last executing test programs: 10.100830206s ago: executing program 2 (id=3826): epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @dev, 0x34}]}, &(0x7f0000002100)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x76, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000003c00)=0x90) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 8.497602019s ago: executing program 2 (id=3836): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x541b, 0x0) 8.344862082s ago: executing program 2 (id=3839): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x26, 0x4, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x401, 0x1000, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x34, 0xc0, 0x3, 0x0, [{@multicast1}, {@dev, 0x659}, {@broadcast, 0x8000}, {@empty}, {@multicast1, 0xffd200}, {@private=0xfffffffd}]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast2}, {@private=0xa010101}, {}, {@broadcast}]}, @noop, @noop, @lsrr={0x83, 0xb, 0x0, [@private, @rand_addr]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0) 7.5737932s ago: executing program 2 (id=3845): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r1}, 0x38) 6.204622744s ago: executing program 2 (id=3850): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x4e20, @loopback}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000100)='veth0_macvtap\x00', 0x8, 0x8000000000000001, 0x7ff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'team_slave_1\x00', 0x0}) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x2015}) read$FUSE(r2, &(0x7f0000001ac0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x6a, 0x2}, @cond}) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSMASK(r5, 0x40104593, &(0x7f0000000180)={0x1, 0x68, &(0x7f0000000100)="f13b8716bcfdcca0c8af3538908cd9249f533b44e0242eab855e96f55b9ffada39f62d8b23dd050e4bd47c6e12e3bd98840d9ae70008ed417a94f6c6b2fccb3a3bcb625653302c9301e4fe75a70cdee4c457f97a50895e6577df2340fb458bd55be572ac782da8b5"}) write$char_usb(r5, &(0x7f0000000040)="e2", 0x2250) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r6, 0x545c, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x8f}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x200000000000011, 0x4000000000080002, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r8, &(0x7f0000000d00)={0x11, 0x1, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r7, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000240)={0x60002009}) epoll_pwait2(r3, &(0x7f0000000180), 0x1, 0x0, 0x0, 0xfffffd06) syz_emit_ethernet(0xae, &(0x7f0000000440)=ANY=[@ANYRES64=r4], 0x0) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="682ad9ec5c58"}, 0x14) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)=""/46, 0x2e}], 0x1) 5.060061833s ago: executing program 2 (id=3860): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept(r3, 0x0, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r4 = socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212"], 0x10}}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0}, 0x90) r8 = fsopen(&(0x7f0000000040)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000080)='debug', &(0x7f0000000100)='noblock_validity', 0x0) 4.45416598s ago: executing program 3 (id=3869): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x103}, 0x20) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='`\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x00\v\x00\x00\x00\x00\b'], 0x60}, 0x0) 4.214470953s ago: executing program 3 (id=3872): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 3.869656624s ago: executing program 3 (id=3873): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x26, 0x4, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x401, 0x1000, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x34, 0xc0, 0x3, 0x0, [{@multicast1}, {@dev, 0x659}, {@broadcast, 0x8000}, {@empty}, {@multicast1, 0xffd200}, {@private=0xfffffffd}]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast2}, {@private=0xa010101}, {}, {@broadcast}]}, @noop, @noop, @lsrr={0x83, 0xb, 0x0, [@private, @rand_addr]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0) 3.011563333s ago: executing program 1 (id=3877): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) unshare(0x4040600) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000900)) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0xfffffffc) 2.911599567s ago: executing program 3 (id=3878): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x6}]}) epoll_create1(0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) unshare(0x6040400) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000000)) 2.805183682s ago: executing program 1 (id=3880): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'pimreg\x00', 0x5dcf70ef8daa5d0e}) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @local}, 0x10) 2.609676339s ago: executing program 4 (id=3882): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.556851239s ago: executing program 4 (id=3883): bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0x0, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0}, 0x80) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)={0x1c, 0x22, 0x601, 0x0, 0x0, "", [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}]}, 0x1c}], 0x1}, 0x0) 2.480213523s ago: executing program 4 (id=3884): socket$nl_route(0x10, 0x3, 0x0) gettid() socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x2, 0x6) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00'}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) socket(0x0, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)=0xe) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) syz_emit_ethernet(0xde, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0xf8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061144000000000001e000000000000009500000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) r1 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r1, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}, {&(0x7f00000002c0)=""/254, 0xfe}], 0x2}}], 0x1, 0x0, 0x0) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) ioctl$SIOCGSTAMPNS(r1, 0x8907, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x1d, r3}, 0x10, &(0x7f0000000180)={&(0x7f0000000200)={0x1, 0x27, 0x2, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4f40c848d97a447"}}, 0x48}}, 0x0) 2.449261053s ago: executing program 1 (id=3885): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) write(r0, &(0x7f0000000000)="1c0000001a005f0400f9f407000904018000"/28, 0x1c) 2.217515736s ago: executing program 1 (id=3886): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000180)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x4068aea3, &(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000800000000000000000008500000053000000850000002300000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) sendto(r3, &(0x7f00000014c0)="8e1d1a4ede6b6de92eace771978015bdb97a64c3ca9c575e9cf4a4b12820859dab9476a5af9566678a19bb2d6cc60b22d7ced59bacd0c1938cdd8ca187c8a0f0d3698e83191175115d7faf8552da85d695de41c8ef855c5bb8a6772559f34998bb798f3e2a0d506ff5a7ca0436a3abfd17bc309ddfc0b9f65288d094a0ab0a", 0x7f, 0x20000040, 0x0, 0x0) r4 = socket$inet(0x2, 0x6, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r6, 0xc2604110, &(0x7f0000000300)={0x0, [[0x9ef8], [0x10000], [0x7]], '\x00', [{0xffffffff}, {0x0, 0x10}, {}, {0x0, 0x80000000, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x5f, 0x1}, {}, {}, {0x0, 0x3}, {0x0, 0xfffffffe}], '\x00', 0x1000}) bind$alg(r5, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r7 = accept4(r5, 0x0, 0x0, 0x0) r8 = epoll_create1(0x0) sendmmsg$unix(r7, &(0x7f00000033c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20048010) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f00000000c0)={0x1000000c}) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b80000001900010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b7c00000000000000000000000000000000000000000000000000000000000000000000000000000000000100"], 0xb8}}, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001900010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002", @ANYRES32=0x0, @ANYRES32], 0xb8}}, 0x0) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0xb8}}, 0x0) sendmsg$nl_generic(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x0) recvmmsg(r9, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=""/239, 0xef}, {&(0x7f00000004c0)=""/4093, 0xffd}, {&(0x7f0000000280)=""/110, 0x6e}], 0x3}}], 0x2, 0x0, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r13 = socket$netlink(0x10, 0x3, 0x0) writev(r13, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) close(0x5) 2.006301504s ago: executing program 3 (id=3888): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f00000088c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=""/253, 0xfd}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.900661711s ago: executing program 0 (id=3889): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) unshare(0x4040600) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000900)) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0xfffffffc) 1.69155717s ago: executing program 0 (id=3890): r0 = syz_open_dev$dri(&(0x7f0000000240), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000540)={0x800, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.477552105s ago: executing program 1 (id=3891): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x6, &(0x7f0000000400)=[{0x6, 0x3, 0x7, 0x7613}, {0x6, 0x2, 0x8, 0x2b52}, {0x401, 0x9, 0x9, 0x3ff}, {0x825b, 0x81, 0x2, 0x634}, {0xc0e, 0x3f, 0x55, 0x1f}, {0x7fff, 0x0, 0x7, 0x2}]}) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89001) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000140), 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000000)) io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0xfffffffb, 0x2, 0x10000, 0xf6}) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000000)={0x0, 0x0, 0xd4a4}) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @private1}, 0x1c) r3 = socket$qrtr(0x2a, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000002030102000000000000000000000010080001000100000016c798a7a8be429f266aaa9fc26d5d401e00572f6bbf0e38b11b74fb052adbead0994c7e8c6a24cc5be3479fc2117ee54cc3b0a38ad3b7f90b31dfae64b66dd684f56214dcdc8185e581b1c33f5ad671e8ac18454066395c8eec06f484df86911de70a9410dc9f2a63839212062db703bd9a386bb2ca210a712924631d3923da233f43ce65cff9022548853c33ff260bfd4ca4580f8a1c80d4548497e4b492b934d2052345915c29838b78932aa8abe8c36f053711e5dc0b6a0812"], 0x1c}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000380)=@assoc_value, &(0x7f00000003c0)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000140)={'virt_wifi0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'virt_wifi0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000080)=[{0x44, 0x0, 0x0, 0xffffffff}, {0xc}, {}, {0x0, 0x0, 0x0, 0x20}, {0x6}]}) syz_open_dev$vcsn(&(0x7f0000000000), 0x1ff, 0x800002) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10065, 0x0) close_range(r4, 0xffffffffffffffff, 0x2) 1.455178533s ago: executing program 0 (id=3892): r0 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) write(r2, &(0x7f0000000080)="240000001a007f0214f9f4070009040803000000000000050002000008000f40fe00000e", 0x24) r3 = socket$key(0xf, 0x3, 0x2) fcntl$addseals(r0, 0x409, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="0203f3021600000000000000000a00000200090008000000e90000000000000003000600000000000200000000000000000000000000000002000100000000fffffffd0200000000030005000000000002000000ac1414aa00000000000000000a0008"], 0xb0}, 0x1, 0x7}, 0x0) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0x4, 0x4}, 0x6) write(r1, &(0x7f0000000000)="3b000300010010", 0x7) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) pread64(r4, &(0x7f0000000040)=""/29, 0x1d, 0x5f) 1.423036269s ago: executing program 4 (id=3893): sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={0x0, 0x10}}, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x5, 0x4, @tid=r0}, &(0x7f0000000300)) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0) clock_gettime(0x0, &(0x7f0000000040)) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x5) 1.261984336s ago: executing program 4 (id=3894): bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x2b}, 0x20) 1.033746825s ago: executing program 4 (id=3895): pipe2$watch_queue(0x0, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e04023c20"], 0x7) socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) 975.341257ms ago: executing program 3 (id=3896): r0 = io_uring_setup(0x177f, &(0x7f0000000140)) socket(0x2b, 0x1, 0x0) socket$inet(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000000000402505a8a440000102030609021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3fc}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 428.335857ms ago: executing program 1 (id=3897): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x6}]}) epoll_create1(0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) unshare(0x6040400) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000000)) 398.369442ms ago: executing program 0 (id=3898): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f00000005c0)={&(0x7f0000000340)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "dee830e6da205f66c99fe9e87385b170ec7e1ec730a1c51aa0e2445bf730ecec55649c703e91bd566399c5fade4d950a67c53bd8be05e458428ff22ae1fcd6b4"}, 0x48}}, 0x0) 222.16197ms ago: executing program 0 (id=3899): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) unshare(0x4040600) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000900)) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0xfffffffc) 0s ago: executing program 0 (id=3900): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000180)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x4068aea3, &(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000800000000000000000008500000053000000850000002300000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) sendto(r3, &(0x7f00000014c0)="8e1d1a4ede6b6de92eace771978015bdb97a64c3ca9c575e9cf4a4b12820859dab9476a5af9566678a19bb2d6cc60b22d7ced59bacd0c1938cdd8ca187c8a0f0d3698e83191175115d7faf8552da85d695de41c8ef855c5bb8a6772559f34998bb798f3e2a0d506ff5a7ca0436a3abfd17bc309ddfc0b9f65288d094a0ab0a", 0x7f, 0x20000040, 0x0, 0x0) r4 = socket$inet(0x2, 0x6, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r6, 0xc2604110, &(0x7f0000000300)={0x0, [[0x9ef8], [0x10000], [0x7]], '\x00', [{0xffffffff}, {0x0, 0x10}, {}, {0x0, 0x80000000, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x5f, 0x1}, {}, {}, {0x0, 0x3}, {0x0, 0xfffffffe}], '\x00', 0x1000}) bind$alg(r5, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r7 = accept4(r5, 0x0, 0x0, 0x0) r8 = epoll_create1(0x0) sendmmsg$unix(r7, &(0x7f00000033c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20048010) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f00000000c0)={0x1000000c}) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b80000001900010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b7c00000000000000000000000000000000000000000000000000000000000000000000000000000000000100"], 0xb8}}, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001900010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002", @ANYRES32=0x0, @ANYRES32], 0xb8}}, 0x0) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0xb8}}, 0x0) sendmsg$nl_generic(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x0) recvmmsg(r9, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=""/239, 0xef}, {&(0x7f00000004c0)=""/4093, 0xffd}, {&(0x7f0000000280)=""/110, 0x6e}], 0x3}}], 0x2, 0x0, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r13 = socket$netlink(0x10, 0x3, 0x0) writev(r13, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) close(0x5) kernel console output (not intermixed with test programs): 513.843085][ T5138] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.890334][ T5138] usb 3-1: config 0 descriptor?? [ 514.128682][ T5138] mxuport 3-1:0.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 514.156696][ T5138] mxuport 3-1:0.