last executing test programs: 3m21.479161795s ago: executing program 4 (id=15280): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='map_files\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000280)=ANY=[@ANYBLOB='-', @ANYRESDEC], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000000), 0x2, 0x0) 3m21.339213957s ago: executing program 4 (id=15281): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x7, @local, 0xb}, 0x20) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f00000024c0)={0xa, 0x7, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8}, 0x20) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x51, @dev={0xfe, 0x80, '\x00', 0xd}, 0x0, 0x1}, 0x20) 3m21.061641241s ago: executing program 4 (id=15285): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000500)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000300)=""/91, 0x65, 0x0, 0x100000, 0x8c, 0x83, 0x10000801}}, 0xfd4a) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) writev(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)="0e000000", 0x4}, {&(0x7f00000006c0), 0x1000000}], 0x2) 3m20.49336246s ago: executing program 4 (id=15289): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) 3m19.490269997s ago: executing program 4 (id=15292): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000000)={0x48, 0x2, r1}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000000)={0x48}) 3m16.840383194s ago: executing program 4 (id=15310): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) mremap(&(0x7f00003ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) r0 = io_uring_setup(0x7a58, &(0x7f0000000080)={0x0, 0xc95e, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x1ef6e3}], 0x100000000000011a) 3m15.916450054s ago: executing program 32 (id=15310): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) mremap(&(0x7f00003ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) r0 = io_uring_setup(0x7a58, &(0x7f0000000080)={0x0, 0xc95e, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x1ef6e3}], 0x100000000000011a) 1m36.1835266s ago: executing program 0 (id=16048): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000}) lseek(r2, 0x5, 0x2) 1m35.930031694s ago: executing program 0 (id=16051): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0xff, 0x0, 0x7fff0026}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40007ff}}, 0x0, 0x0, 0x16, 0x0, "0af5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d1408407e5a774ef95f2fc1b947e00f000000123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}}}, 0x0, 0x0, 0x11, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb4285bf274bca67efbff2fdf98328de9434031348589bf28046d14810000000e3ffffff00"}, 0xd8) close_range(r0, 0xffffffffffffffff, 0x0) 1m35.762605639s ago: executing program 0 (id=16054): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000400)="cd", 0x1, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x6}, 0x8) 1m35.530146092s ago: executing program 0 (id=16056): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x20d036, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x104000, 0x0) 1m35.30540955s ago: executing program 0 (id=16059): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x3c, 0x0, "bb02a3c364ca41d6357e544508474004000b42a201ecffffffffffffff8a0e2f964e0000c534a632ab6193fcf19b2df3ee0500faa4ff1f56c54dc46d8b6d2ccd00a0cf0a007bbe00"}, 0xd8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f5"], 0x78) 1m34.985605903s ago: executing program 0 (id=16062): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r0, &(0x7f0000000080)=@id={0x1e, 0x3, 0x2, {0x4e24}}, 0x10) bind$tipc(r0, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x20001) 1m34.242749767s ago: executing program 33 (id=16062): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r0, &(0x7f0000000080)=@id={0x1e, 0x3, 0x2, {0x4e24}}, 0x10) bind$tipc(r0, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x20001) 53.170194319s ago: executing program 1 (id=16321): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000440)={r3, 0x7}, &(0x7f0000000480)=0x8) 53.031594763s ago: executing program 1 (id=16323): r0 = io_uring_setup(0x10d7, &(0x7f00000000c0)={0x0, 0xbfff, 0x1, 0x2, 0x1f}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) accept(r1, 0x0, 0x0) 52.007307397s ago: executing program 1 (id=16332): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) tee(r1, r2, 0x1, 0x0) 51.771739424s ago: executing program 1 (id=16335): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x8) 51.646622598s ago: executing program 1 (id=16338): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f0000000200)='m', 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r2, &(0x7f0000000200), 0x0) 50.93122523s ago: executing program 1 (id=16343): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee38", 0x14}], 0x2}], 0x1, 0x40800) recvmsg$can_bcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000680)=""/112, 0x70}], 0x1}, 0x10150) 50.405998826s ago: executing program 34 (id=16343): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee38", 0x14}], 0x2}], 0x1, 0x40800) recvmsg$can_bcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000680)=""/112, 0x70}], 0x1}, 0x10150) 6.517877395s ago: executing program 2 (id=16679): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) 5.416238783s ago: executing program 5 (id=16686): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, r2, 0x308c3, 0xc4a48b7f26be2e0b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast2}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e23}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmmsg$inet(r0, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 4.738324776s ago: executing program 5 (id=16691): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x830, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="364c000004"], 0x48) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.403987934s ago: executing program 5 (id=16696): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x30c3f000) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x1, 0x1, 0x4}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f0000019200)) 4.166351315s