last executing test programs: 7.168036595s ago: executing program 3 (id=859): openat$userio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000000c0)="eb", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 6.211854203s ago: executing program 3 (id=862): userfaultfd(0x80001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_io_uring_setup(0x30f1, &(0x7f0000000140)={0x0, 0xe5aa, 0x1000, 0x2}, &(0x7f0000000000), &(0x7f0000000100)) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) pipe(&(0x7f0000000d00)) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000440), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) io_setup(0xff, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000180), 0x0, 0x12e, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c0001000004000904000001c6cbea00090587"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) syslog(0x3, &(0x7f0000000440)=""/4096, 0x1000) socket(0x1, 0x0, 0x0) 4.474422195s ago: executing program 1 (id=882): openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x202}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getpid() r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) fcntl$lock(r2, 0x5, &(0x7f0000000200)) 4.248021626s ago: executing program 2 (id=885): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r1, 0x1, 0x70bd27, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x30}}, 0x0) 4.111909838s ago: executing program 2 (id=888): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x24b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}}}]}}]}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000014001a80100004800c0008800800"], 0x34}}, 0x0) 3.672034229s ago: executing program 0 (id=894): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.freeze\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r1, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200002, 0x3, &(0x7f0000a00000/0x600000)=nil) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x401d031, 0xffffffffffffffff, 0x0) 3.483528937s ago: executing program 2 (id=896): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0xa, 0x4, 0x3f8, 0x0, 0x0, 0x200, 0x310, 0x310, 0x310, 0x4, 0x0, {[{{@arp={@dev, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg0\x00', 'veth1_to_team\x00'}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}, {{@arp={@dev, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x1003}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @loopback, @multicast1}}}, {{@arp={@broadcast, @multicast1, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_to_hsr\x00', 'ip6_vti0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @multicast1, @remote}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x448) 3.395406215s ago: executing program 2 (id=898): r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x33) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x275a, 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000040)='./bus\x00', 0xe0000011) write$binfmt_script(r1, &(0x7f00000000c0), 0xfea7) copy_file_range(r1, &(0x7f00000001c0), r0, 0x0, 0xfffffff7a003e45c, 0x10000000000000) 3.316432952s ago: executing program 0 (id=899): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getrusage(0x1, &(0x7f0000000dc0)) 3.155595427s ago: executing program 2 (id=900): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) userfaultfd(0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x1de) close(0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x80) execve(&(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000080)=[0x0, &(0x7f0000000a00)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX cz\xb8\x14\xec*\xed\xa6u\xc4\x14*\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xe6\\h\\\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xc1\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\x82\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occQ\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6z?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\xda@\xc7-\x93\xbc4.C\f\x193\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0R\t\x93.r/\xce\xa4\rK\xcb\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xad#\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80M\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xb2\xea\br\xfb\xdc\'\xb8\xdbh\x02|\xacW\xd5\xf0Lf\x1e\x17A@\x06\x89\xadg+$/V\r\xc9o\xda3C\xa0\x06\xd4^\x8bQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xe36\xa1\xd3\xb1o\x7f0:}\xad\xd04\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44L`\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf\xab']) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'batadv_slave_1\x00'}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) r6 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e20"], 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000680)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r7, 0x40045b17, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r5, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x48840}, 0x48084) syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a8008009040000"], 0x0) r9 = socket(0x10, 0x3, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000180)={0x79, 0x0, 0x1}) r10 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r10, 0x4008ae93, &(0x7f0000000400)=0x2) bind$can_j1939(r9, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) 3.105081412s ago: executing program 0 (id=902): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x4e) 3.008093861s ago: executing program 0 (id=903): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f00000005c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}, 0x0, 0x0, 0x0) 2.90386614s ago: executing program 0 (id=905): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28"], 0x50}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0xed62cb244a54eddd, 0x0, 0x0, {{0x2b, 0x4, 0x0, 0x0, 0xac, 0x0, 0x1, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5, 0x0]}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x0, [{@private=0xa010103}, {@multicast1}, {@remote, 0x5}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x8, [{@dev}, {@remote}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xb, 0xdc, [@rand_addr=0x64010102, @multicast1]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000040), 0x4) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000), 0xc) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.762694334s ago: executing program 3 (id=906): socket$tipc(0x1e, 0x2, 0x0) ptrace(0x11, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) ppoll(&(0x7f0000000140)=[{r2, 0x4351}, {r1, 0x5202}], 0x2, 0x0, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 1.806998522s ago: executing program 0 (id=907): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/warn_count', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) unshare(0x20040600) mknod(&(0x7f0000000000)='./bus\x00', 0x1000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) write$binfmt_elf32(r3, &(0x7f00000003c0)=ANY=[@ANYRESOCT], 0x82) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) futimesat(r3, &(0x7f0000000340)='./bus\x00', &(0x7f0000000500)={{0x77359400}, {r4, r5/1000+60000}}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@loopback}}, 0x0) quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f00000001c0)=@md0, r6, &(0x7f0000000300)) close(r3) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r7 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r7, 0x0, &(0x7f0000000780)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r7, 0x0, 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r8, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') preadv(r9, &(0x7f0000000700)=[{&(0x7f0000000280)=""/124, 0x7c}], 0x1, 0x181, 0x0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, 0xffffffffffffffff, 0x1, 0x4002) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x10, 0x7800, 0xba, 0x3, {{0x1b, 0x4, 0x1, 0x20, 0x6c, 0x64, 0x0, 0x48, 0x2f, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x40}, {[@cipso={0x86, 0x1b, 0x3, [{0x0, 0x6, "92c774fe"}, {0x0, 0xf, "b6ecffd6da238d21aa3734f0d8"}]}, @ssrr={0x89, 0x7, 0xef, [@broadcast]}, @timestamp_addr={0x44, 0x14, 0x5d, 0x1, 0x1, [{@multicast2}, {@dev={0xac, 0x14, 0x14, 0x40}, 0xc}]}, @noop, @ssrr={0x89, 0x1f, 0x96, [@multicast1, @multicast2, @empty, @broadcast, @broadcast, @multicast1, @local]}]}}}}}) rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000240)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x88703, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) 1.806657072s ago: executing program 4 (id=908): r0 = socket$inet6(0xa, 0x3, 0x2) syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x2400) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x3}, 0x10, &(0x7f0000000000)=[{&(0x7f00000000c0)='`', 0x1}], 0x1}}, {{&(0x7f00000006c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000140)="ed", 0x1}], 0x1, &(0x7f0000000040)}}], 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r2, 0xc040563e, &(0x7f0000000100)={0x1, 0x2}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x36}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0x9b, {"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", 0xfffffffffffffebd}}, 0x1006) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_emit_vhci(0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r6, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) r8 = socket$kcm(0x10, 0x2, 0x4) close(r8) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000400)="5c00000013006bcc9e3be05c6e17aa31076b876c1d0000007ea60864160af36514001ac0080002002c26d330196e87c0568cff3407000c0004007c2ed239122dbd94c9affe1801c00364bc24eab556a705251e618294ff0051f60a84", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r7, 0xc1105511, &(0x7f0000000700)={{0x8, 0x0, 0x0, 0x0, 'syz1\x00'}}) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x6, 0x0, 0x0) 1.336434546s ago: executing program 4 (id=909): openat$rtc(0xffffffffffffff9c, 0x0, 0x2082c0, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x0, 0x0, 0x8001}}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000440)={0x0, 0x0, {0x3, 0x0, 0xfffffffe, 0x1, 0x100}}) socket$inet6(0xa, 0x4, 0x2) 1.272111032s ago: executing program 1 (id=910): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={r2, 0xa49a, 0x30}, 0xc) 1.141447324s ago: executing program 1 (id=911): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='rdma.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r1, 0x0, 0x2, 0x8d0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x20) 1.038410973s ago: executing program 3 (id=912): timer_create(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) socket$key(0xf, 0x3, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000002140)='net/ip_tables_targets\x00') read$snapshot(r0, &(0x7f0000000000)=""/140, 0x8c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000000000)="6941c43b78eeda4918160798ef967cb9254c327158c51dc69eeda809ba0f2b") syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000dc0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 919.858225ms ago: executing program 1 (id=913): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000032c0)={0x2c, r0, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xf9}]}, 0x2c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000880)={0x5c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x40, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x80}, @broadcast, @device_a, @from_mac, {0x2, 0x2}, @value=@ver_80211n={0x0, 0x2eb, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, 0x2, @random=0x8, 0x4444, @void, @void, @val={0x3, 0x1, 0xa5}, @val={0x4, 0x6, {0x57, 0x1, 0x2, 0x80}}, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x6, 0xa1e2a9818c55939b}}, @void}}]}, 0x5c}}, 0x0) 852.883641ms ago: executing program 4 (id=914): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x38, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x2}, @NFULA_CFG_MODE={0xa}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xf934}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000000}, 0x50) 783.476387ms ago: executing program 1 (id=915): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) 631.804521ms ago: executing program 4 (id=916): unshare(0x28000400) sendmsg$inet(0xffffffffffffffff, 0x0, 0x2000c000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) copy_file_range(r0, &(0x7f0000000000)=0x7, r0, 0x0, 0x4, 0x0) 598.824795ms ago: executing program 1 (id=917): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) epoll_create1(0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) 505.246213ms ago: executing program 3 (id=918): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000400)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 403.675413ms ago: executing program 4 (id=919): r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/time_for_children\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/time\x00') bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000002000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e999000000000000000000000000000000000000000000000000ac1414bb0000000000000000000000004e220000000000000a008080"], 0xb8}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r5, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x10a}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x33}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x805) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000002a00)='./file0\x00', 0x40, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) read$FUSE(r7, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000100)={0x50, 0x0, r8, {0x7, 0x1f, 0x0, 0x80d804, 0x0, 0x0, 0x20000000}}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = dup(r6) ioctl$KVM_SET_MSRS(r9, 0x4048aecb, &(0x7f00000000c0)=ANY=[@ANYRES64=r1, @ANYRES64]) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 343.052678ms ago: executing program 3 (id=920): socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xb, &(0x7f0000000000)=0x5, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) getpid() r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0xfff9}, 0x9c) socket$nl_route(0x10, 0x3, 0x0) pipe(0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000003, 0x200000006c832, 0xffffffffffffffff, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000640)={{@my=0x1}, @hyper, 0x0, 0x2925, 0x0, 0x20000000, 0x4}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r2, 0x7a4, &(0x7f0000000040)={{@my=0x1}}) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x1da) close(r3) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) 144.345887ms ago: executing program 4 (id=921): syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) io_setup(0x5, &(0x7f0000000e80)=0x0) syz_io_uring_setup(0xf3f, &(0x7f0000000480), &(0x7f0000000080), 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000001580)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x0, r1, &(0x7f0000000080)='d', 0x2}]) 0s ago: executing program 2 (id=922): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r2, 0x0) r3 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r3, 0xb15, 0x0, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) kernel console output (not intermixed with test programs): 49][ T3722] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.909624][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 218.921695][ T5902] EXT4-fs (loop2): Unrecognized mount option "smackfstransmute='[" or missing value [ 218.931614][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 218.933895][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 218.990511][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 219.001370][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 219.069909][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 219.253979][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 219.273505][ T5913] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 219.302817][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 219.545303][ T4727] usb 2-1: USB disconnect, device number 7 [ 220.064654][ T5928] loop0: detected capacity change from 0 to 512 [ 220.130919][ T5928] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.394: casefold flag without casefold feature [ 220.158726][ T5928] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.394: couldn't read orphan inode 15 (err -117) [ 220.229485][ T5928] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 220.247759][ T5002] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 220.308268][ T5931] FAULT_INJECTION: forcing a failure. [ 220.308268][ T5931] name failslab, interval 1, probability 0, space 0, times 0 [ 220.342188][ T5933] loop1: detected capacity change from 0 to 512 [ 220.383191][ T5931] CPU: 1 PID: 5931 Comm: syz.2.395 Not tainted 5.15.167-syzkaller #0 [ 220.391318][ T5931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 220.401392][ T5931] Call Trace: [ 220.404793][ T5931] [ 220.407840][ T5931] dump_stack_lvl+0x1e3/0x2d0 [ 220.412543][ T5931] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 220.415539][ T5935] loop4: detected capacity change from 0 to 64 [ 220.418185][ T5931] ? panic+0x860/0x860 [ 220.418232][ T5931] ? __lock_acquire+0x1295/0x1ff0 [ 220.433485][ T5931] should_fail+0x38a/0x4c0 [ 220.437908][ T5931] should_failslab+0x5/0x20 [ 220.442446][ T5931] slab_pre_alloc_hook+0x53/0xc0 [ 220.447395][ T5931] ? skb_clone+0x1bb/0x350 [ 220.451826][ T5931] kmem_cache_alloc+0x3f/0x280 [ 220.456590][ T5931] skb_clone+0x1bb/0x350 [ 220.460891][ T5931] __netlink_deliver_tap+0x375/0x760 [ 220.466178][ T5931] netlink_deliver_tap+0x16c/0x180 [ 220.471307][ T5931] netlink_unicast+0x788/0x980 [ 220.476069][ T5931] ? netlink_detachskb+0x90/0x90 [ 220.480995][ T5931] ? __virt_addr_valid+0x3bb/0x460 [ 220.486095][ T5931] ? 