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 514.177967][ T5138] mxuport 3-1:0.0: probe with driver mxuport failed with error -71 [ 514.218442][ T5138] usb 3-1: USB disconnect, device number 34 [ 515.076719][ T5136] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 515.139929][T13373] ubi0: detaching mtd0 [ 515.197704][T13374] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 515.210071][T13374] cramfs: wrong magic [ 515.296102][T13373] ubi0: mtd0 is detached [ 516.072639][ T5136] usb 5-1: Using ep0 maxpacket: 8 [ 516.201494][ T5136] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 516.226747][ T5136] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 516.257989][ T5136] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 516.554460][ T9] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 516.568966][ T5136] usb 5-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 516.602962][ T5136] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.611014][ T5136] usb 5-1: Product: syz [ 516.642977][ T5136] usb 5-1: Manufacturer: syz [ 516.647644][ T5136] usb 5-1: SerialNumber: syz [ 516.693615][ T5136] ti_usb_3410_5052 5-1:1.0: TI USB 3410 1 port adapter converter detected [ 516.773421][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 516.790986][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 516.869873][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 516.875618][T13395] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2919'. [ 516.929402][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.961382][T13395] gretap0: entered promiscuous mode [ 516.973318][ T9] usb 3-1: Product: syz [ 516.977628][ T9] usb 3-1: Manufacturer: syz [ 516.997069][ T9] usb 3-1: SerialNumber: syz [ 517.073736][ T9] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 517.085036][ T5136] usb 5-1: USB disconnect, device number 16 [ 517.104121][T13395] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2919'. [ 517.131233][T13395] 0猉功D: renamed from gretap0 [ 517.200312][T13395] 0猉功D: left promiscuous mode [ 517.230263][T13395] 0猉功D: entered allmulticast mode [ 517.254449][T13395] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 517.317305][T13382] IPVS: set_ctl: invalid protocol: 60 172.30.1.3:20003 [ 517.569410][ T4478] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 517.579621][ T4478] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 517.595877][ T4478] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 517.605106][ T4478] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 517.615017][ T4478] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 517.624740][ T4478] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 517.721534][T13409] lo speed is unknown, defaulting to 1000 [ 517.963104][ T5138] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 518.043160][T13409] chnl_net:caif_netlink_parms(): no params data found [ 518.153121][ T5138] usb 2-1: Using ep0 maxpacket: 32 [ 518.173770][ T5138] usb 2-1: New USB device found, idVendor=199e, idProduct=8102, bcdDevice=33.4f [ 518.183618][ T5138] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.191711][ T5138] usb 2-1: Product: syz [ 518.196507][ T5138] usb 2-1: Manufacturer: syz [ 518.201136][ T5138] usb 2-1: SerialNumber: syz [ 518.208573][ T5138] usb 2-1: config 0 descriptor?? [ 518.254368][T13409] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.261513][T13409] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.283265][T13409] bridge_slave_0: entered allmulticast mode [ 518.291438][T13409] bridge_slave_0: entered promiscuous mode [ 518.301605][T13409] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.309197][T13409] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.317105][T13409] bridge_slave_1: entered allmulticast mode [ 518.327209][T13409] bridge_slave_1: entered promiscuous mode [ 518.381751][T13409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 518.398348][T13409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 518.458292][T13409] team0: Port device team_slave_0 added [ 518.474236][T13413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.493747][T13413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.499929][T13409] team0: Port device team_slave_1 added [ 518.598760][T13409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 518.612977][T13409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 518.667398][T13409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 518.697342][T13409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 518.713698][T13409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 518.768292][T13409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 518.922339][T13409] hsr_slave_0: entered promiscuous mode [ 518.947744][ T9] usb 3-1: USB disconnect, device number 35 [ 518.964424][T13409] hsr_slave_1: entered promiscuous mode [ 519.063333][T13409] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 519.079728][T13409] Cannot create hsr debugfs directory [ 519.092323][T13441] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 519.126113][T13441] overlayfs: fs on './file1' does not support file handles, falling back to xino=off. [ 519.238299][T13443] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2933'. [ 519.284400][T13443] gretap0: entered promiscuous mode [ 519.370919][T13444] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2933'. [ 519.392125][T13444] 0猉功D: renamed from gretap0 [ 519.406870][T13444] 0猉功D: left promiscuous mode [ 519.414816][T13444] 0猉功D: entered allmulticast mode [ 519.435151][T13444] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 519.673483][ T5095] Bluetooth: hci3: command tx timeout [ 519.753133][ T5095] Bluetooth: hci2: command tx timeout [ 520.022058][T13409] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.130244][T13409] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.163482][ T5172] usb 2-1: USB disconnect, device number 19 [ 521.602976][ T5140] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 521.628607][T13475] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 521.648099][T13475] cramfs: wrong magic [ 521.783475][ T5095] Bluetooth: hci3: command tx timeout [ 521.863227][ T5140] usb 3-1: Using ep0 maxpacket: 8 [ 522.309209][ T5140] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 522.324766][T13409] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.387077][ T5140] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 522.409185][ T5140] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.342658][ T5140] usb 3-1: Product: syz [ 523.360713][ T5140] usb 3-1: Manufacturer: syz [ 523.386709][ T5140] usb 3-1: SerialNumber: syz [ 523.427252][ T5140] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 523.460351][T13409] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.516718][T13481] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2947'. [ 523.543472][T13481] 0猉功D: entered promiscuous mode [ 523.559327][T13481] 0猉功D: left allmulticast mode [ 523.603082][T13483] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2947'. [ 523.633299][T13483] 1猉功D: renamed from 30猉功D [ 523.668998][T13483] 1猉功D: left promiscuous mode [ 523.712724][T13483] 1猉功D: entered allmulticast mode [ 523.723935][T13466] IPVS: set_ctl: invalid protocol: 60 172.30.1.3:20003 [ 523.739735][T13483] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 523.833221][ T5095] Bluetooth: hci3: command tx timeout [ 524.032828][T13409] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 524.049894][T13409] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 524.078848][T13409] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 524.104723][T13409] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 524.345704][T13409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.384676][T13409] 8021q: adding VLAN 0 to HW filter on device team0 [ 524.567271][ T5140] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.574585][ T5140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.674504][ T5136] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.681776][ T5136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.805561][ T5095] Bluetooth: hci7: command tx timeout [ 525.389977][ T5136] usb 3-1: USB disconnect, device number 36 [ 525.920338][ T5095] Bluetooth: hci3: command tx timeout [ 525.929615][T13537] tc_dump_action: action bad kind [ 526.045895][T13409] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 526.252999][ T5172] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 526.266012][T13409] veth0_vlan: entered promiscuous mode [ 526.320897][T13409] veth1_vlan: entered promiscuous mode [ 526.394834][T13409] veth0_macvtap: entered promiscuous mode [ 526.436711][T13409] veth1_macvtap: entered promiscuous mode [ 526.463142][ T5172] usb 4-1: Using ep0 maxpacket: 32 [ 526.476598][ T5172] usb 4-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=cc.be [ 526.488838][T13409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.501041][T13409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.507938][ T5172] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.515384][T13409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.535362][ T5172] usb 4-1: Product: syz [ 526.543662][T13409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.549802][ T5172] usb 4-1: Manufacturer: syz [ 526.565125][ T5172] usb 4-1: SerialNumber: syz [ 526.570840][T13409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.581774][ T5140] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 526.591746][ T5172] usb 4-1: config 0 descriptor?? [ 526.601697][T13409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.625610][T13409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.641322][T13409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.651581][T13409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.662397][T13409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.672549][T13409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.684465][T13409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.694650][T13409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.705877][T13409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.744217][T13409] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 526.791344][ T5140] usb 2-1: Using ep0 maxpacket: 8 [ 526.804546][T13409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.816186][T13537] netlink: 'syz.3.2969': attribute type 12 has an invalid length. [ 526.828685][T13537] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2969'. [ 526.842812][ T5140] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 526.852093][T13409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.866637][T13409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.883981][T13409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.888853][ T5140] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 526.911883][T13409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.923235][ T5140] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.938537][T13409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.951753][ T5140] usb 2-1: Product: syz [ 526.958836][ T5140] usb 2-1: Manufacturer: syz [ 526.973005][ T5140] usb 2-1: SerialNumber: syz [ 526.982524][T13409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.984648][ T5140] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 527.026426][T13409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.052958][T13409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.070109][T13409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.080453][T13409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.091365][T13409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.101662][T13409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.112539][T13409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.123484][T13409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.134441][T13409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.150960][T13409] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 527.170663][T13409] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.180602][T13409] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.212948][T13409] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.221707][T13409] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.305037][T13543] IPVS: set_ctl: invalid protocol: 60 172.30.1.2:20003 [ 527.440385][ T5172] int51x1 4-1:0.0: probe with driver int51x1 failed with error -71 [ 527.494609][ T5172] usb 4-1: USB disconnect, device number 19 [ 527.685225][ T1030] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.711388][ T1030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.787582][ T3741] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.817351][ T3741] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.491631][ T5136] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 528.866338][ T5136] usb 3-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 528.942356][ T5136] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.967320][ T5136] usb 3-1: Product: syz [ 528.983839][ T5136] usb 3-1: Manufacturer: syz [ 528.991063][ T5136] usb 3-1: SerialNumber: syz [ 529.027358][ T5136] usb 3-1: config 0 descriptor?? [ 529.046903][ T5136] ums-karma 3-1:0.0: USB Mass Storage device detected [ 529.065491][T13571] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2983'. [ 529.187481][ T29] audit: type=1326 audit(1720267817.356:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13576 comm="syz.4.2985" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8771975bd9 code=0x0 [ 529.303455][ T25] usb 2-1: USB disconnect, device number 20 [ 530.994143][ T45] usb 3-1: USB disconnect, device number 37 [ 531.120499][T13615] netlink: 'syz.4.2998': attribute type 11 has an invalid length. [ 531.233196][ T29] audit: type=1326 audit(1720267819.396:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13623 comm="syz.0.3001" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb618975bd9 code=0x0 [ 531.330146][T13628] netlink: 'syz.0.3001': attribute type 3 has an invalid length. [ 531.412991][ T5136] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 531.614709][ T5136] usb 2-1: Using ep0 maxpacket: 32 [ 531.628999][ T5136] usb 2-1: New USB device found, idVendor=0ace, idProduct=2011, bcdDevice= 1.01 [ 531.645586][ T5136] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.662525][ T5136] usb 2-1: Product: syz [ 531.667142][ T5136] usb 2-1: Manufacturer: syz [ 531.671843][ T5136] usb 2-1: SerialNumber: syz [ 531.693279][ T5136] usb 2-1: config 0 descriptor?? [ 531.705332][ T5136] usb-storage 2-1:0.0: USB Mass Storage device detected [ 531.747677][ T5136] usb-storage 2-1:0.0: device ignored [ 531.868102][T13649] input: syz1 as /devices/virtual/input/input35 [ 531.928180][ T5140] usb 2-1: USB disconnect, device number 21 [ 532.550014][T13671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3022'. [ 532.790623][T13680] netlink: 'syz.4.3026': attribute type 11 has an invalid length. [ 532.898996][ T29] audit: type=1326 audit(1720267821.066:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13681 comm="syz.1.3027" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f49c7775bd9 code=0x0 [ 532.996817][ T45] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 533.012581][T13687] netlink: 'syz.1.3027': attribute type 3 has an invalid length. [ 533.239776][ T45] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 533.271333][ T45] usb 4-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 533.299795][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.319179][ T45] usb 4-1: config 0 descriptor?? [ 533.336231][ T45] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 533.390125][T13700] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3035'. [ 533.523010][ T5146] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 533.723374][ T5146] usb 5-1: Using ep0 maxpacket: 32 [ 533.733214][ T5140] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 533.777368][ T5146] usb 5-1: New USB device found, idVendor=0ace, idProduct=2011, bcdDevice= 1.01 [ 533.797285][ T5146] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.819137][ T5146] usb 5-1: Product: syz [ 533.827672][ T5146] usb 5-1: Manufacturer: syz [ 533.834693][ T5146] usb 5-1: SerialNumber: syz [ 533.866740][ T5146] usb 5-1: config 0 descriptor?? [ 533.878361][ T5146] usb-storage 5-1:0.0: USB Mass Storage device detected [ 533.889572][ T5146] usb-storage 5-1:0.0: device ignored [ 533.916416][ T45] usb 4-1: USB disconnect, device number 20 [ 533.972989][ T5140] usb 1-1: Using ep0 maxpacket: 8 [ 534.196162][ T5140] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 534.638381][ T5136] usb 5-1: USB disconnect, device number 17 [ 534.646495][ T5140] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 534.729835][ T5140] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.767260][ T5140] usb 1-1: Product: syz [ 534.773069][ T5140] usb 1-1: Manufacturer: syz [ 534.777682][ T5140] usb 1-1: SerialNumber: syz [ 534.788015][ T5140] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 534.810231][ T29] audit: type=1326 audit(1720267822.976:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13711 comm="syz.2.3041" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f11b4d75bd9 code=0x0 [ 535.056824][T13701] IPVS: set_ctl: invalid protocol: 60 172.30.1.1:20003 [ 535.573568][ T5140] usb 1-1: USB disconnect, device number 30 [ 535.966817][T13735] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3049'. [ 536.002120][T13735] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3049'. [ 536.123141][T13737] input: syz1 as /devices/virtual/input/input36 [ 536.202306][ T4478] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 536.230405][ T4478] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 536.259483][ T4478] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 536.270841][ T4478] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 536.279043][ T4478] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 536.286496][ T4478] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 536.341302][ T29] audit: type=1326 audit(1720267824.506:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13740 comm="syz.4.3051" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8771975bd9 code=0x0 [ 536.526700][ T51] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.573279][T13742] netlink: 'syz.4.3051': attribute type 3 has an invalid length. [ 536.601993][T13738] lo speed is unknown, defaulting to 1000 [ 536.691121][ T51] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.743438][ T8] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 536.847041][ T51] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.863027][ T5136] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 536.936035][ T51] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.953475][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 536.964007][ T8] usb 4-1: New USB device found, idVendor=199e, idProduct=8102, bcdDevice=33.4f [ 536.974350][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.985052][ T8] usb 4-1: Product: syz [ 536.989456][ T8] usb 4-1: Manufacturer: syz [ 536.995243][T13748] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3054'. [ 537.004475][ T8] usb 4-1: SerialNumber: syz [ 537.012244][ T8] usb 4-1: config 0 descriptor?? [ 537.033165][T13748] netlink: 'syz.2.3054': attribute type 10 has an invalid length. [ 537.041755][T13748] bridge_slave_1: left allmulticast mode [ 537.050124][T13748] bridge_slave_1: left promiscuous mode [ 537.058258][T13748] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.071468][T13748] bridge_slave_0: left allmulticast mode [ 537.081083][T13748] bridge_slave_0: left promiscuous mode [ 537.088340][ T5136] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 537.093726][T13748] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.099442][ T5136] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 537.117289][ T5136] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 537.132566][ T5136] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 537.141903][ T5136] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.150117][ T5136] usb 1-1: Product: syz [ 537.158440][ T5136] usb 1-1: Manufacturer: syz [ 537.164565][ T5136] usb 1-1: SerialNumber: syz [ 537.241615][T13744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.252258][T13744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.399534][T13746] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 538.411552][ T5095] Bluetooth: hci2: command tx timeout [ 538.554018][T13759] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3057'. [ 538.563850][ T5095] Bluetooth: hci7: command tx timeout [ 538.647194][T13738] chnl_net:caif_netlink_parms(): no params data found [ 538.800332][T13746] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 538.989084][ T51] bridge_slave_1: left allmulticast mode [ 539.013073][ T51] bridge_slave_1: left promiscuous mode [ 539.043235][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.064087][ T5136] cdc_ncm 1-1:1.0: bind() failure [ 539.105201][ T5136] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 539.110289][ T51] bridge_slave_0: left allmulticast mode [ 539.126875][ T51] bridge_slave_0: left promiscuous mode [ 539.132673][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.138679][ T5136] cdc_ncm 1-1:1.1: bind() failure [ 539.322520][T13777] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3061'. [ 539.329483][ T5136] usb 1-1: USB disconnect, device number 31 [ 539.340992][ T29] audit: type=1326 audit(1720267827.466:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13771 comm="syz.2.3060" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f11b4d75bd9 code=0x0 [ 539.756100][T13596] usb 4-1: USB disconnect, device number 21 [ 540.332636][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 540.353592][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 540.386380][ T51] bond0 (unregistering): Released all slaves [ 540.474106][ T5095] Bluetooth: hci2: command tx timeout [ 540.709992][T13738] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.735821][T13738] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.752057][T13738] bridge_slave_0: entered allmulticast mode [ 540.776726][T13738] bridge_slave_0: entered promiscuous mode [ 540.984460][T13738] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.984744][T13738] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.985005][T13738] bridge_slave_1: entered allmulticast mode [ 540.992949][T13738] bridge_slave_1: entered promiscuous mode [ 541.223665][T13738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 541.227300][T13738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 541.393033][ T5140] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 541.572666][T13738] team0: Port device team_slave_0 added [ 541.615572][ T5140] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 541.615629][ T5140] usb 3-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 541.615656][ T5140] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.615981][T13738] team0: Port device team_slave_1 added [ 541.617988][ T5140] usb 3-1: config 0 descriptor?? [ 541.626295][ T5140] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 541.953779][ T51] hsr_slave_0: left promiscuous mode [ 541.962349][ T51] hsr_slave_1: left promiscuous mode [ 541.973264][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 541.973323][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 541.974328][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 541.974362][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 542.041930][ T51] veth1_macvtap: left promiscuous mode [ 542.042026][ T51] veth0_macvtap: left promiscuous mode [ 542.042234][ T51] veth1_vlan: left promiscuous mode [ 542.042385][ T51] veth0_vlan: left promiscuous mode [ 542.553470][ T5095] Bluetooth: hci2: command tx timeout [ 542.763128][ T5899] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 542.952977][ T5899] usb 4-1: Using ep0 maxpacket: 32 [ 542.963052][ T5899] usb 4-1: New USB device found, idVendor=0ace, idProduct=2011, bcdDevice= 1.01 [ 542.974118][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.982354][ T5899] usb 4-1: Product: syz [ 542.988910][ T5899] usb 4-1: Manufacturer: syz [ 542.999293][ T5899] usb 4-1: SerialNumber: syz [ 543.006439][ T5899] usb 4-1: config 0 descriptor?? [ 543.026983][ T5899] usb-storage 4-1:0.0: USB Mass Storage device detected [ 543.059341][ T5899] usb-storage 4-1:0.0: device ignored [ 543.074577][ T51] team0 (unregistering): Port device team_slave_1 removed [ 543.172008][ T51] team0 (unregistering): Port device team_slave_0 removed [ 543.248001][ T5899] usb 4-1: USB disconnect, device number 22 [ 543.778213][T13738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 543.793011][T13738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 543.819435][T13738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 543.982919][T13850] netlink: 'syz.0.3084': attribute type 13 has an invalid length. [ 544.006014][T13850] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3084'. [ 544.064734][T13850] erspan0: refused to change device tx_queue_len [ 544.071250][T13850] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 544.121251][ T5138] usb 3-1: USB disconnect, device number 38 [ 544.139947][T13738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 544.169150][T13738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 544.279148][T13738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 544.419637][T13872] Bluetooth: MGMT ver 1.22 [ 544.475416][T13869] bridge: RTM_NEWNEIGH with invalid ether address [ 544.575694][T13738] hsr_slave_0: entered promiscuous mode [ 544.607747][T13738] hsr_slave_1: entered promiscuous mode [ 544.633342][ T5095] Bluetooth: hci2: command tx timeout [ 544.659652][T13738] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 544.671533][T13738] Cannot create hsr debugfs directory [ 544.735438][T13884] NILFS (loop4): device size too small [ 544.874145][ T5095] Bluetooth: hci8: Controller not accepting commands anymore: ncmd = 0 [ 544.893878][ T5095] Bluetooth: hci8: Injecting HCI hardware error event [ 544.903163][ T5095] Bluetooth: hci8: hardware error 0x00 [ 545.979185][ T29] audit: type=1326 audit(1720267834.146:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13933 comm="syz.4.3114" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8771975bd9 code=0x0 [ 546.291136][T13738] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 546.332182][T13738] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 546.367680][T13738] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 546.391702][T13738] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 546.463373][ T45] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 546.663822][ T45] usb 1-1: Using ep0 maxpacket: 8 [ 546.678252][ T45] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 546.689143][T13738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 546.713477][ T45] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 546.742472][ T45] usb 1-1: config 0 has no interface number 0 [ 546.773255][ T45] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 546.809101][ T45] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 546.826632][ T45] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 546.860025][ T45] usb 1-1: config 0 interface 52 has no altsetting 0 [ 546.877641][ T45] usb 1-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 546.897536][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.905471][T13738] 8021q: adding VLAN 0 to HW filter on device team0 [ 546.921380][ T45] usb 1-1: config 0 descriptor?? [ 546.960804][ T5136] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.968335][ T5136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 547.005786][ T5146] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.013005][ T5146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 547.033307][ T5095] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 547.140748][ T45] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.52/input/input37 [ 547.167085][ T4519] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 547.245552][ T4519] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 547.319341][ T4519] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 547.354988][ T4519] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 547.397756][T13946] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 547.490703][ T4519] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 547.516397][ T5136] usb 1-1: USB disconnect, device number 32 [ 547.582088][T11407] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -19 [ 547.847942][T13738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 548.016498][T13738] veth0_vlan: entered promiscuous mode [ 548.066100][T13738] veth1_vlan: entered promiscuous mode [ 548.160413][T13738] veth0_macvtap: entered promiscuous mode [ 548.209692][T13738] veth1_macvtap: entered promiscuous mode [ 548.278967][T13738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.317790][T13738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.415972][T13738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.416012][T13738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.416034][T13738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.416050][T13738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.416069][T13738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.416084][T13738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.416101][T13738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.416116][T13738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.416128][T13738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.416143][T13738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.416161][T13738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.416176][T13738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.418158][T13738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 548.580538][T13738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.580567][T13738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.580579][T13738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.580596][T13738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.580608][T13738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.580623][T13738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.580636][T13738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.580664][T13738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.580680][T13738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.580695][T13738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.580708][T13738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.580721][T13738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.580732][T13738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.580746][T13738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.580770][T13738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.580784][T13738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.583118][T13738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 548.614232][ T5095] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 548.614351][ T5095] Bluetooth: hci3: Injecting HCI hardware error event [ 548.617572][ T4478] Bluetooth: hci3: hardware error 0x00 [ 548.621744][T13738] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.621780][T13738] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.621808][T13738] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.621835][T13738] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.100700][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.100727][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.231647][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.231668][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.664288][ T5136] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 549.883713][ T5136] usb 5-1: Using ep0 maxpacket: 8 [ 549.894190][ T5136] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 549.923383][ T5136] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 549.944478][ T5136] usb 5-1: config 0 has no interface number 0 [ 549.956483][ T5136] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 549.991833][ T5136] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 550.017715][ T5136] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 550.037202][ T5136] usb 5-1: config 0 interface 52 has no altsetting 0 [ 550.085336][ T5136] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 550.108622][ T5136] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.131159][ T5136] usb 5-1: config 0 descriptor?? [ 550.360906][ T5136] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.52/input/input38 [ 550.385763][ T4519] synaptics_usb 5-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 550.446757][ T4519] synaptics_usb 5-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 550.529892][ T4519] synaptics_usb 5-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 550.605948][T14035] synaptics_usb 5-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 550.667257][ T4519] synaptics_usb 5-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 550.763881][ T5136] usb 5-1: USB disconnect, device number 18 [ 550.790959][T11407] synaptics_usb 5-1:0.52: synusb_open - usb_submit_urb failed, error: -19 [ 550.809292][ T4478] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 551.089734][T14081] x_tables: ip_tables: ah match: only valid for protocol 51 [ 552.201260][T14122] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3165'. [ 552.692086][ T45] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 552.893009][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 552.899678][ T45] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 552.899705][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.899722][ T45] usb 4-1: Product: syz [ 552.899737][ T45] usb 4-1: Manufacturer: syz [ 552.899749][ T45] usb 4-1: SerialNumber: syz [ 552.902252][ T45] usb 4-1: config 0 descriptor?? [ 552.905448][ T45] ums-onetouch 4-1:0.0: USB Mass Storage device detected [ 553.171812][ T5146] usb 4-1: USB disconnect, device number 23 [ 553.724057][T14154] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3177'. [ 553.889990][ T29] audit: type=1326 audit(1720267842.056:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14158 comm="syz.4.3180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8771975bd9 code=0x7ffc0000 [ 553.939164][ T29] audit: type=1326 audit(1720267842.086:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14158 comm="syz.4.3180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8771975bd9 code=0x7ffc0000 [ 553.972169][ T29] audit: type=1326 audit(1720267842.086:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14158 comm="syz.4.3180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8771975bd9 code=0x7ffc0000 [ 554.042994][ T29] audit: type=1326 audit(1720267842.086:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14158 