ago: executing program 2 (id=16698): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0x7, 0x20002f7}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8c, 0x0, @local, @mcast1, 0x80, 0x0, 0x0, 0x20000000}}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.882128726s ago: executing program 2 (id=16701): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) read$alg(r1, &(0x7f0000002300)=""/4128, 0x1020) sendmmsg$alg(r1, &(0x7f0000007e40)=[{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f00000002c0)="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", 0xffc}, {&(0x7f00000000c0)="4789d3aefc", 0x5}], 0x2, 0x0, 0x0, 0x20000000}], 0x1, 0x20040894) 3.772505754s ago: executing program 5 (id=16702): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', r0, &(0x7f0000000300)='./file0\x00', 0x41) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x220) 3.49471384s ago: executing program 5 (id=16705): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) r1 = dup(r0) io_setup(0xd, &(0x7f0000000100)=0x0) io_submit(r2, 0x3, &(0x7f0000001840)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x8, r0, 0x0, 0x0, 0xc1b8, 0x0, 0x0, r0}, 0x0, 0x0]) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) 3.365955084s ago: executing program 3 (id=16707): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0xa8140180, 0x0, 0x0, 0x0, 0x0, 0x0) io_submit(r1, 0xf3, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r0, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) 3.197462119s ago: executing program 6 (id=16709): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2f, 0x0, {{@in6=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@rand_addr=0x64010101, 0xfffffffc, 0x3c}, 0x2, @in=@local, 0x6, 0x4, 0x3, 0x0, 0x401}]}]}, 0xfc}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x9, @loopback, 0xfffffffd}, 0x1c) 3.037165534s ago: executing program 5 (id=16710): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x80000001, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x3}, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0xffa9, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r1, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) recvmmsg(r0, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}, 0xffff}], 0x1, 0x0, 0x0) 2.973751674s ago: executing program 6 (id=16712): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002ec0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, 0x0, 0xc0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)=0x1) 2.318545533s ago: executing program 35 (id=16710): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x80000001, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x3}, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0xffa9, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r1, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) recvmmsg(r0, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}, 0xffff}], 0x1, 0x0, 0x0) 2.2759036s ago: executing program 6 (id=16714): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x100, 0xac}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x80000000}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) 2.274636441s ago: executing program 2 (id=16715): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080), 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) 2.271457257s ago: executing program 3 (id=16716): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='A', 0x28}], 0x1}}], 0x1, 0x0) 2.21197254s ago: executing program 7 (id=16717): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote, 0x0, 0x2, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') read$FUSE(r1, &(0x7f0000004100)={0x2020}, 0x2020) read$nci(r1, &(0x7f0000000b80)=""/4096, 0x1000) 2.164165125s ago: executing program 3 (id=16718): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/57, 0x39}], 0x1}, 0x40012160) 2.048383952s ago: executing program 6 (id=16719): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r1, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2022, &(0x7f0000002340)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ftruncate(r2, 0xf4ff) close_range(r0, 0xffffffffffffffff, 0x0) 1.954628902s ago: executing program 3 (id=16720): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x523, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@gettfilter={0x23, 0x2e, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xc, 0xc}, {0x0, 0xfff1}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4041080) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.953564948s ago: executing program 7 (id=16721): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff, 0x4}}, 0x18) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1, 0x2, {0x2, 0xff, 0x3}}, 0x18) 1.642004226s ago: executing program 6 (id=16722): syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x8, 0x10, 0x1, "", [{{0x9, 0x4, 0x0, 0x40, 0x2, 0x7, 0x1, 0x3, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x5, 0x4, 0x1a}}}}}]}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x40085503, &(0x7f00000000c0)=0x18) 1.435854223s ago: executing program 7 (id=16723): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r1 = epoll_create(0x7e2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x1}) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40) 1.186954023s ago: executing program 3 (id=16724): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="beef915d564c90c200"/24, 0x18) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000004180), 0xff77) recvmmsg(r1, &(0x7f0000007200)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000140)=""/25, 0x19}], 0x1}, 0x9}, {{0x0, 0x0, &(0x7f0000003100)=[{&(0x7f00000018c0)=""/55, 0x37}], 0x1}, 0x40}], 0x2, 0x73, 0x0) 1.075053162s ago: executing program 7 (id=16725): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x20}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @loopback, 0x5, 0x0, 0x6, 0x500, 0xcbb0, 0x80100105, r2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newlink={0x48, 0x10, 0x401, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40018}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @private2}]}}}]}, 