last executing test programs: 12.895671728s ago: executing program 2 (id=2577): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0xfffffffe, "2420f63a00"}) 12.548238753s ago: executing program 2 (id=2579): socket$nl_netfilter(0x10, 0x3, 0xc) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x282a2, 0x0) socket$inet6(0xa, 0x6, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x20) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000080)={0x3ff}, 0x0, 0x0) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000f, 0x11, r0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x4000) 11.186228016s ago: executing program 2 (id=2585): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r3, &(0x7f00000007c0)={0x10, 0x0, 0x25dfdbfd}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x0, 0xfff}, 0x48) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000186800000000000090737c73267beee600000000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r8, &(0x7f00000007c0)={0x10, 0x0, 0x25dfdbfd, 0xfddbdf25}, 0xc) sendmsg$tipc(r1, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="3eed50d0125719a810f88e3f47186fe4dae74182dfd109a2587c4797410c9b8e39bd3d9aa144d5908647c30c8db69b5c17084c9b1bfbb8680737c4f88abcdbc7d294d72ab1b344270915df9ddf5635644c351c22b29d948ac4106bce7107570beed63077cfbc98ef71699eae65d37724d995b553e7a3ade619b522313ab382caf879feb48942878e605ee3ee2872794e3abe22a3f025068b628a5d92468092a5cc649bbbd978b5772e537939432a502122235ced312dafd108c9ffeb0b38cc16da9418ca01d485a6afb5827da4df6e1121ec307de14bb32b6a977608e4576a998182dd93d592ff43e55bfdbbce23ecd501e43b3e93ef8d9d01711dff54c301e299d3801a3cffe6c9883fbd0e47124dc02569f62d48b878fcb58ce99fcffcd2a5166eff3ad93cf1d137274993d86a3b3730d63ded759f6ca88fa449e5575b15321e5a58a1f888eed7466db4976ce35f6d2efb5ad05d99a66482dc607cb5acb24d326803bd337519cc98103f59c63b5962cd72e4497d1b00817d6e09de70270a09b493c2226617b1c9ef9d506be00d6e07f14633a966f04ecca90fb8d2b963ad6f3817935bd6534fa3da1c5dc468789cbf1192f3c0bff3777f1edd2ada5d35f88f12f29e952c44445ce623509d66811c80a9e0f13ad85aba37d86ff0da4dda601d9e8acb264233bc939fb056316612cff687d5c44157be05bcc88b333ff2a40041d98f1acfe6e2231a84e09bd7a54a0442cf87ce3ee8fd8da39da1862862ae40fc3cb3055c8b70e62f243850707341f51426bb3e71c7a4fffefab060db786000618b05eb087a424a2f30f6a232ff44b605f70ceec0a8f70e37907f6e0bbba21e9d5b7ecb6d287742b75c101ba79525918c3473eae38f3c177249dfa8816661c9921f0b0c858d53ab87c8407b97950c842111002edd1d1e80b801b495da28bcd5409bc971e55dab1857e188ac9728efc8f9a4543945f86ade13b445eacecbbf848a96410ac37c57e3e9e8bc8b8fadd559d225c7468639da2b5d1208558b51e94c14faa7947a7c60e81a96bb5d194cc7289adbc02ebb4b49be1f1efc429db2f9b79b5a22919dba0c35341042c5776942c52365367c4bfc95b42be383cca7107161ded7e851d0126da33d581f1e2b08d0c061e86d31e7a83f9b51c79b4034c7deda7697034e1404c6e8e459f76c2efe64350146c7437ef808e04ca14df5f6f500264fd977272bbf8fc096774e8eb61d0963430751ac1425a073f84346b0eba368cba7fa34adc420800d4f99927280eba199f9695cf88124fafc3a2b1226d2f2ab3ea27c69a127650cf5c725b54c02bd8729033cf699ce7f030f9a3442056244da3cfb61a8126dba11377624f39eb009242152fd7b8b88de7dd86057f29bfcb7b7df0e65e7e9ac9eeaa41afa62743698bff03d5b2d51fb6bca2d92294e8e177cfa3661b26f1c040e9bed983b7bc0aa154eb9c92e4ee25091318c53113a1c23ac62d2d71504cba99041f29a4f332133292cf20abec9222a2acca57cac48fa6c0668ee5eecb494741a64d33b011dcca74696d4614c5b45a5d20983b1708d365ed3ffa60f9161972a611c22642c3c259b41f943f6d7a8b60f284d325e38fe76f0645e069ff70cae38850ccf973193b6232c987df26239a574691f7f07fffa6deae1eb0324fe546573c36f2a2c31cd442517a9b036ae6a2a491e7343864693c107a5dc2585820863c146c1ba6caa4fea9b87d567716f4c8ca1a9d2848055cd750512d3b7415d090019dc8a04a1a1d28931093cd8f00e94c407ca1fa2a5ce903d9df26e008c07cd13afa783220e1bd5e6b60645f3dbb6ecb4156fedafa2dd25498c6a99d94f0b38125ea7741b75109dcac9f80635f79f5c8a0483bb9f05a3a5bf721c7541edb252449f8b13e63c370a6146332f03ca1f1b6fe0bed984f13744bb7fa0fe322e83ddf9ffb2083e94f33604a0a199220c450dad94bf154805e7f9e4350ca2d81adf2978c87dcc8a8a7d56297ec124bfef0d28f35777205e973272c87e01070f14f5b14daa3b5104d9ff6b296c4f16ed49eb42d35e7ba3bccb7a26c33a263df88aadd596e9d9de0abbd4d449df11081f2cd62e1d8962b9b9feb25a3b8e03537d61a61c11ac22b7211d12c84e60a6abcc219e558b2513d8c530b3c7a57cdc47de545aafbb2a13c0e6c75b1b92fa241c713c83a09c92b2b61d565120372a9143415583c9596f27a663d4967cd653b08cebd6cb96c1f0dc80d57267ac9a8281d7149bde880828ee27d69a6818db58320db29d1b044eaf6ab8a5108bc522de406990b5393b1f7e7bab71bf6cf8eed1cd59c7607d662e8b313f5c4fce0f59b1027371381011b63dd5b2b09739082c0d62ffad96e30153a395234937d377c32fe7af82aca3a19d0ebc4a5c5fb5ff190f14d5695c703b571fb4bf03756635cafc6cf6267eab836c347a9d07e8089fc105346934cf3364e5be370b3c42b94bc5ae3d17a817398566a2953251eb91697d67278145df9a4b917bcca1bf211780b22f4caacfcb7604c84f943d05f6fdf8edbd258d7d8dbf84f9d99e57472c5b1c2337d749a1f345e662e2536d23c7a63bbbbf00f8b5b0a2106a0342ab27b9a10b82e82668cd49e0cbb09d7be0217645f1dda3be59c8232fa290d34791cda52aa5b5cec6339ab96a2eb3f5328cc7c0e6717c2824344547a2ed518f6b2b4e4fe5b684596aa6a9d3988fc5d5ff4cb46cec99d951b8386b10949a163af974b7543df97b4882a4ed60e927a1deb67c5f814235bef65fea79a2c712815be7403c93a3707fb90d4604ec3a6a3b0928f253f6ab6bd56c958e026c8c58172c4ac2a3efe2ecd5cea70c8313f9ac2d638bc296ba99e2ca86d2fd06b5402cdcddc3f3c9845d5ae77f6f36963b91e8f6cdccd17abe8d40ed02463af4bb0e496344f350097f1cc13313fa1e172b63556ed2b8a8121c01a5fb343ff7767821626fc49b0d6bd522e1c9bf137d5a5bccb4bc8dbb64c83a82ef6c2894f3896c9f6bf0c3764011d53eeb6db9ea9dae22d3ebcca4942d5828c0bca0d9ea37701d5a06c066ac4fe318e11e9c0d6c658ac810fb5d7836cfffe4ccbb0934e5567d74695980a156d4bf1c18861c5a29ccd349999dc20562d00e1f6c1851ae563541086438d60b975c8ceb466414ff60efa0b2dee790fd0659ffa98b92414c13d5a6825368f56c4984412205041cd8e006c7127d4395ecdffb5addf80ef938ce54a367154c4fc286d5f969325c12b13655a9a956dd3b98281f537e837669fc55d8930676e807aa8cd046e0f4583d59f86cb99f3f7a7ddde1fb39111fdec7677d2fee4b8f4814a5def5ebcc67c653384ce80eaffd880405f7edf8fd3ea049f040595df4a75e2f892e7a85e0ba351fb8d263bfff7168bb85017b360fcd2ba89346682a6ea7ccc46afbdb5ab444e3f477238b2ab503bde914d3cf1789539cde9c0621152cd97bff9f235d88a1ef4ea4309db3a05d401af7fb82784b050ef529dab4f1f003eb29710a962f7538c521e617e2f0efac36182d09985e1d725cc38c3833a53742a02f76fb2854a9e45f0febacf3bda83f11183ef5b9fef02ebcdf56d4104b175bad937d8f61964f97d673577cdcbbb48d8eb62b063ee6563b9ff053719baff871bcd83822d865b2f7ef023076425ac5cd71b1f2309de0c6f14cc9c4d3e8fad945f756a7c8a084ea1bfdf5ac6e740043e7f7bdaca06774b084ae314c2636529d4fdcd965c7f8c07156572620b827d694efdc9d2bfc5aa9391220a83765f2c71fcd48d4acaed60afb53d1013fa3b15e948ec4159f7d130ef85b594018346e99034c18738285223ea53a6b1d5cf11a607de2e19608ba03ec970a915b773824261f3fc931dd6d3b934d89f07baf14776314c3eeb8cd0537ef5736f565fbd14e520d4ab2f77ed9597b76ff91f8d1f99ebd6e473efda7accb273975a06944d1037032129992b994ca791a09b4d83980a1e494b0f97098df5f6fb6bbb02722adb11dc319c565c2c363cbd19d9fb3efb4613b62d6584cd53f7bd80e3e89304f444ce9dd1835661e3bb4de02ccf568a2a5daaf0d56898d4286c3fb62e22af62d7ac318685834467f337561dde2e0c1e2827cdffcf42c17728ee64b3ff4ccc0227590badd0bd7e448b8cca0892d6a5e0130d2ac665f47c6b28daa101c1b319869bdd39fa924d6d9ba7d72feda5f21ac78641c7d4801d41c7879721b3be4dab40d9c4a78552440101f373489cc5240b0144a9ce32691a784b6dfe971a21bb5980ff67da2d1bb90b223c9e192a39c1aeadd1f5c790811079c0b51a97105c99b6f95d71bb3ea47c33d9dcb0a53c929c44499e184a3cd722c908d3b0d157e28ffdeb2ed7192e780d96a7a2f0fd5a87bdc973e049da0caf931f26f5a21813e2e602ceb2259997e0205ce48fd9424bd6d4d75dd4301f429ee30745cd839a40dbeab4c3db2f0f10bbaea071ca41d1392385681730a3678a5f60f604dbe19cb9d7dd234337e327451b8cc65394af399432ef7fc3765d055874ebdca14e5999292d6f72f31e92bacf25db5ef8f5212952c1910de06ddbe1687a0e1837922f2228289916ed3aeb7b9cc24da3ae47139e371930afa6d3573df6732c26c0c7ae06d9cedfa77160711bcb06e6553338deae4c5731cf53cc154113096d02f3036d7d9edfcdc331e4bb860c5208489212e904eab70e7f860b0379895cbdecbf7a0b7a25e5b853c7dbe08a4e296a30afec8cf5a9f6ea4aef32a508655d539a770b21e660c9ee1d7688c56abeb7cf1afccc8d59780cf26312589e0c8e1bc00ad7b1325cd9a5dd69246e0b33407c381ea09265154aec297e4ccdf9785a1042a83e77c13d4ce4360782f2428f9916b5cd123b089eb683d30c1e895b9944aa905a1a5b52301d8cc5e4741834ead6ebdb5dc05c9c49c5e883e99d40b9838037beaf876534d747856103e59caf6266fbbe760b6ef83d004634b74f14f8eb4aef93c4cc9cbbd78d83d532c70feef51ea3f170b25d81a6a9b074bfca7e9b3771bf83517e0dd9d0600f70b86b20f61fe36076f8bada334b2390fa954973bc901619a3cfd039349cb328625f495ab288dbdd6dbfd022c2a83f59e0b998619a12e35891b5ae9e83a71765507b4a571cd2241e5885c705244c1022688bef7c5065fbcf219fc01753adb611b3fbc09403dcb10a4f99d788667eff75fa27074ca8481a633530e26163ccf7dada049d23e717e067b6fa5b2f652bc50abda9e7ccdc5f2f3c35ecc2c4431c819c9691be4422e379750774e9f39dae06f26423c8a4278789c9f3111b43f6dd25b0ad47c4cc5fda3f3ed82079c9366e0adced883488f429c1d7e1b351fd0bb204dd7977ef224c4df6d7a5f7697bc6500a7d03a8a914154779fa7092bf1be6bad4092367ce5d295a5d5d0e7c469f372ca2011d612637025e89f178ae9ada0c5b73bcb7d7c034ff595263cd4216e3c76ba5f3d81932a088a90bf8043e877e299c670ef1622a098d5519d9adc4ee7d4cd00e5934a4375fa83fdb81214b892482b31bdde59a70aaf25cb7f417c3a2a91c4e54b48149f6c41d9d396ee6ff13e3028c64a7c9b1f2e7c6e67184a3d52d6f570db3d225c947423c4c6533f22df57d15c5e5a3183422bd378b06fe4732a9401dcb19840fb8fa5c50a0ff497fef362c507753e46b8881d3e767f3b1d893a3805941c94f2efa05ce34b9ea81d716984af6834230d4707a87089d40779503ee6a9bb245d7d997f14acb80e89731c042bbbbe3dcd05177b0ee0eec23455830ef5b65aca357f2b0b887e0b9821c0", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) sendmsg$tipc(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r2, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) dup2(r2, r1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$tipc(r2, &(0x7f0000000280)={0x0, 0xdb, 0x0}, 0x0) 10.095742151s ago: executing program 1 (id=2588): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x20, 0x37, 0x0, 0x1, @batadv={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0xc, 0x1, 'BATMAN_V'}]}}}, @IFLA_PROTO_DOWN={0x5}]}, 0x48}}, 0x0) 9.391313147s ago: executing program 3 (id=2589): syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef00090599", @ANYRES16], 0x0) 9.114540071s ago: executing program 4 (id=2590): socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f0000000340)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x80, 0x30, 0x101, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f00000000c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ed5696c5820fae0000000000000080beef911d564c90c200", 0x18) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000001000000140005007f030000000000000000000013ca3006c9dfdb1f77000109ea0100776c616e30000000ef604056511c60a6b3fd9df2213b7d5cf4466edf299f76e28057fc1c7c302fde5ad0a2947cfef565dbf6e063eb4eb3915146b85fc1dd25141211d1869e10297004bd8870c59eb6527c02a88c44caf5185a856865fc9c651f54c1c357008c96d1b14182d54b73f48a0a68a193490a2be0d089a31ab9af90eb52bd193d13149f063875ce068a6f4c362ccf273177a0a8aab3a01aa3db"], 0x34}}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006b40), 0x0, 0x4000000) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0xe140) 9.112007134s ago: executing program 1 (id=2591): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r4 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x12, r4, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000580)={0x10}, 0xfdef) 8.42746635s ago: executing program 2 (id=2592): r0 = io_uring_setup(0x4f01, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r1, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000007c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 8.423397835s ago: executing program 4 (id=2593): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000380)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 8.062600371s ago: executing program 4 (id=2594): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f00000004c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}]}) 7.711253678s ago: executing program 4 (id=2597): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r3, r2, 0x8, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12011003000000106a053500400001"], 0x0) write$binfmt_script(r4, 0x0, 0xfffffe48) mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x80000040001}) socket$inet6(0xa, 0x0, 0x0) r5 = userfaultfd(0x80801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0xfffffffd, 0x0, 0xfffffffe, 0xa1, 0x0, r1}, 0x0, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, &(0x7f0000000340)=""/185, &(0x7f00000002c0)=""/101}) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000ac0)) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, 0x0) 7.665538314s ago: executing program 1 (id=2598): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, 0x0, 0x0, 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$IPT_SO_GET_ENTRIES(r3, 0x0, 0x41, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x90) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$I2C(&(0x7f00000002c0), 0x0, 0x0) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000440)={0x0, 0x0, 0x7, &(0x7f0000000000)={0x32, "14956544c869ef45cda7dd68fe132f1d0259da184039589d199f3db71c15666d95"}}) write$binfmt_script(r4, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x20000) openat$6lowpan_control(0xffffff9c, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, 0x0, 0x0, 0x20000000}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) 6.423058656s ago: executing program 1 (id=2599): mknod(&(0x7f0000000140)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r2, 0x2000009) sendfile(r1, r2, 0x0, 0x6) read$FUSE(r0, &(0x7f000005db00)={0x2020}, 0x2020) 6.3585851s ago: executing program 2 (id=2600): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) 6.356902435s ago: executing program 3 (id=2601): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 6.070206781s ago: executing program 3 (id=2602): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {}, {0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x8, 0x2, [@TCA_FLOW_EMATCHES={0x4}]}}]}, 0x38}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.899405514s ago: executing program 2 (id=2603): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xa93, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000006c0)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="8fefcb7907081175f37538e486dd"], 0xfdef) write$cgroup_subtree(r1, &(0x7f0000000180)=ANY=[], 0x36) 5.740278128s ago: executing program 1 (id=2604): epoll_create(0x10000e9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev\x00') read$FUSE(r4, &(0x7f0000000140)={0x2020}, 0x2020) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$BINDER_SET_MAX_THREADS(r5, 0x40046205, &(0x7f0000000400)=0x2) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs(0x0, 0x0) 5.723536714s ago: executing program 3 (id=2605): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_channels={0x3d}}) 5.497013663s ago: executing program 3 (id=2606): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000140), 0x0) r1 = syz_io_uring_setup(0x3b67, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000180)=0x0) syz_io_uring_setup(0x48bf, &(0x7f0000000280), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0xb15, 0x0, 0x0, 0x0, 0x0) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f0000000080)=0x6) 4.570389803s ago: executing program 4 (id=2607): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000001100)={0xa, 0x0, 0xffffffff, @empty}, 0x1c) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 4.459087121s ago: executing program 0 (id=2608): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r3, 0x5420, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) ppoll(&(0x7f0000000140)=[{r3}], 0x1, 0x0, 0x0, 0x0) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$TCSETSW2(r5, 0x5437, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r5, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) getpid() bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x90) r7 = inotify_init1(0x0) fcntl$setown(r7, 0x8, 0xffffffffffffffff) fcntl$getownex(r7, 0x10, &(0x7f0000000040)) 4.396606866s ago: executing program 4 (id=2609): socket$inet6_udplite(0xa, 0x2, 0x88) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_setup(0x79af, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x20, 0x0, 0x0, 0x0, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x20}, 0x1, 0x40030000000000}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0700000000020000000005000000180001801400020073797a5f74756e00000000000000005a0c00038004000380040001"], 0x38}}, 0x0) connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, r6, 0x0, 0x0, 0x0, 0x0, "f235cd041ecfd237d48b9fc39aa09025f026b0634b6f82bded015a1b2cc967eff95fd0b6841d40ae65cd6ddd03de31eba0328a09ff4f717c7b1b1c65e750c8", 0x1d}, 0x60) bind$nfc_llcp(r4, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a07760760beeab11e88509de7f1939e8abff005597c8ef039a5be42200", 0x38}, 0x60) 4.34610459s ago: executing program 3 (id=2610): mkdirat(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000200)='bridge0\x00') ioctl$sock_SIOCBRDELBR(r0, 0x89a3, &(0x7f0000000200)='bridge0\x00') 4.044699441s ago: executing program 1 (id=2611): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) unshare(0x400) bpf$ITER_CREATE(0xb, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r5}, {r4}], 0x2, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x4, 0xdcc}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x400000bce) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x48, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="d36432e2a15db69c2720e386548c2d7f"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc}, @NL80211_REKEY_DATA_KEK={0x8, 0x1, @kek_ext="1d22383cac263dace8b1b4667dda7bc833e29a42431a136d78f9771a01d8e74f"}]}]}, 0x64}}, 0x0) 3.062480169s ago: executing program 0 (id=2612): r0 = memfd_create(&(0x7f0000000440)='D\xa3\xd5Wj\x00\x00x0\xc1\xac\x1a\x1a\vG\xa9~vB\xbc\t\x00\x00\x00A\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x00\x00\\i\xcf\t\xb0\xa9 +H/\x1a\xe7\x95\xce\"\"\xbd\xf9!