comm="syz.4.3180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8771975bd9 code=0x7ffc0000 [ 554.071717][T14167] binder_alloc: 14166: binder_alloc_buf size 1500523191332350224 failed, no address space [ 554.084622][T14167] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 554.096102][ T29] audit: type=1326 audit(1720267842.086:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14158 comm="syz.4.3180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8771975bd9 code=0x7ffc0000 [ 554.125572][ T29] audit: type=1326 audit(1720267842.086:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14158 comm="syz.4.3180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8771975bd9 code=0x7ffc0000 [ 554.156756][T14170] netlink: 666 bytes leftover after parsing attributes in process `syz.3.3184'. [ 554.184318][ T29] audit: type=1326 audit(1720267842.086:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14158 comm="syz.4.3180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8771975bd9 code=0x7ffc0000 [ 554.209288][ T29] audit: type=1326 audit(1720267842.086:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14158 comm="syz.4.3180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f8771975bd9 code=0x7ffc0000 [ 554.261638][ T29] audit: type=1326 audit(1720267842.086:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14158 comm="syz.4.3180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8771975bd9 code=0x7ffc0000 [ 554.297351][ T29] audit: type=1326 audit(1720267842.086:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14158 comm="syz.4.3180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8771975bd9 code=0x7ffc0000 [ 554.427500][T14181] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3189'. [ 554.437050][T14181] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3189'. [ 554.662985][ T5172] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 554.866765][ T5172] usb 4-1: config 0 has an invalid interface number: 199 but max is 1 [ 554.892947][ T5172] usb 4-1: config 0 has no interface number 1 [ 554.901376][ T5172] usb 4-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 554.911550][ T5172] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 554.934867][ T5172] usb 4-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 554.952915][ T5172] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 554.965742][ T5172] usb 4-1: SerialNumber: syz [ 554.983364][ T5172] usb 4-1: config 0 descriptor?? [ 554.996319][ T5172] usb 4-1: Found UVC 0.00 device (0002:0000) [ 555.032932][ T5172] usb 4-1: No valid video chain found. [ 555.248004][ T5172] usb 4-1: USB disconnect, device number 24 [ 555.665365][T14209] binder: BINDER_SET_CONTEXT_MGR already set [ 555.675385][T14209] binder: 14207:14209 ioctl 4018620d 20000100 returned -16 [ 555.770143][T14209] hub 6-0:1.0: USB hub found [ 555.786454][T14209] hub 6-0:1.0: 1 port detected [ 556.126683][ T5140] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 556.334324][ T5140] usb 5-1: config 0 has an invalid descriptor of length 96, skipping remainder of the config [ 556.359909][ T5140] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 556.373517][ T5140] usb 5-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 556.611142][ T5140] usb 5-1: New USB device found, idVendor=413c, idProduct=81d1, bcdDevice=fb.93 [ 556.620564][ T5140] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.642979][ T5140] usb 5-1: Product: syz [ 556.647433][ T5140] usb 5-1: Manufacturer: syz [ 556.652054][ T5140] usb 5-1: SerialNumber: syz [ 556.694382][ T5140] usb 5-1: config 0 descriptor?? [ 557.767672][T14234] input: syz1 as /devices/virtual/input/input39 [ 558.243025][ T5140] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 558.432941][ T5140] usb 2-1: Using ep0 maxpacket: 8 [ 558.446074][ T5140] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 558.473086][ T5140] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 558.492933][ T5140] usb 2-1: config 0 has no interface number 0 [ 558.505116][ T5140] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 558.530709][ T5140] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 558.558255][ T5140] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 558.597046][ T5140] usb 2-1: config 0 interface 52 has no altsetting 0 [ 558.612397][ T5140] usb 2-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 558.634959][ T5140] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.672256][ T5140] usb 2-1: config 0 descriptor?? [ 558.882584][ T8] usb 5-1: USB disconnect, device number 19 [ 558.914746][ T5140] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.52/input/input40 [ 558.959246][ T4519] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 559.002647][ T4519] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 559.065032][ T4519] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 559.084175][T14251] block nbd3: shutting down sockets [ 559.114454][ T4519] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 559.183131][T14240] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 559.227995][T11407] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 559.258020][ T4519] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 559.271640][T14255] delete_channel: no stack [ 559.303707][ T4519] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 559.345103][ T5140] usb 2-1: USB disconnect, device number 22 [ 559.351991][ T4519] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -19 [ 559.552500][T14257] tipc: Invalid UDP bearer configuration [ 559.552542][T14257] tipc: Enabling of bearer rejected, failed to enable media [ 559.633666][ T5095] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 559.664053][ T5095] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 559.672689][ T5095] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 559.685447][ T5095] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 559.697513][ T5095] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 559.711772][ T5095] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 559.809044][T14258] lo speed is unknown, defaulting to 1000 [ 560.498988][T14258] chnl_net:caif_netlink_parms(): no params data found [ 560.911192][T14258] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.938965][T14258] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.958157][T14258] bridge_slave_0: entered allmulticast mode [ 560.980059][T14258] bridge_slave_0: entered promiscuous mode [ 560.991011][T14287] block nbd3: shutting down sockets [ 561.017082][T14258] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.044460][T14258] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.072394][T14258] bridge_slave_1: entered allmulticast mode [ 561.113840][T14258] bridge_slave_1: entered promiscuous mode [ 561.340955][T14290] tipc: Invalid UDP bearer configuration [ 561.341016][T14290] tipc: Enabling of bearer rejected, failed to enable media [ 561.497395][T14258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 561.549271][T14258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 561.767685][T14258] team0: Port device team_slave_0 added [ 561.835269][ T4478] Bluetooth: hci4: command tx timeout [ 561.853839][T14258] team0: Port device team_slave_1 added [ 562.130345][T14296] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.139443][T14296] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.179441][ T5095] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 562.206140][ T5095] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 562.215571][ T5095] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 562.228407][ T5095] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 562.239639][ T5095] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 562.251660][ T5095] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 562.340559][T14258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 562.357838][T14258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 562.425374][T14258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 562.542471][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.624386][T14258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 562.631496][T14258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 562.681313][T14258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 562.705283][ T5140] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 562.826151][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.872428][T14294] lo speed is unknown, defaulting to 1000 [ 562.923046][ T5140] usb 4-1: Using ep0 maxpacket: 8 [ 562.930473][ T5140] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 562.940535][ T5140] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 562.950927][ T5140] usb 4-1: config 0 has no interface number 0 [ 562.956420][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.965329][ T5140] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 563.005158][ T5140] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 563.053011][ T5140] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 563.085407][ T5140] usb 4-1: config 0 interface 52 has no altsetting 0 [ 563.116507][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.120071][T14313] Invalid ELF header type: 0 != 1 [ 563.142581][ T5140] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 563.151984][ T5140] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.173713][ T5140] usb 4-1: config 0 descriptor?? [ 563.215996][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.316757][T14258] hsr_slave_0: entered promiscuous mode [ 563.331126][T14258] hsr_slave_1: entered promiscuous mode [ 563.345510][T14258] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 563.365294][T14258] Cannot create hsr debugfs directory [ 563.410553][ T5140] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input41 [ 563.434984][ T4519] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 563.466657][ T4519] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 563.490902][ T4519] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 563.527501][ T4519] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 563.631176][T11407] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 563.655987][ T4519] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 563.718768][T14299] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 563.750243][ T4519] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 563.801658][ T5172] usb 4-1: USB disconnect, device number 25 [ 563.838473][ T4519] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -19 [ 563.913316][ T5095] Bluetooth: hci4: command tx timeout [ 564.163130][ T12] bridge_slave_1: left allmulticast mode [ 564.196016][ T12] bridge_slave_1: left promiscuous mode [ 564.201926][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.246150][ T12] bridge_slave_0: left allmulticast mode [ 564.257826][ T12] bridge_slave_0: left promiscuous mode [ 564.273279][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.313198][ T5095] Bluetooth: hci3: command tx timeout [ 565.679376][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 565.726505][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 565.755059][ T12] bond0 (unregistering): Released all slaves [ 565.808890][T14333] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3249'. [ 565.854596][ T5899] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 565.930143][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 565.994439][ T5095] Bluetooth: hci4: command tx timeout [ 566.085144][ T5899] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 566.096657][ T5899] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 566.109744][ T5899] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 566.124950][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.145690][ T5899] usb 2-1: Product: 喟 [ 566.157127][ T5899] usb 2-1: Manufacturer: 濂硅晪氅愁牆铯囏旊悰軎嗠棶榻斻棙餇曕爱釂ゅ菇鍩嶏姕瞠ｏ熅鐎奉飕庪１绐涰嵔榛辫顚忚饯愦撶妭璁鋲欕厭舛囨墯閭嗛暬顧傘婵囪晝閻嶍槪鈽搽皦搴欕灨琚班Ы澶傛啲鑺ｇ◥褰曤宫鏃熽箍軎囧銟赤願戯簨啵婄痪顗冮笓岈复餂藉摯s [ 566.210634][ T5899] usb 2-1: SerialNumber: 鎶≈ㄩ〖鞇尖儔隄Ж銠樮撿姫陘♀殐舛熷顕拌摷飱む迹榇娟殣鍎ы櫝趮飒楅笌顤 [ 566.250536][T14258] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.404906][ T5095] Bluetooth: hci3: command tx timeout [ 566.599254][T14258] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.709940][ T5899] usb 2-1: 0:2 : does not exist [ 566.804799][ T5899] usb 2-1: USB disconnect, device number 23 [ 566.890161][T14258] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.001745][T14372] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3257'. [ 567.035865][ T12] hsr_slave_0: left promiscuous mode [ 567.061929][ T12] hsr_slave_1: left promiscuous mode [ 567.100807][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 567.126378][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 567.147175][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 567.165690][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 567.179451][T11326] udevd[11326]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 567.269524][ T12] veth1_macvtap: left promiscuous mode [ 567.292125][ T12] veth0_macvtap: left promiscuous mode [ 567.315745][ T12] veth1_vlan: left promiscuous mode [ 567.332153][ T12] veth0_vlan: left promiscuous mode [ 567.475062][ T8] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 567.682955][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 567.736678][ T8] usb 5-1: New USB device found, idVendor=199e, idProduct=8102, bcdDevice=33.4f [ 567.756032][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.776448][T14369] delete_channel: no stack [ 567.781021][ T8] usb 5-1: Product: syz [ 567.794124][ T8] usb 5-1: Manufacturer: syz [ 567.810087][ T8] usb 5-1: SerialNumber: syz [ 567.847361][ T8] usb 5-1: config 0 descriptor?? [ 568.083109][ T5095] Bluetooth: hci4: command tx timeout [ 568.150065][T14377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.182369][T14377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.483423][ T5095] Bluetooth: hci3: command tx timeout [ 569.540291][ T12] team0 (unregistering): Port device team_slave_1 removed [ 569.664409][ T12] team0 (unregistering): Port device team_slave_0 removed [ 569.701532][ T5138] usb 5-1: USB disconnect, device number 20 [ 569.833287][ T8] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 570.027505][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 570.038771][ T8] usb 2-1: config 0 has no interfaces? [ 570.044593][ T8] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 570.073490][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.114491][ T8] usb 2-1: config 0 descriptor?? [ 570.558033][ T5095] Bluetooth: hci3: command tx timeout [ 570.745753][T14258] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.796527][T14396] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3262'. [ 570.820492][T14294] chnl_net:caif_netlink_parms(): no params data found [ 571.140141][ T45] usb 2-1: USB disconnect, device number 24 [ 571.327867][T14294] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.339137][T14294] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.375000][T14294] bridge_slave_0: entered allmulticast mode [ 571.399382][T14294] bridge_slave_0: entered promiscuous mode [ 571.444347][T14294] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.477240][T14294] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.501816][T14294] bridge_slave_1: entered allmulticast mode [ 571.519654][T14294] bridge_slave_1: entered promiscuous mode [ 571.747987][T14294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 573.130753][T14294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 573.167347][T14440] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 573.337894][T14258] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 573.364731][T14448] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 573.462671][T14258] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 573.541699][T14294] team0: Port device team_slave_0 added [ 573.585594][T14294] team0: Port device team_slave_1 added [ 573.603073][T14258] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 573.636372][T14258] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 573.849443][T14294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 573.863336][ T5899] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 573.872436][T14294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 573.952921][T14294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 573.993767][T14294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 574.000757][T14294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 574.053230][T14294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 574.073017][ T5899] usb 2-1: Using ep0 maxpacket: 16 [ 574.080269][ T5899] usb 2-1: config 0 has no interfaces? [ 574.086148][ T5899] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 574.129780][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.195465][ T5899] usb 2-1: config 0 descriptor?? [ 574.305125][T14294] hsr_slave_0: entered promiscuous mode [ 574.326621][T14294] hsr_slave_1: entered promiscuous mode [ 