0x48}}, 0x0) 830.260826ms ago: executing program 3 (id=16726): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}}) lgetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=ANY=[@ANYRESHEX=0x0], 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000004280)={0x50, 0x0, 0x1000000000, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000006300)="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", 0x2000, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x18, 0x0, 0xa, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 637.204279ms ago: executing program 7 (id=16727): socket$rds(0x15, 0x5, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x4, {{@in6=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x2, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x2, 0x2b}, 0xa, @in6=@empty, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 538.721507ms ago: executing program 6 (id=16728): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r0, 0x400, 0x1) open$dir(&(0x7f0000000080)='./file1\x00', 0x8000, 0x30) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/locks\x00', 0x0, 0x0) pread64(r1, &(0x7f0000001440)=""/114, 0x72, 0x101) 182.043047ms ago: executing program 2 (id=16729): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/4\x00') read$FUSE(r1, &(0x7f0000002a40)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setuid(r2) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, 0x0) 38.380923ms ago: executing program 7 (id=16730): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x10, 0x1, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x87}, {0x6, 0x24, 0x1a, 0x0, 0x9}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x4, 0x0, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x20}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 0s ago: executing program 2 (id=16731): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000002d) r1 = getpgid(0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000100)={0x2, r1}) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x4) kernel console output (not intermixed with test programs): dequeue, screwing up backlog [ 1415.289645][ T993] usb 1-1: USB disconnect, device number 109 [ 1416.778577][ T7641] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15429'. [ 1416.823960][ T7641] veth1_vlan (unregistering): left allmulticast mode [ 1416.847234][ T7641] tipc: Disabling bearer [ 1416.930333][ T5265] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1417.247142][ T7649] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1417.478637][ T7655] netlink: 48 bytes leftover after parsing attributes in process `syz.3.15435'. [ 1417.585784][ T7660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1417.599484][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1417.977677][ T7672] veth0: entered promiscuous mode [ 1418.018341][ T7672] veth0: left promiscuous mode [ 1418.520922][ T993] usb 1-1: new full-speed USB device number 110 using dummy_hcd [ 1418.688781][ T993] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1418.710928][ T993] usb 1-1: not running at top speed; connect to a high speed hub [ 1418.735672][ T993] usb 1-1: New USB device found, idVendor=0582, idProduct=009a, bcdDevice= 0.40 [ 1418.757603][ T993] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1418.767520][ T5682] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1418.788959][ T993] usb 1-1: Product: syz [ 1418.799876][ T993] usb 1-1: Manufacturer: syz [ 1418.812182][ T993] usb 1-1: SerialNumber: syz [ 1418.855443][T21006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1418.942275][ T5682] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1418.963045][ T5682] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1418.986807][ T5682] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1419.024540][ T5682] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1419.062515][ T5682] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1419.083684][ T993] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1419.104665][ T993] usb 1-1: unit 1 not found! [ 1419.114669][ T5682] usb 4-1: config 0 descriptor?? [ 1419.128472][ T993] usb 1-1: unit 237 not found! [ 1419.294951][ T993] usb 1-1: USB disconnect, device number 110 [ 1419.437822][ T7696] netlink: 14 bytes leftover after parsing attributes in process `syz.5.15453'. [ 1419.449026][ T6064] udevd[6064]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1419.638709][ T5682] plantronics 0003:047F:FFFF.007A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1419.914397][T26571] usb 4-1: USB disconnect, device number 8 [ 1420.124155][ T5280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1420.133500][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1420.409934][ T5682] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 1420.590602][ T5682] usb 1-1: Using ep0 maxpacket: 16 [ 1420.634257][ T5682] usb 1-1: config 243 has an invalid interface number: 64 but max is 3 [ 1420.682236][ T5682] usb 1-1: config 243 has an invalid interface number: 64 but max is 3 [ 1420.727421][ T5682] usb 1-1: config 243 has an invalid interface number: 156 but max is 3 [ 1420.771877][ T5280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1420.773790][ T5682] usb 1-1: config 243 has an invalid interface number: 113 but max is 3 [ 1420.806972][ T5682] usb 1-1: config 243 has 3 interfaces, different from the descriptor's value: 4 [ 1420.818819][ T5682] usb 1-1: config 243 has no interface number 0 [ 1420.827904][ T5682] usb 1-1: config 243 has no interface number 1 [ 1420.836217][ T5682] usb 1-1: config 243 has no interface number 2 [ 1420.886134][ T5682] usb 1-1: config 243 interface 64 altsetting 4 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1420.950947][ T5682] usb 1-1: config 243 interface 156 altsetting 8 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 1420.984543][ T5682] usb 1-1: config 243 interface 113 altsetting 108 has a duplicate endpoint with address 0x1, skipping [ 1421.024037][ T5682] usb 1-1: config 243 interface 113 altsetting 108 endpoint 0xF has an invalid bInterval 222, changing to 11 [ 