/0x180 [ 791.798318][ C0] ? __dev_flush+0x6b/0x160 [ 791.802836][ C0] __dev_flush+0x6b/0x160 [ 791.807185][ C0] xdp_do_check_flushed+0x129/0x240 [ 791.812408][ C0] __napi_poll+0xe4/0x490 [ 791.816768][ C0] net_rx_action+0x89b/0x1240 [ 791.821488][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 791.826631][ C0] ? sched_clock+0x4a/0x70 [ 791.831081][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 791.837527][ C0] handle_softirqs+0x2c4/0x970 [ 791.842321][ C0] ? __irq_exit_rcu+0xf4/0x1c0 [ 791.847119][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 791.852424][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 791.857642][ C0] __irq_exit_rcu+0xf4/0x1c0 [ 791.862248][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 791.867470][ C0] irq_exit_rcu+0x9/0x30 [ 791.871723][ C0] common_interrupt+0xaa/0xd0 [ 791.876416][ C0] [ 791.879350][ C0] [ 791.882290][ C0] asm_common_interrupt+0x26/0x40 [ 791.887331][ C0] RIP: 0010:lock_is_held_type+0x13b/0x190 [ 791.893068][ C0] Code: 75 44 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 4c 41 f7 c4 00 02 00 00 74 01 fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 42 89 d8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f [ 791.912682][ C0] RSP: 0018:ffffc900098af698 EFLAGS: 00000206 [ 791.918765][ C0] RAX: a88dd52d90f8b300 RBX: 0000000000000000 RCX: ffff888020f19e00 [ 791.926744][ C0] RDX: 0000000000000000 RSI: ffffffff8bcae720 RDI: ffffffff8c1fcba0 [ 791.934720][ C0] RBP: 0000000000000001 R08: ffffffff92fcd837 R09: 1ffffffff25f9b06 [ 791.942704][ C0] R10: dffffc0000000000 R11: fffffbfff25f9b07 R12: 0000000000000246 [ 791.950683][ C0] R13: ffff888020f19e00 R14: 00000000ffffffff R15: ffffffff8e3376c0 [ 791.958676][ C0] __might_resched+0xa5/0x780 [ 791.963373][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 791.969724][ C0] ? __pfx___might_resched+0x10/0x10 [ 791.975023][ C0] ? kasan_quarantine_put+0xdc/0x230 [ 791.980315][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 791.985529][ C0] ? exit_mmap+0x645/0xc80 [ 791.989963][ C0] ? kmem_cache_free+0x145/0x350 [ 791.994918][ C0] exit_mmap+0x658/0xc80 [ 791.999183][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 792.003985][ C0] ? __asan_memset+0x23/0x50 [ 792.008594][ C0] ? uprobe_clear_state+0x277/0x290 [ 792.013803][ C0] ? mm_update_next_owner+0xa2/0x8a0 [ 792.019095][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 792.024313][ C0] __mmput+0x115/0x380 [ 792.028397][ C0] exit_mm+0x220/0x310 [ 792.032488][ C0] ? __pfx_exit_mm+0x10/0x10 [ 792.037168][ C0] ? taskstats_exit+0x326/0xa60 [ 792.042037][ C0] do_exit+0x9b2/0x27f0 [ 792.046204][ C0] ? __pfx_do_exit+0x10/0x10 [ 792.050800][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 792.056182][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 792.062263][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 792.068608][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 792.073756][ C0] do_group_exit+0x207/0x2c0 [ 792.080382][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 792.085712][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 792.090956][ C0] get_signal+0x1695/0x1730 [ 792.095494][ C0] ? __pfx_get_signal+0x10/0x10 [ 792.100372][ C0] arch_do_signal_or_restart+0x96/0x860 [ 792.105980][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 792.112147][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 792.118150][ C0] ? syscall_exit_to_user_mode+0xa3/0x370 [ 792.123910][ C0] syscall_exit_to_user_mode+0xc9/0x370 [ 792.129487][ C0] do_syscall_64+0x100/0x230 [ 792.134093][ C0] ? clear_bhb_loop+0x35/0x90 [ 792.138777][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.144688][ C0] RIP: 0033:0x7fb85f175f19 [ 792.149109][ C0] Code: Unable to access opcode bytes at 0x7fb85f175eef. [ 792.156128][ C0] RSP: 002b:00007fb85ff990f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 792.164558][ C0] RAX: fffffffffffffe00 RBX: 00007fb85f305f68 RCX: 00007fb85f175f19 [ 792.172540][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb85f305f68 [ 792.180520][ C0] RBP: 00007fb85f305f60 R08: 00007fb85ff996c0 R09: 00007fb85ff996c0 [ 792.188500][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb85f305f6c [ 792.196649][ C0] R13: 000000000000000b R14: 00007ffda854d380 R15: 00007ffda854d468 [ 792.204641][ C0] [ 792.207883][ C0] Kernel Offset: disabled [ 792.212195][ C0] Rebooting in 86400 seconds..