574.388565][T14294] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 574.404966][T14294] Cannot create hsr debugfs directory [ 574.866880][T14258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 574.916329][T14258] 8021q: adding VLAN 0 to HW filter on device team0 [ 575.043635][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.050853][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 575.090389][T13596] usb 2-1: USB disconnect, device number 25 [ 575.102455][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.109678][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 575.336267][T14486] dccp_invalid_packet: P.Data Offset(224) too large [ 575.366377][T14483] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 576.888020][T14294] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 577.047155][T14294] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 577.120129][T14294] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 577.185173][T14294] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 577.345958][T14258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 577.515615][T14258] veth0_vlan: entered promiscuous mode [ 577.522309][T14518] dccp_invalid_packet: P.Data Offset(224) too large [ 577.555462][T14258] veth1_vlan: entered promiscuous mode [ 577.700648][T14294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 577.725766][T14258] veth0_macvtap: entered promiscuous mode [ 577.760828][T14258] veth1_macvtap: entered promiscuous mode [ 577.814003][T14294] 8021q: adding VLAN 0 to HW filter on device team0 [ 577.851431][T14258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.872465][T14258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.892106][T14258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.907841][T14258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.918590][T14258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.929280][T14258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.941209][T14258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.955804][T14258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.973791][T14258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.994426][T14258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.012962][T14258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 578.035801][T14258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.058157][T14258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 578.083088][T14258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.105544][T14258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 578.128774][ T5140] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.136039][ T5140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 578.181078][T14258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 578.204109][T14258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.228891][T14258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 578.272886][T14258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.282818][T14258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 578.302901][T14258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.317433][T14258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 578.340742][T14258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.367458][T14258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 578.389458][T14258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.409646][T14258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 578.430661][T14258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.440891][T14258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 578.467392][T14258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.497441][T14258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 578.519890][T14258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.540202][T14258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 578.554897][T14258] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.566734][T14258] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.577794][T14258] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.586610][T14258] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.599944][ T5138] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.607367][ T5138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 579.569825][T14543] netlink: 5128 bytes leftover after parsing attributes in process `syz.4.3306'. [ 579.619006][T14543] netlink: 5128 bytes leftover after parsing attributes in process `syz.4.3306'. [ 579.638456][ T2411] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 579.659648][T14543] netlink: 332 bytes leftover after parsing attributes in process `syz.4.3306'. [ 579.677529][ T2411] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 579.804996][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 579.826301][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 580.040826][T14294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 580.195961][T14294] veth0_vlan: entered promiscuous mode [ 580.241492][T14294] veth1_vlan: entered promiscuous mode [ 580.358562][T14294] veth0_macvtap: entered promiscuous mode [ 580.381323][T14294] veth1_macvtap: entered promiscuous mode [ 580.463564][T14294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 580.487973][T14294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.642163][T14294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 580.653193][T14294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.656493][ T45] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 580.663857][T14294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 580.713067][T14294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.588134][T14294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 581.635643][T14294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.645889][T14294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 581.656553][T14294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.666512][T14294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 581.677357][T14294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.687868][T14294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 581.699815][T14294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.710426][T14294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 581.727171][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 581.734319][T14294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.865136][ T45] usb 2-1: New USB device found, idVendor=061d, idProduct=c160, bcdDevice=2d.11 [ 581.874352][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.882445][ T45] usb 2-1: Product: syz [ 581.888025][ T45] usb 2-1: Manufacturer: syz [ 581.892732][ T45] usb 2-1: SerialNumber: syz [ 581.902821][ T45] usb 2-1: config 0 descriptor?? [ 581.904895][T14294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 581.937385][ T45] quatech2 2-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 581.965990][T14294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 581.992370][T14294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.003297][T14294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 582.019572][T14294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.033540][T14294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 582.044478][T14294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.059529][T14294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 582.081424][T14294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.101724][T14294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 582.128892][T14294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.141911][T14294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 582.162491][ T45] usb 2-1: qt2_attach - failed to power on unit: -71 [ 582.164677][T14294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.180074][T14294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 582.182955][ T45] quatech2 2-1:0.0: probe with driver quatech2 failed with error -71 [ 582.206057][T14294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.209058][ T45] usb 2-1: USB disconnect, device number 26 [ 582.243176][ T9] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 582.259023][T14294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 582.289635][T14294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.311957][T14294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 582.323728][T14294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.344943][T14294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 582.433098][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 582.457051][ T9] usb 3-1: New USB device found, idVendor=199e, idProduct=8102, bcdDevice=33.4f [ 582.466383][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.476976][ T9] usb 3-1: Product: syz [ 582.481310][ T9] usb 3-1: Manufacturer: syz [ 582.487224][ T9] usb 3-1: SerialNumber: syz [ 582.520900][ T9] usb 3-1: config 0 descriptor?? [ 582.538566][T14294] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.570103][T14294] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.592983][T14294] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.613869][T14294] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.884100][T14576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.924669][T14576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 582.958223][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 583.020042][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 583.117609][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 583.143530][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 583.300295][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 583.300316][ T29] audit: type=1326 audit(1720267871.466:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14581 comm="syz.4.3320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8771975bd9 code=0x7fc00000 [ 583.332532][T14592] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 584.004968][ T5095] Bluetooth: hci4: command tx timeout [ 584.703014][ T29] audit: type=1326 audit(1720267872.856:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14581 comm="syz.4.3320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8771975bd9 code=0x7fc00000 [ 586.584710][T14647] binder: 14640:14647 ioctl 4018620d 0 returned -22 [ 586.590359][ T5171] usb 3-1: USB disconnect, device number 39 [ 586.725114][T14650] binder: 14640:14650 ioctl c0306201 0 returned -14 [ 587.201789][ T29] audit: type=1326 audit(1720267875.366:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14653 comm="syz.1.3344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d4d175bd9 code=0x7fc00000 [ 587.641683][ T29] audit: type=1326 audit(1720267875.806:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14653 comm="syz.1.3344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9d4d175bd9 code=0x7fc00000 [ 594.796548][T14685] ieee802154 phy1 wpan1: encryption failed: -22 [ 599.793660][ T5146] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 599.993235][ T5146] usb 1-1: Using ep0 maxpacket: 32 [ 600.013971][ T5146] usb 1-1: New USB device found, idVendor=199e, idProduct=8102, bcdDevice=33.4f [ 600.035825][ T5146] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.071869][ T5146] usb 1-1: Product: syz [ 600.087977][ T5146] usb 1-1: Manufacturer: syz [ 600.100538][ T5146] usb 1-1: SerialNumber: syz [ 600.115870][ T5095] Bluetooth: hci4: Malformed HCI Event: 0x22 [ 600.126857][ T5146] usb 1-1: config 0 descriptor?? [ 600.308927][T14856] Cannot find add_set index 0 as target [ 600.391570][T14818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 600.424947][T14818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 600.446818][T14856] netdevsim netdevsim2: Direct firmware load for ng failed with error -2 [ 600.459659][T14856] netdevsim netdevsim2: Falling back to sysfs fallback for: ng [ 601.594889][ T5095] Bluetooth: hci3: command tx timeout [ 602.155389][ T5095] Bluetooth: hci4: command tx timeout [ 602.401524][ T4478] Bluetooth: hci2: Malformed HCI Event: 0x22 [ 602.651373][T14919] Cannot find add_set index 0 as target [ 602.773126][T14918] nbd3: detected capacity change from 0 to 22 [ 602.775031][ T5171] usb 1-1: USB disconnect, device number 33 [ 602.836047][T14919] netdevsim netdevsim1: Direct firmware load for ng failed with error -2 [ 602.855423][T14912] block nbd3: shutting down sockets [ 602.877036][T14919] netdevsim netdevsim1: Falling back to sysfs fallback for: ng [ 602.896026][ C0] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 602.905294][ C0] Buffer I/O error on dev nbd3, logical block 0, async page read [ 602.914392][T14671] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 602.973374][T14671] Buffer I/O error on dev nbd3, logical block 0, async page read [ 602.989412][T14671] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 603.000483][T14671] Buffer I/O error on dev nbd3, logical block 0, async page read [ 603.027774][T14671] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 603.047304][T14671] Buffer I/O error on dev nbd3, logical block 0, async page read [ 603.057733][T14671] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 603.072909][T14671] Buffer I/O error on dev nbd3, logical block 0, async page read [ 603.089063][T14671] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 603.102909][T14671] Buffer I/O error on dev nbd3, logical block 0, async page read [ 603.150620][T14671] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 603.187386][T14671] Buffer I/O error on dev nbd3, logical block 0, async page read [ 603.217916][T14671] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 603.258865][T14671] Buffer I/O error on dev nbd3, logical block 0, async page read [ 603.284245][T14671] ldm_validate_partition_table(): Disk read failed. [ 603.304958][T14671] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 603.335529][T14671] Buffer I/O error on dev nbd3, logical block 0, async page read [ 603.346869][T14671] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 603.361658][T14671] Buffer I/O error on dev nbd3, logical block 0, async page read [ 603.371449][T14671] Dev nbd3: unable to read RDB block 0 [ 603.381950][T14671] nbd3: unable to read partition table [ 603.389166][T14671] nbd3: partition table beyond EOD, truncated [ 603.457256][T14671] ldm_validate_partition_table(): Disk read failed. [ 603.504193][T14671] Dev nbd3: unable to read RDB block 0 [ 603.529881][T14671] nbd3: unable to read partition table [ 603.551693][T14671] nbd3: partition table beyond EOD, truncated [ 604.212223][T14938] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3468'. [ 604.295542][T14938] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3468'. [ 604.305171][T14938] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3468'. [ 604.473409][ T4478] Bluetooth: hci2: command tx timeout [ 605.553681][T14977] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3483'. [ 605.563282][T14977] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3483'. [ 605.594436][T14977] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3483'. [ 605.773042][ T5171] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 605.785546][T14989] mmap: syz.2.3489 (14989): VmData 37396480 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 605.997622][ T5171] usb 2-1: Using ep0 maxpacket: 32 [ 606.033304][ T5171] usb 2-1: New USB device found, idVendor=199e, idProduct=8102, bcdDevice=33.4f [ 606.042412][ T5171] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.093189][ T5171] usb 2-1: Product: syz [ 606.099612][ T5171] usb 2-1: Manufacturer: syz [ 606.110912][ T5171] usb 2-1: SerialNumber: syz [ 606.141502][ T5171] usb 2-1: config 0 descriptor?? [ 606.162262][T15005] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 606.400622][T14973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.406791][T15015] netlink: 'syz.3.3499': attribute type 29 has an invalid length. [ 606.435447][T14973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.449053][T15018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3501'. [ 606.824921][T15036] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 607.213486][T15048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3514'. [ 607.224483][T15046] program syz.3.3513 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 607.513003][ T4478] Bluetooth: hci2: command tx timeout [ 608.003919][T15074] input: syz1 as /devices/virtual/input/input42 [ 608.165068][ T5171] usb 2-1: USB disconnect, device number 27 [ 608.640491][T15086] program syz.0.3529 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 609.381078][T15106] program syz.2.3536 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 609.674074][T15112] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 610.087533][T15127] netlink: 'syz.2.3547': attribute type 3 has an invalid length. [ 610.117725][T15127] netlink: 'syz.2.3547': attribute type 4 has an invalid length. [ 610.136668][T15127] netlink: 'syz.2.3547': attribute type 7 