1421.055736][ T5682] usb 1-1: config 243 interface 64 has no altsetting 0 [ 1421.076407][ T5682] usb 1-1: config 243 interface 64 has no altsetting 1 [ 1421.085519][ T30] audit: type=1800 audit(1777462065.514:928): pid=7729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.15465" name=06 dev="tmpfs" ino=16396 res=0 errno=0 [ 1421.126603][ T5682] usb 1-1: config 243 interface 156 has no altsetting 0 [ 1421.143084][ T5682] usb 1-1: config 243 interface 113 has no altsetting 0 [ 1421.156912][ T5682] usb 1-1: New USB device found, idVendor=0856, idProduct=ac44, bcdDevice=4f.80 [ 1421.181737][ T5682] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1421.199354][ T5682] usb 1-1: Product: syz [ 1421.210241][ T5682] usb 1-1: Manufacturer: syz [ 1421.219289][ T5682] usb 1-1: SerialNumber: syz [ 1421.518009][ T5682] mos7840 1-1:243.64: required endpoints missing [ 1421.568131][ T5682] mos7840 1-1:243.156: required endpoints missing [ 1421.647893][ T5682] mos7840 1-1:243.113: required endpoints missing [ 1421.721853][ T5682] usb 1-1: USB disconnect, device number 111 [ 1422.000212][ T7754] input: syz1 as /devices/virtual/input/input143 [ 1422.687413][ T5265] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1422.949983][ T5682] usb 1-1: new full-speed USB device number 112 using dummy_hcd [ 1423.144128][ T5682] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1423.184524][ T5682] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1423.214384][ T5682] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1423.255331][ T5682] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1423.308788][ T5682] usb 1-1: config 0 descriptor?? [ 1423.321971][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.328422][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.329510][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1423.453561][ T7796] loop2: detected capacity change from 0 to 1 [ 1423.472692][ T7796] loop2: [POWERTEC] p1 p2 [ 1423.491473][ T7796] loop2: p1 start 655360 is beyond EOD, truncated [ 1423.508286][ T7796] loop2: p2 start 4915200 is beyond EOD, truncated [ 1423.557879][ T4993] loop2: [POWERTEC] p1 p2 [ 1423.570084][ T4993] loop2: p1 start 655360 is beyond EOD, truncated [ 1423.588582][ T4993] loop2: p2 start 4915200 is beyond EOD, truncated [ 1423.808191][ T5682] isku 0003:1E7D:319C.007B: unknown main item tag 0x0 [ 1423.842906][ T5682] isku 0003:1E7D:319C.007B: unknown main item tag 0x0 [ 1423.878822][ T5682] isku 0003:1E7D:319C.007B: unknown main item tag 0x0 [ 1423.928205][ T5682] isku 0003:1E7D:319C.007B: unknown main item tag 0x0 [ 1423.969050][ T5682] isku 0003:1E7D:319C.007B: unknown main item tag 0x0 [ 1423.997951][ T5682] isku 0003:1E7D:319C.007B: unknown main item tag 0x0 [ 1424.026047][ T5682] isku 0003:1E7D:319C.007B: unknown main item tag 0x0 [ 1424.095237][ T5682] isku 0003:1E7D:319C.007B: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.0-1/input0 [ 1424.103538][ T7807] IPv6: A: Disabled Multicast RS [ 1424.475091][ T5622] usb 1-1: USB disconnect, device number 112 [ 1424.600853][ T5262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1425.082307][ T993] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1425.241893][ T5265] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1425.251058][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1425.303166][ T993] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1425.348479][ T993] usb 2-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice= 0.40 [ 1425.388134][ T993] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1425.429774][ T5622] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 1425.431734][ T993] usb 2-1: Product: syz [ 1425.485489][ T993] usb 2-1: Manufacturer: syz [ 1425.506499][ T993] usb 2-1: SerialNumber: syz [ 1425.607960][ T5622] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1425.675321][ T5622] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1425.727056][ T5622] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1425.759427][ T5622] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1425.808666][ T7830] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1425.980854][ T993] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1426.190156][ T993] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1426.217492][ T993] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 1426.220798][ T5622] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1426.520807][ T5262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1426.614248][ T993] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1426.644638][ T7852] cifs: Unknown parameter 'g' [ 1426.675613][ T5622] usb 1-1: USB disconnect, device number 113 [ 1426.811436][ T993] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1426.864792][ T993] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 1427.071471][ T993] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1427.113783][ T993] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1427.224536][ T993] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 1427.244536][ T993] usb 2-1: USB disconnect, device number 126 [ 1427.323488][ T6064] udevd[6064]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1428.440948][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1428.456604][T21006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1428.468269][ T993] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 1428.652501][ T993] usb 1-1: Using ep0 maxpacket: 32 [ 1428.668715][ T993] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1428.696838][ T993] usb 1-1: config 1 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1428.790585][ T993] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1428.852373][ T993] usb 1-1: New USB device found, idVendor=06a3, idProduct=0cfa, bcdDevice= 0.40 [ 1428.896888][ T993] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1428.932742][ T993] usb 1-1: Product: syz [ 1428.961568][ T993] usb 1-1: Manufacturer: syz [ 1428.983963][ T993] usb 1-1: SerialNumber: syz [ 1429.051776][ T7915] veth0: entered allmulticast mode [ 1429.266458][ T993] usbhid 1-1:1.0: can't add hid device: -71 [ 