\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2\xf9\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xbb\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\x00\x00\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4*8\xc6\xe5\x06P\xc11\f^\x7f\x8e\xc1\xd1Wra\x19)\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg \x03\xa7\x92\xff\x00+h\xb5@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xa1\xc0\xf9&\xd3M\xf6\n\xff\x83k\xe6\rDa\x16\xbd\x1a\xb2w\b\x00\x00\x13\xa2\xd6\xe1\xfc\x1f\xa6\x7fW\x97gtz[D\xd7.r\xfb]\xf50\rF\x04\n\x92\xa8\xb6\x94\xa1\x9e\xb4\xa2f\xce\x99Z\xa86|\xd2\xb7\xbd\xaf\xe2\xed\xe2\xc8S\xfe\xa8#\x9b\x8cDB\x7fz\xc3\xa4\xe0[\x04\xb9U\x19\xae\'\xa4\xc9$\xde%]o\xfbH\xfe\xb1<\xf75\x9d\xc9\x06\x93C\xde\xe4-\x9f\'\r\x03s\x16/X', 0x0) write(r0, &(0x7f00000000c0)="6963e6424e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b0000000000000000000020", 0x34) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) waitid(0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setsig(0x4203, r1, 0x0, &(0x7f0000000000)) 2.272117198s ago: executing program 0 (id=2613): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f00000003c0)="26640f1c45bff26ff00fbabc080000670f78ad00600000baf80c66b881faeb8666efbafc0cb02aee66b9e109000066b80f00000066ba000000000f30baf80c66b8347c5b8d66efbafc0c66ed0f01c9baf80c66b8e5574e8566efbafc0cecbaf80c66b80753f38e66efbafc0cb000ee", 0xfffffffffffffd23}], 0x1, 0x53, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x10d000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 1.689402951s ago: executing program 0 (id=2614): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2f, 0x4, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5, 0x0]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x0, [{@private=0xa010102}, {@multicast1}, {@remote, 0x8000}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x65c}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x8, [{@dev}, {@multicast2}, {@private=0xa010100}, {@rand_addr=0x64010101}, {@broadcast}, {@multicast2}]}, @noop, @noop, @end, @rr={0x7, 0x13, 0x0, [@dev, @remote, @multicast1, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.018260793s ago: executing program 0 (id=2615): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000680)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x80a, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x51}, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, 0xfffffffffffffffc, &(0x7f0000000140)=0x4) 0s ago: executing program 0 (id=2616): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000b00)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @remote}}, {{0xa, 0x0, 0x0, @remote}}]}, 0x190) syz_emit_ethernet(0x4e, &(0x7f0000001600)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0x0, @remote, @mcast2, {[], @mld={0x83, 0x0, 0x0, 0x0, 0x0, @dev}}}}}}, 0x0) kernel console output (not intermixed with test programs): ve bond_slave_1): Enslaving as an active interface with an up link [ 717.351376][ T25] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 717.489790][ T5222] Bluetooth: hci3: command tx timeout [ 717.549114][T12132] team0: Port device team_slave_0 added [ 717.549430][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 717.655706][ T25] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 717.669422][ T25] usb 5-1: config 0 has no interface number 0 [ 717.688912][T12132] team0: Port device team_slave_1 added [ 717.698455][ T25] usb 5-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 717.718279][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.762936][ T25] usb 5-1: Product: syz [ 717.777799][ T25] usb 5-1: Manufacturer: syz [ 717.789998][ T25] usb 5-1: SerialNumber: syz [ 717.808697][ T25] usb 5-1: config 0 descriptor?? [ 717.902296][ T25] as10x_usb: device has been detected [ 717.940851][ T25] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 717.951715][T12132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 717.958667][T12132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 718.070347][T12132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 718.113933][T12132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 718.129484][T12132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 718.181387][ T25] usb 5-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 718.260154][ T8] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 718.288258][T12132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 718.435683][T12132] hsr_slave_0: entered promiscuous mode [ 718.463372][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 718.478743][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 718.490997][T12132] hsr_slave_1: entered promiscuous mode [ 718.498139][ T25] as10x_usb: error during firmware upload part1 [ 718.515362][ T8] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 718.530520][T12132] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 718.555249][T12132] Cannot create hsr debugfs directory [ 718.560979][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.583774][ T8] usb 4-1: config 0 descriptor?? [ 718.671220][ T25] Registered device Sky IT Digital Key (green led) [ 718.679708][ T25] usb 5-1: USB disconnect, device number 47 [ 718.917093][ T25] Unregistered device Sky IT Digital Key (green led) [ 719.151298][ T25] as10x_usb: device has been disconnected [ 719.964057][ T5267] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 719.974416][ T5222] Bluetooth: hci3: command tx timeout [ 720.169343][ T5267] usb 1-1: Using ep0 maxpacket: 8 [ 720.197863][ T5267] usb 1-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 720.231814][T12132] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 720.274161][ T5267] usb 1-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 720.328026][T12132] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.365767][ T5267] usb 1-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 720.399197][T12132] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 56930 - 0 [ 720.439276][ T5267] usb 1-1: config 0 interface 0 has no altsetting 0 [ 720.462719][ T8] usb 4-1: USB disconnect, device number 47 [ 720.518879][T12132] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 35430 - 0 [ 720.541478][ T5267] usb 1-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 720.603670][ T5267] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.679750][ T5267] usb 1-1: config 0 descriptor?? [ 720.945889][T12132] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 720.976949][T12132] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.039779][T12132] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 56930 - 0 [ 721.088311][T12132] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 35430 - 0 [ 722.122345][ T5222] Bluetooth: hci3: command tx timeout [ 723.279738][ T5267] hid-steam 0003:28DE:1102.0022: unknown main item tag 0x0 [ 724.697774][ T46] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 725.032538][ T5267] hid-steam 0003:28DE:1102.0022: : USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.0-1/input0 [ 726.166093][T12132] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 726.246574][T12132] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.409839][ T5267] hid-steam 0003:28DE:1102.0022: Steam Controller 'XXXXXXXXXX' connected [ 726.436423][ T5267] input: Steam Controller as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28DE:1102.0022/input/input55 [ 726.549317][T12214] 9pnet_fd: Insufficient options for proto=fd [ 727.096388][T12132] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 56930 - 0 [ 727.232388][ T5267] hid-steam 0003:28DE:1102.0023: unknown main item tag 0x0 [ 727.272486][T12132] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 35430 - 0 [ 727.332722][ T5267] hid-steam 0003:28DE:1102.0023: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.0-1/input0 [ 727.420510][ T5267] usb 1-1: USB disconnect, device number 37 [ 727.551287][T12223] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2187'. [ 727.693291][T12132] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 727.768367][T12132] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.799310][T12132] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 56930 - 0 [ 727.830515][T12132] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 35430 - 0 [ 729.161414][ T5267] hid-steam 0003:28DE:1102.0022: Steam Controller 'XXXXXXXXXX' disconnected [ 729.190191][T12231] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2190'. [ 729.399269][T12231] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2190'. [ 730.169580][T12132] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 730.536563][T12132] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 730.605391][T12132] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 730.649713][T12132] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 730.782817][T12132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 730.828126][T12132] 8021q: adding VLAN 0 to HW filter on device team0 [ 730.873341][ T2928] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.880552][ T2928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 730.905040][ T5264] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 731.004134][ T9605] bridge0: port 2(bridge_slave_1) entered blocking state [ 731.011311][ T9605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 731.107465][ T5264] usb 1-1: New USB device found, idVendor=99fa, idProduct=8988, bcdDevice=98.53 [ 731.140513][ T5264] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.169613][ T5264] usb 1-1: Product: syz [ 731.190620][ T5264] usb 1-1: Manufacturer: syz [ 731.212641][ T5264] usb 1-1: SerialNumber: syz [ 731.246015][ T5264] usb 1-1: config 0 descriptor?? [ 731.274306][ T5264] gspca_main: spca506-2.14.0 probing 99fa:8988 [ 731.459312][ T46] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 731.639853][ T5264] usb 1-1: USB disconnect, device number 38 [ 731.680865][ T46] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 731.830400][ T46] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 731.928150][ T29] audit: type=1326 audit(1723587273.887:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12256 comm="syz.4.2197" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f86be9799f9 code=0x0 [ 732.199227][ T46] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 732.290606][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.337190][T12132] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 732.605302][T12132] veth0_vlan: entered promiscuous mode [ 732.667881][T12264] deleting an unspecified loop device is not supported. [ 732.725321][T12132] veth1_vlan: entered promiscuous mode [ 732.859043][ T46] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 732.890058][T12132] veth0_macvtap: entered promiscuous mode [ 732.908200][T12132] veth1_macvtap: entered promiscuous mode [ 732.996534][ T46] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input56 [ 733.214795][T12132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 733.286858][T12132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 733.317234][T12132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 733.359278][T12132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 733.394815][T12132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 733.418701][T12132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 733.479371][T12132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 733.549455][T12132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 733.589269][ T5267] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 733.599631][T12132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 733.620691][T12132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 733.649320][T12132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 733.799285][ T5267] usb 5-1: Using ep0 maxpacket: 16 [ 733.858208][T12132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 733.870587][ T5267] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 733.984939][ T5267] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 733.999274][T12132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 734.069288][ T5267] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 734.160491][T12132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.196050][ T5267] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.217568][T12132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 734.340632][ T5267] usb 5-1: config 0 descriptor?? [ 734.454649][T12132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.493152][T12132] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 734.506425][ T46] input: failed to attach handler kbd to device input56, error: -5 [ 734.541647][T12132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 734.576193][T12132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.596377][T12132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 734.608972][T12132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.643825][T12132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 734.686338][T12132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.739039][T12132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 734.791050][T12132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.835949][T12132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 734.881396][T12132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.909539][ T5267] corsair 0003:1B1C:1B02.0024: unknown main item tag 0x0 [ 734.916727][T12132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 734.948121][ T5267] corsair 0003:1B1C:1B02.0024: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.4-1/input0 [ 734.971418][T12132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.012389][T12132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 735.052837][T12132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.103565][T12132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 735.139256][T12132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.161412][T12132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 735.173060][T12132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.186539][T12132] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 735.206815][T12132] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.221847][T12132] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.259428][T12132] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.281364][T12132] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.299361][ T46] usb 4-1: USB disconnect, device number 49 [ 735.426767][ T5267] usb 5-1: USB disconnect, device number 48 [ 735.702325][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 735.734752][ T46] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 735.743075][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 735.873897][ T2928] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 735.900859][ T2928] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 735.949874][ T46] usb 4-1: Using ep0 maxpacket: 32 [ 735.973476][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 736.039207][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 736.065682][ T46] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 736.121250][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.178978][ T46] usb 4-1: config 0 descriptor?? [ 736.197183][ T46] hub 4-1:0.0: USB hub found [ 736.369566][ T8] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 736.478891][ T46] hub 4-1:0.0: 1 port detected [ 736.599410][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 736.614378][ T8] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 736.639463][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.691506][ T8] usb 1-1: Product: syz [ 736.695708][ T8] usb 1-1: Manufacturer: syz [ 736.717339][ T8] usb 1-1: SerialNumber: syz [ 736.760506][ T8] usb 1-1: config 0 descriptor?? [ 736.782019][ T8] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 736.859423][ T941] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 737.072285][ T941] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 737.120534][ T941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.155364][ T941] usb 2-1: config 0 descriptor?? [ 737.193450][ T941] cp210x 2-1:0.0: cp210x converter detected [ 737.200493][ T46] hub 4-1:0.0: activate --> -90 [ 737.606769][ T46] usb 4-1-port1: config error [ 737.608036][ T5264] usb 4-1: USB disconnect, device number 50 [ 737.690657][ T941] usb 2-1: cp210x converter now attached to ttyUSB0 [ 737.915061][ T5267] usb 2-1: USB disconnect, device number 35 [ 737.973462][ T5267] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 737.999536][ T46] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 738.063362][ T5267] cp210x 2-1:0.0: device disconnected [ 738.232402][ T46] usb 5-1: Using ep0 maxpacket: 8 [ 738.252212][ T46] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 738.280654][ T46] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 738.307562][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.333326][ T46] usb 5-1: Product: syz [ 738.337626][ T46] usb 5-1: Manufacturer: syz [ 738.347487][ T46] usb 5-1: SerialNumber: syz [ 738.376047][ T46] usb 5-1: config 0 descriptor?? [ 738.404790][ T46] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 739.213169][ T46] gspca_zc3xx: reg_w_i err -71 [ 739.497877][ T5264] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 741.810233][ T8] gspca_stk1135: reg_w 0x351 err -110 [ 741.816692][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 741.880456][ T46] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 741.886924][ T46] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 741.900566][ T46] usb 5-1: USB disconnect, device number 49 [ 741.944892][ T8] gspca_stk1135: Sensor write failed [ 741.976485][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 742.024674][ T8] gspca_stk1135: Sensor write failed [ 742.030681][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 742.037439][ T8] gspca_stk1135: Sensor read failed [ 742.043223][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 742.049705][ T8] gspca_stk1135: Sensor read failed [ 742.054906][ T8] gspca_stk1135: Detected sensor type unknown (0x0) [ 742.065768][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 742.073767][ T8] gspca_stk1135: Sensor read failed [ 742.078991][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 742.085533][ T8] gspca_stk1135: Sensor read failed [ 742.092304][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 742.115317][ T8] gspca_stk1135: Sensor write failed [ 742.125295][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 742.145778][ T8] gspca_stk1135: Sensor write failed [ 742.172117][ T8] stk1135 1-1:0.0: probe with driver stk1135 failed with error -110 [ 742.219614][ T8] usb 1-1: USB disconnect, device number 39 [ 742.230599][ T5264] usb 3-1: device not accepting address 44, error -71 [ 742.519245][ T46] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 742.672601][T12365] netlink: 'syz.2.2233': attribute type 21 has an invalid length. [ 742.731312][ T46] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 742.743323][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 742.759253][T12365] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2233'. [ 742.778915][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 742.833119][ T46] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 742.850917][T12365] netlink: 'syz.2.2233': attribute type 6 has an invalid length. [ 742.880026][ T46] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 742.904848][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.926697][T12365] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2233'. [ 742.934271][ T46] usb 5-1: config 0 descriptor?? [ 742.989391][T12360] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 743.583138][ T46] plantronics 0003:047F:FFFF.0025: unknown main item tag 0xd [ 743.664515][ T46] plantronics 0003:047F:FFFF.0025: No inputs registered, leaving [ 743.709436][ T46] plantronics 0003:047F:FFFF.0025: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 744.050848][T12359] netlink: 'syz.0.2231': attribute type 4 has an invalid length. [ 744.089284][T12359] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2231'. [ 744.741395][T12386] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 744.784781][T12386] batadv_slave_0: entered allmulticast mode [ 745.411267][T12397] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 746.248375][ T5264] usb 5-1: USB disconnect, device number 50 [ 746.294804][T12409] veth0_to_team: entered promiscuous mode [ 746.457794][T12407] veth0_to_team: left promiscuous mode [ 746.471320][ T46] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 747.629306][ T46] usb 1-1: Using ep0 maxpacket: 8 [ 747.646877][ T46] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 747.659587][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.861149][ T46] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 747.895296][ T46] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 747.917676][ T46] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 747.979345][ T46] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 748.000635][ T46] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 748.008659][ T46] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 748.040690][ T46] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 748.073026][ T46] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 748.104873][ T46] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 748.146227][ T46] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 748.164863][ T46] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 748.209516][ T46] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 748.211647][ T5264] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 748.257719][ T46] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 748.329629][ T941] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 748.331648][ T46] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 748.406789][ T46] usb 1-1: string descriptor 0 read error: -22 [ 748.423769][ T46] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 748.452584][ T5264] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 748.479022][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.499341][ T5264] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 748.537390][ T5264] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 748.563031][ T941] usb 3-1: Using ep0 maxpacket: 32 [ 748.581933][ T46] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 748.592484][ T5264] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 748.609390][ T941] usb 3-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=ba.e3 [ 748.629034][ T941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.637530][ T5264] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.656370][ T941] usb 3-1: Product: syz [ 748.667179][ T5264] usb 4-1: config 0 descriptor?? [ 748.676246][ T941] usb 3-1: Manufacturer: syz [ 748.686623][ T941] usb 3-1: SerialNumber: syz [ 748.715602][ T941] usb 3-1: config 0 descriptor?? [ 748.950165][ T941] f81534a_ctrl 3-1:0.0: failed to set register 0x116: -5 [ 748.979048][ T941] f81534a_ctrl 3-1:0.0: failed to enable ports: -5 [ 749.000926][ T941] f81534a_ctrl 3-1:0.0: probe with driver f81534a_ctrl failed with error -5 [ 749.051478][ T941] usb 3-1: USB disconnect, device number 46 [ 749.114650][ T5264] acrux 0003:1A34:0802.0026: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.3-1/input0 [ 749.140636][ T5264] acrux 0003:1A34:0802.0026: no inputs found [ 749.149063][ T5264] acrux 0003:1A34:0802.0026: Failed to enable force feedback support, error: -19 [ 750.356155][ T941] usb 1-1: USB disconnect, device number 40 [ 751.206973][T12443] pim6reg1: entered promiscuous mode [ 751.215497][T12443] pim6reg1: entered allmulticast mode [ 752.630895][ T5301] usb 4-1: USB disconnect, device number 51 [ 754.450123][T12464] netlink: 'syz.0.2267': attribute type 309 has an invalid length. [ 756.059254][ T5267] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 756.251889][ T5267] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 34, using maximum allowed: 30 [ 756.283428][ T5267] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 756.313311][ T5267] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 756.370338][ T5267] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 756.437943][ T5267] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 756.468185][ T5267] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.540516][ T5267] usb 1-1: config 0 descriptor?? [ 756.611978][ T8] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 756.809312][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 756.836847][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 756.868298][ T8] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 756.889292][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 756.916201][ T8] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 756.940583][ T8] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 756.959337][ T8] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 756.979329][ T8] usb 5-1: Product: syz [ 756.987974][ T8] usb 5-1: Manufacturer: syz [ 756.999665][ T5267] wacom 0003:056A:0331.0027: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.0-1/input0 [ 757.008253][ T8] usb 5-1: SerialNumber: syz [ 757.032101][ T8] usb 5-1: config 0 descriptor?? [ 757.047812][ T8] usb 5-1: NFC: intf ffff88806e37c000 id ffffffff8f0b8560 [ 757.109526][ T8] nfcmrvl 5-1:0.0: NFC: registered with nci successfully [ 757.190265][T12507] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2281'. [ 757.211196][T12507] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2281'. [ 757.223272][T12507] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2281'. [ 757.339781][ T8] usb 5-1: USB disconnect, device number 51 [ 757.343449][ T5301] usb 1-1: USB disconnect, device number 41 [ 757.358030][ T8] usb 5-1: NFC: intf ffff88806e37c000 [ 757.507450][T12510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2282'. [ 758.480061][ T46] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 759.011091][T12530] x_tables: duplicate underflow at hook 1 [ 759.429283][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 759.459611][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 759.469888][ T5267] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 759.478274][ T46] usb 5-1: New USB device found, idVendor=046d, idProduct=c101, bcdDevice= 0.00 [ 759.551741][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.578181][ T46] usb 5-1: config 0 descriptor?? [ 759.679214][ T5267] usb 1-1: Using ep0 maxpacket: 16 [ 759.686741][ T5267] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 759.718888][ T5267] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 759.753139][ T5267] usb 1-1: New USB device found, idVendor=05ac, idProduct=8240, bcdDevice= 0.00 [ 759.772884][ T5267] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.804778][ T5267] usb 1-1: config 0 descriptor?? [ 759.973656][T12534] team0: entered promiscuous mode [ 759.999672][T12534] team_slave_0: entered promiscuous mode [ 760.031972][ T46] logitech 0003:046D:C101.0028: hidraw0: USB HID v0.00 Device [HID 046d:c101] on usb-dummy_hcd.4-1/input0 [ 760.033054][T12534] team_slave_1: entered promiscuous mode [ 760.169878][T12534] dummy0: entered promiscuous mode [ 760.275877][ T5267] input: HID 05ac:8240 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:05AC:8240.0029/input/input61 [ 760.312841][ T941] usb 5-1: USB disconnect, device number 52 [ 760.445257][ T5267] appleir 0003:05AC:8240.0029: input,hiddev0,hidraw0: USB HID v0.20 Device [HID 05ac:8240] on usb-dummy_hcd.0-1/input0 [ 760.502592][ T5267] usb 1-1: USB disconnect, device number 42 [ 760.683744][T12544] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 761.876385][T12551] kvm: kvm [12550]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x800 [ 762.309536][ T46] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 762.595819][ T46] usb 3-1: Using ep0 maxpacket: 16 [ 762.621027][ T46] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 762.675613][ T46] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 762.723322][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.801478][ T46] usb 3-1: Product: syz [ 762.831103][ T46] usb 3-1: Manufacturer: syz [ 762.861488][ T46] usb 3-1: SerialNumber: syz [ 762.904354][ T46] usb 3-1: config 0 descriptor?? [ 762.958121][ T46] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 763.197438][ T941] usb 3-1: USB disconnect, device number 47 [ 763.206492][ T52] usb 3-1: Failed to submit usb control message: -71 [ 763.247315][ T52] usb 3-1: unable to send the bmi data to the device: -71 [ 763.285729][ T52] usb 3-1: unable to get target info from device [ 763.345083][ T52] usb 3-1: could not get target info (-71) [ 763.372137][ T52] usb 3-1: could not probe fw (-71) [ 764.317881][ T29] audit: type=1326 audit(1723587306.277:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12587 comm="syz.1.2310" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f48e3d799f9 code=0x0 [ 765.231338][T12581] Bluetooth: hci8: command 0x0406 tx timeout [ 765.242132][T12581] Bluetooth: hci6: command 0x0406 tx timeout [ 765.248206][T12581] Bluetooth: hci9: command 0x0406 tx timeout [ 765.409280][T12598] netlink: 'syz.0.2312': attribute type 1 has an invalid length. [ 765.417053][T12598] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.2312'. [ 765.830257][T12609] libceph: resolve '0' (ret=-3): failed [ 766.254393][ T5220] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 766.272336][ T5220] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 766.287286][ T5220] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 766.307726][ T5220] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 766.315895][ T5220] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 766.320280][ T5220] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 766.506565][T12622] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 766.513124][T12622] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 766.643166][T12622] vhci_hcd vhci_hcd.0: Device attached [ 766.900684][ T5267] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 766.919467][ T46] usb 11-1: new high-speed USB device number 2 using vhci_hcd [ 766.980974][T12623] vhci_hcd: connection reset by peer [ 767.003182][ T61] vhci_hcd: stop threads [ 767.021375][ T61] vhci_hcd: release socket [ 767.049334][ T61] vhci_hcd: disconnect device [ 767.087351][T12618] chnl_net:caif_netlink_parms(): no params data found [ 767.129260][ T7559] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 767.169555][ T5267] usb 5-1: Using ep0 maxpacket: 8 [ 767.190595][ T5267] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 767.234249][ T5267] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 767.277396][ T5267] usb 5-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.00 [ 767.288698][T12635] netlink: zone id is out of range [ 767.329694][ T5267] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.361473][ T7559] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 767.379207][T12635] netlink: zone id is out of range [ 767.403338][ T5267] usb 5-1: config 0 descriptor?? [ 767.409417][ T7559] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 767.499159][ T7559] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 767.623354][ T7559] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 767.696448][ T7559] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.726078][T12618] bridge0: port 1(bridge_slave_0) entered blocking state [ 767.750681][ T7559] usb 1-1: Product: syz [ 767.755238][ T7559] usb 1-1: Manufacturer: syz [ 767.771190][T12618] bridge0: port 1(bridge_slave_0) entered disabled state [ 767.778474][ T7559] usb 1-1: SerialNumber: syz [ 767.798606][T12618] bridge_slave_0: entered allmulticast mode [ 767.840062][T12618] bridge_slave_0: entered promiscuous mode [ 767.874520][T12618] bridge0: port 2(bridge_slave_1) entered blocking state [ 767.909617][T12618] bridge0: port 2(bridge_slave_1) entered disabled state [ 767.914326][ T5267] wacom 0003:056A:0028.002A: Unknown device_type for 'HID 056a:0028'. Assuming pen. [ 767.946302][T12618] bridge_slave_1: entered allmulticast mode [ 767.974860][ T5267] wacom 0003:056A:0028.002A: hidraw0: USB HID v0.00 Device [HID 056a:0028] on usb-dummy_hcd.4-1/input0 [ 767.985765][T12618] bridge_slave_1: entered promiscuous mode [ 768.036619][ T5267] input: Wacom Intuos5 touch L Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0028.002A/input/input62 [ 768.182953][ T5267] usb 5-1: USB disconnect, device number 53 [ 768.269019][T12618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 768.320131][T12618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 768.374616][ T5220] Bluetooth: hci7: command tx timeout [ 768.619709][T12618] team0: Port device team_slave_0 added [ 768.681956][T12618] team0: Port device team_slave_1 added [ 768.869358][T12618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 768.893908][T12618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 769.017708][T12618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 769.077838][T12618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 769.103742][T12618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 769.183923][T12618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 769.266994][ T7559] usb 1-1: 0:2 : does not exist [ 769.324954][ T7559] usb 1-1: USB disconnect, device number 43 [ 769.462653][T12618] hsr_slave_0: entered promiscuous mode [ 769.492249][T12618] hsr_slave_1: entered promiscuous mode [ 769.607233][T12618] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 769.647661][T12618] Cannot create hsr debugfs directory [ 770.722232][ T5220] Bluetooth: hci7: command tx timeout [ 772.000093][T12671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2337'. [ 772.129568][ T46] vhci_hcd: vhci_device speed not set [ 772.339904][T12618] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.709346][T12695] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2345'. [ 773.421645][T12690] delete_channel: no stack [ 773.432064][ T5220] Bluetooth: hci7: command tx timeout [ 773.511835][T12618] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.660258][T12685] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 773.729397][ T5220] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 773.741533][ T5220] Bluetooth: hci0: Injecting HCI hardware error event [ 773.753811][ T9647] Bluetooth: hci0: hardware error 0x00 [ 