0xffffffff81000000 [ 220.490242][ T5931] ? __check_object_size+0x300/0x410 [ 220.495557][ T5931] ? bpf_lsm_netlink_send+0x5/0x10 [ 220.498337][ T5933] EXT4-fs (loop1): Ignoring removed nobh option [ 220.500679][ T5931] netlink_sendmsg+0xa30/0xd60 [ 220.511680][ T5931] ? netlink_getsockopt+0x5b0/0x5b0 [ 220.516898][ T5931] ? aa_sock_msg_perm+0x91/0x150 [ 220.521837][ T5933] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 220.521856][ T5931] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 220.536972][ T5931] ? security_socket_sendmsg+0x7d/0xa0 [ 220.542427][ T5931] ? netlink_getsockopt+0x5b0/0x5b0 [ 220.547645][ T5931] ____sys_sendmsg+0x59e/0x8f0 [ 220.552422][ T5931] ? iovec_from_user+0x300/0x390 [ 220.557388][ T5931] ? __sys_sendmsg_sock+0x30/0x30 [ 220.562424][ T5931] ___sys_sendmsg+0x252/0x2e0 [ 220.567094][ T5931] ? __sys_sendmsg+0x260/0x260 [ 220.571882][ T5931] ? __fdget+0x191/0x220 [ 220.576120][ T5931] __se_sys_sendmsg+0x19a/0x260 [ 220.580961][ T5931] ? __x64_sys_sendmsg+0x80/0x80 [ 220.585915][ T5931] ? syscall_enter_from_user_mode+0x2e/0x240 [ 220.591891][ T5931] ? lockdep_hardirqs_on+0x94/0x130 [ 220.597124][ T5931] ? syscall_enter_from_user_mode+0x2e/0x240 [ 220.603096][ T5931] do_syscall_64+0x3b/0xb0 [ 220.607501][ T5931] ? clear_bhb_loop+0x15/0x70 [ 220.612175][ T5931] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 220.618072][ T5931] RIP: 0033:0x7f04210aeef9 [ 220.622480][ T5931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.637794][ T5002] usb 4-1: Using ep0 maxpacket: 16 [ 220.642075][ T5931] RSP: 002b:00007f041f527038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 220.655588][ T5931] RAX: ffffffffffffffda RBX: 00007f0421266f80 RCX: 00007f04210aeef9 [ 220.663566][ T5931] RDX: 0000000000000000 RSI: 0000000020000480 RDI: 0000000000000003 [ 220.671533][ T5931] RBP: 00007f041f527090 R08: 0000000000000000 R09: 0000000000000000 [ 220.679495][ T5931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.687551][ T5931] R13: 0000000000000000 R14: 00007f0421266f80 R15: 00007ffc95321c08 [ 220.695579][ T5931] [ 220.707953][ T5933] EXT4-fs (loop1): 1 truncate cleaned up [ 220.713706][ T5933] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 220.797105][ T5935] overlayfs: upper fs needs to support d_type. [ 220.817596][ T5002] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.855982][ T5002] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 220.881038][ T5935] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 220.961606][ T5935] overlayfs: failed to set xattr on upper [ 221.008737][ T5935] overlayfs: ...falling back to index=off,metacopy=off. [ 221.522999][ T5002] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 221.544079][ T5002] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.598509][ T5002] usb 4-1: Product: syz [ 221.613509][ T5002] usb 4-1: Manufacturer: syz [ 221.631003][ T5002] usb 4-1: SerialNumber: syz [ 221.646323][ T5002] usb 4-1: config 0 descriptor?? [ 221.877504][ T5686] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 221.908199][ T3656] usb 4-1: USB disconnect, device number 7 [ 222.057454][ T5687] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 222.157443][ T5002] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 222.166535][ T5941] loop0: detected capacity change from 0 to 40427 [ 222.257915][ T5686] usb 5-1: config 0 has an invalid interface number: 122 but max is 0 [ 222.269791][ T5686] usb 5-1: config 0 has no interface number 0 [ 222.278313][ T5941] F2FS-fs (loop0): invalid crc value [ 222.284231][ T5686] usb 5-1: config 0 interface 122 has no altsetting 0 [ 222.304646][ T5941] F2FS-fs (loop0): Found nat_bits in checkpoint [ 222.409746][ T5941] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 222.447607][ T5686] usb 5-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67 [ 222.467602][ T5687] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 222.476420][ T5686] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.486839][ T5687] usb 2-1: config 0 has no interface number 0 [ 222.496974][ T5686] usb 5-1: Product: syz [ 222.501574][ T5687] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.515008][ T5686] usb 5-1: Manufacturer: syz [ 222.520149][ T5686] usb 5-1: SerialNumber: syz [ 222.525133][ T5687] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.537511][ T5002] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 222.653381][ T5687] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 222.665949][ T5941] attempt to access beyond end of device [ 222.665949][ T5941] loop0: rw=2049, want=53504, limit=40427 [ 222.679003][ T5686] usb 5-1: config 0 descriptor?? [ 222.741334][ T5687] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.773663][ T5687] usb 2-1: config 0 descriptor?? [ 222.788778][ T5959] loop3: detected capacity change from 0 to 256 [ 222.803890][ T3780] device hsr_slave_0 left promiscuous mode [ 222.831279][ T3780] device hsr_slave_1 left promiscuous mode [ 222.851598][ T3780] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.861796][ T3780] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.918202][ T3780] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.058910][ T3780] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.084574][ T3780] device bridge_slave_1 left promiscuous mode [ 223.106187][ T3780] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.286226][ T5963] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 223.293954][ T5963] FAT-fs (loop3): Filesystem has been set read-only [ 223.317605][ T5964] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 223.358577][ T5963] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 223.798204][ T5002] usb 3-1: language id specifier not provided by device, defaulting to English [ 223.818492][ T5283] usb 5-1: USB disconnect, device number 15 [ 223.824734][ T5283] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected. [ 223.870842][ T5687] input: HID 04d9:a055 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:04D9:A055.0007/input/input13 [ 223.930229][ T3780] device bridge_slave_0 left promiscuous mode [ 223.938694][ T3780] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.957634][ T5002] usb 3-1: New USB device found, idVendor=056a, idProduct=0069, bcdDevice= 0.40 [ 223.966689][ T5002] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.035978][ T5002] usb 3-1: Product: syz [ 224.056050][ T5002] usb 3-1: Manufacturer: 꼳ฐḼ馊ᠪ횔ꑇ꛲⨀맾ߟな㡰홖⒙ᒅ煗ﵙ [ 224.077985][ T5002] usb 3-1: SerialNumber: syz [ 224.157826][ T3780] device veth1_macvtap left promiscuous mode [ 224.163965][ T3780] device veth0_macvtap left promiscuous mode [ 224.170810][ T5687] holtek_kbd 0003:04D9:A055.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.1-1/input1 [ 224.172948][ T5002] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 224.207143][ T3780] device veth1_vlan left promiscuous mode [ 224.216285][ T3780] device veth0_vlan left promiscuous mode [ 224.443506][ T3578] Trying to free block not in datazone [ 224.505143][ T3578] Trying to free block not in datazone [ 224.528501][ T5953] loop1: detected capacity change from 0 to 8192 [ 224.535392][ T3578] Trying to free block not in datazone [ 224.543063][ T3578] Trying to free block not in datazone [ 224.551099][ T3578] Trying to free block not in datazone [ 224.556959][ T3578] minix_free_block (loop4:6): bit already cleared [ 224.565275][ T5687] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 224.591818][ T5953] loop1: p1 p3 p4 [ 224.596184][ T5953] loop1: partition table partially beyond EOD, truncated [ 224.611298][ T3578] Trying to free block not in datazone [ 224.627158][ T3578] Trying to free block not in datazone [ 224.641863][ T5953] loop1: p1 size 3523149824 extends beyond EOD, truncated [ 224.736984][ T5953] loop1: p3 start 4294901760 is beyond EOD, truncated [ 224.745078][ T5953] loop1: p4 size 50331648 extends beyond EOD, truncated [ 224.837595][ T5687] usb 1-1: Using ep0 maxpacket: 8 [ 224.868762][ T5283] usb 2-1: USB disconnect, device number 8 [ 225.047604][ T5687] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 225.063798][ T5983] loop4: detected capacity change from 0 to 512 [ 225.081475][ T5687] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 225.105870][ T5687] usb 1-1: config 1 has no interface number 1 [ 225.121661][ T5687] usb 1-1: config 1 interface 2 altsetting 220 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 225.162297][ T5687] usb 1-1: config 1 interface 2 has no altsetting 0 [ 225.183578][ T5977] loop3: detected capacity change from 0 to 512 [ 225.273428][ T5977] EXT4-fs (loop3): Unrecognized mount option "smackfstransmute='[" or missing value [ 225.350159][ T5687] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 225.367537][ T5687] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.390322][ T5687] usb 1-1: Product: syz [ 225.422758][ T5687] usb 1-1: Manufacturer: syz [ 225.585230][ T5687] usb 1-1: SerialNumber: syz [ 226.111203][ T5002] usb 3-1: USB disconnect, device number 10 [ 227.251377][ T3780] team0 (unregistering): Port device team_slave_1 removed [ 227.435147][ T6004] loop0: detected capacity change from 0 to 256 [ 227.469075][ T3780] team0 (unregistering): Port device team_slave_0 removed [ 227.469329][ T6006] loop3: detected capacity change from 0 to 1024 [ 227.512636][ T3780] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.537409][ T6006] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 227.537409][ T6006] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 227.537409][ T6006] [ 227.554529][ T6004] FAT-fs (loop0): Directory bread(block 64) failed [ 227.570968][ T6006] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 227.590931][ T5687] usb 1-1: USB disconnect, device number 26 [ 227.597527][ T6004] FAT-fs (loop0): Directory bread(block 65) failed [ 227.610766][ T6006] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 227.619752][ T6004] FAT-fs (loop0): Directory bread(block 66) failed [ 227.626396][ T6004] FAT-fs (loop0): Directory bread(block 67) failed [ 227.632041][ T3780] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.654825][ T6004] FAT-fs (loop0): Directory bread(block 68) failed [ 227.657454][ T4107] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 227.672038][ T6004] FAT-fs (loop0): Directory bread(block 69) failed [ 227.687201][ T6006] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 227.696913][ T6004] FAT-fs (loop0): Directory bread(block 70) failed [ 227.725315][ T3560] udevd[3560]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 227.766997][ T6004] FAT-fs (loop0): Directory bread(block 71) failed [ 227.780281][ T6004] FAT-fs (loop0): Directory bread(block 72) failed [ 227.781844][ T6006] EXT4-fs (loop3): mounted filesystem without journal. Opts: noacl,delalloc,resuid=0x0000000000000000,errors=remount-ro,dioread_nolock,jqfmt=vfsold,nomblk_io_submit,noauto_da_alloc,. Quota mode: writeback. [ 227.815872][ T6004] FAT-fs (loop0): Directory bread(block 73) failed [ 227.886224][ T3780] bond0 (unregistering): Released all slaves [ 227.927330][ T4107] usb 5-1: Using ep0 maxpacket: 16 [ 228.047559][ T4107] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.067839][ T4107] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 228.183356][ T6002] loop2: detected capacity change from 0 to 40427 [ 228.237477][ T4107] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 228.254639][ T4107] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.263394][ T4107] usb 5-1: Product: syz [ 228.275707][ T4107] usb 5-1: Manufacturer: syz [ 228.280710][ T4107] usb 5-1: SerialNumber: syz [ 228.286892][ T4107] usb 5-1: config 0 descriptor?? [ 228.321971][ T6002] F2FS-fs (loop2): invalid crc value [ 228.420854][ T4733] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 228.847912][ T4733] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.996091][ T4733] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.056533][ T6002] F2FS-fs (loop2): Found nat_bits in checkpoint [ 229.071920][ T4107] usb 5-1: USB disconnect, device number 16 [ 229.085854][ T4733] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 229.124016][ T4733] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.152329][ T6002] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 229.176814][ T4733] usb 1-1: config 0 descriptor?? [ 229.359521][ T6002] attempt to access beyond end of device [ 229.359521][ T6002] loop2: rw=2049, want=53504, limit=40427 [ 229.690411][ T4733] hid-steam 0003:28DE:1142.0008: unknown main item tag 0x0 [ 229.705083][ T4733] hid-steam 0003:28DE:1142.0008: : USB HID v0.40 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 229.709689][ T6034] loop4: detected capacity change from 0 to 256 [ 229.737188][ T4733] hid-steam 0003:28DE:1142.0009: unknown main item tag 0x0 [ 229.762582][ T4733] hid-steam 0003:28DE:1142.0009: hidraw0: USB HID v0.40 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 229.817884][ T6034] exfat: Unknown parameter 'viK' [ 229.947594][ T6034] loop4: detected capacity change from 0 to 16 [ 230.008892][ T6034] erofs: (device loop4): mounted with root inode @ nid 36. [ 230.027309][ T4714] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 230.277334][ T4733] hid-steam 0003:28DE:1142.0008: Steam wireless receiver connected [ 231.471519][ T4733] usb 1-1: reset high-speed USB device number 27 using dummy_hcd [ 232.197609][ T4714] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 232.430124][ T6055] loop4: detected capacity change from 0 to 64 [ 232.576379][ T6059] FAULT_INJECTION: forcing a failure. [ 232.576379][ T6059] name failslab, interval 1, probability 0, space 0, times 0 [ 232.653369][ T6055] fuse: Bad value for 'group_id' [ 232.687728][ T4714] usb 2-1: string descriptor 0 read error: -71 [ 232.694334][ T4714] usb 2-1: New USB device found, idVendor=056a, idProduct=0069, bcdDevice= 0.40 [ 232.705079][ T6061] netlink: 576 bytes leftover after parsing attributes in process `syz.0.430'. [ 232.714238][ T6059] CPU: 1 PID: 6059 Comm: syz.2.429 Not tainted 5.15.167-syzkaller #0 [ 232.722317][ T6059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 232.732466][ T6059] Call Trace: [ 232.735759][ T6059] [ 232.738697][ T6059] dump_stack_lvl+0x1e3/0x2d0 [ 232.743411][ T6059] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 232.744921][ T6065] loop4: detected capacity change from 0 to 512 [ 232.749058][ T6059] ? panic+0x860/0x860 [ 232.759429][ T6059] ? __might_sleep+0xc0/0xc0 [ 232.764050][ T6059] should_fail+0x38a/0x4c0 [ 232.768494][ T6059] should_failslab+0x5/0x20 [ 232.773013][ T6059] slab_pre_alloc_hook+0x53/0xc0 [ 232.777980][ T6059] __kmalloc+0x6e/0x300 [ 232.782144][ T6059] ? security_sb_alloc+0x3a/0x120 [ 232.787186][ T6059] security_sb_alloc+0x3a/0x120 [ 232.792086][ T6059] alloc_super+0x218/0x940 [ 232.796523][ T6059] sget_fc+0x305/0x730 [ 232.800620][ T6059] ? kill_litter_super+0xa0/0xa0 [ 232.805581][ T6059] ? shmem_reconfigure+0x820/0x820 [ 232.810706][ T6059] get_tree_nodev+0x26/0x160 [ 232.815310][ T6059] vfs_get_tree+0x88/0x270 [ 232.819747][ T6059] do_new_mount+0x2ba/0xb40 [ 232.824274][ T6059] ? do_move_mount_old+0x160/0x160 [ 232.829401][ T6059] ? user_path_at_empty+0x12b/0x180 [ 232.834624][ T6059] __se_sys_mount+0x2d5/0x3c0 [ 232.839331][ T6059] ? __x64_sys_mount+0xc0/0xc0 [ 232.844127][ T6059] ? syscall_enter_from_user_mode+0x2e/0x240 [ 232.850145][ T6059] ? lockdep_hardirqs_on+0x94/0x130 [ 232.855391][ T6059] ? __x64_sys_mount+0x1c/0xc0 [ 232.860272][ T6059] do_syscall_64+0x3b/0xb0 [ 232.864707][ T6059] ? clear_bhb_loop+0x15/0x70 [ 232.869401][ T6059] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 232.875313][ T6059] RIP: 0033:0x7f04210aeef9 [ 232.879740][ T6059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.899367][ T6059] RSP: 002b:00007f041f506038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 232.907806][ T6059] RAX: ffffffffffffffda RBX: 00007f0421267058 RCX: 00007f04210aeef9 [ 232.915793][ T6059] RDX: 0000000020000200 RSI: 00000000200001c0 RDI: 0000000000000000 [ 232.923778][ T6059] RBP: 00007f041f506090 R08: 0000000020000240 R09: 0000000000000000 [ 232.931851][ T6059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 232.939833][ T6059] R13: 0000000000000000 R14: 00007f0421267058 R15: 00007ffc95321c08 [ 232.947919][ T6059] [ 232.952134][ T4714] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.007385][ T4714] usb 2-1: can't set config #1, error -71 [ 233.007608][ T6065] EXT4-fs (loop4): Unrecognized mount option "errors=continue.resuid=0x0000000000000000" or missing value [ 233.017898][ T4714] usb 2-1: USB