1429.286832][ T993] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 1429.335874][ T993] usb 1-1: USB disconnect, device number 114 [ 1429.437126][ T7922] Invalid argument reading file caps for ./file0 [ 1429.722593][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1429.929914][ T3590] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1430.109831][ T3590] usb 4-1: Using ep0 maxpacket: 32 [ 1430.132015][ T3590] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1430.180877][ T3590] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1430.211670][ T3590] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1430.255693][ T3590] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1430.316173][ T3590] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1430.361705][ T3590] usb 4-1: Product: syz [ 1430.367449][T21006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1430.378623][ T3590] usb 4-1: Manufacturer: syz [ 1430.396086][ T3590] usb 4-1: SerialNumber: syz [ 1430.415602][ T3590] usb 4-1: config 0 descriptor?? [ 1430.868811][ T3590] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 1431.000571][ T993] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1431.010711][ T5262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1431.019526][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1431.211134][ T993] usb 2-1: Using ep0 maxpacket: 16 [ 1431.227319][ T993] usb 2-1: config 0 has no interfaces? [ 1431.247185][ T993] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1431.277672][ T993] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1431.305102][ T993] usb 2-1: Manufacturer: syz [ 1431.327053][ T993] usb 2-1: config 0 descriptor?? [ 1431.520681][ T3590] usb 4-1: USB disconnect, device number 9 [ 1431.674482][ T7946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15536'. [ 1431.813235][T23340] usb 2-1: USB disconnect, device number 127 [ 1432.300897][T21006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1432.821099][ T3590] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1433.047666][ T3590] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 1433.071381][ T3590] usb 2-1: config 0 has no interface number 0 [ 1433.105301][ T3590] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1433.142899][ T3590] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1433.201284][ T3590] usb 2-1: config 0 interface 255 has no altsetting 0 [ 1433.229824][ T3590] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 1433.254808][ T3590] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1433.283425][ T3590] usb 2-1: config 0 descriptor?? [ 1433.307907][ T3590] ums-realtek 2-1:0.255: USB Mass Storage device detected [ 1433.555467][ T5682] usb 2-1: USB disconnect, device number 2 [ 1433.561678][ C0] ip6_tunnel: K xmit: Local address not yet configured! [ 1433.890465][ T5682] IPVS: starting estimator thread 0... [ 1434.001913][ T7983] IPVS: using max 29 ests per chain, 69600 per kthread [ 1434.018867][ T7987] xt_hashlimit: size too large, truncated to 1048576 [ 1434.090902][ T7988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1434.123416][ T7990] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15553'. [ 1434.201507][ T5280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1434.293237][ T5622] hid-generic 0000:0000:0004.007C: unknown main item tag 0x0 [ 1434.328801][ T5622] hid-generic 0000:0000:0004.007C: unknown main item tag 0x0 [ 1434.353249][ T5622] hid-generic 0000:0000:0004.007C: unknown main item tag 0x0 [ 1434.378109][ T5622] hid-generic 0000:0000:0004.007C: unknown main item tag 0x0 [ 1434.406025][ T5622] hid-generic 0000:0000:0004.007C: unknown main item tag 0x0 [ 1434.430293][ T5622] hid-generic 0000:0000:0004.007C: unknown main item tag 0x0 [ 1434.454052][ T5622] hid-generic 0000:0000:0004.007C: unknown main item tag 0x0 [ 1434.478539][ T5622] hid-generic 0000:0000:0004.007C: unknown main item tag 0x0 [ 1434.503723][ T5622] hid-generic 0000:0000:0004.007C: unknown main item tag 0x0 [ 1434.528679][ T5622] hid-generic 0000:0000:0004.007C: unknown main item tag 0x0 [ 1434.574506][ T5622] hid-generic 0000:0000:0004.007C: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1434.842407][ T7995] fido_id[7995]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1435.288905][ T8002] netlink: 256 bytes leftover after parsing attributes in process `syz.3.15557'. [ 1435.318637][ T8002] netlink: 256 bytes leftover after parsing attributes in process `syz.3.15557'. [ 1435.809572][ T5622] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1435.997064][ T5622] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1436.049239][ T5622] usb 4-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1436.073481][ T5622] usb 4-1: Product: syz [ 1436.092081][ T5622] usb 4-1: Manufacturer: syz [ 1436.120325][ T5622] usb 4-1: SerialNumber: syz [ 1436.123828][ T5280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1436.145969][ T5622] usb 4-1: config 0 descriptor?? [ 1436.173563][ T5622] ch341 4-1:0.0: ch341-uart converter detected [ 1436.188858][ T30] audit: type=1326 audit(1777462080.614:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8028 comm="syz.0.15569" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f91c2b9cdd9 code=0x0 [ 1436.762022][ T5262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1436.771058][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1437.206563][ T5622] ch341-uart ttyUSB0: failed to read break control: -71 [ 1437.241450][ T5622] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1437.298412][ T5622] usb 4-1: USB disconnect, device number 10 [ 1437.331873][ T5622] ch341 4-1:0.0: device disconnected [ 1437.404002][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1437.616965][ T8060] Invalid argument reading file caps for ./file0 [ 1438.003706][ T8075] tipc: Started in network mode [ 1438.029423][ T8075] tipc: Node identity ac14142f, cluster identity 4711 [ 1438.067078][ T8075] tipc: Enabled bearer , priority 10 [ 1438.074671][ T8078] tipc: Can't add remote ip to TIPC UDP multicast bearer [ 1438.266185][ T8087] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15592'. [ 