774.025170][T12618] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.063579][ T5301] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 774.306640][T12618] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.359391][ T5301] usb 5-1: Using ep0 maxpacket: 8 [ 774.383435][ T5301] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 774.435446][ T5301] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 774.514175][ T5301] usb 5-1: Product: syz [ 774.518544][ T5301] usb 5-1: Manufacturer: syz [ 774.601047][ T5301] usb 5-1: SerialNumber: syz [ 774.678367][ T5301] usb 5-1: config 0 descriptor?? [ 774.708598][T12618] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 774.744717][T12618] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 774.958044][ T5301] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 775.500059][ T5220] Bluetooth: hci7: command tx timeout [ 775.548043][ T5301] gspca_zc3xx: reg_w_i err -110 [ 775.561249][ T5301] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 775.623804][T12618] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 775.812858][ T5339] usb 5-1: USB disconnect, device number 54 [ 775.828338][T12618] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 775.899367][ T9647] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 776.365165][ T1126] IPVS: starting estimator thread 0... [ 776.588218][T12618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 777.016122][T12618] 8021q: adding VLAN 0 to HW filter on device team0 [ 777.061290][T12731] IPVS: using max 33 ests per chain, 79200 per kthread [ 777.100988][T12740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2357'. [ 777.140618][T12740] netlink: 'syz.2.2357': attribute type 14 has an invalid length. [ 777.163617][T12740] netlink: 'syz.2.2357': attribute type 11 has an invalid length. [ 777.246114][T12740] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 777.255979][T12740] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 777.265273][T12740] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 777.274313][T12740] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 777.336515][T12740] vxlan0: entered promiscuous mode [ 777.350697][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 777.357870][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 777.447483][T12748] ALSA: mixer_oss: invalid OSS volume '' [ 777.907416][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 777.914692][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 778.245325][T12741] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 779.892642][T12774] program syz.1.2364 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 780.273633][T12777] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2367'. [ 780.504279][T12780] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 780.601345][T12780] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 780.633409][T12618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 780.807196][T12618] veth0_vlan: entered promiscuous mode [ 780.879978][T12618] veth1_vlan: entered promiscuous mode [ 780.995638][T12618] veth0_macvtap: entered promiscuous mode [ 781.017933][T12618] veth1_macvtap: entered promiscuous mode [ 781.045316][T12618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 781.083143][T12618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 781.101772][T12618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 781.129543][T12618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 781.156606][T12618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 781.176337][T12618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 781.188333][T12618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 781.219480][T12618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 781.258854][T12618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 781.282929][T12618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 781.395291][ T9] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 781.600462][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 781.642633][T12618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 781.659655][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 781.671372][T12618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 782.059630][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 782.083038][T12618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 782.099484][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c287, bcdDevice= 0.00 [ 782.128986][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.149214][ T1126] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 782.157233][T12618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 782.168237][ T9] usb 5-1: config 0 descriptor?? [ 782.194292][T12618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 782.279040][T12618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 782.341175][T12618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 782.418865][T12618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 782.435694][ T1126] usb 1-1: config 0 has an invalid descriptor of length 79, skipping remainder of the config [ 782.464280][T12618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 782.474380][ T1126] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 782.668435][T12618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 782.689732][T12618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.395703][ T9] logitech 0003:046D:C287.002B: item fetching failed at offset 4/5 [ 783.438827][ T1126] usb 1-1: New USB device found, idVendor=05f3, idProduct=024f, bcdDevice=1b.24 [ 783.439276][ T9] logitech 0003:046D:C287.002B: parse failed [ 783.483828][ T9] logitech 0003:046D:C287.002B: probe with driver logitech failed with error -22 [ 783.491422][T12618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 783.509253][ T1126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.529474][ T1126] usb 1-1: Product: syz [ 783.545969][T12618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.579275][ T1126] usb 1-1: Manufacturer: syz [ 783.586531][ T1126] usb 1-1: SerialNumber: syz [ 783.601978][T12618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 783.630289][ T1126] usb 1-1: config 0 descriptor?? [ 783.652747][T12618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.675291][T12618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 783.712053][T12618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.731851][ T1126] usb 5-1: USB disconnect, device number 55 [ 783.746557][T12618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 783.776177][T12618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.786163][T12618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 783.797049][T12618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.807157][T12618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 783.828114][T12618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.861399][T12618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 783.897605][T12618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.934496][T12618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 783.969237][T12618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.142091][T12618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 784.171332][T12618] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.186036][T12618] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.200169][T12618] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.249259][T12618] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.523689][ T9605] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 784.625008][ T9605] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 784.707577][ T2928] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 784.738120][ T2928] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 785.119498][T12815] syzkaller0: entered promiscuous mode [ 785.124999][T12815] syzkaller0: entered allmulticast mode [ 786.211685][ T5301] usb 1-1: USB disconnect, device number 44 [ 786.429395][ T29] audit: type=1326 audit(1723587328.387:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12838 comm="syz.3.2388" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f87f9b799f9 code=0x0 [ 786.450491][ C0] vkms_vblank_simulate: vblank timer overrun [ 786.703909][ T1126] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 787.027055][ T1126] usb 5-1: Using ep0 maxpacket: 8 [ 787.052520][ T1126] usb 5-1: config 1 has an invalid interface number: 205 but max is 0 [ 787.079330][ T1126] usb 5-1: config 1 has an invalid descriptor of length 209, skipping remainder of the config [ 787.110829][ T1126] usb 5-1: config 1 has no interface number 0 [ 787.117474][ T1126] usb 5-1: config 1 interface 205 has no altsetting 0 [ 787.138083][ T1126] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 787.149251][ T9] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 787.206274][ T1126] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.224601][ T2928] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.289905][ T1126] usb 5-1: Product: syz [ 787.349282][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 787.361746][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 787.376337][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 787.386640][ T1126] usb 5-1: Manufacturer: syz [ 787.399316][ T9] usb 4-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 787.422045][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.439645][ T1126] usb 5-1: SerialNumber: syz [ 787.492610][ T9] usb 4-1: config 0 descriptor?? [ 787.500343][ T9] hso 4-1:0.0: Can't find BULK IN endpoint [ 787.880038][ T5220] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 787.929650][ T5220] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 787.944212][ T5220] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 787.959753][ T5220] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 787.979663][ T5220] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 787.987345][ T5220] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 788.145778][ T2928] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.539936][ T2928] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.910188][ T2928] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.584713][ T1126] usb 5-1: USB disconnect, device number 56 [ 789.692661][ T2928] team0: left allmulticast mode [ 789.697685][ T2928] team_slave_0: left allmulticast mode [ 789.721593][ T2928] team_slave_1: left allmulticast mode [ 789.727442][ T2928] bridge0: port 3(team0) entered disabled state [ 789.795559][ T2928] bridge_slave_1: left allmulticast mode [ 789.842164][ T2928] bridge_slave_1: left promiscuous mode [ 789.848075][ T2928] bridge0: port 2(bridge_slave_1) entered disabled state [ 789.877696][ T9] usb 4-1: USB disconnect, device number 52 [ 789.901913][ T2928] bridge_slave_0: left allmulticast mode [ 789.922192][ T2928] bridge_slave_0: left promiscuous mode [ 789.929154][ T2928] bridge0: port 1(bridge_slave_0) entered disabled state [ 790.050303][ T9647] Bluetooth: hci8: command tx timeout [ 790.274224][ T1126] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 790.491547][ T1126] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 790.509881][ T1126] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 790.549195][ T1126] usb 5-1: config 0 has no interface number 0 [ 790.555592][ T1126] usb 5-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 790.591442][ T1126] usb 5-1: config 0 interface 186 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 790.641895][ T1126] usb 5-1: New USB device found, idVendor=05ac, idProduct=8600, bcdDevice=d0.28 [ 790.669198][ T1126] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.679182][ T1126] usb 5-1: Product: syz [ 790.683391][ T1126] usb 5-1: Manufacturer: syz [ 790.701379][ T1126] usb 5-1: SerialNumber: syz [ 790.715737][ T1126] usb 5-1: config 0 descriptor?? [ 790.936013][ T1126] usb 5-1: Found UVC 0.00 device syz (05ac:8600) [ 790.964874][ T1126] usb 5-1: No valid video chain found. [ 790.991246][ T1126] usb 5-1: USB disconnect, device number 57 [ 792.261287][ T9647] Bluetooth: hci8: command tx timeout [ 792.859356][T12878] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 793.303646][ T2928] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 793.355342][ T2928] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 793.381582][ T2928] bond0 (unregistering): Released all slaves [ 793.954319][T12856] chnl_net:caif_netlink_parms(): no params data found [ 794.099376][ T8] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 794.289651][ T9647] Bluetooth: hci8: command tx timeout [ 794.310846][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 794.363762][ T8] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 794.389252][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.434472][ T8] usb 4-1: config 0 descriptor?? [ 795.510844][ T2928] hsr_slave_0: left promiscuous mode [ 795.539747][ T2928] hsr_slave_1: left promiscuous mode [ 795.625284][ T2928] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 795.653562][ T2928] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 795.702657][ T8] lenovo 0003:17EF:6047.002C: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.3-1/input0 [ 795.743940][ T2928] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 795.767263][ T2928] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 795.942451][ T2928] veth1_macvtap: left promiscuous mode [ 795.966149][ T2928] veth0_macvtap: left promiscuous mode [ 795.972808][ T2928] veth1_vlan: left promiscuous mode [ 795.985433][ T2928] veth0_vlan: left promiscuous mode [ 796.369368][ T9647] Bluetooth: hci8: command tx timeout [ 796.850969][ T9] usb 4-1: USB disconnect, device number 53 [ 797.989066][ T2928] team_slave_1 (unregistering): left promiscuous mode [ 798.035916][ T2928] team0 (unregistering): Port device team_slave_1 removed [ 798.167106][ T2928] team_slave_0 (unregistering): left promiscuous mode [ 798.187269][ T2928] team0 (unregistering): Port device team_slave_0 removed [ 800.310173][T12901] netlink: 'syz.2.2404': attribute type 4 has an invalid length. [ 800.401786][T12856] bridge0: port 1(bridge_slave_0) entered blocking state [ 800.409032][T12856] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.417374][T12856] bridge_slave_0: entered allmulticast mode [ 800.441593][T12856] bridge_slave_0: entered promiscuous mode [ 800.461380][T12856] bridge0: port 2(bridge_slave_1) entered blocking state [ 800.544364][T12856] bridge0: port 2(bridge_slave_1) entered disabled state [ 800.574298][T12856] bridge_slave_1: entered allmulticast mode [ 800.729039][T12856] bridge_slave_1: entered promiscuous mode [ 801.761866][T12856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 801.868544][T12856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 801.949410][ T9] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 802.141180][T12856] team0: Port device team_slave_0 added [ 802.213936][T12856] team0: Port device team_slave_1 added [ 802.227123][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 802.349424][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 802.525593][ T9] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 802.546705][T12856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 802.575866][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.606495][T12856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 802.670989][ T9] usb 3-1: config 0 descriptor?? [ 802.748982][T12856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 802.782769][ T9] gspca_main: spca561-2.14.0 probing abcd:cdee [ 802.831690][T12856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 802.838686][T12856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 802.865215][ T5220] Bluetooth: hci9: command 0x0406 tx timeout [ 802.899421][T12856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 802.925354][ T2928] IPVS: stop unused estimator thread 0... [ 802.970204][ T9] spca561 3-1:0.0: probe with driver spca561 failed with error -22 [ 802.987971][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 803.005368][ T9] usb 3-1: MIDIStreaming interface descriptor not found [ 803.078362][ T9] usb 3-1: USB disconnect, device number 48 [ 803.173725][T12856] hsr_slave_0: entered promiscuous mode [ 803.188260][T12856] hsr_slave_1: entered promiscuous mode [ 803.189263][ T5301] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 803.212009][T12856] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 803.229885][T12856] Cannot create hsr debugfs directory [ 803.409247][ T46] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 803.437417][ T5301] usb 4-1: Using ep0 maxpacket: 8 [ 803.459834][ T5301] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 803.511612][ T5301] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 803.561688][ T5301] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.755752][ T46] usb 5-1: unable to get BOS descriptor or descriptor too short [ 803.784885][ T46] usb 5-1: no configurations [ 803.811218][ T46] usb 5-1: can't read configurations, error -22 [ 804.097984][T12939] bridge0: port 3(gretap0) entered blocking state [ 804.110775][T12939] bridge0: port 3(gretap0) entered disabled state [ 804.893412][T12939] gretap0: entered allmulticast mode [ 805.061256][T12939] gretap0: entered promiscuous mode [ 805.069075][T12939] bridge0: port 3(gretap0) entered blocking state [ 805.076427][T12939] bridge0: port 3(gretap0) entered