has an invalid length. [ 610.156180][T15127] netlink: 'syz.2.3547': attribute type 8 has an invalid length. [ 610.166003][T15124] kvm: MONITOR instruction emulated as NOP! [ 610.175418][T15127] netlink: 'syz.2.3547': attribute type 7 has an invalid length. [ 610.195824][T15124] kvm_pr_unimpl_wrmsr: 12 callbacks suppressed [ 610.195838][T15124] kvm: kvm [15123]: vcpu0, guest rIP: 0x14b Unhandled WRMSR(0x11e) = 0x0 [ 610.218569][T15127] netlink: 198200 bytes leftover after parsing attributes in process `syz.2.3547'. [ 611.827152][T15148] netlink: 'syz.0.3554': attribute type 10 has an invalid length. [ 611.880784][T15148] macvlan0: entered promiscuous mode [ 611.889626][T15148] macvlan0: entered allmulticast mode [ 612.051032][T15148] veth1_vlan: entered allmulticast mode [ 612.079728][T15148] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 612.185514][T15156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3556'. [ 612.523132][ T5146] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 612.539681][T15171] syz.2.3564 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 612.619872][T15173] input: syz0 as /devices/virtual/input/input43 [ 612.714416][ T5146] usb 2-1: Using ep0 maxpacket: 32 [ 612.725506][ T29] audit: type=1326 audit(1720267900.896:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15174 comm="syz.4.3565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8771975bd9 code=0x7ffc0000 [ 612.746506][ T5146] usb 2-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=44.fe [ 612.767710][ T5146] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.809048][ T5146] usb 2-1: config 0 descriptor?? [ 612.815908][ T29] audit: type=1326 audit(1720267900.896:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15174 comm="syz.4.3565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8771975bd9 code=0x7ffc0000 [ 612.849644][ T5146] keyspan 2-1:0.0: Keyspan 1 port adapter converter detected [ 612.874358][ T5146] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 84 [ 612.896809][ T29] audit: type=1326 audit(1720267900.946:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15174 comm="syz.4.3565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8771975bd9 code=0x7ffc0000 [ 612.920834][ T5146] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 612.941150][ T5146] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 82 [ 612.959097][ T5146] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 612.970981][ T29] audit: type=1326 audit(1720267900.946:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15174 comm="syz.4.3565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8771975bd9 code=0x7ffc0000 [ 613.010284][ T5146] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 613.024734][ T5146] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 83 [ 613.047846][ T5146] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 3 [ 613.070210][ T29] audit: type=1326 audit(1720267900.946:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15174 comm="syz.4.3565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8771975bd9 code=0x7ffc0000 [ 613.142797][ T5146] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 613.201182][ T5146] usb 2-1: USB disconnect, device number 28 [ 613.210192][ T29] audit: type=1326 audit(1720267900.946:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15174 comm="syz.4.3565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f8771975bd9 code=0x7ffc0000 [ 613.231079][ T5146] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 613.289583][ T29] audit: type=1326 audit(1720267900.946:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15174 comm="syz.4.3565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8771975bd9 code=0x7ffc0000 [ 613.321984][T15185] netlink: 'syz.0.3570': attribute type 10 has an invalid length. [ 613.343890][ T5146] keyspan 2-1:0.0: device disconnected [ 613.391678][ T29] audit: type=1326 audit(1720267900.956:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15174 comm="syz.4.3565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f8771975bd9 code=0x7ffc0000 [ 613.415263][T15187] program syz.4.3571 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 613.416494][T15185] veth1_vlan: left allmulticast mode [ 613.496755][ T29] audit: type=1326 audit(1720267900.956:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15174 comm="syz.4.3565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8771975bd9 code=0x7ffc0000 [ 613.518961][T15191] dummy0: entered promiscuous mode [ 613.529169][T15191] vlan2: entered promiscuous mode [ 613.539155][T15191] vlan2: entered allmulticast mode [ 613.549333][T15191] dummy0: entered allmulticast mode [ 613.556026][ T29] audit: type=1326 audit(1720267900.956:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15174 comm="syz.4.3565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8771975bd9 code=0x7ffc0000 [ 613.593426][T15191] dummy0: left allmulticast mode [ 613.598579][T15191] dummy0: left promiscuous mode [ 613.698321][T15190] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3573'. [ 614.219788][T15219] netlink: 'syz.4.3585': attribute type 10 has an invalid length. [ 614.245323][T15219] macvlan0: entered promiscuous mode [ 614.260935][T15219] macvlan0: entered allmulticast mode [ 614.286525][T15219] veth1_vlan: entered allmulticast mode [ 614.293038][ T5172] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 614.330055][T15219] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 614.515248][ T5172] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 614.532563][ T5172] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 614.555842][ T5172] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 614.575183][ T5172] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.602979][ T5172] usb 3-1: Product: 喟 [ 614.611816][ T5172] usb 3-1: Manufacturer: 濂硅晪氅愁牆铯囏旊悰軎嗠棶榻斻棙餇曕爱釂ゅ菇鍩嶏姕瞠ｏ熅鐎奉飕庪１绐涰嵔榛辫顚忚饯愦撶妭璁鋲欕厭舛囨墯閭嗛暬顧傘婵囪晝閻嶍槪鈽搽皦搴欕灨琚班Ы澶傛啲鑺ｇ◥褰曤宫鏃熽箍軎囧銟赤願戯簨啵婄痪顗冮笓岈复餂藉摯s [ 614.647202][ T5172] usb 3-1: SerialNumber: 鎶≈ㄩ〖鞇尖儔隄Ж銠樮撿姫陘♀殐舛熷顕拌摷飱む迹榇娟殣鍎ы櫝趮飒楅笌顤 [ 614.783380][T15237] Cannot find add_set index 0 as target [ 614.973807][T15237] netdevsim netdevsim4: Direct firmware load for ng failed with error -2 [ 615.002631][T15237] netdevsim netdevsim4: Falling back to sysfs fallback for: ng [ 615.079227][ T5172] usb 3-1: 0:2 : does not exist [ 615.151889][ T5172] usb 3-1: USB disconnect, device number 40 [ 615.361462][T15249] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3593'. [ 615.434051][T14823] udevd[14823]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 615.980380][T15269] dummy0: entered promiscuous mode [ 615.999287][T15269] vlan2: entered promiscuous mode [ 616.022690][T15269] vlan2: entered allmulticast mode [ 616.047373][T15269] dummy0: entered allmulticast mode [ 616.087769][T15269] dummy0: left allmulticast mode [ 616.106987][T15269] dummy0: left promiscuous mode [ 616.296632][T15273] 9pnet: p9_errstr2errno: server reported unknown error 滄 [ 616.453017][ T5172] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 616.702980][ T5172] usb 5-1: Using ep0 maxpacket: 8 [ 616.893096][ T5172] usb 5-1: config 135 has an invalid interface number: 230 but max is 0 [ 616.905818][ T5172] usb 5-1: config 135 has an invalid descriptor of length 255, skipping remainder of the config [ 616.916489][ T5172] usb 5-1: config 135 has no interface number 0 [ 616.922771][ T5172] usb 5-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 617.030343][ T5172] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 617.057328][ T5172] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.085984][ T5172] usb 5-1: Product: syz [ 617.090237][ T5172] usb 5-1: Manufacturer: syz [ 617.129935][ T5172] usb 5-1: SerialNumber: syz [ 619.231908][ T2411] Bluetooth: (null): Invalid header checksum [ 619.347520][ T2411] Bluetooth: (null): Invalid header checksum [ 619.431314][ T2411] Bluetooth: (null): Invalid header checksum [ 619.528478][ T2411] Bluetooth: (null): Invalid header checksum [ 619.606601][ T2411] Bluetooth: (null): Invalid header checksum [ 619.736174][ T2411] Bluetooth: (null): Invalid header checksum [ 619.768185][ T2411] Bluetooth: (null): Invalid header checksum [ 619.778748][ T2411] Bluetooth: (null): Invalid header checksum [ 619.794953][ T2411] Bluetooth: (null): Invalid header checksum [ 619.844893][ T5521] Bluetooth: (null): Invalid header checksum [ 619.956748][ T5521] Bluetooth: (null): Invalid header checksum [ 620.063473][ T5521] Bluetooth: (null): Invalid header checksum [ 620.173909][ T2411] Bluetooth: (null): Invalid header checksum [ 620.304513][ T5521] Bluetooth: (null): Invalid header checksum [ 620.315109][ T45] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 620.393660][ T2411] Bluetooth: (null): Invalid header checksum [ 620.551473][ T2411] Bluetooth: (null): Invalid header checksum [ 620.733295][ T12] Bluetooth: (null): Invalid header checksum [ 620.742000][ T12] Bluetooth: (null): Invalid header checksum [ 622.310430][ T5095] Bluetooth: hci7: command 0x0406 tx timeout [ 622.346643][ T45] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 622.500752][ T45] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 622.560166][ T45] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 622.621953][ T8] usb 5-1: USB disconnect, device number 21 [ 622.636299][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.709132][ T45] usb 1-1: Product: 喟 [ 622.721419][ T45] usb 1-1: Manufacturer: 濂硅晪氅愁牆铯囏旊悰軎嗠棶榻斻棙餇曕爱釂ゅ菇鍩嶏姕瞠ｏ熅鐎奉飕庪１绐涰嵔榛辫顚忚饯愦撶妭璁鋲欕厭舛囨墯閭嗛暬顧傘婵囪晝閻嶍槪鈽搽皦搴欕灨琚班Ы澶傛啲鑺ｇ◥褰曤宫鏃熽箍軎囧銟赤願戯簨啵婄痪顗冮笓岈复餂藉摯s [ 622.825783][T15321] Process accounting resumed [ 622.830656][ T45] usb 1-1: SerialNumber: 鎶≈ㄩ〖鞇尖儔隄Ж銠樮撿姫陘♀殐舛熷顕拌摷飱む迹榇娟殣鍎ы櫝趮飒楅笌顤 [ 622.846786][ T5172] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 622.900046][ T5172] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 622.990096][ T5172] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz0] on syz1 [ 623.075912][ T5899] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 623.282996][ T5899] usb 3-1: Using ep0 maxpacket: 32 [ 623.303618][ T5899] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 623.337884][ T5899] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 623.383002][ T5899] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 623.392151][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.460526][ T5899] usb 3-1: config 0 descriptor?? [ 623.480251][ T5899] hub 3-1:0.0: USB hub found [ 623.696540][ T5899] hub 3-1:0.0: 1 port detected [ 623.782486][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 623.796462][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 623.827250][ T66] bond0 (unregistering): Released all slaves [ 623.893567][ T5899] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 623.900687][ T5899] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 623.949248][ T5899] usbhid 3-1:0.0: can't add hid device: -71 [ 624.022479][ T5899] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 624.030788][T15315] veth1: mtu less than device minimum [ 624.198656][ T45] usb 1-1: 0:2 : does not exist [ 624.224976][ T5899] usb 3-1: USB disconnect, device number 41 [ 624.301163][ T45] usb 1-1: USB disconnect, device number 34 [ 624.559937][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.667003][T14823] udevd[14823]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 624.695909][T15348] netlink: 'syz.0.3628': attribute type 309 has an invalid length. [ 624.975216][ T8] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 625.016331][ T8] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 625.070328][ T8] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz0] on syz1 [ 625.306245][ T66] hsr_slave_0: left promiscuous mode [ 625.316708][ T66] hsr_slave_1: left promiscuous mode [ 625.338516][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 625.354807][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 625.444665][ T66] veth1_macvtap: left promiscuous mode [ 625.464694][ T66] veth0_macvtap: left promiscuous mode [ 625.480586][ T66] veth1_vlan: left promiscuous mode [ 625.497803][ T66] veth0_vlan: left promiscuous mode [ 627.179597][ T66] team0 (unregistering): Port device team_slave_1 removed [ 627.261128][ T66] team0 (unregistering): Port device team_slave_0 removed [ 628.965422][T15419] netlink: 'syz.3.3653': attribute type 37 has an invalid length. [ 629.076797][T15419] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3653'. [ 629.241244][T15427] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3656'. [ 629.262423][T15430] netlink: 'syz.1.3657': attribute type 29 has an invalid length. [ 629.278027][T15430] netlink: 'syz.1.3657': attribute type 29 has an invalid length. [ 631.596148][T15459] netlink: del zone limit has 8 unknown bytes [ 632.591256][T15471] netlink: 'syz.2.3670': attribute type 37 has an invalid length. [ 632.707388][T15474] bridge0: entered promiscuous mode [ 632.735893][T15473] bridge0: left promiscuous mode [ 632.766287][T15471] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3670'. [ 633.317052][T15488] syz.4.3673: attempt to access beyond end of device [ 633.317052][T15488] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 633.329999][T15488] (syz.4.3673,15488,0):ocfs2_get_sector:1771 ERROR: status = -5 [ 633.338936][T15488] (syz.4.3673,15488,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 633.347308][T15488] (syz.4.3673,15488,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 633.357424][T15488] (syz.4.3673,15488,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 635.273675][T15528] netlink: 18 bytes leftover after parsing attributes in process `syz.3.3687'. [ 635.312945][T15528] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3687'. [ 635.486476][T15528] xt_bpf: check failed: parse error [ 635.643702][T15537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3689'. [ 635.663596][T15537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3689'. [ 636.302514][ T5146] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 636.564173][ T5146] usb 1-1: Using ep0 maxpacket: 8 [ 636.596932][ T5146] usb 1-1: New USB device found, idVendor=0424, idProduct=7800, bcdDevice=e9.41 [ 636.863113][ T5146] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.905298][ T5146] usb 1-1: config 0 descriptor?? [ 637.312933][ T5146] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 637.584235][ T5146] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 637.608263][ T5146] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 637.633017][ T5146] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 637.653315][ T5146] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.675984][ T5146] usb 4-1: config 0 descriptor?? [ 637.756926][T15576] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3704'. [ 637.793736][T15576] netlink: 'syz.1.3704': attribute type 12 has an invalid length. [ 637.852119][T15576] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 637.861381][T15576] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 637.870233][T15576] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 637.879050][T15576] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 637.921688][ T5899] usb 1-1: USB disconnect, device number 35 [ 637.934969][T15576] vxlan0: entered promiscuous mode [ 638.103882][ T5146] cm6533_jd 0003:0D8C:0022.0011: unknown main item tag 0x0 [ 638.127076][ T5146] cm6533_jd 0003:0D8C:0022.0011: unknown main item tag 0x0 [ 638.160176][ T5146] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0022.0011/input/input44 [ 638.169991][T15584] Cannot find add_set index 0 as target [ 638.200720][T15584] netdevsim netdevsim4: Direct firmware load for ng failed with error -2 [ 638.210179][T15584] netdevsim netdevsim4: Falling back to sysfs fallback for: ng [ 638.234682][ T5146] cm6533_jd 0003:0D8C:0022.0011: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 638.462353][ T5136] usb 4-1: USB disconnect, device number 26 [ 639.571681][ T4478] Bluetooth: hci2: Malformed HCI Event: 0x22 [ 639.778893][T15632] Cannot find add_set index 0 as target [ 639.900238][T15632] netdevsim netdevsim1: Direct firmware load for ng failed with error -2 [ 639.929335][T15632] netdevsim netdevsim1: Falling back to sysfs fallback for: ng [ 640.663066][ T45] usb 4-1: new low-speed USB device number 27 using dummy_hcd [ 640.923598][ T45] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 640.960162][ T45] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 641.003195][ T45] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 641.243347][ T45] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 641.252455][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.353074][T15676] syz.1.3746: attempt to access beyond end of device [ 641.353074][T15676] nbd1: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 641.367117][T15676] hfsplus: unable to find HFS+ superblock [ 641.930998][ T4478] Bluetooth: hci2: command tx timeout [ 641.993027][ T5146] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 642.122167][T15651] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 642.162504][ T45] hub 4-1:1.0: bad descriptor, ignoring hub [ 642.177900][ T45] hub 4-1:1.0: probe with driver hub failed with error -5 [ 642.186152][ T45] cdc_wdm 4-1:1.0: skipping garbage [ 642.191497][ T45] cdc_wdm 4-1:1.0: skipping garbage [ 642.213800][ T45] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 642.223589][ T5146] usb 5-1: Using ep0 maxpacket: 32 [ 642.231038][ T45] cdc_wdm 4-1:1.0: Unknown control protocol [ 642.236889][ T5146] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 642.263225][T15681] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3749'. [ 642.272042][ T5146] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 642.287365][T15681] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 642.299065][T15681] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 642.324522][T15681] netlink: 'syz.1.3749': attribute type 1 has an invalid length. [ 642.328145][ T5146] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 642.332463][T15681] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 642.402992][ T5146] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.477206][ T5146] usb 5-1: config 0 descriptor?? [ 642.505830][ T5146] hub 5-1:0.0: USB hub found [ 642.716798][ T5146] hub 5-1:0.0: 1 port detected [ 642.918998][ T5146] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 642.935348][ T5146] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 642.993916][ T5146] usbhid 5-1:0.0: can't add hid device: -71 [ 643.008935][ T5146] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 643.064416][ T5146] usb 5-1: USB disconnect, device number 22 [ 643.084331][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 643.091183][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 643.097494][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 643.104125][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 643.110477][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 643.117083][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 643.123432][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 643.130032][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 643.136300][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 643.142895][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 643.149234][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 643.155873][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 643.162158][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 643.168860][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 643.175155][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 643.181802][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 643.188117][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 643.194738][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 643.201089][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 643.207703][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 643.966822][T15712] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3762'. [ 643.980506][T15712] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 643.992070][T15712] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 644.080988][T15712] netlink: 'syz.0.3762': attribute type 1 has an invalid length. [ 644.113943][T15712] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 644.245415][ T5146] usb 4-1: USB disconnect, device number 27 [ 645.967543][T15752] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3778'. [ 646.013126][T15752] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 646.041997][T15752] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 646.056804][T15752] netlink: 'syz.2.3778': attribute type 1 has an invalid length. [ 646.098489][T15752] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 646.123440][ T5172] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 646.356495][ T5172] usb 5-1: string descriptor 0 read error: -22 [ 646.373594][ T5172] usb 5-1: New USB device found, idVendor=30c9, idProduct=0093, bcdDevice=18.c6 [ 646.388996][T15759] vlan2: entered promiscuous mode [ 646.395636][ T5172] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.404485][T15759] ip6gretap0: entered promiscuous mode [ 646.419748][ T5172] usb 5-1: config 0 descriptor?? [ 646.426880][T15759] ip6gretap0: left promiscuous mode [ 646.454300][ T5172] usb 5-1: Found UVC 0.00 device (30c9:0093) [ 646.471123][ T5172] usb 5-1: No valid video chain found. [ 646.833794][T15746] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3774'. [ 647.476182][ T45] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 647.697999][ T29] kauditd_printk_skb: 113 callbacks suppressed [ 647.698020][ T29] audit: type=1326 audit(1720267935.866:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15790 comm="syz.1.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d4d175bd9 code=0x7ffc0000 [ 647.728806][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 647.764962][ T45] usb 4-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=48.e9 [ 647.782265][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.794444][ T45] usb 4-1: Product: syz [ 647.798681][ T45] usb 4-1: Manufacturer: syz [ 647.805058][ T45] usb 4-1: SerialNumber: syz [ 647.807834][ T29] audit: type=1326 audit(1720267935.866:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15790 comm="syz.1.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d4d175bd9 code=0x7ffc0000 [ 647.812627][ T45] usb 4-1: config 0 descriptor?? [ 647.920936][ T29] audit: type=1326 audit(1720267935.876:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15790 comm="syz.1.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9d4d175bd9 code=0x7ffc0000 [ 647.979950][ T29] audit: type=1326 audit(1720267935.876:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15790 comm="syz.1.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d4d175bd9 code=0x7ffc0000 [ 648.002759][ T29] audit: type=1326 audit(1720267935.876:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15790 comm="syz.1.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d4d175bd9 code=0x7ffc0000 [ 648.025071][ T29] audit: type=1326 audit(1720267935.876:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15790 comm="syz.1.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d4d175bd9 code=0x7ffc0000 [ 648.090091][ T29] audit: type=1326 audit(1720267935.876:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15790 comm="syz.1.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d4d175bd9 code=0x7ffc0000 [ 648.176111][ T29] audit: type=1326 audit(1720267935.876:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15790 comm="syz.1.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d4d175bd9 code=0x7ffc0000 [ 648.176613][ T45] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 648.253794][ T29] audit: type=1326 audit(1720267935.876:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15790 comm="syz.1.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9d4d175bd9 code=0x7ffc0000 [ 648.324644][ T45] usb 4-1: USB disconnect, device number 28 [ 648.345245][ T29] audit: type=1326 audit(1720267935.936:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15790 comm="syz.1.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d4d175bd9 code=0x7ffc0000 [ 648.485880][T15803] netlink: 4580 bytes leftover after parsing attributes in process `syz.0.3800'. [ 648.521092][T15803] netlink: 4580 bytes leftover after parsing attributes in process `syz.0.3800'. [ 648.535686][T15803] netlink: 485 bytes leftover after parsing attributes in process `syz.0.3800'. [ 648.604747][T15075] udevd[15075]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 648.673378][ T5146] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 648.828005][ T5136] usb 5-1: USB disconnect, device number 23 [ 648.877949][ T5146] usb 3-1: Using ep0 maxpacket: 32 [ 648.901752][ T5146] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 648.922965][ T5146] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 648.952039][ T5146] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 648.984868][ T5146] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 649.016179][ T5146] usb 3-1: config 0 interface 0 has no altsetting 0 [ 649.038895][ T5146] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 649.069710][ T5146] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 649.105799][ T5146] usb 3-1: Product: syz [ 649.107139][T15821] input: syz0 as /devices/virtual/input/input45 [ 649.109997][ T5146] usb 3-1: Manufacturer: syz [ 649.110021][ T5146] usb 3-1: SerialNumber: syz [ 649.130414][ T5146] usb 3-1: config 0 descriptor?? [ 649.157862][ T5146] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 649.224198][ T5146] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 649.536235][ T5146] usb 3-1: USB disconnect, device number 42 [ 649.536282][ C0] ldusb 3-1:0.0: usb_submit_urb failed (-19) [ 649.564469][ T5146] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 649.792710][T15801] ldusb: No device or device unplugged -19 [ 650.907338][T15855] input: syz0 as /devices/virtual/input/input46 [ 650.992739][T14823] udevd[14823]: setting owner of /dev/input/js0 to uid=0, gid=104 failed: No such file or directory [ 651.237643][T15867] program syz.0.3828 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 651.772966][ T5146] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 652.623957][ T5146] usb 2-1: Using ep0 maxpacket: 32 [ 652.633451][ T5146] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 652.660531][ T5146] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 652.683569][ T5146] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 652.702653][T15895] input: syz0 as /devices/virtual/input/input47 [ 652.719677][ T5146] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 652.766995][ T5146] usb 2-1: config 0 interface 0 has no altsetting 0 [ 652.797529][ T5146] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 652.806910][ T5146] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 652.816095][ T5146] usb 2-1: Product: syz [ 652.820392][ T5146] usb 2-1: Manufacturer: syz [ 652.825285][ T5146] usb 2-1: SerialNumber: syz [ 652.845374][ T5146] usb 2-1: config 0 descriptor?? [ 652.872408][ T5146] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 652.919201][ T5146] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 652.958160][T15904] program syz.4.3841 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 653.002240][T15905] veth1: mtu less than device minimum [ 653.081157][T15905] Process accounting resumed [ 653.343462][ T5136] usb 2-1: USB disconnect, device number 29 [ 653.343533][ C0] ldusb 2-1:0.0: usb_submit_urb failed (-19) [ 653.393844][ T5136] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 654.508189][T15879] ldusb: No device or device unplugged -19 [ 655.239358][T15936] netlink: 'syz.2.3850': attribute type 4 has an invalid length. [ 655.367940][T15939] netlink: 'syz.2.3850': attribute type 4 has an invalid length. [ 655.676935][T15949] vlan2: entered promiscuous mode [ 655.688276][T15949] ip6gretap0: entered promiscuous mode [ 655.698157][T15949] ip6gretap0: left promiscuous mode [ 656.115030][T15961] netlink: 'syz.2.3860': attribute type 4 has an invalid length. [ 656.158281][ T29] kauditd_printk_skb: 99 callbacks suppressed [ 656.158302][ T29] audit: type=1326 audit(1720267944.326:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15959 comm="syz.2.3860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0713d75bd9 code=0x7ffc0000 [ 656.210721][T15961] netlink: 'syz.2.3860': attribute type 4 has an invalid length. [ 656.223749][ T29] audit: type=1326 audit(1720267944.326:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15959 comm="syz.2.3860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0713d75bd9 code=0x7ffc0000 [ 656.294980][ T29] audit: type=1326 audit(1720267944.366:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15959 comm="syz.2.3860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0713d75bd9 code=0x7ffc0000 [ 656.334640][ T29] audit: type=1326 audit(1720267944.366:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15959 comm="syz.2.3860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0713d75bd9 code=0x7ffc0000 [ 656.407695][ T29] audit: type=1326 audit(1720267944.366:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15959 comm="syz.2.3860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0713d75bd9 code=0x7ffc0000 [ 656.484857][ T29] audit: type=1326 audit(1720267944.366:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15959 comm="syz.2.3860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0713d75bd9 code=0x7ffc0000 [ 656.698019][ T29] audit: type=1326 audit(1720267944.366:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15959 comm="syz.2.3860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0713d75bd9 code=0x7ffc0000 [ 656.726525][ T29] audit: type=1326 audit(1720267944.366:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15959 comm="syz.2.3860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0713d75bd9 code=0x7ffc0000 [ 656.779700][ T29] audit: type=1326 audit(1720267944.376:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15959 comm="syz.2.3860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0713d75bd9 code=0x7ffc0000 [ 656.807265][ T29] audit: type=1326 audit(1720267944.376:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15959 comm="syz.2.3860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0713d75bd9 code=0x7ffc0000 [ 657.003071][ T5138] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 657.060061][T15988] netlink: 'syz.4.3871': attribute type 4 has an invalid length. [ 657.167119][T15990] netlink: 'syz.4.3871': attribute type 4 has an invalid length. [ 657.236016][ T5138] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 657.246516][ T5138] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 657.256839][ T5138] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 657.275947][ T5138] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 657.290553][ T5138] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 657.318654][ T5138] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 657.336397][ T5138] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 657.349904][ T5138] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 657.365910][ T5138] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 657.386688][ T5138] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 657.402305][ T5138] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 657.439453][ T5138] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 657.451294][ T5101] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 657.461863][ T5138] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 657.489572][ T5101] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 657.509129][ T5101] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 657.526711][ T5101] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 657.539164][ T5101] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 657.546840][ T5101] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 657.561764][ T5138] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 657.647150][ T5138] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 657.663393][ T5138] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 657.681518][ T5138] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 657.692523][ T5138] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 657.712915][ T5138] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 657.732924][ T5138] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.741903][ T5138] usb 1-1: Product: syz [ 657.746413][ T5138] usb 1-1: Manufacturer: syz [ 657.751238][ T5138] usb 1-1: SerialNumber: syz [ 657.801469][T15993] lo speed is unknown, defaulting to 1000 [ 657.983242][ T5138] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 36 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 658.243193][T15993] chnl_net:caif_netlink_parms(): no params data found [ 658.249662][ T5146] usb 1-1: USB disconnect, device number 36 [ 658.296485][T15977] usblp0: removed [ 658.504698][T15993] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.512065][T15993] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.524975][T15993] bridge_slave_0: entered allmulticast mode [ 658.534632][T15993] bridge_slave_0: entered promiscuous mode [ 658.558129][T15993] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.565821][T15993] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.573900][T15993] bridge_slave_1: entered allmulticast mode [ 658.582026][T15993] bridge_slave_1: entered promiscuous mode [ 658.698839][T15993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 658.726851][T15993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 658.879211][T15993] team0: Port device team_slave_0 added [ 658.927611][T15993] team0: Port device team_slave_1 added [ 659.099116][T15993] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 659.116074][T15993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 659.144816][T15993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 