1438.689500][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1439.080795][ T993] tipc: Node number set to 2886997039 [ 1439.320975][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1439.404898][ T8113] netlink: 'syz.5.15604': attribute type 29 has an invalid length. [ 1439.444025][ T8113] netlink: 'syz.5.15604': attribute type 29 has an invalid length. [ 1439.478986][ T8113] netlink: 500 bytes leftover after parsing attributes in process `syz.5.15604'. [ 1439.549450][ T5682] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1439.731803][ T5682] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1439.752228][ T5682] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1439.782576][ T5682] usb 4-1: config 0 descriptor?? [ 1439.836044][ T5682] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1440.233953][ T5682] cpia1 4-1:0.0: unexpected state after lo power cmd: 00 [ 1440.247573][ T8129] netlink: 12 bytes leftover after parsing attributes in process `syz.5.15611'. [ 1440.635438][ T5682] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 1440.874241][ T5622] usb 4-1: USB disconnect, device number 11 [ 1441.005096][ T8144] netlink: 'syz.1.15618': attribute type 1 has an invalid length. [ 1441.126915][ T8144] bond6: entered promiscuous mode [ 1441.174875][ T8144] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1441.431602][ T8150] bond6: (slave veth3): making interface the new active one [ 1441.468194][ T8150] veth3: entered promiscuous mode [ 1441.508680][ T8150] bond6: (slave veth3): Enslaving as an active interface with an up link [ 1441.880976][T21020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1441.945224][ T8168] input: syz0 as /devices/virtual/input/input144 [ 1442.359625][ T5622] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 1442.520357][ T5262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1442.528799][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1442.590213][ T5622] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1442.635941][ T5622] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1442.651483][ T8190] netlink: 27 bytes leftover after parsing attributes in process `syz.2.15636'. [ 1442.708989][ T5622] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1442.760194][ T5622] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1442.793933][ T5622] usb 1-1: Product: syz [ 1442.814294][ T5622] usb 1-1: Manufacturer: syz [ 1442.840498][ T5622] usb 1-1: SerialNumber: syz [ 1442.868115][ T8194] input: syz0 as /devices/virtual/input/input145 [ 1443.146272][ T8174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1443.162697][ T5041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1443.221809][ T8174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1443.299556][ T5622] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 1443.356636][ T5622] usb 1-1: USB disconnect, device number 115 [ 1443.386590][ T8205] Invalid argument reading file caps for ./file0 [ 1443.849396][ T5622] usb 1-1: new full-speed USB device number 116 using dummy_hcd [ 1443.939997][ T3590] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1444.052599][ T5622] usb 1-1: config index 0 descriptor too short (expected 301, got 72) [ 1444.079701][ T5622] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1444.100016][ T3590] usb 2-1: Using ep0 maxpacket: 32 [ 1444.108642][ T3590] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 1444.112048][ T5622] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1444.119289][ T3590] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1444.142092][ T3590] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1444.154942][ T3590] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 42299, setting to 1024 [ 1444.159757][ T5622] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 1024, setting to 64 [ 1444.168994][ T3590] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1444.201140][ T3590] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1444.214149][ T3590] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1444.219866][ T5622] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1444.225045][ T3590] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1444.246889][ T3590] usb 2-1: Product: syz [ 1444.252063][ T3590] usb 2-1: Manufacturer: syz [ 1444.257051][ T3590] usb 2-1: SerialNumber: syz [ 1444.259576][ T5622] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1444.269403][ T3590] usb 2-1: config 0 descriptor?? [ 1444.285336][ T8216] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 1444.297914][ T3590] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1444.299519][ T5622] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1444.322732][ T3590] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1444.564050][ T5622] usb 1-1: usb_control_msg returned -71 [ 1444.582470][ T5622] usbtmc 1-1:16.0: can't read capabilities [ 1444.635552][ T8222] input: syz0 as /devices/virtual/input/input146 [ 1444.659900][ T5622] usb 1-1: USB disconnect, device number 116 [ 1444.677897][ T3590] usb 2-1: USB disconnect, device number 3 [ 1444.684635][ C0] ldusb 2-1:0.0: usb_submit_urb failed (-19) [ 1444.735676][ T3590] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 1445.082734][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1445.444311][ T8230] Invalid logical block size (2) [ 1445.934400][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1446.180544][ T8251] netlink: 48 bytes leftover after parsing attributes in process `syz.1.15665'. [ 1446.239761][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1446.279938][ T5622] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1446.459296][ T5622] usb 4-1: Using ep0 maxpacket: 32 [ 1446.462698][ T8257] support for the xor transformation has been removed. [ 1446.481500][ T5622] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1446.515279][ T5622] usb 4-1: config 0 has no interface number 0 [ 1446.520161][ T993] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1446.535868][ T5622] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1446.572080][ T5622] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1446.619263][ T5622] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1446.650306][ T5622] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1446.682251][ T5622] usb 4-1: config 0 descriptor?? [ 1446.695017][ T993] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1446.737698][ T993] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1446.796933][ T993] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1446.837125][ T993] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1446.888622][ T993] usb 2-1: Manufacturer: syz [ 1446.931568][ T993] usb 2-1: config 0 descriptor?? [ 1447.141453][ T5622] hid_parser_main: 33 callbacks suppressed [ 1447.141479][ T5622] ft260 0003:0403:6030.007D: unknown main item tag 0x0 [ 1447.339592][ T5622] ft260 0003:0403:6030.007D: chip code: 6424 8183 [ 1447.436996][ T8275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1447.449511][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1447.549567][ T5622] ft260 0003:0403:6030.007D: uart interface is not supported [ 1447.604446][ T8281] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15679'. [ 1447.640696][ T5041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1447.677227][ T8283] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15679'. [ 1447.784402][ T5682] usb 4-1: USB disconnect, device number 12 [ 1448.030329][ T993] uclogic 0003:256C:006D.007E: failed retrieving string descriptor #100: -71 [ 1448.074278][ T993] uclogic 0003:256C:006D.007E: failed retrieving pen parameters: -71 [ 1448.093220][ T993] uclogic 0003:256C:006D.007E: failed probing pen v1 parameters: -71 [ 1448.110673][ T993] uclogic 0003:256C:006D.007E: failed probing parameters: -71 [ 1448.118643][ T993] uclogic 0003:256C:006D.007E: probe with driver uclogic failed with error -71 [ 1448.148079][ T993] usb 2-1: USB disconnect, device number 4 [ 1448.281997][ T5262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1448.291103][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1448.300699][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1448.463943][ T8297] syzkaller1: entered allmulticast mode [ 1448.923203][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1449.179297][ T8315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15690'. [ 1449.720044][ T5690] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1449.881173][ T5690] usb 2-1: Using ep0 maxpacket: 8 [ 1449.905607][ T5690] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1449.926008][ T5690] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1449.957030][ T5690] usb 2-1: Product: syz [ 1449.982299][ T5690] usb 2-1: Manufacturer: syz [ 1450.006639][ T5690] usb 2-1: SerialNumber: syz [ 1450.054824][ T5690] usb 2-1: config 0 descriptor?? [ 1450.087996][ T5690] gspca_main: sq930x-2.14.0 probing 2770:930c [ 1450.842630][ T5265] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1451.160090][ T5690] gspca_sq930x: reg_w 0105 0f00 failed -71 [ 1451.176474][ T5690] sq930x 2-1:0.0: probe with driver sq930x failed with error -71 [ 1451.246050][ T5690] usb 2-1: USB disconnect, device number 5 [ 1452.271161][ T8382] vlan0: entered allmulticast mode [ 1452.290906][ T8382] bridge0: port 3(vlan0) entered blocking state [ 1452.319380][ T8382] bridge0: port 3(vlan0) entered disabled state [ 1452.332270][ T8382] vlan0: entered promiscuous mode [ 1452.389508][ T5622] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1452.559448][ T5622] usb 2-1: Using ep0 maxpacket: 16 [ 1452.582590][ T5622] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1452.619353][ T5622] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1452.645236][ T5622] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1452.669531][ T5622] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1452.690239][ T5690] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1452.699614][ T5622] usb 2-1: Product: syz [ 1452.706501][ T5622] usb 2-1: Manufacturer: syz [ 1452.729470][ T5622] usb 2-1: SerialNumber: syz [ 1452.751885][ T5622] usb 2-1: config 0 descriptor?? [ 1452.856353][ T5690] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1452.872355][ T5690] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1452.884804][ T5690] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1452.904535][ T5690] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1452.926432][ T5690] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1452.977135][ T5690] usb 4-1: config 0 descriptor?? [ 1453.023269][ T5622] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input147 [ 1453.107636][ T8386] ALSA: mixer_oss: invalid OSS volume 'ipvla' [ 1453.135807][ T8388] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15722'. [ 1453.400595][ T5041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1453.410272][ T5622] rc_core: IR keymap rc-imon-pad not found [ 1453.432154][ T5622] Registered IR keymap rc-empty [ 1453.435976][ T5690] plantronics 0003:047F:FFFF.007F: unknown main item tag 0x0 [ 1453.448172][ T5622] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1453.487257][ T5690] plantronics 0003:047F:FFFF.007F: unknown main item tag 0x0 [ 1453.489325][ T5622] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1453.523257][ T5690] plantronics 0003:047F:FFFF.007F: unknown main item tag 0x0 [ 1453.536231][ T5690] plantronics 0003:047F:FFFF.007F: unknown main item tag 0x0 [ 1453.557906][ T5690] plantronics 0003:047F:FFFF.007F: unknown main item tag 0x0 [ 1453.571606][ T5690] plantronics 0003:047F:FFFF.007F: unknown main item tag 0x0 [ 1453.571806][ T5622] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1453.579837][ T5690] plantronics 0003:047F:FFFF.007F: unknown main item tag 0x0 [ 1453.604027][ T5690] plantronics 0003:047F:FFFF.007F: unknown main item tag 0x0 [ 1453.612944][ T5690] plantronics 0003:047F:FFFF.007F: unknown main item tag 0x0 [ 1453.634906][ T5690] plantronics 0003:047F:FFFF.007F: unknown main item tag 0x0 [ 1453.678061][ T5690] plantronics 0003:047F:FFFF.007F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1453.684010][ T5622] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input148 [ 1453.749847][ T5690] usb 4-1: USB disconnect, device