forwarding state [ 805.128584][T12940] gretap0: left allmulticast mode [ 805.138317][T12940] gretap0: left promiscuous mode [ 805.155776][T12940] bridge0: port 3(gretap0) entered disabled state [ 805.618017][T12949] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x2 [ 805.624175][T12856] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 805.661181][T12856] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 805.674126][T12856] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 805.730216][T12856] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 805.949370][ T46] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 806.040600][ T5301] usb 4-1: string descriptor 0 read error: -71 [ 806.135951][ T5301] hub 4-1:32.0: bad descriptor, ignoring hub [ 806.142448][ T5301] hub 4-1:32.0: probe with driver hub failed with error -5 [ 806.223606][ T5301] usb 4-1: USB disconnect, device number 54 [ 806.307258][T12856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 806.350091][ T46] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 806.374346][T12856] 8021q: adding VLAN 0 to HW filter on device team0 [ 806.415519][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.432484][ T46] usb 5-1: Product: syz [ 806.433875][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 806.439244][ T46] usb 5-1: Manufacturer: syz [ 806.444258][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 806.455928][ T46] usb 5-1: SerialNumber: syz [ 806.508734][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 806.515898][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 806.518233][ T46] usb 5-1: config 0 descriptor?? [ 806.771242][T11954] usb 5-1: USB disconnect, device number 59 [ 806.779209][ T5301] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 807.002534][ T5301] usb 4-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 807.039537][ T5301] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.079069][ T5301] usb 4-1: config 0 descriptor?? [ 807.287237][T12856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 807.428433][T12856] veth0_vlan: entered promiscuous mode [ 807.475514][T12856] veth1_vlan: entered promiscuous mode [ 807.580097][T12856] veth0_macvtap: entered promiscuous mode [ 807.618668][T12856] veth1_macvtap: entered promiscuous mode [ 807.689879][T12856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 807.690986][T12960] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2423'. [ 807.716324][T12856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 807.729413][ T5301] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 807.759388][T12856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 807.789434][T12856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 807.808128][T12856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 807.860159][T12856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 807.884372][T12856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 807.931964][T12856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 807.966785][T12856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 807.989265][T12856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 808.015124][T12856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 808.080612][T12856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 808.111468][T12856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 808.147813][T12856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 808.169813][T12856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 808.185463][T12856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 808.206424][T12856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 808.350580][ T5301] usb 4-1: USB disconnect, device number 55 [ 808.398991][T12856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 808.437879][T12856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 808.479562][T12856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 808.499214][T12856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 808.520434][ T9] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 808.540289][T12856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 808.589399][T12856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 808.616894][T12856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 808.656454][T12856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 808.689428][T12856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 808.690111][T12971] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2428'. [ 808.719301][T12856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 808.729377][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 808.744871][T12856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 808.770067][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 808.789227][T12856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 808.829292][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 808.839717][T12856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 808.869397][ T9] usb 3-1: New USB device found, idVendor=056a, idProduct=032f, bcdDevice= 0.00 [ 808.878586][T12856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 808.909227][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.917291][T12856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 808.939825][ T9] usb 3-1: config 0 descriptor?? [ 808.963278][T12856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 808.993688][T12856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 809.029204][T12856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.059151][T12856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 809.093089][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.133589][T12856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.156787][T12977] Invalid ELF section name index: 0 || e_shstrndx (0) >= e_shnum (0) [ 809.197416][T12856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 809.345114][T12856] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.367892][T12856] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.393540][T12856] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.427660][ T9] wacom 0003:056A:032F.002D: unknown main item tag 0x0 [ 809.439267][T12856] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.479298][ T9] wacom 0003:056A:032F.002D: unknown main item tag 0x0 [ 809.504493][ T9] wacom 0003:056A:032F.002D: unknown main item tag 0x0 [ 809.549502][ T9] wacom 0003:056A:032F.002D: hidraw0: USB HID v0.00 Device [HID 056a:032f] on usb-dummy_hcd.2-1/input0 [ 809.773109][ T1291] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 809.792007][ T1291] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 809.866731][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 809.881785][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 809.972628][ T46] IPVS: starting estimator thread 0... [ 810.014505][ T1126] usb 3-1: USB disconnect, device number 49 [ 810.063999][T12985] IPVS: using max 33 ests per chain, 79200 per kthread [ 810.099361][ T5301] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 810.313109][ T5301] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 810.359060][ T5301] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 810.393589][ T5301] usb 4-1: New USB device found, idVendor=056a, idProduct=0059, bcdDevice= 0.00 [ 810.421655][T12994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2433'. [ 810.432298][ T5301] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.472492][ T5301] usb 4-1: config 0 descriptor?? [ 810.871475][ T8] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 811.177366][T13002] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2435'. [ 811.358332][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 811.855699][ T8] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 811.877485][ T8] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 811.889673][ T5301] wacom 0003:056A:0059.002E: unknown main item tag 0x0 [ 811.901854][ T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 811.935049][ T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 811.939590][ T5301] wacom 0003:056A:0059.002E: hidraw0: USB HID v0.00 Device [HID 056a:0059] on usb-dummy_hcd.3-1/input0 [ 811.983378][ T8] usb 2-1: config 1 has no interface number 0 [ 812.009332][ T8] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 812.081031][ T8] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 812.109819][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.165369][ T8] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 812.373940][T13014] zonefs (nbd4) ERROR: Not a zoned block device [ 812.421724][ T5301] usb 4-1: USB disconnect, device number 56 [ 812.538232][ T8] snd_usb_pod 2-1:1.1: endpoint not available, using fallback values [ 812.631586][ T8] snd_usb_pod 2-1:1.1: invalid control EP [ 812.637490][ T8] snd_usb_pod 2-1:1.1: cannot start listening: -22 [ 812.652734][ T8] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 812.667200][ T8] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 812.994217][T13019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2440'. [ 813.044148][T13019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:aa) already exists on: batadv_slave_0 [ 813.079672][T13019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 813.309752][T13019] syz_tun: entered promiscuous mode [ 813.402635][T13026] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 813.657094][ T5222] Bluetooth: hci9: command 0x0406 tx timeout [ 814.454342][ T5301] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 814.800186][ T5301] usb 3-1: Using ep0 maxpacket: 8 [ 815.477782][ T5301] usb 3-1: config 0 has no interfaces? [ 815.507579][ T5301] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 815.529682][ T5301] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 815.538069][ T5301] usb 3-1: Product: syz [ 815.558412][ T5301] usb 3-1: Manufacturer: syz [ 815.568687][ T5301] usb 3-1: SerialNumber: syz [ 815.631417][ T5301] usb 3-1: config 0 descriptor?? [ 815.649534][ T9647] Bluetooth: hci9: Controller not accepting commands anymore: ncmd = 0 [ 815.660955][ T9647] Bluetooth: hci9: Injecting HCI hardware error event [ 815.675885][ T5222] Bluetooth: hci9: hardware error 0x00 [ 815.881758][ T5213] usb 2-1: USB disconnect, device number 36 [ 816.389441][ T8] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 816.901525][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 816.969485][ T8] usb 4-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00 [ 816.993987][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.044356][ T8] usb 4-1: config 0 descriptor?? [ 817.065787][ T8] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 817.249864][ T5267] usb 3-1: USB disconnect, device number 50 [ 817.945025][ T5222] Bluetooth: hci9: Opcode 0x0c03 failed: -110 [ 818.052956][ T9647] block nbd4: Receive control failed (result -32) [ 818.096927][T13061] block nbd4: shutting down sockets [ 818.198906][ T5213] usb 4-1: USB disconnect, device number 57 [ 818.391952][T13071] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2453'. [ 818.773026][T13080] netlink: 'syz.2.2456': attribute type 21 has an invalid length. [ 818.870322][T13080] netlink: 'syz.2.2456': attribute type 16 has an invalid length. [ 818.891556][T13080] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2456'. [ 819.041762][T13082] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 819.259409][ T5301] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 819.569318][ T5301] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 819.609657][ T5301] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 819.679277][ T5301] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 819.689041][ T5301] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 820.602488][ T5301] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 820.613004][ T5301] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.640216][ T5301] usb 4-1: Product: syz [ 820.796427][ T5301] usb 4-1: Manufacturer: syz [ 820.806619][ T5301] usb 4-1: SerialNumber: syz [ 820.819757][ T5301] usb 4-1: config 0 descriptor?? [ 821.501687][ T5301] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 822.501817][ T5301] scsi host1: usb-storage 4-1:0.0 [ 822.570250][ T5301] usb 4-1: USB disconnect, device number 58 [ 823.439294][ T5301] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 823.741934][ T5301] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 823.759346][ T61] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.797839][ T5301] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 823.866374][ T5301] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.902864][ T5301] usb 1-1: Product: syz [ 823.907199][ T5301] usb 1-1: Manufacturer: syz [ 823.954466][ T5301] usb 1-1: SerialNumber: syz [ 824.209882][ T5301] usb 1-1: config 0 descriptor?? [ 824.311189][ T5301] em28xx 1-1:0.0: New device syz syz @ 12 Mbps (2040:0264, interface 0, class 0) [ 824.395074][ T61] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.408474][ T5301] em28xx 1-1:0.0: Device initialization failed. [ 824.409375][ T5222] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 824.564226][ T5220] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 824.571291][ T5301] em28xx 1-1:0.0: Device must be connected to a high-speed USB 2.0 port. [ 824.574436][ T5301] usb 1-1: USB disconnect, device number 45 [ 824.590276][ T5220] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 824.627625][ T5220] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 824.656936][ T5220] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 824.668308][ T5220] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 824.802462][ T61] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.134394][T13149] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2476'. [ 825.382318][ T61] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.588591][T13141] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 825.620398][T13146] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 826.193317][T13162] sch_fq: defrate 0 ignored. [ 826.527924][ T61] bridge_slave_1: left allmulticast mode [ 826.535192][ T61] bridge_slave_1: left promiscuous mode [ 826.551987][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.632789][ T61] bridge_slave_0: left allmulticast mode [ 826.638462][ T61] bridge_slave_0: left promiscuous mode [ 826.689558][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.769381][ T9647] Bluetooth: hci7: command tx timeout [ 827.022359][ T5301] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 827.030078][ T1126] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 827.122274][T13178] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2485'. [ 827.250177][ T29] audit: type=1326 audit(1723587369.207:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13177 comm="syz.4.2485" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f86be9799f9 code=0x0 [ 827.305437][ T5301] usb 2-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 827.360182][ T1126] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 827.379558][ T5301] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.449427][ T1126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.472124][ T5301] usb 2-1: config 0 descriptor?? [ 827.489573][ T1126] usb 1-1: Product: syz [ 827.493953][ T1126] usb 1-1: Manufacturer: syz [ 827.531723][ T1126] usb 1-1: SerialNumber: syz [ 827.551468][ T1126] usb 1-1: config 0 descriptor?? [ 827.603720][ T1126] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 827.654502][ T1126] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-22) [ 827.681646][ T1126] dvb_usb_digitv 1-1:0.0: probe with driver dvb_usb_digitv failed with error -22 [ 827.767884][ T5267] usb 1-1: USB disconnect, device number 46 [ 827.889957][ T5339] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 828.095766][ T5301] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 828.122221][ T5339] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 828.129420][ T5301] asix 2-1:0.0: probe with driver asix failed with error -71 [ 828.170390][ T5339] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 828.182479][ T5301] usb 2-1: USB disconnect, device number 37 [ 828.219304][ T5339] usb 3-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 828.248863][ T5339] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.301317][ T5339] usb 3-1: config 0 descriptor?? [ 828.791559][ T5339] petalynx 0003:18B1:0037.002F: unknown main item tag 0x0 [ 828.830411][ T5339] petalynx 0003:18B1:0037.002F: hidraw0: USB HID v0.00 Device [HID 18b1:0037] on usb-dummy_hcd.2-1/input0 [ 828.849223][ T9647] Bluetooth: hci7: command tx timeout [ 829.138778][ T8] usb 3-1: USB disconnect, device number 51 [ 829.188405][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 829.217544][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 829.278017][ T61] bond0 (unregistering): Released all slaves [ 829.705898][T13139] chnl_net:caif_netlink_parms(): no params data found [ 830.143665][T13195] kvm: kvm [13194]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0xc000022d8 [ 830.171050][T13210] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 830.177630][T13210] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 830.230749][T13210] vhci_hcd vhci_hcd.0: Device attached [ 830.259218][T11954] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 830.286290][T13195] kvm: kvm [13194]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x2300008aa4 [ 830.409509][ T61] hsr_slave_0: left promiscuous mode [ 830.430675][ T5339] vhci_hcd: vhci_device speed not set [ 830.479200][T11954] usb 3-1: Using ep0 maxpacket: 8 [ 830.489206][ T5213] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 830.499359][ T5339] usb 17-1: new full-speed USB device number 3 using vhci_hcd [ 830.522864][T11954] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 830.549418][ T61] hsr_slave_1: left promiscuous mode [ 830.561694][T11954] usb 3-1: config 1 has no interface number 1 [ 830.579554][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 830.598107][T11954] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 830.609368][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 830.628028][T11954] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 830.646547][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 830.660361][T11954] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 830.673047][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 830.691024][ T5213] usb 1-1: Using ep0 maxpacket: 8 [ 830.713856][ T5213] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 830.727103][ T5213] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.736183][ T5213] usb 1-1: Product: syz [ 830.740866][ T5213] usb 1-1: Manufacturer: syz [ 830.745854][T11954] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 830.755174][T11954] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.763417][ T5213] usb 1-1: SerialNumber: syz [ 830.768259][T11954] usb 3-1: Product: syz [ 830.804934][ T5213] usb 1-1: config 0 descriptor?? [ 830.814556][T11954] usb 3-1: Manufacturer: syz [ 830.842971][T11954] usb 3-1: SerialNumber: syz [ 830.906456][ T61] veth1_macvtap: left promiscuous mode [ 830.920361][ T61] veth0_macvtap: left promiscuous mode [ 830.926237][ T61] veth1_vlan: left promiscuous mode [ 830.940232][ T9647] Bluetooth: hci7: command tx timeout [ 830.976352][ T61] veth0_vlan: left promiscuous mode [ 830.990833][T13211] vhci_hcd: connection reset by peer [ 830.996763][T12207] vhci_hcd: stop threads [ 831.027289][T12207] vhci_hcd: release socket [ 831.076521][T12207] vhci_hcd: disconnect device [ 831.085948][ T5213] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 831.170767][T11954] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 831.197941][T11954] usb 3-1: 2:1 : invalid channels 0 [ 831.239606][T11954] usb 3-1: USB disconnect, device number 52 [ 831.908040][ T5213] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 831.947476][ T5213] usb 1-1: USB disconnect, device number 47 [ 832.169306][ T46] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 832.421369][ T8] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 832.481670][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 832.539724][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 832.637600][ T46] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 832.672517][ T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 832.709257][ T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 832.757522][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.815506][ T8] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 832.838060][ T46] usb 2-1: config 0 descriptor?? [ 832.860472][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 832.932322][ T8] usb 3-1: SerialNumber: syz [ 833.043416][ T9647] Bluetooth: hci7: command tx timeout [ 833.082161][T13219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 833.212645][ T8] usb 3-1: 0:2 : does not exist [ 833.228853][T13219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 833.235611][ T8] usb 3-1: USB disconnect, device number 53 [ 833.839316][ T61] team0 (unregistering): Port device team_slave_1 removed [ 834.085898][ T61] team0 (unregistering): Port device team_slave_0 removed [ 835.649545][ T5339] vhci_hcd: vhci_device speed not set [ 837.667047][T13139] bridge0: port 1(bridge_slave_0) entered blocking state [ 837.691564][T13139] bridge0: port 1(bridge_slave_0) entered disabled state [ 837.698972][T13139] bridge_slave_0: entered allmulticast mode [ 837.721967][T13139] bridge_slave_0: entered promiscuous mode [ 837.789427][T13219] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2496'. [ 837.842721][T13139] bridge0: port 2(bridge_slave_1) entered blocking state [ 837.879406][T13139] bridge0: port 2(bridge_slave_1) entered disabled state [ 837.887390][T13139] bridge_slave_1: entered allmulticast mode [ 837.945436][T13139] bridge_slave_1: entered promiscuous mode [ 838.119658][ T46] usb 2-1: string descriptor 0 read error: -71 [ 838.140642][ T46] uclogic 0003:256C:006D.0030: failed retrieving string descriptor #200: -71 [ 838.269521][ T5267] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 838.993076][ T46] uclogic 0003:256C:006D.0030: failed retrieving pen parameters: -71 [ 839.009392][ T46] uclogic 0003:256C:006D.0030: failed probing pen v2 parameters: -71 [ 839.017573][ T46] uclogic 0003:256C:006D.0030: failed probing parameters: -71 [ 839.062148][T13139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 839.102899][T13139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 839.139253][ T46] uclogic 0003:256C:006D.0030: probe with driver uclogic failed with error -71 [ 839.159184][ T5267] usb 5-1: Using ep0 maxpacket: 32 [ 839.179465][ T46] usb 2-1: USB disconnect, device number 38 [ 839.208528][ T5267] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 839.251449][ T5267] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 839.325623][ T5267] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 839.339127][ T5267] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.388739][ T7559] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 839.408832][ T5267] usb 5-1: config 0 descriptor?? [ 839.431920][T13139] team0: Port device team_slave_0 added [ 839.471664][ T9] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 839.475125][T13139] team0: Port device team_slave_1 added [ 839.619361][ T7559] usb 1-1: Using ep0 maxpacket: 32 [ 839.657273][ T7559] usb 1-1: New USB device found, idVendor=1d6f, idProduct=0010, bcdDevice= a.a7 [ 839.689648][ T7559] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.699316][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 839.700614][T13139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 839.712690][ T46] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 839.729783][ T7559] usb 1-1: Product: syz [ 839.736562][T13139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 839.739538][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 839.763061][ T7559] usb 1-1: Manufacturer: syz [ 839.803243][ T7559] usb 1-1: SerialNumber: syz [ 839.813435][ T7559] usb 1-1: config 0 descriptor?? [ 839.839446][T13139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 839.848623][ T7559] usb 1-1: bad CDC descriptors [ 839.874331][T13139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 839.883636][ T5267] koneplus 0003:1E7D:2D51.0031: unknown main item tag 0x0 [ 839.920345][ T7559] cp210x 1-1:0.0: cp210x converter detected [ 839.929417][T13139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 839.932838][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 840.047836][ T9] usb 3-1: New USB device found, idVendor=6666, idProduct=8802, bcdDevice= 0.00 [ 840.048351][ T5267] koneplus 0003:1E7D:2D51.0031: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.4-1/input0 [ 840.088905][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.101642][ T46] usb 2-1: config 0 has an invalid interface number: 124 but max is 0 [ 840.121376][T13139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 840.132522][ T46] usb 2-1: config 0 has no interface number 0 [ 840.140450][ T7559] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 840.140585][ T9] usb 3-1: config 0 descriptor?? [ 840.153349][ T7559] cp210x 1-1:0.0: querying part number failed [ 840.163280][ T46] usb 2-1: config 0 interface 124 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 840.192825][ T7559] usb 1-1: cp210x converter now attached to ttyUSB0 [ 840.208382][ T5267] usb 5-1: USB disconnect, device number 60 [ 840.215162][ T46] usb 2-1: config 0 interface 124 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 840.237328][ T7559] usb 1-1: USB disconnect, device number 48 [ 840.257205][ T46] usb 2-1: config 0 interface 124 altsetting 0 endpoint 0xD has invalid maxpacket 1552, setting to 64 [ 840.302273][ T7559] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 840.373921][ T7559] cp210x 1-1:0.0: device disconnected [ 840.379580][ T46] usb 2-1: config 0 interface 124 altsetting 0 has an endpoint descriptor with address 0x96, changing to 0x86 [ 840.553435][ T46] usb 2-1: config 0 interface 124 altsetting 0 endpoint 0x86 has invalid maxpacket 59461, setting to 64 [ 840.568060][T13139] hsr_slave_0: entered promiscuous mode [ 840.575408][T13139] hsr_slave_1: entered promiscuous mode [ 840.591779][T13139] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 840.619356][ T46] usb 2-1: config 0 interface 124 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 840.632730][T13139] Cannot create hsr debugfs directory [ 840.720679][ T46] usb 2-1: New USB device found, idVendor=058f, idProduct=9720, bcdDevice=ec.28 [ 840.751129][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.819259][ T46] usb 2-1: Product: syz [ 840.829821][ T9] smartjoyplus 0003:6666:8802.0032: unknown main item tag 0x0 [ 840.833825][ T46] usb 2-1: Manufacturer: syz [ 840.870052][ T9] smartjoyplus 0003:6666:8802.0032: unknown main item tag 0x0 [ 840.902437][ T46] usb 2-1: SerialNumber: syz [ 840.943295][ T46] usb 2-1: config 0 descriptor?? [ 840.944715][ T9] smartjoyplus 0003:6666:8802.0032: hidraw0: USB HID v0.00 Device [HID 6666:8802] on usb-dummy_hcd.2-1/input0 [ 840.974182][T13249] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 841.025336][ T9] smartjoyplus 0003:6666:8802.0032: no output reports found [ 841.034190][T13249] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 841.069870][T13249] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 841.087875][ T9] usb 3-1: USB disconnect, device number 54 [ 841.582833][ T46] pl2303 2-1:0.124: required interrupt-in endpoint missing [ 841.628632][ T46] usb 2-1: USB disconnect, device number 39 [ 844.009463][ T9] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 844.179380][ T9] usb 1-1: device descriptor read/64, error -71 [ 844.219247][T13271] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2515'. [ 844.264597][T13139] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 844.298604][T13139] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 844.343016][T13139] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 844.415658][T13139] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 844.464775][ T9] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 844.641659][ T9] usb 1-1: device descriptor read/64, error -71 [ 844.761651][ T9] usb usb1-port1: attempt power cycle [ 844.879559][T13139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 845.026506][T13139] 8021q: adding VLAN 0 to HW filter on device team0 [ 845.183922][T12207] bridge0: port 1(bridge_slave_0) entered blocking state [ 845.191168][T12207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 845.239786][T12207] bridge0: port 2(bridge_slave_1) entered blocking state [ 845.247076][T12207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 845.851450][T13139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 846.036331][T13139] veth0_vlan: entered promiscuous mode [ 846.076870][T13139] veth1_vlan: entered promiscuous mode [ 846.272123][T13139] veth0_macvtap: entered promiscuous mode [ 846.314562][T13139] veth1_macvtap: entered promiscuous mode [ 846.413889][T13139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 846.453660][T13139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 846.519871][T13139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 846.549255][T13139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 846.579355][T13139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 846.603042][T13139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 846.695108][T13139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 846.866292][T13139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 846.877621][T13139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 846.903989][T13139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 847.849181][T13139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 847.877009][T13139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 847.935244][T13139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 847.992892][T13139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 848.129462][T13139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 848.160727][T13139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 848.176238][T13139] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 848.242691][T13139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 848.305601][T13139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 848.468480][ T9] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 848.493384][T13139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 848.509251][T13139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 848.529465][T13139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 848.640281][T13139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 848.746972][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 848.888386][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 849.246330][ T9] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 849.255577][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.344985][ T9] usb 2-1: config 0 descriptor?? [ 849.369264][T13139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 849.399462][T13139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 849.476926][T13139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 849.487589][ T7559] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 849.529502][T13139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 849.572409][T13139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 849.609312][T13139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 849.640129][T13139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 849.682048][T13139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 849.724024][T13139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 849.742468][ T7559] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 849.782743][ T7559] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 849.793178][T13139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 849.794224][ T9] hid (null): bogus close delimiter [ 849.808883][ T7559] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 849.824155][T13139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 849.859306][T13139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 849.869854][ T7559] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 849.878937][ T7559] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.910550][T13139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 849.935217][T13139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 849.956732][ T7559] usb 5-1: config 0 descriptor?? [ 850.002298][T13139] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 850.141555][T13325] netlink: 'syz.2.2530': attribute type 1 has an invalid length. [ 850.417899][T13325] bond1: entered promiscuous mode [ 850.454622][ T7559] plantronics 0003:047F:FFFF.0034: unknown main item tag 0x0 [ 850.496496][T13326] lo: entered promiscuous mode [ 850.500112][ T7559] plantronics 0003:047F:FFFF.0034: No inputs registered, leaving [ 850.545002][T13326] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 850.559661][ T7559] plantronics 0003:047F:FFFF.0034: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 850.655889][T13326] bond1: (slave lo): making interface the new active one [ 850.707676][T13326] bond1: (slave lo): Enslaving as an active interface with an up link [ 850.768166][T13139] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.793080][T13139] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.822177][ T5301] usb 5-1: USB disconnect, device number 61 [ 850.849314][T13139] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.886018][T13139] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.928356][T13329] hsr0: entered promiscuous mode [ 851.059907][T13331] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2532'. [ 851.103567][ T9] uclogic 0003:256C:006D.0033: failed retrieving Huion firmware version: -71 [ 851.148688][ T9] uclogic 0003:256C:006D.0033: failed probing parameters: -71 [ 851.177195][ T9] uclogic 0003:256C:006D.0033: probe with driver uclogic failed with error -71 [ 851.229518][ T9] usb 2-1: USB disconnect, device number 40 [ 851.349448][ T5301] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 851.545929][ T128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 851.585726][ T128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 851.599641][ T5301] usb 3-1: Using ep0 maxpacket: 32 [ 851.669487][ T5301] usb 3-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 851.729431][ T5301] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.772844][ T5301] usb 3-1: config 0 descriptor?? [ 851.802207][ T5301] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 851.805517][ T128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 