659.238182][T16038] netlink: 'syz.1.3886': attribute type 4 has an invalid length. [ 659.329038][T15993] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 659.355025][T15993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 659.454126][T15993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 659.683009][ T5101] Bluetooth: hci9: command tx timeout [ 659.738123][T15993] hsr_slave_0: entered promiscuous mode [ 659.748985][T15993] hsr_slave_1: entered promiscuous mode [ 659.765135][T16056] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3891'. [ 659.781819][T15993] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 659.808293][T15993] Cannot create hsr debugfs directory [ 660.316721][T15993] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.553309][ T5136] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 660.615906][T15993] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.764598][ T5136] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 660.781952][ T5136] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 660.784922][T15993] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.791911][ T5136] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 660.831408][ T5136] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 660.841505][ T5136] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 660.865516][ T5136] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 660.882211][ T5136] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 660.892230][ T5136] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 660.902068][ T5136] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 660.936202][ T5136] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 660.955777][ T5136] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 660.982013][ T5136] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 661.002022][T15993] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.015396][ T5136] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 661.033692][ T30] INFO: task syz.0.2871:13167 blocked for more than 143 seconds. [ 661.042739][ T5136] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 661.046072][ T30] Not tainted 6.10.0-rc6-syzkaller-00212-g1dd28064d416 #0 [ 661.063240][ T5136] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 661.065691][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 661.107027][ T30] task:syz.0.2871 state:D stack:26704 pid:13167 tgid:13165 ppid:10304 flags:0x00000004 [ 661.119669][ T30] Call Trace: [ 661.124619][ T5136] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 661.125698][ T30] [ 661.141477][ T5136] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 661.145802][ T30] __schedule+0x1796/0x49d0 [ 661.162994][ T5136] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 661.164076][ T30] ? __pfx___schedule+0x10/0x10 [ 661.181852][ T30] ? __pfx_lock_release+0x10/0x10 [ 661.189974][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 661.200408][ T30] ? schedule+0x90/0x320 [ 661.204932][ T30] schedule+0x14b/0x320 [ 661.207310][ T5136] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 661.210816][ T30] schedule_preempt_disabled+0x13/0x30 [ 661.222301][ T5136] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.225826][ T30] __mutex_lock+0x6a4/0xd70 [ 661.237417][ T30] ? __mutex_lock+0x527/0xd70 [ 661.244004][ T30] ? nfsd_shutdown_threads+0x4e/0xd0 [ 661.244119][ T5136] usb 4-1: Product: syz [ 661.250043][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 661.258920][ T30] ? net_generic+0x1f/0x240 [ 661.262918][ T5136] usb 4-1: Manufacturer: syz [ 661.264707][ T30] nfsd_shutdown_threads+0x4e/0xd0 [ 661.270466][ T5136] usb 4-1: SerialNumber: syz [ 661.274248][ T30] nfsd_umount+0x43/0xd0 [ 661.285641][ T30] deactivate_locked_super+0xc4/0x130 [ 661.294679][ T30] put_fs_context+0x94/0x780 [ 661.300043][ T30] fscontext_release+0x65/0x80 [ 661.308820][ T30] ? __pfx_fscontext_release+0x10/0x10 [ 661.314963][ T30] __fput+0x24a/0x8a0 [ 661.319586][ T30] task_work_run+0x24f/0x310 [ 661.325745][ T30] ? __pfx_task_work_run+0x10/0x10 [ 661.332024][ T30] ? syscall_exit_to_user_mode+0xa3/0x360 [ 661.339697][ T30] syscall_exit_to_user_mode+0x168/0x360 [ 661.346734][ T30] do_syscall_64+0x100/0x230 [ 661.352329][ T30] ? clear_bhb_loop+0x35/0x90 [ 661.357405][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.365284][T16078] netlink: 'syz.0.3900': attribute type 4 has an invalid length. [ 661.383598][ T30] RIP: 0033:0x7f11fe775bd9 [ 661.389158][ T30] RSP: 002b:00007f11ff494048 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 661.400209][ T30] RAX: 0000000000000000 RBX: 00007f11fe903f60 RCX: 00007f11fe775bd9 [ 661.408514][ T30] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 661.419928][ T30] RBP: 00007f11fe7e4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 661.428168][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 661.436554][ T30] R13: 000000000000000b R14: 00007f11fe903f60 R15: 00007ffc04bba328 [ 661.446028][ T30] [ 661.450063][ T30] [ 661.450063][ T30] Showing all locks held in the system: [ 661.505563][ T30] 1 lock held by khungtaskd/30: [ 661.522373][ T30] #0: ffffffff8e333f20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 661.537617][ T5136] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 29 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 661.554547][ T30] 3 locks held by kworker/u8:4/66: [ 661.559873][ T30] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 661.612218][ T30] #1: ffffc900020afd00 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 661.643823][ T30] #2: ffffffff8e3391c0 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x4c/0x530 [ 661.663904][ T30] 4 locks held by udevd/4534: [ 661.668875][ T30] #0: ffff88805a0fdd58 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xb7/0xd60 [ 661.679600][ T30] #1: ffff88806542ec88 (&of->mutex#2){+.+.}-{3:3}, at: kernfs_seq_start+0x53/0x3b0 [ 661.689535][ T30] #2: ffff88805af532d8 (kn->active#5){++++}-{0:0}, at: kernfs_seq_start+0x72/0x3b0 [ 661.711127][ T30] #3: ffff8880686c90e8 (&dev->mutex){....}-{3:3}, at: uevent_show+0x17d/0x340 [ 661.715640][T15993] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 661.725403][ T30] 2 locks held by getty/4842: [ 661.742039][ T30] #0: ffff88802f9d10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 661.756298][ T4478] Bluetooth: hci9: command tx timeout [ 661.769988][ T30] #1: ffffc9000312b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 661.780576][ T30] 3 locks held by kworker/u9:10/5101: [ 661.787223][ T30] #0: ffff88802e1fa148 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 661.798376][ T30] #1: ffffc90003827d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 661.817250][ T30] #2: ffff888020eb4d88 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 661.827529][ T30] 2 locks held by syz.4.2691/12623: [ 661.837504][ T30] #0: ffffffff8f63ad70 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 661.850277][ T5136] usb 4-1: USB disconnect, device number 29 [ 661.850451][ T30] #1: ffffffff8e5fff48 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nl_listener_set_doit+0x12d/0x1a90 [ 661.866849][ T30] 2 locks held by syz.0.2871/13167: [ 661.872298][ T30] #0: ffff88804e1920e0 (&type->s_umount_key#77){++++}-{3:3}, at: deactivate_super+0xb5/0xf0 [ 661.886579][ T30] #1: ffffffff8e5fff48 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_shutdown_threads+0x4e/0xd0 [ 661.897964][ T30] 1 lock held by udevd/14823: [ 661.898133][T16066] usblp0: removed [ 661.923000][ T30] 2 locks held by syz-executor/15993: [ 661.928829][ T30] #0: ffffffff8f5d4908 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180 [ 661.942888][ T30] #1: ffffffff8e3392f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 661.962857][ T30] 1 lock held by syz.4.3895/16063: [ 661.968041][ T30] #0: ffff88804e1920e0 (&type->s_umount_key#77){++++}-{3:3}, at: super_lock+0x27c/0x400 [ 661.982857][ T30] 4 locks held by kvm-nx-lpage-re/16077: [ 661.988541][ T30] #0: ffffffff8e361f28 (cgroup_mutex){+.+.}-{3:3}, at: cgroup_attach_task_all+0x27/0xe0 [ 662.012142][ T30] #1: ffffffff8e1ce5b0 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_attach_lock+0x11/0x40 [ 662.022225][ T30] #2: ffffffff8e362110 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: cgroup_attach_task_all+0x31/0xe0 [ 662.033712][ T30] #3: ffffffff8e3392f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 662.045928][ T30] [ 662.048366][ T30] ============================================= [ 662.048366][ T30] [ 662.055370][T15993] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 662.057797][ T30] NMI backtrace for cpu 1 [ 662.067886][ T30] CPU: 1 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc6-syzkaller-00212-g1dd28064d416 #0 [ 662.077916][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 662.088017][ T30] Call Trace: [ 662.091363][ T30] [ 662.094365][ T30] dump_stack_lvl+0x241/0x360 [ 662.099110][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 662.104350][ T30] ? __pfx__printk+0x10/0x10 [ 662.108983][ T30] ? vprintk_emit+0x631/0x770 [ 662.113717][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 662.118893][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 662.123978][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 662.129480][ T30] ? _printk+0xd5/0x120 [ 662.133679][ T30] ? __pfx__printk+0x10/0x10 [ 662.138305][ T30] ? __wake_up_klogd+0xcc/0x110 [ 662.143197][ T30] ? __pfx__printk+0x10/0x10 [ 662.148015][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 662.153113][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 662.159117][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 662.165155][ T30] watchdog+0xfde/0x1020 [ 662.169415][ T30] ? watchdog+0x1ea/0x1020 [ 662.173856][ T30] ? __pfx_watchdog+0x10/0x10 [ 662.178551][ T30] kthread+0x2f0/0x390 [ 662.182633][ T30] ? __pfx_watchdog+0x10/0x10 [ 662.187337][ T30] ? __pfx_kthread+0x10/0x10 [ 662.192036][ T30] ret_from_fork+0x4b/0x80 [ 662.196642][ T30] ? __pfx_kthread+0x10/0x10 [ 662.201252][ T30] ret_from_fork_asm+0x1a/0x30 [ 662.206073][ T30] [ 662.211377][ T30] Sending NMI from CPU 1 to CPUs 0: [ 662.217761][ C0] NMI backtrace for cpu 0 [ 662.217775][ C0] CPU: 0 PID: 1109 Comm: kworker/u8:6 Not tainted 6.10.0-rc6-syzkaller-00212-g1dd28064d416 #0 [ 662.217795][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 662.217807][ C0] Workqueue: writeback wb_workfn (flush-8:0) [ 662.217835][ C0] RIP: 0010:bio_add_page+0xb7/0x840 [ 662.217859][ C0] Code: 05 00 00 8b 5d 00 45 89 f4 41 f7 d4 89 df 44 89 e6 e8 dd 6f 11 fd 44 39 e3 76 0a e8 13 6e 11 fd e9 20 04 00 00 48 89 6c 24 28 <49> 8d 5f 70 48 89 d8 48 c1 e8 03 48 89 44 24 30 42 0f b6 04 28 84 [ 662.217874][ C0] RSP: 0018:ffffc900045ce610 EFLAGS: 00000213 [ 662.217888][ C0] RAX: 0000000000000000 RBX: 000000000000a000 RCX: ffff888022311e00 [ 662.217900][ C0] RDX: ffff888022311e00 RSI: 00000000ffffefff RDI: 000000000000a000 [ 662.217912][ C0] RBP: ffff88802eb37a28 R08: ffffffff8484b8a3 R09: 1ffffd4000090b30 [ 662.217926][ C0] R10: dffffc0000000000 R11: fffff94000090b31 R12: 00000000ffffefff [ 662.217939][ C0] R13: dffffc0000000000 R14: 0000000000001000 R15: ffff88802eb37a00 [ 662.217953][ C0] FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 662.217967][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 662.217980][ C0] CR2: 0000001b30e11ff8 CR3: 000000000e132000 CR4: 00000000003526f0 [ 662.217995][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 662.218006][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 662.218017][ C0] Call Trace: [ 662.218024][ C0] [ 662.218032][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 662.218053][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 662.218080][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 662.218099][ C0] ? nmi_handle+0x2a/0x5a0 [ 662.218134][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 662.218154][ C0] ? nmi_handle+0x14f/0x5a0 [ 662.218179][ C0] ? nmi_handle+0x2a/0x5a0 [ 662.218205][ C0] ? bio_add_page+0xb7/0x840 [ 662.218223][ C0] ? default_do_nmi+0x63/0x160 [ 662.218244][ C0] ? exc_nmi+0x123/0x1f0 [ 662.218262][ C0] ? end_repeat_nmi+0xf/0x53 [ 662.218291][ C0] ? bio_add_page+0xa3/0x840 [ 662.218311][ C0] ? bio_add_page+0xb7/0x840 [ 662.218331][ C0] ? bio_add_page+0xb7/0x840 [ 662.218351][ C0] ? bio_add_page+0xb7/0x840 [ 662.218371][ C0] [ 662.218376][ C0] [ 662.218383][ C0] ? __lruvec_stat_mod_folio+0x7d/0x300 [ 662.218411][ C0] ? folio_clear_dirty_for_io+0x25a/0xcf0 [ 662.218438][ C0] bio_add_folio+0x52/0x80 [ 662.218459][ C0] ext4_bio_write_folio+0x1691/0x1da0 [ 662.218493][ C0] mpage_submit_folio+0x1af/0x230 [ 662.218523][ C0] mpage_process_page_bufs+0x6c9/0x8d0 [ 662.218547][ C0] mpage_prepare_extent_to_map+0xec7/0x1c80 [ 662.218574][ C0] ? kasan_save_track+0x51/0x80 [ 662.218599][ C0] ? kasan_save_track+0x3f/0x80 [ 662.218636][ C0] ? __pfx_mpage_prepare_extent_to_map+0x10/0x10 [ 662.218680][ C0] ? ext4_init_io_end+0x29/0x130 [ 662.218700][ C0] ? rcu_is_watching+0x15/0xb0 [ 662.218721][ C0] ? ext4_init_io_end+0x29/0x130 [ 662.218742][ C0] ? kmem_cache_alloc_noprof+0x185/0x2a0 [ 662.218769][ C0] ext4_do_writepages+0xc52/0x3d40 [ 662.218797][ C0] ? cfg80211_inform_bss_data+0x3dd/0x5a70 [ 662.218820][ C0] ? ieee80211_iface_work+0x8a3/0xf10 [ 662.218865][ C0] ? __pfx_ext4_do_writepages+0x10/0x10 [ 662.218906][ C0] ? rcu_read_lock_any_held+0xb7/0x160 [ 662.218937][ C0] ext4_writepages+0x213/0x3c0 [ 662.218955][ C0] ? __pfx_ext4_writepages+0x10/0x10 [ 662.218979][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 662.219007][ C0] ? __pfx_ext4_writepages+0x10/0x10 [ 662.219024][ C0] do_writepages+0x359/0x870 [ 662.219051][ C0] ? __pfx_do_writepages+0x10/0x10 [ 662.219084][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 662.219102][ C0] ? writeback_sb_inodes+0x5ea/0x1380 [ 662.219124][ C0] ? __pfx_lock_release+0x10/0x10 [ 662.219141][ C0] ? do_raw_spin_lock+0x14f/0x370 [ 662.219171][ C0] __writeback_single_inode+0x165/0x10b0 [ 662.219197][ C0] writeback_sb_inodes+0x99c/0x1380 [ 662.219219][ C0] ? mark_lock+0x9a/0x350 [ 662.219256][ C0] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 662.219303][ C0] ? __pfx_down_read_trylock+0x10/0x10 [ 662.219327][ C0] ? __pfx_move_expired_inodes+0x10/0x10 [ 662.219350][ C0] ? do_raw_spin_lock+0x14f/0x370 [ 662.219380][ C0] __writeback_inodes_wb+0x11b/0x260 [ 662.219407][ C0] wb_writeback+0x495/0xd40 [ 662.219433][ C0] ? queue_io+0x3b1/0x5a0 [ 662.219459][ C0] ? __pfx_wb_writeback+0x10/0x10 [ 662.219480][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 662.219510][ C0] wb_workfn+0xba1/0x1090 [ 662.219539][ C0] ? __pfx_wb_workfn+0x10/0x10 [ 662.219564][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 662.219584][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 662.219609][ C0] ? process_scheduled_works+0x945/0x1830 [ 662.219626][ C0] process_scheduled_works+0xa2c/0x1830 [ 662.219661][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 662.219684][ C0] ? assign_work+0x364/0x3d0 [ 662.219704][ C0] worker_thread+0x86d/0xd50 [ 662.219731][ C0] ? __kthread_parkme+0x169/0x1d0 [ 662.219752][ C0] ? __pfx_worker_thread+0x10/0x10 [ 662.219771][ C0] kthread+0x2f0/0x390 [ 662.219791][ C0] ? __pfx_worker_thread+0x10/0x10 [ 662.219809][ C0] ? __pfx_kthread+0x10/0x10 [ 662.219840][ C0] ret_from_fork+0x4b/0x80 [ 662.219863][ C0] ? __pfx_kthread+0x10/0x10 [ 662.219883][ C0] ret_from_fork_asm+0x1a/0x30 [ 662.219917][ C0] [ 662.230611][T15993] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 662.262953][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 662.262976][ T30] CPU: 1 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc6-syzkaller-00212-g1dd28064d416 #0 [ 662.263007][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 662.263022][ T30] Call Trace: [ 662.263033][ T30] [ 662.263044][ T30] dump_stack_lvl+0x241/0x360 [ 662.263090][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 662.263126][ T30] ? __pfx__printk+0x10/0x10 [ 662.263156][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 662.263194][ T30] ? vscnprintf+0x5d/0x90 [ 662.263223][ T30] panic+0x349/0x860 [ 662.263257][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 662.263286][ T30] ? __pfx_panic+0x10/0x10 [ 662.263322][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 662.263356][ T30] ? __irq_work_queue_local+0x137/0x410 [ 662.263383][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 662.263408][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 662.263438][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 662.263469][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 662.263499][ T30] watchdog+0x101d/0x1020 [ 662.263528][ T30] ? watchdog+0x1ea/0x1020 [ 662.263561][ T30] ? __pfx_watchdog+0x10/0x10 [ 662.263586][ T30] kthread+0x2f0/0x390 [ 662.263615][ T30] ? __pfx_watchdog+0x10/0x10 [ 662.263640][ T30] ? __pfx_kthread+0x10/0x10 [ 662.263673][ T30] ret_from_fork+0x4b/0x80 [ 662.263705][ T30] ? __pfx_kthread+0x10/0x10 [ 662.263734][ T30] ret_from_fork_asm+0x1a/0x30 [ 662.263782][ T30] [ 662.279615][ T30] Kernel Offset: disabled