disconnect, device number 9 [ 233.230669][ T6065] loop4: detected capacity change from 0 to 1764 [ 233.334248][ T5816] usb 1-1: USB disconnect, device number 27 [ 233.361640][ T5816] hid-steam 0003:28DE:1142.0008: Steam wireless receiver disconnected [ 233.858240][ T6072] netlink: 44 bytes leftover after parsing attributes in process `syz.4.433'. [ 233.913214][ T6056] loop3: detected capacity change from 0 to 40427 [ 234.007744][ T6056] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 234.014987][ T6056] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 234.066187][ T6067] loop1: detected capacity change from 0 to 40427 [ 234.129969][ T6078] loop2: detected capacity change from 0 to 1024 [ 234.144531][ T6056] F2FS-fs (loop3): Found nat_bits in checkpoint [ 234.179621][ T6067] F2FS-fs (loop1): invalid crc value [ 234.212522][ T6078] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5 [ 234.212522][ T6078] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 234.212522][ T6078] [ 234.240927][ T6067] F2FS-fs (loop1): Found nat_bits in checkpoint [ 234.297852][ T6078] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 234.325326][ T6078] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 234.354372][ T6078] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 234.407507][ T6056] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 234.424571][ T6056] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 234.443404][ T6078] EXT4-fs (loop2): mounted filesystem without journal. Opts: noacl,delalloc,resuid=0x0000000000000000,errors=remount-ro,dioread_nolock,jqfmt=vfsold,nomblk_io_submit,noauto_da_alloc,. Quota mode: writeback. [ 234.534127][ T6070] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 234.572533][ T6067] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 234.833157][ T6067] attempt to access beyond end of device [ 234.833157][ T6067] loop1: rw=2049, want=53504, limit=40427 [ 235.108452][ T6079] attempt to access beyond end of device [ 235.108452][ T6079] loop3: rw=2049, want=45104, limit=40427 [ 235.667124][ T6069] loop0: detected capacity change from 0 to 65536 [ 235.838278][ T4714] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 235.863032][ T6096] device vlan2 entered promiscuous mode [ 235.923636][ T6090] loop2: detected capacity change from 0 to 32768 [ 235.931735][ T6069] XFS (loop0): Mounting V5 Filesystem [ 235.978802][ T6096] team0: Port device vlan2 added [ 236.077400][ T4714] usb 5-1: Using ep0 maxpacket: 32 [ 236.082325][ T6069] XFS (loop0): Ending clean mount [ 236.171256][ T3570] XFS (loop0): Unmounting Filesystem [ 236.197501][ T4714] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 236.217430][ T4714] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 236.247387][ T4714] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 236.262548][ T4714] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.323446][ T4714] usb 5-1: config 0 descriptor?? [ 236.377655][ T6094] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 236.400924][ T4714] hub 5-1:0.0: USB hub found [ 236.437545][ T5686] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 237.137603][ T5686] usb 4-1: Using ep0 maxpacket: 8 [ 237.199175][ T4714] hub 5-1:0.0: 2 ports detected [ 237.232993][ T4714] hub 5-1:0.0: insufficient power available to use all downstream ports [ 237.257533][ T5686] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 237.286255][ T5686] usb 4-1: config 179 has no interface number 0 [ 237.309706][ T5686] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 237.337317][ T5686] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 237.367413][ T5686] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 237.387298][ T5686] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 237.400541][ T6094] loop4: detected capacity change from 0 to 8 [ 237.408510][ T6094] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 237.417303][ T5686] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 237.437320][ T5686] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 237.446375][ T5686] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.487481][ T4714] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 237.494231][ T4714] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 237.547864][ T6107] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 237.627455][ T4714] usbhid 5-1:0.0: can't add hid device: -71 [ 237.639783][ T6109] loop1: detected capacity change from 0 to 32768 [ 237.660599][ T4714] usbhid: probe of 5-1:0.0 failed with error -71 [ 237.698734][ T4714] usb 5-1: USB disconnect, device number 17 [ 237.780157][ T6109] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 237.852213][ T5686] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input14 [ 238.084881][ T5455] ocfs2: Unmounting device (7,1) on (node local) [ 238.253831][ T6117] netlink: 20 bytes leftover after parsing attributes in process `syz.4.443'. [ 238.265174][ T6117] netlink: 4 bytes leftover after parsing attributes in process `syz.4.443'. [ 238.284032][ T5686] usb 4-1: USB disconnect, device number 8 [ 238.289946][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 238.290007][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 238.319730][ T5686] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 238.507474][ T5687] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 238.713887][ T6131] loop4: detected capacity change from 0 to 512 [ 238.815010][ T6131] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 238.815010][ T6131] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 238.815010][ T6131] [ 238.883211][ T6131] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 238.887588][ T5687] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 238.928395][ T6136] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.449'. [ 239.064111][ T6131] EXT4-fs (loop4): 1 truncate cleaned up [ 239.132971][ T6131] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,nombcache,usrjquota="init_itable=0x0000000000000601,noacl,data_err=abort,,errors=continue. Quota mode: writeback. [ 242.295615][ T5687] usb 1-1: string descriptor 0 read error: -71 [ 242.312258][ T5687] usb 1-1: New USB device found, idVendor=056a, idProduct=0069, bcdDevice= 0.40 [ 242.377432][ T6147] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 242.432250][ T5687] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.831106][ T5687] usb 1-1: can't set config #1, error -71 [ 242.849744][ T5687] usb 1-1: USB disconnect, device number 28 [ 242.919886][ T6156] netlink: 'syz.4.458': attribute type 25 has an invalid length. [ 242.942130][ T6156] netlink: 'syz.4.458': attribute type 7 has an invalid length. [ 243.457684][ T6183] netlink: 'syz.3.469': attribute type 29 has an invalid length. [ 243.495059][ T6185] netlink: 60 bytes leftover after parsing attributes in process `syz.2.470'. [ 243.544368][ T6183] netlink: 'syz.3.469': attribute type 29 has an invalid length. [ 243.608193][ T6186] netlink: 'syz.3.469': attribute type 29 has an invalid length. [ 243.626520][ T6187] netlink: 'syz.3.469': attribute type 29 has an invalid length. [ 245.415603][ T6221] netlink: 'syz.3.486': attribute type 29 has an invalid length. [ 245.552956][ T6221] netlink: 'syz.3.486': attribute type 29 has an invalid length. [ 245.565162][ T6226] netlink: 'syz.3.486': attribute type 29 has an invalid length. [ 245.585689][ T6227] netlink: 'syz.3.486': attribute type 29 has an invalid length. [ 245.949814][ T5687] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 246.017347][ T3656] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 246.073101][ T6259] input: syz1 as /devices/virtual/input/input16 [ 246.214587][ T6267] netlink: 16 bytes leftover after parsing attributes in process `syz.3.502'. [ 246.230051][ T5687] usb 5-1: Using ep0 maxpacket: 16 [ 246.411568][ T6280] sg_write: data in/out 588840944/19 bytes for SCSI command 0x94-- guessing data in; [ 246.411568][ T6280] program syz.3.510 not setting count and/or reply_len properly [ 246.445145][ T6280] program syz.3.510 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 246.454860][ T4107] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 246.471252][ T3656] usb 3-1: unable to get BOS descriptor or descriptor too short [ 246.507565][ T5687] usb 5-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 246.516645][ T5687] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.533609][ T5687] usb 5-1: Product: syz [ 246.541681][ T5687] usb 5-1: Manufacturer: syz [ 246.546423][ T5687] usb 5-1: SerialNumber: syz [ 246.571327][ T5687] usb 5-1: config 0 descriptor?? [ 246.627522][ T3656] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 246.649131][ T3656] usb 3-1: can't read configurations, error -71 [ 246.652085][ T5687] as10x_usb: device has been detected [ 246.670112][ T5687] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 246.684754][ T6292] input: syz0 as /devices/virtual/input/input17 [ 246.783350][ T5687] usb 5-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 246.813273][ T6292] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 246.829729][ T4107] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.875702][ T4107] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.896974][ T5687] as10x_usb: error during firmware upload part1 [ 246.909407][ T6294] netlink: 12 bytes leftover after parsing attributes in process `syz.4.491'. [ 246.926264][ T4107] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 246.943580][ T5687] Registered device Sky IT Digital Key (green led) [ 246.961991][ T4107] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.012929][ T4107] usb 2-1: config 0 descriptor?? [ 247.264617][ T6299] af_packet: tpacket_rcv: packet too big, clamped from 59658 to 3956. macoff=92 [ 247.454930][ T6294] udc-core: couldn't find an available UDC or it's busy [ 247.471680][ T6294] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 247.538283][ T5686] usb 5-1: USB disconnect, device number 18 [ 247.581046][ T5686] Unregistered device Sky IT Digital Key (green led) [ 247.587152][ T5686] as10x_usb: device has been disconnected [ 248.208674][ T4733] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 248.352127][ T26] audit: type=1326 audit(1726717878.192:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6315 comm="syz.0.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12d494fef9 code=0x7fc00000 [ 248.385682][ T26] audit: type=1326 audit(1726717878.212:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6315 comm="syz.0.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f12d494fef9 code=0x7fc00000 [ 248.408604][ T26] audit: type=1326 audit(1726717878.212:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6315 comm="syz.0.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12d494fef9 code=0x7fc00000 [ 248.433672][ T26] audit: type=1326 audit(1726717878.212:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6315 comm="syz.0.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12d494fef9 code=0x7fc00000 [ 248.461736][ T26] audit: type=1326 audit(1726717878.212:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6315 comm="syz.0.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12d494fef9 code=0x7fc00000 [ 248.467588][ T4107] uclogic 0003:256C:006D.000A: v1 buttonpad probing failed: -71 [ 248.487705][ T4733] usb 4-1: Using ep0 maxpacket: 16 [ 248.502425][ T26] audit: type=1326 audit(1726717878.212:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6315 comm="syz.0.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12d494fef9 code=0x7fc00000 [ 248.517372][ T4107] uclogic 0003:256C:006D.000A: failed probing parameters: -71 [ 248.537576][ T4107] uclogic: probe of 0003:256C:006D.000A failed with error -71 [ 248.543045][ T26] audit: type=1326 audit(1726717878.212:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6315 comm="syz.0.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12d494fef9 code=0x7fc00000 [ 248.573863][ T26] audit: type=1326 audit(1726717878.212:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6315 comm="syz.0.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12d494fef9 code=0x7fc00000 [ 248.587850][ T4107] usb 2-1: USB disconnect, device number 10 [ 248.608348][ T3656] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 248.631147][ T26] audit: type=1326 audit(1726717878.212:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6315 comm="syz.0.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12d494fef9 code=0x7fc00000 [ 248.654552][ T4733] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 248.671331][ T4733] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 248.687104][ T26] audit: type=1326 audit(1726717878.212:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6315 comm="syz.0.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12d494fef9 code=0x7fc00000 [ 248.777540][ T4733] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 248.787163][ T4733] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 248.795409][ T4733] usb 4-1: Manufacturer: syz [ 248.804831][ T4733] usb 4-1: config 0 descriptor?? [ 248.877417][ T3656] usb 3-1: Using ep0 maxpacket: 16 [ 249.167562][ T3656] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 249.194002][ T3656] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.223891][ T3656] usb 3-1: Product: syz [ 249.232571][ T3656] usb 3-1: Manufacturer: syz [ 249.245548][ T3656] usb 3-1: SerialNumber: syz [ 249.253536][ T6360] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 249.279043][ T3656] usb 3-1: config 0 descriptor?? [ 249.347585][ T5686] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 249.461547][ T6377] netlink: 20 bytes leftover after parsing attributes in process `syz.0.543'. [ 249.475474][ T6377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.543'. [ 249.485621][ T6377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.543'. [ 249.539012][ T4107] usb 3-1: USB disconnect, device number 13 [ 249.621310][ T3656] usb 4-1: USB disconnect, device number 9 [ 249.680737][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 249.717389][ T5686] usb 2-1: config 0 has no interfaces? [ 249.757646][ T4714] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 249.782340][ T6386] netlink: 4 bytes leftover after parsing attributes in process `syz.3.547'. [ 249.797636][ T5686] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 249.814424][ T5686] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 249.823192][ T5686] usb 2-1: Manufacturer: syz [ 249.835651][ T5686] usb 2-1: config 0 descriptor?? [ 249.893208][ T5283] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 250.141490][ T4714] usb 5-1: config index 0 descriptor too short (expected 4132, got 36) [ 250.159619][ T4714] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.232624][ T6359] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 250.247804][ T4714] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice=82.00 [ 250.256894][ T4714] usb 5-1: New USB device strings: Mfr=35, Product=0, SerialNumber=0 [ 250.267382][ T5283] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 250.275780][ T5283] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.292137][ T4714] usb 5-1: Manufacturer: syz [ 250.298570][ T4714] usb 5-1: config 0 descriptor?? [ 250.320327][ T4733] usb 2-1: USB disconnect, device number 11 [ 250.367910][ T5283] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 250.393489][ T5283] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 250.401691][ T5283] usb 1-1: Manufacturer: syz [ 250.409390][ T5283] usb 1-1: config 0 descriptor?? [ 250.507342][ T5283] rc_core: IR keymap rc-hauppauge not found [ 250.513266][ T5283] Registered IR keymap rc-empty [ 250.528998][ T5283] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 250.548503][ T4733] usb 5-1: USB disconnect, device number 19 [ 250.562546][ T5283] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input18 [ 250.657682][ T6382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.545'. [ 250.685922][ T6382] netlink: 4 bytes leftover after parsing attributes in process `syz.0.545'. [ 251.035572][ T5816] usb 1-1: USB disconnect, device number 29 [ 251.446052][ T6434] usb usb8: usbfs: process 6434 (syz.3.567) did not claim interface 0 before use [ 251.817467][ T5686] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 252.067391][ T5686] usb 3-1: Using ep0 maxpacket: 32 [ 252.188476][ T5686] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 252.377740][ T5686] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 252.387756][ T5686] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 252.395954][ T5686] usb 3-1: Product: syz [ 252.406647][ T5686] usb 3-1: Manufacturer: syz [ 252.411921][ T5686] usb 3-1: SerialNumber: syz [ 252.422300][ T5686] usb 3-1: config 0 descriptor?? [ 252.452384][ T6442] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 252.566782][ T6480] kvm: pic: non byte read [ 252.627353][ T4714] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 252.654745][ T6485] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 252.763748][ T6491] input: syz0 as /devices/virtual/input/input19 [ 252.887346][ T4714] usb 2-1: Using ep0 