851.887638][ T128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 852.155146][ T5220] Bluetooth: hci3: command 0x0406 tx timeout [ 852.309572][ T5301] gspca_sunplus: reg_w_riv err -110 [ 852.314919][ T5301] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 852.550061][T13348] befs: (nullb0): No write support. Marking filesystem read-only [ 852.571305][T13348] befs: (nullb0): invalid magic header [ 853.139239][ T5301] usb 3-1: USB disconnect, device number 55 [ 853.392999][T13357] kvm: pic: non byte read [ 853.419250][T11954] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 853.665578][T11954] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 853.699349][T11954] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 853.718797][T11954] usb 5-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 853.738376][T11954] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.769654][T11954] usb 5-1: config 0 descriptor?? [ 853.949229][ T5339] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 854.059266][ T9] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 854.145028][ T5339] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 854.165779][ T5339] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.178881][ T5339] usb 1-1: Product: syz [ 854.179270][ T5301] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 854.183434][ T5339] usb 1-1: Manufacturer: syz [ 854.183455][ T5339] usb 1-1: SerialNumber: syz [ 854.191036][ T5339] usb 1-1: config 0 descriptor?? [ 854.247484][T11954] steelseries 0003:1038:12B6.0035: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.4-1/input0 [ 854.260442][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 854.282900][ T9] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 854.298907][ T9] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 854.307994][ T9] usb 4-1: Product: syz [ 854.316775][ T9] usb 4-1: Manufacturer: syz [ 854.337624][ T9] usb 4-1: SerialNumber: syz [ 854.355608][ T9] usb 4-1: config 0 descriptor?? [ 854.400164][ C0] hrtimer: interrupt took 173555 ns [ 854.430102][ T5301] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 854.487914][ T5301] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 854.517503][ T5301] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 854.691313][T13364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 854.712328][T13364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 854.742594][ T8] usb 5-1: USB disconnect, device number 62 [ 854.805758][ T5301] usb 2-1: config 0 interface 0 has no altsetting 0 [ 854.854537][ T5301] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 854.928700][ T5301] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 854.963301][ T5267] usb 4-1: USB disconnect, device number 59 [ 854.985931][ T5301] usb 2-1: config 0 interface 0 has no altsetting 0 [ 855.008746][ T5301] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 855.033158][ T5301] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 855.054365][ T5301] usb 2-1: config 0 interface 0 has no altsetting 0 [ 855.072507][ T5301] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 855.085808][ T5301] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 855.101123][ T5301] usb 2-1: config 0 interface 0 has no altsetting 0 [ 855.119766][ T5301] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 855.158949][ T5301] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 855.188930][ T5301] usb 2-1: config 0 interface 0 has no altsetting 0 [ 855.197669][ T5301] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 855.207740][ T5301] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 855.219746][ T5301] usb 2-1: config 0 interface 0 has no altsetting 0 [ 855.260500][ T5339] usb 1-1: Firmware version (0.0) predates our first public release. [ 855.283703][ T5301] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 855.283705][ T5339] usb 1-1: Please update to version 0.2 or newer [ 855.283750][ T5301] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 855.430058][ T5301] usb 2-1: config 0 interface 0 has no altsetting 0 [ 855.447887][ T5301] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 855.453913][ T5339] usb 1-1: USB disconnect, device number 52 [ 855.458643][ T5301] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 855.473829][ T46] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 855.481921][ T5301] usb 2-1: config 0 interface 0 has no altsetting 0 [ 855.498094][ T5301] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 855.518340][ T5301] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 855.562634][ T5301] usb 2-1: Product: syz [ 855.569391][ T5301] usb 2-1: Manufacturer: syz [ 855.584376][ T5301] usb 2-1: SerialNumber: syz [ 855.613962][ T5301] usb 2-1: config 0 descriptor?? [ 855.669822][ T5301] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 855.699223][ T46] usb 3-1: Using ep0 maxpacket: 8 [ 855.746929][ T46] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 855.829693][ T46] usb 3-1: New USB device found, idVendor=17a1, idProduct=0128, bcdDevice= 5.f6 [ 855.903150][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.964810][ T46] usb 3-1: Product: syz [ 855.983635][ T46] usb 3-1: Manufacturer: syz [ 856.015051][ T46] usb 3-1: SerialNumber: syz [ 856.037161][ T46] usb 3-1: config 0 descriptor?? [ 856.100231][ T46] gspca_main: t613-2.14.0 probing 17a1:0128 [ 856.413724][ T46] gspca_t613: unknown sensor 0000 [ 856.439932][ T46] t613 3-1:0.0: probe with driver t613 failed with error -22 [ 856.510909][ T46] usb 3-1: USB disconnect, device number 56 [ 856.682642][ T5301] usb 2-1: USB disconnect, device number 41 [ 856.758219][ T5301] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 857.846182][T13408] netlink: 'syz.4.2559': attribute type 10 has an invalid length. [ 857.867818][T13408] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2559'. [ 857.907115][T13408] batman_adv: batadv0: Adding interface: virt_wifi0 [ 857.935261][T13408] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 857.999508][T13408] batman_adv: batadv0: Interface activated: virt_wifi0 [ 858.429382][ T8] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 858.445063][T13420] ADFS-fs (nullb0): unrecognised mount option "@" or missing value [ 858.656275][ T8] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 858.689416][ T8] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 858.720057][ T29] audit: type=1326 audit(1723587400.677:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13425 comm="syz.4.2565" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f86be9799f9 code=0x0 [ 858.744885][ T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 858.769625][ T46] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 858.786378][T13430] loop7: detected capacity change from 0 to 16320 [ 858.809167][ T8] usb 3-1: config 1 has no interface number 0 [ 858.816245][ T8] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 858.892774][ T8] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 35332, setting to 64 [ 858.936037][ T8] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 858.999772][ T46] usb 4-1: Using ep0 maxpacket: 8 [ 859.031755][ T46] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 859.039370][ T8] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d6.01 [ 859.049746][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.069001][T13416] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 859.089050][ T46] usb 4-1: config 0 has too many interfaces: 241, using maximum allowed: 32 [ 859.096543][ T8] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 859.160228][ T46] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 241 [ 859.190591][T13433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2566'. [ 859.227833][ T46] usb 4-1: config 0 has no interface number 0 [ 859.261033][ T46] usb 4-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 859.339240][ T46] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 859.382065][ T46] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 859.684509][T13434] program syz.2.2560 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 859.839263][ T46] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 859.840501][T13434] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 859.921331][ T46] usb 4-1: New USB device strings: Mfr=228, Product=255, SerialNumber=0 [ 859.929886][ T46] usb 4-1: Product: syz [ 859.934277][ T46] usb 4-1: Manufacturer: syz [ 859.943255][ T46] usb 4-1: config 0 descriptor?? [ 859.969022][T13424] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 859.992678][ T8] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 860.390495][ T46] usb 4-1: USB disconnect, device number 60 [ 860.582134][T13445] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2573'. [ 860.633195][T11954] usb 3-1: USB disconnect, device number 57 [ 860.666704][T11954] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 861.393153][ T8] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 861.609379][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 861.632748][ T8] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 861.701340][ T8] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 861.726123][ T8] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 861.771739][ T8] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 861.799319][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 861.864342][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 861.896487][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 861.983772][ T8] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 861.993144][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.012585][ T8] usb 5-1: Product: syz [ 862.033442][ T8] usb 5-1: Manufacturer: syz [ 862.048424][ T8] usb 5-1: SerialNumber: syz [ 862.081881][ T8] usb 5-1: config 0 descriptor?? [ 862.099674][ T8] hub 5-1:0.0: bad descriptor, ignoring hub [ 862.110005][ T8] hub 5-1:0.0: probe with driver hub failed with error -5 [ 862.118774][ T8] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input72 [ 862.490451][ T5301] usb 5-1: USB disconnect, device number 63 [ 863.317483][ T9] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 864.229223][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 864.510340][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 864.560190][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 864.573825][ T9] usb 1-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00 [ 864.599280][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.633209][ T9] usb 1-1: config 0 descriptor?? [ 864.640309][T13502] netlink: 'syz.1.2588': attribute type 1 has an invalid length. [ 864.678837][T13502] netlink: 'syz.1.2588': attribute type 2 has an invalid length. [ 865.117764][ T9] kye 0003:0458:500F.0036: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 865.199217][ T8] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 865.598149][ T9] kye 0003:0458:500F.0036: unknown main item tag 0x0 [ 865.638525][ T9] kye 0003:0458:500F.0036: unknown main item tag 0x0 [ 865.658074][ T9] kye 0003:0458:500F.0036: hidraw0: USB HID v0.00 Device [HID 0458:500f] on usb-dummy_hcd.0-1/input0 [ 865.693734][ T9] kye 0003:0458:500F.0036: tablet-enabling feature report not found [ 865.712217][ T9] kye 0003:0458:500F.0036: tablet enabling failed [ 865.751412][ T9] usb 1-1: USB disconnect, device number 53 [ 865.815020][ T8] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 865.835964][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 865.858965][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 255, setting to 64 [ 865.890624][ T8] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 865.903572][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.921863][ T8] usb 4-1: Product: syz [ 865.936303][ T8] usb 4-1: Manufacturer: syz [ 865.942144][ T8] usb 4-1: SerialNumber: syz [ 865.950085][ T8] usb 4-1: config 0 descriptor?? [ 865.959777][T13504] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 866.090991][ T8] rc_core: IR keymap rc-streamzap not found [ 866.099158][ T8] Registered IR keymap rc-empty [ 866.152668][ T8] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 866.180118][T13518] overlayfs: failed to resolve './file1': -2 [ 866.200646][ T8] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input73 [ 866.297790][ T8] usb 4-1: USB disconnect, device number 61 [ 866.839318][ T5301] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 866.935605][T13532] i2c i2c-0: Invalid block write size 50 [ 867.829499][ T5301] usb 5-1: Using ep0 maxpacket: 16 [ 868.180886][ T5301] usb 5-1: unable to get BOS descriptor or descriptor too short [ 868.190579][ T5301] usb 5-1: no configurations [ 868.209547][ T5301] usb 5-1: can't read configurations, error -22 [ 869.873438][T13545] syzkaller0: entered promiscuous mode [ 869.899588][T13545] syzkaller0: entered allmulticast mode [ 870.964208][T13569] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 870.999550][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 873.289891][T13591] sctp: [Deprecated]: syz.0.2615 (pid 13591) Use of int in maxseg socket option. [ 873.289891][T13591] Use struct sctp_assoc_value instead [ 879.072595][ T5220] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 879.085530][ T5220] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 879.094625][ T5220] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 879.104202][ T5220] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 879.115777][ T5220] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 879.123205][ T5220] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 880.661039][ T5222] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 880.673001][T12595] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 880.684566][T12595] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 880.695886][T12595] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 880.704073][T12595] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 880.704833][ T5222] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 880.721224][T12595] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 880.723126][ T5222] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 880.743550][ T5222] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 880.807850][T12595] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 880.820930][ T5222] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 880.829766][ T5222] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 881.169287][ T5222] Bluetooth: hci10: command tx timeout [ 881.221780][ T9647] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 881.234127][ T9647] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 881.243630][ T9647] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 881.252278][ T9647] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 881.311245][ T9647] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 881.331771][ T9647] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 882.849519][ T5222] Bluetooth: hci11: command tx timeout [ 882.936636][ T5222] Bluetooth: hci12: command tx timeout [ 883.259456][ T5222] Bluetooth: hci10: command tx timeout [ 883.409319][ T5222] Bluetooth: hci13: command tx timeout [ 884.887092][ T9647] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 884.920666][ T9647] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 884.930115][ T9647] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 884.939286][T12595] Bluetooth: hci11: command tx timeout [ 885.003949][ T9647] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 885.012075][ T9647] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 885.019344][ T9647] Bluetooth: hci12: command tx timeout [ 885.026526][ T9647] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 885.336755][ T5222] Bluetooth: hci10: command tx timeout [ 885.527499][ T5222] Bluetooth: hci13: command tx timeout [ 887.009316][ T5222] Bluetooth: hci11: command tx timeout [ 887.089582][ T5222] Bluetooth: hci12: command tx timeout [ 887.169390][ T5222] Bluetooth: hci14: command tx timeout [ 887.411779][ T5222] Bluetooth: hci10: command tx timeout [ 887.569450][ T5222] Bluetooth: hci13: command tx timeout [ 889.091348][ T5222] Bluetooth: hci11: command tx timeout [ 889.169540][ T5222] Bluetooth: hci12: command tx timeout [ 889.249338][ T5222] Bluetooth: hci14: command tx timeout [ 889.492607][T13563] bridge0: port 3(gretap0) entered blocking state [ 889.509657][T13563] bridge0: port 3(gretap0) entered disabled state [ 889.521131][T13563] gretap0: entered allmulticast mode [ 889.551429][T13563] gretap0: entered promiscuous mode [ 889.571939][T13563] bridge0: port 3(gretap0) entered blocking state [ 889.578515][T13563] bridge0: port 3(gretap0) entered forwarding state [ 889.623343][T13566] gretap0: left allmulticast mode [ 889.628431][T13566] gretap0: left promiscuous mode [ 889.649495][ T5222] Bluetooth: hci13: command tx timeout [ 889.672275][T13566] bridge0: port 3(gretap0) entered disabled state [ 890.045931][T13580] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2611'. [ 891.236596][T12207] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.329405][ T5222] Bluetooth: hci14: command tx timeout [ 891.457196][T13594] syz_tun (unregistering): left promiscuous mode [ 892.047754][T12207] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.245968][T12207] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.621164][T12207] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.045094][T13604] chnl_net:caif_netlink_parms(): no params data found [ 893.164231][T13606] chnl_net:caif_netlink_parms(): no params data found [ 893.409565][ T5222] Bluetooth: hci14: command tx timeout [ 893.715350][T12207] bridge_slave_1: left allmulticast mode [ 893.737285][T12207] bridge_slave_1: left promiscuous mode [ 893.743606][T12207] bridge0: port 2(bridge_slave_1) entered disabled state [ 893.766216][T12207] bridge_slave_0: left allmulticast mode [ 893.789189][T12207] bridge_slave_0: left promiscuous mode [ 893.810108][T12207] bridge0: port 1(bridge_slave_0) entered disabled state [ 895.091488][T12207] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 895.153405][T12207] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 895.201336][T12207] bond0 (unregistering): Released all slaves [ 895.437678][T13609] chnl_net:caif_netlink_parms(): no params data found [ 895.761519][T13597] chnl_net:caif_netlink_parms(): no params data found [ 895.853294][T13606] bridge0: port 1(bridge_slave_0) entered blocking state [ 895.869746][T13606] bridge0: port 1(bridge_slave_0) entered disabled state [ 895.877009][T13606] bridge_slave_0: entered allmulticast mode [ 895.910943][T13606] bridge_slave_0: entered promiscuous mode [ 896.086253][T13606] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.099465][T13606] bridge0: port 2(bridge_slave_1) entered disabled state [ 896.141304][T13606] bridge_slave_1: entered allmulticast mode [ 896.180208][T13606] bridge_slave_1: entered promiscuous mode [ 896.504432][T13604] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.519245][T13604] bridge0: port 1(bridge_slave_0) entered disabled state [ 896.539548][T13604] bridge_slave_0: entered allmulticast mode [ 896.579331][T13604] bridge_slave_0: entered promiscuous mode [ 896.755107][T13606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 896.863530][T13604] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.879627][T13604] bridge0: port 2(bridge_slave_1) entered disabled state [ 896.886903][T13604] bridge_slave_1: entered allmulticast mode [ 896.910144][T13604] bridge_slave_1: entered promiscuous mode [ 897.017490][T13606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 897.126071][T12207] hsr_slave_0: left promiscuous mode [ 897.169713][T12207] hsr_slave_1: left promiscuous mode [ 897.176147][T12207] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 897.229392][T12207] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 897.270570][T12207] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 897.278038][T12207] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 897.358961][T12207] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 897.366513][T12207] batman_adv: batadv0: Removing interface: virt_wifi0 [ 897.454911][T12207] veth1_macvtap: left promiscuous mode [ 897.480009][T12207] veth0_macvtap: left promiscuous mode [ 897.485595][T12207] veth1_vlan: left promiscuous mode [ 897.509365][T12207] veth0_vlan: left promiscuous mode [ 899.625827][T12207] team0 (unregistering): Port device team_slave_1 removed [ 899.830810][T12207] team0 (unregistering): Port device team_slave_0 removed [ 900.911603][T12207] team0 (unregistering): Port device batadv0 removed [ 902.092911][T13602] chnl_net:caif_netlink_parms(): no params data found [ 902.373968][T13606] team0: Port device team_slave_0 added [ 902.412965][T13604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 902.570115][T13604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 902.681491][T13597] bridge0: port 1(bridge_slave_0) entered blocking state [ 902.712841][T13597] bridge0: port 1(bridge_slave_0) entered disabled state [ 902.749702][T13597] bridge_slave_0: entered allmulticast mode [ 902.819232][T13597] bridge_slave_0: entered promiscuous mode [ 902.831998][T13606] team0: Port device team_slave_1 added [ 902.838104][T13597] bridge0: port 2(bridge_slave_1) entered blocking state [ 902.900464][T13597] bridge0: port 2(bridge_slave_1) entered disabled state [ 902.907794][T13597] bridge_slave_1: entered allmulticast mode [ 902.960974][T13597] bridge_slave_1: entered promiscuous mode [ 903.175555][ T30] INFO: task syz-executor:11789 blocked for more than 143 seconds. [ 903.200818][ T30] Not tainted 6.11.0-rc3-syzkaller-00010-g6b4aa469f049 #0 [ 903.208486][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 903.289113][ T30] task:syz-executor state:D stack:20432 pid:11789 tgid:11789 ppid:1 flags:0x00004004 [ 903.413196][ T30] Call Trace: [ 903.416521][ T30] [ 903.511853][ T30] __schedule+0x17ae/0x4a10 [ 903.516463][ T30] ? __pfx___schedule+0x10/0x10 [ 903.539208][ T30] ? __pfx_lock_release+0x10/0x10 [ 903.544383][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 903.550579][ T30] ? schedule+0x90/0x320 [ 903.554910][ T30] schedule+0x14b/0x320 [ 903.569279][ T30] v9fs_evict_inode+0x171/0x360 [ 903.574271][ T30] ? _raw_spin_unlock+0x28/0x50 [ 903.609139][ T30] ? __pfx_v9fs_evict_inode+0x10/0x10 [ 903.619775][ T30] ? __pfx_var_wake_function+0x10/0x10 [ 903.625297][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 903.683823][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 903.739132][ T30] ? _raw_spin_unlock+0x28/0x50 [ 903.744060][ T30] ? __pfx_v9fs_evict_inode+0x10/0x10 [ 903.849897][ T30] evict+0x2a8/0x630 [ 903.853847][ T30] __dentry_kill+0x20d/0x630 [ 903.858433][ T30] ? dput+0x37/0x2b0 [ 903.898650][ T30] dput+0x19f/0x2b0 [ 903.902647][ T30] shrink_dcache_for_umount+0xb4/0x180 [ 903.909123][ T30] generic_shutdown_super+0x6a/0x2d0 [ 903.919345][ T30] kill_anon_super+0x3b/0x70 [ 903.923972][ T30] v9fs_kill_super+0x4c/0x90 [ 903.928580][ T30] deactivate_locked_super+0xc4/0x130 [ 903.934340][ T30] cleanup_mnt+0x41f/0x4b0 [ 903.938849][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 903.944334][ T30] task_work_run+0x24f/0x310 [ 903.948949][ T30] ? __pfx_task_work_run+0x10/0x10 [ 903.979134][ T30] ? __x64_sys_umount+0x123/0x170 [ 903.984311][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 904.009136][ T30] syscall_exit_to_user_mode+0x168/0x370 [ 904.014851][ T30] do_syscall_64+0x100/0x230 [ 904.039157][ T30] ? clear_bhb_loop+0x35/0x90 [ 904.043953][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 904.079396][ T30] RIP: 0033:0x7fc08497ad27 [ 904.083885][ T30] RSP: 002b:00007ffc94b9f868 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 904.129190][ T30] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fc08497ad27 [ 904.137309][ T30] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc94b9f920 [ 904.179124][ T30] RBP: 00007ffc94b9f920 R08: 0000000000000000 R09: 0000000000000000 [ 904.187176][ T30] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc94ba09a0 [ 904.279130][ T30] R13: 00007fc0849e778c R14: 00000000000b83ed R15: 00007ffc94ba09e0 [ 904.287197][ T30] [ 904.309450][ T30] [ 904.309450][ T30] Showing all locks held in the system: [ 904.339162][ T30] 3 locks held by kworker/u8:0/11: [ 904.344338][ T30] #0: ffff888015489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 904.349434][T13609] bridge0: port 1(bridge_slave_0) entered blocking state [ 904.399675][ T30] #1: ffffc90000107d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 904.419676][T13609] bridge0: port 1(bridge_slave_0) entered disabled state [ 904.426915][T13609] bridge_slave_0: entered allmulticast mode [ 904.469255][ T30] #2: ffffffff8fa6fe48 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 904.478312][ T30] 1 lock held by khungtaskd/30: [ 904.539693][T13609] bridge_slave_0: entered promiscuous mode [ 904.549192][ T30] #0: ffffffff8e7382e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 904.569644][ T30] 2 locks held by kworker/u8:2/35: [ 904.574872][ T30] #0: ffff888015489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 904.597943][ T30] #1: ffffc90000ab7d00 ((work_completion)(&wreq->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 904.629296][ T30] 2 locks held by kworker/u8:4/61: [ 904.634511][ T30] 2 locks held by getty/4965: [ 904.679086][ T30] #0: ffff88802ac530a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 904.688908][ T30] #1: ffffc900031232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 904.762011][ T30] 1 lock held by syz.2.1169/8985: [ 904.767070][ T30] 2 locks held by syz.3.2051/11721: [ 904.809286][ T30] #0: ffffffff8fad55b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 904.835981][ T30] #1: ffffffff8ea054a8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nl_listener_set_doit+0x12d/0x1a90 [ 904.909204][ T30] 1 lock held by syz-executor/11789: [ 904.943029][ T30] #0: ffff88801f6200e0 (&type->s_umount_key#79){+.+.}-{3:3}, at: deactivate_super+0xb5/0xf0 [ 904.999194][ T30] 1 lock held by syz.1.2141/12062: [ 905.004366][ T30] 4 locks held by kworker/u8:12/12207: [ 905.049113][ T30] #0: ffff8880162e3148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 905.094151][ T30] #1: ffffc9000308fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 905.158234][ T30] #2: ffffffff8fa632d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 905.191641][ T30] #3: ffffffff8fa6fe48 (rtnl_mutex){+.+.}-{3:3}, at: wg_destruct+0x25/0x2e0 [ 905.218993][ T30] 1 lock held by syz-executor/13597: [ 905.224674][ T30] #0: ffffffff8fa6fe48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 905.259124][ T30] 1 lock held by syz-executor/13602: [ 905.264461][ T30] #0: ffffffff8fa6fe48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 905.309133][ T30] 1 lock held by syz-executor/13604: [ 905.319148][ T30] #0: ffffffff8e73d6b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 905.379179][ T30] 2 locks held by syz-executor/13606: [ 905.384652][ T30] #0: ffffffff8fa6fe48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 905.423828][ T30] #1: ffffffff8e73d6b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 905.469299][ T30] [ 905.471686][ T30] ============================================= [ 905.471686][ T30] [ 905.490418][ T30] NMI backtrace for cpu 0 [ 905.494793][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc3-syzkaller-00010-g6b4aa469f049 #0 [ 905.505317][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 905.515409][ T30] Call Trace: [ 905.518702][ T30] [ 905.521642][ T30] dump_stack_lvl+0x241/0x360 [ 905.526353][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 905.531580][ T30] ? __pfx__printk+0x10/0x10 [ 905.536182][ T30] ? vprintk_emit+0x631/0x770 [ 905.540870][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 905.545892][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 905.550828][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 905.556278][ T30] ? _printk+0xd5/0x120 [ 905.560428][ T30] ? __pfx__printk+0x10/0x10 [ 905.565016][ T30] ? __wake_up_klogd+0xcc/0x110 [ 905.569873][ T30] ? __pfx__printk+0x10/0x10 [ 905.574460][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 905.579481][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 905.585459][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 905.591439][ T30] watchdog+0xfee/0x1030 [ 905.595683][ T30] ? watchdog+0x1ea/0x1030 [ 905.600103][ T30] ? __pfx_watchdog+0x10/0x10 [ 905.604781][ T30] kthread+0x2f0/0x390 [ 905.608851][ T30] ? __pfx_watchdog+0x10/0x10 [ 905.613524][ T30] ? __pfx_kthread+0x10/0x10 [ 905.618112][ T30] ret_from_fork+0x4b/0x80 [ 905.622527][ T30] ? __pfx_kthread+0x10/0x10 [ 905.627122][ T30] ret_from_fork_asm+0x1a/0x30 [ 905.631915][ T30] [ 905.636604][ T30] Sending NMI from CPU 0 to CPUs 1: [ 905.642778][ C1] NMI backtrace for cpu 1 [ 905.642794][ C1] CPU: 1 UID: 0 PID: 13604 Comm: syz-executor Not tainted 6.11.0-rc3-syzkaller-00010-g6b4aa469f049 #0 [ 905.642814][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 905.642825][ C1] RIP: 0010:debug_check_no_obj_freed+0x2cc/0x580 [ 905.642852][ C1] Code: 00 00 49 89 c4 49 89 c5 49 c1 ed 03 48 b8 00 00 00 00 00 fc ff df 41 80 7c 05 00 00 74 08 4c 89 e7 e8 f8 cd 47 fd 49 8b 04 24 <48> 89 44 24 38 49 8d 5c 24 18 48 89 d8 48 c1 e8 03 48 b9 00 00 00 [ 905.642866][ C1] RSP: 0018:ffffc90016847720 EFLAGS: 00000046 [ 905.642882][ C1] RAX: ffff8880633f5fc0 RBX: ffff8880633f5f68 RCX: dffffc0000000000 [ 905.642895][ C1] RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffffc90016847600 [ 905.642907][ C1] RBP: ffffc90016847868 R08: 0000000000000003 R09: fffff52002d08ec0 [ 905.642919][ C1] R10: dffffc0000000000 R11: fffff52002d08ec0 R12: ffff8880633f5f88 [ 905.642932][ C1] R13: 1ffff1100c67ebf1 R14: ffff88804fdbd338 R15: 0000000000000001 [ 905.642944][ C1] FS: 0000000000000000(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 905.642958][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 905.642971][ C1] CR2: 0000000020ddb000 CR3: 000000000e534000 CR4: 00000000003506f0 [ 905.642985][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 905.642995][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 905.643006][ C1] Call Trace: [ 905.643013][ C1] [ 905.643020][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 905.643039][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 905.643061][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 905.643079][ C1] ? nmi_handle+0x2a/0x5a0 [ 905.643103][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 905.643121][ C1] ? nmi_handle+0x14f/0x5a0 [ 905.643137][ C1] ? nmi_handle+0x2a/0x5a0 [ 905.643153][ C1] ? debug_check_no_obj_freed+0x2cc/0x580 [ 905.643170][ C1] ? default_do_nmi+0x63/0x160 [ 905.643188][ C1] ? exc_nmi+0x123/0x1f0 [ 905.643205][ C1] ? end_repeat_nmi+0xf/0x53 [ 905.643229][ C1] ? debug_check_no_obj_freed+0x2cc/0x580 [ 905.643247][ C1] ? debug_check_no_obj_freed+0x2cc/0x580 [ 905.643265][ C1] ? debug_check_no_obj_freed+0x2cc/0x580 [ 905.643283][ C1] [ 905.643289][ C1] [ 905.643302][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 905.643322][ C1] ? page_ext_get+0x20/0x2a0 [ 905.643345][ C1] free_unref_page+0x38a/0xea0 [ 905.643367][ C1] vfree+0x186/0x2e0 [ 905.643387][ C1] kcov_close+0x2b/0x50 [ 905.643406][ C1] ? __pfx_kcov_close+0x10/0x10 [ 905.643424][ C1] __fput+0x24a/0x8a0 [ 905.643456][ C1] task_work_run+0x24f/0x310 [ 905.643475][ C1] ? __pfx_task_work_run+0x10/0x10 [ 905.643494][ C1] ? do_exit+0xa2a/0x27f0 [ 905.643508][ C1] ? kmem_cache_free+0x145/0x350 [ 905.643530][ C1] do_exit+0xa2f/0x27f0 [ 905.643550][ C1] ? __pfx_do_exit+0x10/0x10 [ 905.643564][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 905.643585][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 905.643605][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 905.643624][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 905.643646][ C1] do_group_exit+0x207/0x2c0 [ 905.643660][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 905.643678][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 905.643700][ C1] get_signal+0x1695/0x1730 [ 905.643724][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 905.643742][ C1] ? __pfx_get_signal+0x10/0x10 [ 905.643765][ C1] arch_do_signal_or_restart+0x96/0x860 [ 905.643786][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 905.643805][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 905.643831][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 905.643853][ C1] syscall_exit_to_user_mode+0xc9/0x370 [ 905.643875][ C1] do_syscall_64+0x100/0x230 [ 905.643890][ C1] ? clear_bhb_loop+0x35/0x90 [ 905.643908][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.643925][ C1] RIP: 0033:0x7f44acf7b78c [ 905.643938][ C1] Code: Unable to access opcode bytes at 0x7f44acf7b762. [ 905.643947][ C1] RSP: 002b:00007ffca28381f0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 905.643963][ C1] RAX: 0000000000000068 RBX: 00007f44adc44620 RCX: 00007f44acf7b78c [ 905.643974][ C1] RDX: 0000000000000068 RSI: 00007f44adc44670 RDI: 0000000000000003 [ 905.643985][ C1] RBP: 0000000000000000 R08: 00007ffca2838244 R09: 000000000000000c [ 905.643996][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 905.644006][ C1] R13: 0000000000000000 R14: 00007f44adc44670 R15: 0000000000000000 [ 905.644025][ C1] [ 906.147152][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 906.154038][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc3-syzkaller-00010-g6b4aa469f049 #0 [ 906.164516][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 906.174557][ T30] Call Trace: [ 906.177819][ T30] [ 906.180734][ T30] dump_stack_lvl+0x241/0x360 [ 906.185401][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 906.190585][ T30] ? __pfx__printk+0x10/0x10 [ 906.195159][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 906.201136][ T30] ? vscnprintf+0x5d/0x90 [ 906.205461][ T30] panic+0x349/0x860 [ 906.209346][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 906.215484][ T30] ? __pfx_panic+0x10/0x10 [ 906.219884][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 906.225246][ T30] ? __irq_work_queue_local+0x137/0x410 [ 906.230783][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 906.236146][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 906.242298][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 906.248464][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 906.254611][ T30] watchdog+0x102d/0x1030 [ 906.258932][ T30] ? watchdog+0x1ea/0x1030 [ 906.263338][ T30] ? __pfx_watchdog+0x10/0x10 [ 906.268001][ T30] kthread+0x2f0/0x390 [ 906.272055][ T30] ? __pfx_watchdog+0x10/0x10 [ 906.276713][ T30] ? __pfx_kthread+0x10/0x10 [ 906.281291][ T30] ret_from_fork+0x4b/0x80 [ 906.285696][ T30] ? __pfx_kthread+0x10/0x10 [ 906.290271][ T30] ret_from_fork_asm+0x1a/0x30 [ 906.295026][ T30] [ 906.298628][ T30] Kernel Offset: disabled [ 906.302985][ T30] Rebooting in 86400 seconds..