maxpacket: 16 [ 253.008127][ T4714] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.033142][ T4714] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.053914][ T4714] usb 2-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.00 [ 253.073595][ T4714] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.085893][ T4714] usb 2-1: config 0 descriptor?? [ 253.357548][ T3656] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 253.394412][ T4733] usb 3-1: USB disconnect, device number 14 [ 253.667385][ T4714] usbhid 2-1:0.0: can't add hid device: -71 [ 253.673338][ T4714] usbhid: probe of 2-1:0.0 failed with error -71 [ 253.710301][ T4714] usb 2-1: USB disconnect, device number 12 [ 253.747438][ T3656] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 253.760445][ T3656] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 253.775088][ T3656] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 253.792541][ T3656] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 253.807299][ T3656] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 253.957858][ T3656] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 253.977199][ T3656] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 254.007765][ T3656] usb 5-1: Product: syz [ 254.013168][ T3656] usb 5-1: Manufacturer: syz [ 254.099059][ T3656] cdc_wdm 5-1:1.0: skipping garbage [ 254.116894][ T3656] cdc_wdm 5-1:1.0: skipping garbage [ 254.136731][ T3656] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 254.170521][ T3656] cdc_wdm 5-1:1.0: Unknown control protocol [ 254.196165][ T6536] device batadv_slave_1 entered promiscuous mode [ 254.214431][ T6535] device batadv_slave_1 left promiscuous mode [ 254.957407][ T4733] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 255.217360][ T4733] usb 1-1: Using ep0 maxpacket: 32 [ 255.358348][ T4733] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 255.499207][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.505728][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.549121][ T6599] input: syz1 as /devices/virtual/input/input20 [ 255.567786][ T4733] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 255.576941][ T4733] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.595115][ T4733] usb 1-1: Product: syz [ 255.600953][ T4733] usb 1-1: Manufacturer: syz [ 255.605681][ T4733] usb 1-1: SerialNumber: syz [ 255.618570][ T4733] usb 1-1: config 0 descriptor?? [ 255.650392][ T5283] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 255.659911][ T4714] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 255.668420][ T5283] Bluetooth: hci2: Injecting HCI hardware error event [ 255.678233][ T3584] Bluetooth: hci2: hardware error 0x00 [ 255.679014][ T4733] hub 1-1:0.0: bad descriptor, ignoring hub [ 255.704293][ T4733] hub: probe of 1-1:0.0 failed with error -5 [ 255.714308][ T4733] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input21 [ 255.730593][ T4733] usbtouchscreen 1-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 255.749921][ T6601] kvm: emulating exchange as write [ 255.770949][ T4733] usbtouchscreen: probe of 1-1:0.0 failed with error -8 [ 256.007497][ T5816] usb 1-1: USB disconnect, device number 30 [ 256.187455][ T4714] usb 2-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=c7.7e [ 256.196808][ T4714] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.205872][ T4714] usb 2-1: Product: syz [ 256.211045][ T4714] usb 2-1: Manufacturer: syz [ 256.215739][ T4714] usb 2-1: SerialNumber: syz [ 256.222653][ T4714] usb 2-1: config 0 descriptor?? [ 256.381955][ T4714] mvusb_mdio: probe of 2-1:0.0 failed with error -5 [ 256.391352][ T6611] fuse: Unknown parameter 'fd0x0000000000000006' [ 256.424268][ T6611] SET target dimension over the limit! [ 256.486262][ T5686] usb 2-1: USB disconnect, device number 13 [ 256.567523][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 256.639720][ T6619] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 256.717398][ T4107] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 257.087948][ T4107] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 257.101559][ T4107] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.115573][ T4107] usb 1-1: config 0 descriptor?? [ 257.160218][ T4107] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 257.587432][ T4107] cpia1 1-1:0.0: unexpected state after lo power cmd: 00 [ 257.697331][ T5686] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 257.937304][ T5686] usb 3-1: Using ep0 maxpacket: 16 [ 258.027471][ T4107] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 258.057515][ T5686] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.068825][ T5686] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.078651][ T5686] usb 3-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.00 [ 258.087854][ T5686] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.097556][ T5686] usb 3-1: config 0 descriptor?? [ 258.286917][ T4733] usb 1-1: USB disconnect, device number 31 [ 258.757402][ T5686] usbhid 3-1:0.0: can't add hid device: -71 [ 258.763929][ T5686] usbhid: probe of 3-1:0.0 failed with error -71 [ 258.773085][ T5686] usb 3-1: USB disconnect, device number 15 [ 258.865515][ T6662] program syz.0.645 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 259.279136][ T6675] netlink: 'syz.0.649': attribute type 7 has an invalid length. [ 259.286817][ T6675] netlink: 'syz.0.649': attribute type 39 has an invalid length. [ 259.487116][ T26] kauditd_printk_skb: 74 callbacks suppressed [ 259.487158][ T26] audit: type=1326 audit(1726717889.322:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6683 comm="syz.0.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12d494fef9 code=0x7ffc0000 [ 259.524653][ T26] audit: type=1326 audit(1726717889.322:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6683 comm="syz.0.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12d494fef9 code=0x7ffc0000 [ 259.559414][ T26] audit: type=1326 audit(1726717889.362:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6683 comm="syz.0.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f12d494fef9 code=0x7ffc0000 [ 259.584819][ T26] audit: type=1326 audit(1726717889.362:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6683 comm="syz.0.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12d494fef9 code=0x7ffc0000 [ 259.613764][ T26] audit: type=1326 audit(1726717889.362:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6683 comm="syz.0.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f12d494e890 code=0x7ffc0000 [ 259.642330][ T26] audit: type=1326 audit(1726717889.362:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6683 comm="syz.0.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f12d494fafb code=0x7ffc0000 [ 259.665341][ T26] audit: type=1326 audit(1726717889.362:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6683 comm="syz.0.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f12d494fafb code=0x7ffc0000 [ 259.690357][ T26] audit: type=1326 audit(1726717889.362:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6683 comm="syz.0.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f12d494fafb code=0x7ffc0000 [ 259.713327][ T26] audit: type=1326 audit(1726717889.362:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6683 comm="syz.0.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f12d494fafb code=0x7ffc0000 [ 259.817715][ T5816] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 259.837629][ T26] audit: type=1326 audit(1726717889.682:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6683 comm="syz.0.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f12d494fafb code=0x7ffc0000 [ 260.087322][ T5816] usb 1-1: Using ep0 maxpacket: 16 [ 260.227483][ T5816] usb 1-1: unable to get BOS descriptor or descriptor too short [ 260.298174][ T5816] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 260.305885][ T5816] usb 1-1: can't read configurations, error -71 [ 261.237295][ T5816] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 261.417332][ T4733] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 261.497482][ T5816] usb 1-1: Using ep0 maxpacket: 16 [ 261.637544][ T5816] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 261.649039][ T5816] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 261.658202][ T5816] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.667425][ T5686] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 261.676456][ T5816] usb 1-1: config 0 descriptor?? [ 261.681534][ T4733] usb 2-1: Using ep0 maxpacket: 16 [ 261.887683][ T6738] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 261.967523][ T5686] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 261.977520][ T4733] usb 2-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 261.986932][ T4733] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.997702][ T4733] usb 2-1: Product: syz [ 262.002644][ T4733] usb 2-1: Manufacturer: syz [ 262.011090][ T4733] usb 2-1: SerialNumber: syz [ 262.030907][ T4733] usb 2-1: config 0 descriptor?? [ 262.046361][ T6741] hub 9-0:1.0: USB hub found [ 262.051817][ T5686] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 262.062371][ T5686] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 262.073840][ T6741] hub 9-0:1.0: 8 ports detected [ 262.078913][ T5686] usb 4-1: config 0 interface 0 has no altsetting 0 [ 262.097700][ T4733] as10x_usb: device has been detected [ 262.109914][ T4733] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 262.139947][ T6716] udc-core: couldn't find an available UDC or it's busy [ 262.146980][ T6716] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 262.161404][ T6740] netlink: 20 bytes leftover after parsing attributes in process `syz.2.674'. [ 262.176047][ T4733] usb 2-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 262.195940][ T4733] as10x_usb: error during firmware upload part1 [ 262.205280][ T5816] hid (null): report_id 2838798905 is invalid [ 262.207720][ T5686] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 262.211788][ T4733] Registered device Sky IT Digital Key (green led) [ 262.220544][ T5816] hid (null): unknown global tag 0xc [ 262.236612][ T5686] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 262.252838][ T5686] usb 4-1: config 0 interface 0 has no altsetting 0 [ 262.256361][ T6740] device vlan2 entered promiscuous mode [ 262.265339][ T5816] hid (null): unknown global tag 0xa5 [ 262.270821][ T5816] hid (null): unknown global tag 0xd [ 262.276260][ T5816] hid (null): unknown global tag 0xc [ 262.296687][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x1 [ 262.311483][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 262.319108][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 262.326537][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 262.334161][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 262.337495][ T5686] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 262.341613][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 262.358307][ T5686] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 262.363871][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 262.376842][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 262.384628][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 262.391196][ T5686] usb 4-1: config 0 interface 0 has no altsetting 0 [ 262.392280][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 262.406475][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 262.415933][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 262.423594][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 262.431200][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 262.439173][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 262.446850][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 262.465383][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 262.473134][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 262.477376][ T5686] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 262.487548][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 262.494101][ T5686] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 262.497108][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 262.516756][ T5686] usb 4-1: config 0 interface 0 has no altsetting 0 [ 262.522014][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 262.533964][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 262.541673][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 262.550085][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 262.558224][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 262.565835][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 262.573669][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 262.581696][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 262.589534][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 262.597161][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 262.605161][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 262.613456][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 262.621476][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 262.623292][ T5686] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 262.629450][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 262.645679][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 262.656742][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 262.657962][ T5686] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 262.664689][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 262.688836][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 262.696423][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 262.701251][ T5686] usb 4-1: config 0 interface 0 has no altsetting 0 [ 262.709430][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 262.724508][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 262.732907][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 262.747135][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 262.755262][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 262.768000][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 262.775416][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 262.783558][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 262.791223][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 262.799231][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 262.799953][ T5686] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 262.806643][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 262.806674][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 262.831147][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 262.835981][ T5686] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 262.843982][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 262.859881][ T5686] usb 4-1: config 0 interface 0 has no altsetting 0 [ 262.869166][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 262.876573][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 262.876873][ T6744] udc-core: couldn't find an available UDC or it's busy [ 262.895248][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 262.897700][ T6744] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 262.902814][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 262.927300][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 262.937597][ T5686] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 262.952112][ T5686] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 262.958347][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 262.975320][ T5686] usb 4-1: config 0 interface 0 has no altsetting 0 [ 262.977978][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 262.989901][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 262.997898][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.005308][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.013600][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.021108][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.028565][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.036067][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.043546][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.057310][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.057549][ T5686] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 263.064857][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.082419][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.090192][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.101122][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.130674][ T5686] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 263.131397][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.159188][ T5686] usb 4-1: config 0 interface 0 has no altsetting 0 [ 263.183761][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.199292][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.216973][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.238923][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.246315][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.267367][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.285143][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.294124][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.301967][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.319217][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.326873][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.327622][ T5686] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 263.334347][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.345894][ T5686] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 263.359144][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.361414][ T5686] usb 4-1: Product: syz [ 263.368042][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.371818][ T5686] usb 4-1: Manufacturer: syz [ 263.383088][ T5686] usb 4-1: SerialNumber: syz [ 263.400691][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.402408][ T5686] usb 4-1: config 0 descriptor?? [ 263.417325][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.424903][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.432718][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.440594][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.448237][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.453426][ T5686] yurex 4-1:0.0: USB YUREX device now attached to Yurex #2 [ 263.455921][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.471045][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.478741][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.486493][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.494437][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.502251][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.509970][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.518153][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.525635][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.533582][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.541180][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.548984][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.556431][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.564197][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.571873][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.579814][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.587476][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.595157][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.602695][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.610553][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.618133][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.625713][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.633231][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.640810][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.655392][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.663071][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.670666][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.678521][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.686020][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.693785][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.701345][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.709031][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.716493][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.724173][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.731769][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.739457][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.746897][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.754540][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.762014][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.769691][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.777139][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.781755][ T5686] usb 4-1: USB disconnect, device number 10 [ 263.784955][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.798114][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.803146][ T5686] yurex 4-1:0.0: USB YUREX #2 now disconnected [ 263.805671][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.820185][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.827711][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.835426][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.842947][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.850616][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.858720][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.866278][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.873821][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.881598][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.889448][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.896990][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.904439][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.912094][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.919546][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.927104][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.934642][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.942261][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.949721][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.957303][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.964710][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.972544][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.979985][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.987728][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 263.995134][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.002758][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.010249][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.017871][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.025266][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.032933][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.040384][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.048082][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.055468][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.063044][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.070511][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.078159][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.085644][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.093467][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.100964][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.108624][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.116065][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.123681][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.131322][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.139034][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.146472][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.154103][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.161581][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.169499][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.176958][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.184586][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.192252][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.199891][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x2 [ 264.207435][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.214987][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.222455][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.230075][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.237667][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.245229][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.252713][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.260264][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.267759][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.275336][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.282811][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.290556][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.298051][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.305612][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.313122][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.320770][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.328260][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.335818][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.343303][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.350924][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.358428][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.365982][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.373485][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.381016][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.388544][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.396197][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.403680][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.411395][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.418896][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.426423][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.433931][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.441509][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.450144][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.457922][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.465373][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.473009][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.480528][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.488266][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.495812][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.503459][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.510975][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.518601][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.526039][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.533770][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.541273][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.548925][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.556366][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.563983][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.571448][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.579064][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.586538][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.594181][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.601719][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.609384][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.616862][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.624499][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.632028][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.639692][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.647143][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.654798][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.662297][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.670061][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.677582][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.685308][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.693052][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.700816][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.708430][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.716011][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.723523][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.731187][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.738718][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.746254][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.753754][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.761303][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.769592][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.777130][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.784699][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.792271][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.799759][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.807413][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.814967][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.822648][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.830138][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.837698][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.845177][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.853282][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.860760][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.868257][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.875649][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.883240][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.890722][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.898228][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.905731][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.913222][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.920632][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.928116][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.935509][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.943165][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.950615][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.958119][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.965514][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.973010][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.980514][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.988100][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 264.995585][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 265.003134][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 265.010761][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 265.018277][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 265.025721][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 265.033226][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 265.040719][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 265.048227][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 265.055672][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 265.063166][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 265.070727][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 265.078256][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 265.085702][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 265.093906][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 265.101372][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 265.108811][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 265.116291][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x7 [ 265.123723][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x7 [ 265.131170][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x6 [ 265.138622][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x1 [ 265.146007][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 265.153550][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 265.160977][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 265.168436][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 265.175828][ T5816] hid-generic 0003:0158:0100.000B: unknown main item tag 0x0 [ 265.183288][ T5816] hid-generic 0003:0158:0100.000B: report_id 2838798905 is invalid [ 265.191222][ T5816] hid-generic 0003:0158:0100.000B: item 0 4 1 8 parsing failed [ 265.199205][ T5816] hid-generic: probe of 0003:0158:0100.000B failed with error -22 [ 265.210905][ T5816] usb 1-1: USB disconnect, device number 33 [ 265.244678][ T6743] netlink: 12 bytes leftover after parsing attributes in process `syz.1.670'. [ 265.326897][ T4733] usb 2-1: USB disconnect, device number 14 [ 265.372654][ T4733] Unregistered device Sky IT Digital Key (green led) [ 265.373890][ T4733] as10x_usb: device has been disconnected [ 265.429185][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 265.619585][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 265.619599][ T26] audit: type=1326 audit(1726717895.462:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6769 comm="syz.2.683" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f04210aeef9 code=0x0 [ 265.715587][ T6751] chnl_net:caif_netlink_parms(): no params data found [ 265.901296][ T6751] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.918789][ T6751] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.926877][ T6751] device bridge_slave_0 entered promiscuous mode [ 265.951744][ T6751] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.966034][ T6751] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.975623][ T6751] device bridge_slave_1 entered promiscuous mode [ 266.052699][ T6751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.070633][ T6751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.133981][ T6751] team0: Port device team_slave_0 added [ 266.197772][ T6751] team0: Port device team_slave_1 added [ 266.325621][ T6751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.347453][ T6751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.466718][ T6751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.542294][ T6751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.583359][ T6751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.685621][ T6751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.805032][ T6751] device hsr_slave_0 entered promiscuous mode [ 266.815214][ T6751] device hsr_slave_1 entered promiscuous mode [ 266.876683][ T6751] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 266.920240][ T6751] Cannot create hsr debugfs directory [ 267.087463][ T6813] input: syz1 as /devices/virtual/input/input22 [ 267.200103][ T3584] Bluetooth: Unexpected continuation frame (len 4) [ 267.327700][ T5686] Bluetooth: hci1: command 0x0409 tx timeout [ 267.506718][ T5686] Bluetooth: hci4: command 0x041b tx timeout [ 267.529503][ T6751] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.616290][ T6829] sg_write: data in/out 588840944/11 bytes for SCSI command 0x94-- guessing data in; [ 267.616290][ T6829] program syz.3.700 not setting count and/or reply_len properly [ 267.694153][ T6751] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.711804][ T6830] program syz.3.700 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 267.819506][ T6751] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.955426][ T6751] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.101456][ T6835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.699'. [ 268.137428][ T5816] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 268.233001][ T6751] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 268.251962][ T6751] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 268.273122][ T6751] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 268.292669][ T6751] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 268.457465][ T5686] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 268.554077][ T5816] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 268.554933][ T6751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.589956][ T5816] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 268.605039][ T5816] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 268.623716][ T5816] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 268.635263][ T5816] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 268.654533][ T6751] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.698028][ T3655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 268.708523][ T3655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 268.768082][ T5816] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 268.777602][ T5816] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 268.785717][ T5816] usb 3-1: Product: syz [ 268.793379][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 268.797066][ T5816] usb 3-1: Manufacturer: syz [ 268.815874][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 268.826838][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.833983][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.847931][ T5686] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 268.868488][ T5816] cdc_wdm 3-1:1.0: skipping garbage [ 268.873751][ T5816] cdc_wdm 3-1:1.0: skipping garbage [ 268.887439][ T5686] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.900734][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 268.909352][ T5816] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device [ 268.913646][ T5686] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.925696][ T5816] cdc_wdm 3-1:1.0: Unknown control protocol [ 268.934634][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 268.945202][ T5686] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 268.959108][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.966267][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.976713][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 268.986245][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.002054][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 269.051023][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 269.067498][ T5686] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 269.086832][ T5686] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 269.104374][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 269.127680][ T5686] usb 4-1: Manufacturer: syz [ 269.131396][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 269.152428][ T5686] usb 4-1: config 0 descriptor?? [ 269.165993][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 269.197586][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 269.214950][ T6751] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 269.240165][ T6751] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 269.280243][ T6864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.715'. [ 269.306279][ T6864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.715'. [ 269.325674][ T6870] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 269.338094][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 269.345897][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 269.355202][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 269.364337][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 269.379677][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 269.398901][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 269.567832][ T5687] Bluetooth: hci4: command 0x040f tx timeout [ 269.639406][ T5686] appleir 0003:05AC:8243.000C: unknown main item tag 0x0 [ 269.667986][ T5686] appleir 0003:05AC:8243.000C: No inputs registered, leaving [ 269.698582][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 269.726571][ T5686] appleir 0003:05AC:8243.000C: hiddev2,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 269.739135][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 269.751931][ T6751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.825190][ T6896] netlink: 'syz.0.723': attribute type 29 has an invalid length. [ 269.854198][ T4714] usb 4-1: USB disconnect, device number 11 [ 269.883061][ T6896] netlink: 'syz.0.723': attribute type 29 has an invalid length. [ 269.928708][ T6896] netlink: 'syz.0.723': attribute type 29 has an invalid length. [ 270.119433][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 270.135957][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 270.164737][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 270.181835][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 270.199041][ T6751] device veth0_vlan entered promiscuous mode [ 270.216672][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 270.233194][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 270.246924][ T6751] device veth1_vlan entered promiscuous mode [ 270.370916][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 270.380659][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 270.389490][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 270.399096][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 270.423354][ T6751] device veth0_macvtap entered promiscuous mode [ 270.450019][ T6751] device veth1_macvtap entered promiscuous mode [ 270.521774][ T3711] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 270.568625][ T3711] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 270.619633][ T6751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.645110][ T6751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.662805][ T6751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.681762][ T6751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.693413][ T6751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.704605][ T6751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.715982][ T6751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.726690][ T6751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.736687][ T6751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.749339][ T6751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.761033][ T6751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.774234][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 270.787187][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 270.806563][ T6751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.817889][ T6751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.828776][ T6751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.839700][ T6751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.851658][ T6751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.877420][ T6751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.893462][ T6751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.905959][ T6751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.915947][ T6751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.928519][ T6751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.939679][ T6751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.953296][ T6751] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.962126][ T6751] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.971279][ T6751] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.980825][ T6751] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.994518][ T6917] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 271.026526][ T3711] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 271.037286][ T5686] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 271.058296][ T3711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 271.199704][ T6925] netlink: 20 bytes leftover after parsing attributes in process `syz.3.733'. [ 271.224837][ T3711] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.260188][ T3711] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.273813][ T6928] netlink: 8 bytes leftover after parsing attributes in process `syz.3.734'. [ 271.288867][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 271.305247][ T3711] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.337554][ T3711] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.360176][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 271.407493][ T5686] usb 2-1: config 17 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 271.425126][ T5686] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 271.434732][ T5686] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.468021][ T6912] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 271.492495][ T5686] aiptek 2-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 271.597346][ T4107] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 271.647746][ T5686] Bluetooth: hci4: command 0x0419 tx timeout [ 271.794210][ T6935] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 271.960138][ T4107] usb 4-1: unable to get BOS descriptor or descriptor too short [ 272.087379][ T4107] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 272.104422][ T4107] usb 4-1: can't read configurations, error -71 [ 272.491690][ T5816] usb 2-1: USB disconnect, device number 15 [ 273.443765][ T6975] udc-core: couldn't find an available UDC or it's busy [ 273.457385][ T6975] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 274.009438][ T6992] netlink: 'syz.3.753': attribute type 7 has an invalid length. [ 274.017114][ T6992] netlink: 'syz.3.753': attribute type 39 has an invalid length. [ 274.056807][ T6992] bridge1: port 1(gretap1) entered blocking state [ 274.064778][ T6992] bridge1: port 1(gretap1) entered disabled state [ 274.087200][ T6992] device gretap1 entered promiscuous mode [ 274.102844][ T6992] netlink: 'syz.3.753': attribute type 7 has an invalid length. [ 274.125893][ T6992] netlink: 'syz.3.753': attribute type 39 has an invalid length. [ 274.172619][ T7002] IPv6: Can't replace route, no match found [ 274.303412][ T7006] udc-core: couldn't find an available UDC or it's busy [ 274.315326][ T7006] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 274.407316][ T13] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 274.657392][ T13] usb 1-1: Using ep0 maxpacket: 8 [ 274.777552][ T13] usb 1-1: config 0 has no interfaces? [ 274.877452][ T13] usb 1-1: config 0 has no interfaces? [ 274.967574][ T13] usb 1-1: config 0 has no interfaces? [ 275.147987][ T13] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 275.163083][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.186382][ T13] usb 1-1: Product: syz [ 275.202448][ T13] usb 1-1: Manufacturer: syz [ 275.207117][ T13] usb 1-1: SerialNumber: syz [ 275.220849][ T13] usb 1-1: config 0 descriptor?? [ 275.248410][ T7016] netlink: 'syz.3.763': attribute type 1 has an invalid length. [ 275.482525][ T7000] udc-core: couldn't find an available UDC or it's busy [ 275.494843][ T7000] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 275.508265][ T7000] udc-core: couldn't find an available UDC or it's busy [ 275.515752][ T7000] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 275.530748][ T13] usb 1-1: USB disconnect, device number 34 [ 276.096027][ T7028] netlink: 112 bytes leftover after parsing attributes in process `syz.1.769'. [ 276.137472][ T13] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 276.397426][ T13] usb 1-1: Using ep0 maxpacket: 8 [ 276.527484][ T13] usb 1-1: config 0 has no interfaces? [ 276.596387][ T7040] netlink: 12 bytes leftover after parsing attributes in process `syz.1.773'. [ 276.617552][ T13] usb 1-1: config 0 has no interfaces? [ 276.697672][ T13] usb 1-1: config 0 has no interfaces? [ 276.997678][ T13] usb 1-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=40.6e [ 277.024671][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.057113][ T13] usb 1-1: Product: syz [ 277.077017][ T13] usb 1-1: Manufacturer: syz [ 277.092206][ T13] usb 1-1: SerialNumber: syz [ 277.111692][ T13] usb 1-1: config 0 descriptor?? [ 277.157544][ T13] usb 1-1: can't set config #0, error -71 [ 277.170034][ T13] usb 1-1: USB disconnect, device number 35 [ 277.416498][ T7059] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.779'. [ 277.426117][ T7059] netlink: zone id is out of range [ 277.432201][ T7059] netlink: zone id is out of range [ 277.441064][ T7059] netlink: zone id is out of range [ 277.446210][ T7059] netlink: zone id is out of range [ 277.451818][ T7059] netlink: zone id is out of range [ 277.456943][ T7059] netlink: zone id is out of range [ 277.467111][ T7059] netlink: zone id is out of range [ 277.472762][ T7059] netlink: zone id is out of range [ 277.478217][ T7059] netlink: zone id is out of range [ 277.485391][ T7059] netlink: zone id is out of range [ 277.958948][ T4714] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 278.319127][ T7072] chnl_net:caif_netlink_parms(): no params data found [ 278.347436][ T4714] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 278.370811][ T4714] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 278.387347][ T4714] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 278.397454][ T4714] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 278.487354][ T13] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 278.506225][ T7072] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.525508][ T7072] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.562832][ T7072] device bridge_slave_0 entered promiscuous mode [ 278.577510][ T4714] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 278.598025][ T4714] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.612123][ T7072] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.625220][ T4714] usb 4-1: Product: syz [ 278.630502][ T4714] usb 4-1: Manufacturer: syz [ 278.636346][ T4714] usb 4-1: SerialNumber: syz [ 278.637760][ T7072] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.643569][ T4714] usb 4-1: config 0 descriptor?? [ 278.685634][ T7072] device bridge_slave_1 entered promiscuous mode [ 278.718605][ T4714] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 278.797008][ T7072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.834369][ T7072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.876923][ T7072] team0: Port device team_slave_0 added [ 278.889342][ T7072] team0: Port device team_slave_1 added [ 278.917655][ T13] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 278.936995][ T7072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.950828][ T13] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 278.950850][ T7072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.985811][ C1] vkms_vblank_simulate: vblank timer overrun [ 278.994450][ T7072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.015096][ T7072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.022879][ T7072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.049251][ T13] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 279.049301][ T13] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 279.049327][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.079533][ T7072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.118357][ T7077] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 279.171026][ T13] hub 1-1:1.0: bad descriptor, ignoring hub [ 279.176952][ T13] hub: probe of 1-1:1.0 failed with error -5 [ 279.206961][ T13] cdc_wdm 1-1:1.0: skipping garbage [ 279.226079][ T13] cdc_wdm 1-1:1.0: skipping garbage [ 279.244035][ T7072] device hsr_slave_0 entered promiscuous mode [ 279.257445][ T13] cdc_wdm 1-1:1.0: cdc-wdm2: USB WDM device [ 279.268248][ T13] cdc_wdm 1-1:1.0: Unknown control protocol [ 279.297922][ T7072] device hsr_slave_1 entered promiscuous mode [ 279.304515][ T7072] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 279.312731][ T7072] Cannot create hsr debugfs directory [ 279.497896][ T13] usb 1-1: USB disconnect, device number 36 [ 279.536372][ T7072] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.662968][ T7072] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.766156][ T7072] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.875545][ T7072] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.047763][ T5686] Bluetooth: hci6: command 0x0409 tx timeout [ 280.111367][ T7072] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 280.153478][ T7072] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 280.218056][ T7072] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 280.246394][ T7072] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 280.511560][ T7072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.561754][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 280.575067][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 280.601050][ T7072] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.620809][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 280.639313][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 280.648003][ T3722] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.655084][ T3722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.677022][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 280.686470][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 280.696482][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 280.705971][ T3722] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.713063][ T3722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.722184][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 280.740646][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 280.749496][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 280.792607][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 280.807424][ T4714] scsi host1: usb-storage 4-1:0.0 [ 280.848173][ T4714] usb 4-1: USB disconnect, device number 14 [ 280.861994][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 280.936749][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 281.013945][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 281.058225][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 281.076239][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 281.088675][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 281.098504][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 281.110462][ T7072] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 281.444401][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 281.457738][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 281.473367][ T7072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.567574][ T5687] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 281.579744][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 281.598733][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 281.665130][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 281.679375][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 281.715170][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 281.747567][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 281.766741][ T7072] device veth0_vlan entered promiscuous mode [ 281.801300][ T7072] device veth1_vlan entered promiscuous mode [ 281.840648][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 281.898367][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 281.921624][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 281.937589][ T5687] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 281.940958][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 281.965775][ T7072] device veth0_macvtap entered promiscuous mode [ 281.987421][ T5687] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.001585][ T7072] device veth1_macvtap entered promiscuous mode [ 282.002100][ T5687] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.008335][ T26] audit: type=1326 audit(1726717911.852:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7121 comm="syz.4.795" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9733910ef9 code=0x0 [ 282.030840][ T7072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.040245][ T5687] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 282.061234][ T7072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.083129][ T7072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.096210][ T7072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.108082][ T7072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.119576][ T7072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.134030][ T4733] Bluetooth: hci6: command 0x041b tx timeout [ 282.137596][ T5687] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 282.142025][ T7072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.157617][ T5687] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 282.170907][ T7072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.176956][ T5687] usb 1-1: Manufacturer: syz [ 282.187043][ T7072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.199468][ T7072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.209678][ T5687] usb 1-1: config 0 descriptor?? [ 282.211219][ T7072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.233477][ T7072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.247193][ T7072] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.258404][ T3711] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 282.291291][ T3711] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 282.321561][ T3711] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 282.339749][ T3711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 282.360840][ T7072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.373634][ T7072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.390265][ T7072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.403550][ T7072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.414074][ T7072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.425648][ T7072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.437780][ T7072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.449748][ T7072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.461036][ T7072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.473018][ T7072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.485410][ T7072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.497356][ T5283] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 282.505181][ T7072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.525666][ T7072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.541169][ T3711] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 282.553822][ T3711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 282.573582][ T7072] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.585988][ T7072] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.598010][ T7072] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.609358][ T7072] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.698704][ T5687] appleir 0003:05AC:8243.000D: unknown main item tag 0x0 [ 282.728553][ T5687] appleir 0003:05AC:8243.000D: No inputs registered, leaving [ 282.763528][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.793719][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.827814][ T5687] appleir 0003:05AC:8243.000D: hiddev2,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 282.855415][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 282.867715][ T5283] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFD, skipping [ 282.916444][ T5283] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 282.936045][ T5687] usb 1-1: USB disconnect, device number 37 [ 282.941703][ T3780] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.958005][ T5283] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.973755][ T3780] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.025777][ T5283] usb 4-1: config 0 descriptor?? [ 283.041837][ T3655] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 283.067830][ T7126] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 283.090748][ T5283] gspca_main: spca561-2.14.0 probing abcd:cdee [ 283.546622][ T7134] sctp: [Deprecated]: syz.2.784 (pid 7134) Use of int in maxseg socket option. [ 283.546622][ T7134] Use struct sctp_assoc_value instead [ 283.677504][ T5283] spca561: probe of 4-1:0.0 failed with error -22 [ 283.700190][ T5283] usb 4-1: MIDIStreaming interface descriptor not found [ 283.989593][ T26] audit: type=1326 audit(1726717913.832:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7152 comm="syz.0.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12d494fef9 code=0x7ffc0000 [ 284.097386][ T5687] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 284.119438][ T26] audit: type=1326 audit(1726717913.862:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7152 comm="syz.0.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f12d494fef9 code=0x7ffc0000 [ 284.203698][ T26] audit: type=1326 audit(1726717913.862:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7152 comm="syz.0.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12d494fef9 code=0x7ffc0000 [ 284.226576][ T13] Bluetooth: hci6: command 0x040f tx timeout [ 284.467540][ T5687] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 284.479653][ T7165] udc-core: couldn't find an available UDC or it's busy [ 284.484883][ T5687] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.486603][ T7165] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 284.513590][ T5687] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.546102][ T5687] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 284.647569][ T5687] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 284.657362][ T5687] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 284.665717][ T5687] usb 2-1: Manufacturer: syz [ 284.674415][ T5687] usb 2-1: config 0 descriptor?? [ 284.687615][ T4733] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 284.928166][ T4733] usb 1-1: Using ep0 maxpacket: 8 [ 285.087468][ T4733] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 285.125986][ T7167] net_ratelimit: 110 callbacks suppressed [ 285.126014][ T7167] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 285.159006][ T5687] appleir 0003:05AC:8243.000E: item fetching failed at offset 0/1 [ 285.168474][ T5687] appleir 0003:05AC:8243.000E: parse failed [ 285.174560][ T5687] appleir: probe of 0003:05AC:8243.000E failed with error -22 [ 285.249004][ T13] usb 4-1: USB disconnect, device number 15 [ 285.297582][ T4733] usb 1-1: New USB device found, idVendor=06f8, idProduct=3009, bcdDevice=3c.93 [ 285.321874][ T4733] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.348428][ T4733] usb 1-1: Product: syz [ 285.352616][ T4733] usb 1-1: Manufacturer: syz [ 285.375089][ T5687] usb 2-1: USB disconnect, device number 16 [ 285.381029][ T4733] usb 1-1: SerialNumber: syz [ 285.391361][ T4733] usb 1-1: config 0 descriptor?? [ 285.449765][ T4733] gspca_main: gspca_pac7302-2.14.0 probing 06f8:3009 [ 285.657507][ T4733] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 285.670358][ T4733] gspca_pac7302: probe of 1-1:0.0 failed with error -71 [ 285.683847][ T4733] usb 1-1: USB disconnect, device number 38 [ 285.745888][ T7181] netlink: 'syz.2.817': attribute type 7 has an invalid length. [ 285.753995][ T7181] netlink: 'syz.2.817': attribute type 39 has an invalid length. [ 285.763359][ T7181] netlink: 'syz.2.817': attribute type 7 has an invalid length. [ 285.771340][ T7181] netlink: 'syz.2.817': attribute type 39 has an invalid length. [ 286.297733][ T4733] Bluetooth: hci6: command 0x0419 tx timeout [ 286.893206][ T7224] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 287.067494][ T13] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 287.358280][ T13] usb 4-1: Using ep0 maxpacket: 16 [ 287.517530][ T13] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 287.534539][ T13] usb 4-1: config 0 has no interface number 0 [ 287.728317][ T13] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 287.750029][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.764279][ T13] usb 4-1: Product: syz [ 287.787387][ T13] usb 4-1: Manufacturer: syz [ 287.805504][ T13] usb 4-1: SerialNumber: syz [ 287.817804][ T13] usb 4-1: config 0 descriptor?? [ 287.869658][ T13] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 288.165555][ T7265] netlink: 'syz.4.851': attribute type 7 has an invalid length. [ 288.178516][ T7265] netlink: 'syz.4.851': attribute type 39 has an invalid length. [ 288.227329][ T3656] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 288.240159][ T7266] netlink: 'syz.4.851': attribute type 7 has an invalid length. [ 288.264914][ T7266] netlink: 'syz.4.851': attribute type 39 has an invalid length. [ 288.297567][ T13] gspca_spca1528: reg_w err -71 [ 288.327596][ T13] spca1528: probe of 4-1:0.1 failed with error -71 [ 288.358362][ T13] usb 4-1: USB disconnect, device number 16 [ 288.612945][ T26] audit: type=1326 audit(1726717918.452:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7280 comm="syz.1.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6baf3fef9 code=0x7ffc0000 [ 288.635367][ C0] vkms_vblank_simulate: vblank timer overrun [ 288.642767][ T3656] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.660910][ T3656] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.681477][ T3656] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 288.701786][ T3656] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.716166][ T3656] usb 1-1: config 0 descriptor?? [ 288.728290][ T26] audit: type=1326 audit(1726717918.492:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7280 comm="syz.1.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fd6baf3fef9 code=0x7ffc0000 [ 288.750356][ C0] vkms_vblank_simulate: vblank timer overrun [ 288.767558][ T26] audit: type=1326 audit(1726717918.492:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7280 comm="syz.1.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6baf3fef9 code=0x7ffc0000 [ 288.907510][ T26] audit: type=1326 audit(1726717918.492:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7280 comm="syz.1.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd6baf3fef9 code=0x7ffc0000 [ 288.943565][ T26] audit: type=1326 audit(1726717918.492:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7280 comm="syz.1.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6baf3fef9 code=0x7ffc0000 [ 288.966413][ C0] vkms_vblank_simulate: vblank timer overrun [ 288.977151][ T26] audit: type=1326 audit(1726717918.502:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7280 comm="syz.1.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fd6baf3fef9 code=0x7ffc0000 [ 288.999334][ C0] vkms_vblank_simulate: vblank timer overrun [ 289.008395][ T26] audit: type=1326 audit(1726717918.502:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7280 comm="syz.1.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6baf3fef9 code=0x7ffc0000 [ 289.031412][ C0] vkms_vblank_simulate: vblank timer overrun [ 289.053149][ T7259] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 289.106910][ T26] audit: type=1326 audit(1726717918.502:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7280 comm="syz.1.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fd6baf3fef9 code=0x7ffc0000 [ 289.170389][ T26] audit: type=1326 audit(1726717918.502:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7280 comm="syz.1.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6baf3fef9 code=0x7ffc0000 [ 289.204850][ T26] audit: type=1326 audit(1726717918.502:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7280 comm="syz.1.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7fd6baf3fef9 code=0x7ffc0000 [ 289.307424][ T3656] usbhid 1-1:0.0: can't add hid device: -71 [ 289.313715][ T3656] usbhid: probe of 1-1:0.0 failed with error -71 [ 289.335244][ T3656] usb 1-1: USB disconnect, device number 39 [ 290.591826][ T5687] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 290.847329][ T5687] usb 4-1: Using ep0 maxpacket: 32 [ 290.946158][ T7335] udc-core: couldn't find an available UDC or it's busy [ 290.963873][ T7335] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 290.971883][ T5687] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 290.990841][ T5687] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 291.013480][ T7335] udc-core: couldn't find an available UDC or it's busy [ 291.030832][ T7335] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 291.157638][ T5687] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 291.185865][ T5687] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 291.222076][ T5687] usb 4-1: Product: syz [ 291.234345][ T5687] usb 4-1: Manufacturer: syz [ 291.255034][ T5687] usb 4-1: SerialNumber: syz [ 291.288174][ T5687] usb 4-1: config 0 descriptor?? [ 291.339624][ T5687] ldusb 4-1:0.0: Interrupt in endpoint not found [ 291.724064][ T7356] netlink: 12 bytes leftover after parsing attributes in process `syz.4.884'. [ 291.953093][ T7368] udc-core: couldn't find an available UDC or it's busy [ 291.987054][ T7368] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 292.260542][ T7378] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.268970][ T7378] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.280541][ T7378] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 293.025590][ T7400] udc-core: couldn't find an available UDC or it's busy [ 293.044671][ T7400] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 293.103987][ T7400] udc-core: couldn't find an available UDC or it's busy [ 293.111197][ T7400] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 293.213874][ T3656] usb 4-1: USB disconnect, device number 17 [ 294.333910][ T7421] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.334084][ T7421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.727482][ T5687] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 294.987462][ T5687] usb 1-1: Using ep0 maxpacket: 8 [ 295.127578][ T5687] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 295.162768][ T5687] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 295.239049][ T5687] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 295.309289][ T5687] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 295.372894][ T5687] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 295.461051][ T5687] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 295.501548][ T5687] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.797398][ T3656] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 295.817566][ T5687] usb 1-1: usb_control_msg returned -32 [ 295.823321][ T5687] usbtmc 1-1:16.0: can't read capabilities [ 296.051864][ T7460] [ 296.054235][ T7460] ====================================================== [ 296.061338][ T7460] WARNING: possible circular locking dependency detected [ 296.068436][ T7460] 5.15.167-syzkaller #0 Not tainted [ 296.073622][ T7460] ------------------------------------------------------ [ 296.080733][ T7460] syz.2.922/7460 is trying to acquire lock: [ 296.086643][ T7460] ffff88807cf0e120 (sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_sk_diag_fill+0xf6a/0x1cb0 [ 296.096308][ T7460] [ 296.096308][ T7460] but task is already holding lock: [ 296.103663][ T7460] ffffc900018b6300 (&h->lhash2[i].lock){+.+.}-{2:2}, at: mptcp_diag_dump+0x869/0x1330 [ 296.113231][ T7460] [ 296.113231][ T7460] which lock already depends on the new lock. [ 296.113231][ T7460] [ 296.123621][ T7460] [ 296.123621][ T7460] the existing dependency chain (in reverse order) is: [ 296.132623][ T7460] [ 296.132623][ T7460] -> #1 (&h->lhash2[i].lock){+.+.}-{2:2}: [ 296.140519][ T7460] lock_acquire+0x1db/0x4f0 [ 296.145540][ T7460] _raw_spin_lock+0x2a/0x40 [ 296.150569][ T7460] __inet_hash+0xe4/0x8e0 [ 296.155422][ T7460] inet_csk_listen_start+0x231/0x310 [ 296.161242][ T7460] inet_listen+0x2c9/0x7c0 [ 296.166167][ T7460] __sys_listen+0x1a7/0x220 [ 296.171182][ T7460] __x64_sys_listen+0x56/0x60 [ 296.176367][ T7460] do_syscall_64+0x3b/0xb0 [ 296.181294][ T7460] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 296.187703][ T7460] [ 296.187703][ T7460] -> #0 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 296.195424][ T7460] validate_chain+0x1649/0x5930 [ 296.200791][ T7460] __lock_acquire+0x1295/0x1ff0 [ 296.206153][ T7460] lock_acquire+0x1db/0x4f0 [ 296.211167][ T7460] mptcp_diag_get_info+0x276/0xa10 [ 296.216789][ T7460] inet_sk_diag_fill+0xf6a/0x1cb0 [ 296.222344][ T7460] mptcp_diag_dump+0xd1d/0x1330 [ 296.227705][ T7460] __inet_diag_dump+0x20e/0x3a0 [ 296.233064][ T7460] netlink_dump+0x5a4/0xca0 [ 296.238079][ T7460] __netlink_dump_start+0x50f/0x6d0 [ 296.243799][ T7460] inet_diag_handler_cmd+0x1d7/0x2a0 [ 296.249607][ T7460] sock_diag_rcv_msg+0xd5/0x400 [ 296.255055][ T7460] netlink_rcv_skb+0x1cf/0x410 [ 296.260411][ T7460] sock_diag_rcv+0x26/0x40 [ 296.265334][ T7460] netlink_unicast+0x7b6/0x980 [ 296.270603][ T7460] netlink_sendmsg+0xa30/0xd60 [ 296.275881][ T7460] sock_write_iter+0x39b/0x530 [ 296.281165][ T7460] do_iter_readv_writev+0x594/0x7a0 [ 296.286871][ T7460] do_iter_write+0x1e6/0x760 [ 296.291993][ T7460] do_writev+0x281/0x470 [ 296.296750][ T7460] do_syscall_64+0x3b/0xb0 [ 296.301673][ T7460] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 296.308077][ T7460] [ 296.308077][ T7460] other info that might help us debug this: [ 296.308077][ T7460] [ 296.318286][ T7460] Possible unsafe locking scenario: [ 296.318286][ T7460] [ 296.325723][ T7460] CPU0 CPU1 [ 296.331071][ T7460] ---- ---- [ 296.336424][ T7460] lock(&h->lhash2[i].lock); [ 296.341092][ T7460] lock(sk_lock-AF_INET6); [ 296.348120][ T7460] lock(&h->lhash2[i].lock); [ 296.355302][ T7460] lock(sk_lock-AF_INET6); [ 296.359789][ T7460] [ 296.359789][ T7460] *** DEADLOCK *** [ 296.359789][ T7460] [ 296.367915][ T7460] 6 locks held by syz.2.922/7460: [ 296.372920][ T7460] #0: ffffffff8da3bac8 (sock_diag_mutex){+.+.}-{3:3}, at: sock_diag_rcv+0x17/0x40 [ 296.382230][ T7460] #1: ffffffff8da3b928 (sock_diag_table_mutex){+.+.}-{3:3}, at: sock_diag_rcv_msg+0x206/0x400 [ 296.392572][ T7460] #2: ffff888062552690 (nlk_cb_mutex-SOCK_DIAG){+.+.}-{3:3}, at: __netlink_dump_start+0x12e/0x6d0 [ 296.403262][ T7460] #3: ffffffff8db18328 (inet_diag_table_mutex){+.+.}-{3:3}, at: __inet_diag_dump+0x191/0x3a0 [ 296.413536][ T7460] #4: ffffffff8c91fc60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 296.422918][ T7460] #5: ffffc900018b6300 (&h->lhash2[i].lock){+.+.}-{2:2}, at: mptcp_diag_dump+0x869/0x1330 [ 296.432923][ T7460] [ 296.432923][ T7460] stack backtrace: [ 296.438793][ T7460] CPU: 0 PID: 7460 Comm: syz.2.922 Not tainted 5.15.167-syzkaller #0 [ 296.446871][ T7460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 296.457026][ T7460] Call Trace: [ 296.460294][ T7460] [ 296.463211][ T7460] dump_stack_lvl+0x1e3/0x2d0 [ 296.467967][ T7460] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 296.473787][ T7460] ? print_circular_bug+0x12b/0x1a0 [ 296.478974][ T7460] check_noncircular+0x2f8/0x3b0 [ 296.483904][ T7460] ? add_chain_block+0x850/0x850 [ 296.488852][ T7460] ? lockdep_lock+0x11f/0x2a0 [ 296.493533][ T7460] validate_chain+0x1649/0x5930 [ 296.498371][ T7460] ? noop_count+0x30/0x30 [ 296.502686][ T7460] ? reacquire_held_locks+0x660/0x660 [ 296.508054][ T7460] ? is_dynamic_key+0x1f0/0x1f0 [ 296.512892][ T7460] ? mark_lock+0x98/0x340 [ 296.517318][ T7460] ? reacquire_held_locks+0x660/0x660 [ 296.522681][ T7460] ? __lock_acquire+0x1295/0x1ff0 [ 296.527694][ T7460] ? mark_lock+0x98/0x340 [ 296.532008][ T7460] __lock_acquire+0x1295/0x1ff0 [ 296.536845][ T7460] lock_acquire+0x1db/0x4f0 [ 296.541327][ T7460] ? inet_sk_diag_fill+0xf6a/0x1cb0 [ 296.546510][ T7460] ? read_lock_is_recursive+0x10/0x10 [ 296.551870][ T7460] mptcp_diag_get_info+0x276/0xa10 [ 296.556966][ T7460] ? inet_sk_diag_fill+0xf6a/0x1cb0 [ 296.562152][ T7460] ? inet_sk_diag_fill+0xf6a/0x1cb0 [ 296.567333][ T7460] ? mptcp_diag_dump_one+0x280/0x280 [ 296.572596][ T7460] ? memset+0x1f/0x40 [ 296.576562][ T7460] inet_sk_diag_fill+0xf6a/0x1cb0 [ 296.581576][ T7460] ? inet_diag_msg_attrs_fill+0x9c0/0x9c0 [ 296.587281][ T7460] ? __might_sleep+0xc0/0xc0 [ 296.591856][ T7460] ? inet_diag_bc_sk+0x19d/0x10d0 [ 296.596863][ T7460] ? __rwlock_init+0x140/0x140 [ 296.601610][ T7460] ? do_raw_spin_unlock+0x137/0x8b0 [ 296.606795][ T7460] mptcp_diag_dump+0xd1d/0x1330 [ 296.611635][ T7460] ? mptcp_token_join_cookie_init_state+0x460/0x460 [ 296.618211][ T7460] __inet_diag_dump+0x20e/0x3a0 [ 296.623066][ T7460] netlink_dump+0x5a4/0xca0 [ 296.627561][ T7460] ? netlink_lookup+0x1d0/0x1d0 [ 296.632394][ T7460] ? __inet_diag_dump_start+0x8a/0x990 [ 296.637838][ T7460] ? __inet_diag_dump_start+0x831/0x990 [ 296.643370][ T7460] __netlink_dump_start+0x50f/0x6d0 [ 296.648559][ T7460] inet_diag_handler_cmd+0x1d7/0x2a0 [ 296.653829][ T7460] ? sock_diag_rcv_msg+0x206/0x400 [ 296.658933][ T7460] ? rcu_lock_release+0x20/0x20 [ 296.663779][ T7460] ? inet_diag_handler_get_info+0xb70/0xb70 [ 296.669772][ T7460] ? inet_diag_dump_start+0x20/0x20 [ 296.674963][ T7460] ? inet_diag_dump+0x50/0x50 [ 296.679628][ T7460] ? rcu_lock_release+0x20/0x20 [ 296.684465][ T7460] ? __copy_skb_header+0x47b/0x600 [ 296.689574][ T7460] ? dev_queue_xmit+0x20/0x20 [ 296.694238][ T7460] ? rcu_lock_release+0x20/0x20 [ 296.699186][ T7460] sock_diag_rcv_msg+0xd5/0x400 [ 296.704049][ T7460] netlink_rcv_skb+0x1cf/0x410 [ 296.708810][ T7460] ? sock_diag_bind+0xa0/0xa0 [ 296.713497][ T7460] ? netlink_ack+0xb10/0xb10 [ 296.718082][ T7460] sock_diag_rcv+0x26/0x40 [ 296.722486][ T7460] netlink_unicast+0x7b6/0x980 [ 296.727249][ T7460] ? netlink_detachskb+0x90/0x90 [ 296.732183][ T7460] ? __virt_addr_valid+0x3bb/0x460 [ 296.737295][ T7460] ? 0xffffffff81000000 [ 296.741429][ T7460] ? __check_object_size+0x300/0x410 [ 296.746705][ T7460] ? bpf_lsm_netlink_send+0x5/0x10 [ 296.751811][ T7460] netlink_sendmsg+0xa30/0xd60 [ 296.756588][ T7460] ? netlink_getsockopt+0x5b0/0x5b0 [ 296.761789][ T7460] ? aa_sock_msg_perm+0x91/0x150 [ 296.766725][ T7460] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 296.772003][ T7460] ? security_socket_sendmsg+0x7d/0xa0 [ 296.777462][ T7460] ? netlink_getsockopt+0x5b0/0x5b0 [ 296.782783][ T7460] sock_write_iter+0x39b/0x530 [ 296.787567][ T7460] ? sock_read_iter+0x480/0x480 [ 296.792420][ T7460] ? __lock_acquire+0x1ff0/0x1ff0 [ 296.797435][ T7460] do_iter_readv_writev+0x594/0x7a0 [ 296.802626][ T7460] ? generic_file_rw_checks+0x260/0x260 [ 296.808168][ T7460] ? common_file_perm+0x17d/0x1d0 [ 296.813188][ T7460] ? fsnotify_perm+0x64/0x590 [ 296.818040][ T7460] ? security_file_permission+0x75/0xa0 [ 296.823574][ T7460] do_iter_write+0x1e6/0x760 [ 296.828155][ T7460] ? import_iovec+0xe6/0x120 [ 296.832743][ T7460] do_writev+0x281/0x470 [ 296.836993][ T7460] ? do_readv+0x460/0x460 [ 296.841314][ T7460] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 296.847287][ T7460] ? vtime_user_exit+0x2d1/0x400 [ 296.852223][ T7460] ? syscall_enter_from_user_mode+0x2e/0x240 [ 296.858219][ T7460] ? lockdep_hardirqs_on+0x94/0x130 [ 296.863413][ T7460] ? syscall_enter_from_user_mode+0x2e/0x240 [ 296.869391][ T7460] do_syscall_64+0x3b/0xb0 [ 296.873816][ T7460] ? clear_bhb_loop+0x15/0x70 [ 296.878498][ T7460] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 296.884387][ T7460] RIP: 0033:0x7fcdd5896ef9 [ 296.888797][ T7460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.908408][ T7460] RSP: 002b:00007fcdd3d0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 296.916811][ T7460] RAX: ffffffffffffffda RBX: 00007fcdd5a4ef80 RCX: 00007fcdd5896ef9 [ 296.924772][ T7460] RDX: 0000000000000001 RSI: 0000000020000280 RDI: 0000000000000003 [ 296.932760][ T7460] RBP: 00007fcdd5909b76 R08: 0000000000000000 R09: 0000000000000000 [ 296.940950][ T7460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 296.948923][ T7460] R13: 0000000000000000 R14: 00007fcdd5a4ef80 R15: 00007ffcd73a89f8 [ 296.956889][ T7460] [ 296.961076][ T7460] BUG: sleeping function called from invalid context at net/core/sock.c:3282 [ 296.970388][ T7460] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 7460, name: syz.2.922 [ 296.979355][ T7460] INFO: lockdep is turned off. [ 296.984109][ T7460] Preemption disabled at: [ 296.984116][ T7460] [<0000000000000000>] 0x0 [ 296.992860][ T7460] CPU: 0 PID: 7460 Comm: syz.2.922 Not tainted 5.15.167-syzkaller #0 [ 297.000932][ T7460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 297.010985][ T7460] Call Trace: [ 297.014250][ T7460] [ 297.017164][ T7460] dump_stack_lvl+0x1e3/0x2d0 [ 297.021841][ T7460] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 297.027462][ T7460] ? panic+0x860/0x860 [ 297.031523][ T7460] ___might_sleep+0x547/0x6a0 [ 297.036193][ T7460] ? __might_sleep+0xc0/0xc0 [ 297.040788][ T7460] __lock_sock_fast+0x2f/0xe0 [ 297.045455][ T7460] mptcp_diag_get_info+0x282/0xa10 [ 297.050555][ T7460] ? inet_sk_diag_fill+0xf6a/0x1cb0 [ 297.055758][ T7460] ? mptcp_diag_dump_one+0x280/0x280 [ 297.061032][ T7460] ? memset+0x1f/0x40 [ 297.065002][ T7460] inet_sk_diag_fill+0xf6a/0x1cb0 [ 297.070021][ T7460] ? inet_diag_msg_attrs_fill+0x9c0/0x9c0 [ 297.075733][ T7460] ? __might_sleep+0xc0/0xc0 [ 297.080309][ T7460] ? inet_diag_bc_sk+0x19d/0x10d0 [ 297.085343][ T7460] ? __rwlock_init+0x140/0x140 [ 297.090096][ T7460] ? do_raw_spin_unlock+0x137/0x8b0 [ 297.095469][ T7460] mptcp_diag_dump+0xd1d/0x1330 [ 297.100310][ T7460] ? mptcp_token_join_cookie_init_state+0x460/0x460 [ 297.106889][ T7460] __inet_diag_dump+0x20e/0x3a0 [ 297.111732][ T7460] netlink_dump+0x5a4/0xca0 [ 297.116228][ T7460] ? netlink_lookup+0x1d0/0x1d0 [ 297.121064][ T7460] ? __inet_diag_dump_start+0x8a/0x990 [ 297.126527][ T7460] ? __inet_diag_dump_start+0x831/0x990 [ 297.132060][ T7460] __netlink_dump_start+0x50f/0x6d0 [ 297.137259][ T7460] inet_diag_handler_cmd+0x1d7/0x2a0 [ 297.142534][ T7460] ? sock_diag_rcv_msg+0x206/0x400 [ 297.147633][ T7460] ? rcu_lock_release+0x20/0x20 [ 297.152468][ T7460] ? inet_diag_handler_get_info+0xb70/0xb70 [ 297.158345][ T7460] ? inet_diag_dump_start+0x20/0x20 [ 297.163566][ T7460] ? inet_diag_dump+0x50/0x50 [ 297.168229][ T7460] ? rcu_lock_release+0x20/0x20 [ 297.173082][ T7460] ? __copy_skb_header+0x47b/0x600 [ 297.178183][ T7460] ? dev_queue_xmit+0x20/0x20 [ 297.182847][ T7460] ? rcu_lock_release+0x20/0x20 [ 297.187695][ T7460] sock_diag_rcv_msg+0xd5/0x400 [ 297.192543][ T7460] netlink_rcv_skb+0x1cf/0x410 [ 297.197299][ T7460] ? sock_diag_bind+0xa0/0xa0 [ 297.201967][ T7460] ? netlink_ack+0xb10/0xb10 [ 297.206549][ T7460] sock_diag_rcv+0x26/0x40 [ 297.210951][ T7460] netlink_unicast+0x7b6/0x980 [ 297.215705][ T7460] ? netlink_detachskb+0x90/0x90 [ 297.220635][ T7460] ? __virt_addr_valid+0x3bb/0x460 [ 297.225731][ T7460] ? 0xffffffff81000000 [ 297.229871][ T7460] ? __check_object_size+0x300/0x410 [ 297.235145][ T7460] ? bpf_lsm_netlink_send+0x5/0x10 [ 297.240240][ T7460] netlink_sendmsg+0xa30/0xd60 [ 297.244998][ T7460] ? netlink_getsockopt+0x5b0/0x5b0 [ 297.250186][ T7460] ? aa_sock_msg_perm+0x91/0x150 [ 297.255114][ T7460] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 297.260385][ T7460] ? security_socket_sendmsg+0x7d/0xa0 [ 297.265831][ T7460] ? netlink_getsockopt+0x5b0/0x5b0 [ 297.271019][ T7460] sock_write_iter+0x39b/0x530 [ 297.275774][ T7460] ? sock_read_iter+0x480/0x480 [ 297.280722][ T7460] ? __lock_acquire+0x1ff0/0x1ff0 [ 297.285767][ T7460] do_iter_readv_writev+0x594/0x7a0 [ 297.290957][ T7460] ? generic_file_rw_checks+0x260/0x260 [ 297.296492][ T7460] ? common_file_perm+0x17d/0x1d0 [ 297.301505][ T7460] ? fsnotify_perm+0x64/0x590 [ 297.306170][ T7460] ? security_file_permission+0x75/0xa0 [ 297.311708][ T7460] do_iter_write+0x1e6/0x760 [ 297.316287][ T7460] ? import_iovec+0xe6/0x120 [ 297.320872][ T7460] do_writev+0x281/0x470 [ 297.325111][ T7460] ? do_readv+0x460/0x460 [ 297.329430][ T7460] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 297.335486][ T7460] ? vtime_user_exit+0x2d1/0x400 [ 297.340439][ T7460] ? syscall_enter_from_user_mode+0x2e/0x240 [ 297.346407][ T7460] ? lockdep_hardirqs_on+0x94/0x130 [ 297.351589][ T7460] ? syscall_enter_from_user_mode+0x2e/0x240 [ 297.357554][ T7460] do_syscall_64+0x3b/0xb0 [ 297.361954][ T7460] ? clear_bhb_loop+0x15/0x70 [ 297.366627][ T7460] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 297.372531][ T7460] RIP: 0033:0x7fcdd5896ef9 [ 297.376934][ T7460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.396522][ T7460] RSP: 002b:00007fcdd3d0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 297.404937][ T7460] RAX: ffffffffffffffda RBX: 00007fcdd5a4ef80 RCX: 00007fcdd5896ef9 [ 297.412896][ T7460] RDX: 0000000000000001 RSI: 0000000020000280 RDI: 0000000000000003 [ 297.420855][ T7460] RBP: 00007fcdd5909b76 R08: 0000000000000000 R09: 0000000000000000 [ 297.428825][ T7460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 297.439549][ T7460] R13: 0000000000000000 R14: 00007fcdd5a4ef80 R15: 00007ffcd73a89f8 [ 297.447520][ T7460] [ 297.483260][ T4733] usb 1-1: USB disconnect, device number 40 [ 297.577363][ T3656] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 297.596494][ T3656] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 297.612680][ T3656] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 297.630530][ T3656] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 297.644365][ T3656] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.677471][ T7448] raw-gadget.5 gadget: fail, usb_ep_enable returned -22 [ 297.708153][ T3656] hub 2-1:1.0: bad descriptor, ignoring hub [ 297.714193][ T3656] hub: probe of 2-1:1.0 failed with error -5 [ 297.725144][ T3656] cdc_wdm 2-1:1.0: skipping garbage [ 297.734447][ T3656] cdc_wdm 2-1:1.0: skipping garbage [ 297.744764][ T3656] cdc_wdm 2-1:1.0: cdc-wdm2: USB WDM device [ 297.754208][ T3656] cdc_wdm 2-1:1.0: Unknown control protocol [ 298.037638][ T4109] usb 2-1: USB disconnect, device number 17