number 13 [ 1453.782960][ T5622] imon 2-1:0.0: iMON device (15c2:0041, intf0) on usb<2:6> initialized [ 1453.921707][ T8400] fido_id[8400]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1454.045288][ T5280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1454.055164][ T5265] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1454.063942][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1454.192851][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1454.200866][ T5622] usb 2-1: USB disconnect, device number 6 [ 1455.620622][ T5690] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1455.680450][ T8434] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15740'. [ 1455.777322][ T8438] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1455.798332][ T8438] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1455.808513][ T5690] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x19, changing to 0x9 [ 1455.831896][ T8438] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1455.855728][ T5690] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1455.885625][ T5690] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1455.913204][ T8438] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1455.926650][ T5690] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1455.937477][ T8441] batadv_slave_1: entered promiscuous mode [ 1455.941718][ T8438] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1455.957201][ T5690] usb 2-1: Product: syz [ 1455.961351][ T8440] batadv_slave_1: left promiscuous mode [ 1455.983206][ T8438] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1455.996791][ T5690] usb 2-1: Manufacturer: syz [ 1456.005541][ T5690] usb 2-1: SerialNumber: syz [ 1456.031820][ T5690] usb 2-1: config 0 descriptor?? [ 1456.504857][ T8449] pim6reg1: entered promiscuous mode [ 1456.514593][ T8449] pim6reg1: entered allmulticast mode [ 1456.534243][T23340] usb 2-1: USB disconnect, device number 7 [ 1456.569820][ T5622] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 1456.752645][ T5622] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1456.789376][ T5622] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1456.819663][ T5622] usb 4-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1456.849382][ T5622] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1456.882336][ T5622] usb 4-1: config 0 descriptor?? [ 1457.307944][ T5622] hid (null): nested delimiters [ 1457.321128][ T5622] hid (null): report_id 24797 is invalid [ 1457.347397][ T5622] kye 0003:0458:5016.0080: control desc unexpectedly large [ 1457.389381][ T5622] input: HID 0458:5016 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5016.0080/input/input149 [ 1457.505826][ T5622] input: HID 0458:5016 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5016.0080/input/input150 [ 1457.692831][ T5622] kye 0003:0458:5016.0080: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.3-1/input0 [ 1457.779217][ T5622] usb 4-1: USB disconnect, device number 14 [ 1457.852093][ T8467] fido_id[8467]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 1458.159921][ T8473] netlink: 52 bytes leftover after parsing attributes in process `syz.0.15758'. [ 1458.311559][ T5690] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1458.473256][ T5690] usb 2-1: Using ep0 maxpacket: 8 [ 1458.496254][ T5690] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1458.519794][T21020] net_ratelimit: 1051 callbacks suppressed [ 1458.519814][T21020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1458.536792][ T5690] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1458.563881][ T5690] usb 2-1: Product: syz [ 1458.568321][ T5690] usb 2-1: Manufacturer: syz [ 1458.575344][ T5690] usb 2-1: SerialNumber: syz [ 1458.607823][ T5690] usb 2-1: config 0 descriptor?? [ 1458.629125][ T5690] gspca_main: se401-2.14.0 probing 047d:5003 [ 1458.842237][ T5682] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 1459.042666][ T5682] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1459.076861][ T5682] usb 1-1: config 63 has an invalid interface number: 66 but max is 0 [ 1459.106859][ T5682] usb 1-1: config 63 contains an unexpected descriptor of type 0x2, skipping [ 1459.122703][ T5682] usb 1-1: config 63 has an invalid descriptor of length 9, skipping remainder of the config [ 1459.134333][ T5682] usb 1-1: config 63 has no interface number 0 [ 1459.143384][ T5682] usb 1-1: config 63 interface 66 has no altsetting 0 [ 1459.157220][ T5682] usb 1-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 1459.167805][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1459.186875][ T5682] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1459.198547][ T5682] usb 1-1: Product: syz [ 1459.205004][ T5682] usb 1-1: Manufacturer: syz [ 1459.216220][ T5682] usb 1-1: SerialNumber: syz [ 1459.267620][ T5690] input: se401 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input151 [ 1459.544721][ T5690] usb 2-1: USB disconnect, device number 8 [ 1459.575643][ T5682] uvcvideo 1-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 1459.616128][ T5682] uvcvideo 1-1:63.66: No valid video chain found. [ 1459.666885][ T5682] usb 1-1: USB disconnect, device number 117 [ 1459.802643][ T5280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1459.811717][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1459.825968][T21020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1459.948488][ T8503] wireguard: wg2: Could not create IPv4 socket [ 1460.099891][ T5682] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 1460.274602][ T5682] usb 1-1: config 63 has an invalid interface number: 66 but max is 0 [ 1460.289906][ T5682] usb 1-1: config 63 contains an unexpected descriptor of type 0x2, skipping [ 1460.299123][ T5682] usb 1-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 1460.314690][ T5682] usb 1-1: config 63 has 2 interfaces, different from the descriptor's value: 1 [ 1460.325953][ T5682] usb 1-1: config 63 has no interface number 1 [ 1460.333332][ T5682] usb 1-1: config 63 interface 66 has no altsetting 0 [ 1460.343097][ T5682] usb 1-1: New USB device found, idVendor=0471, idProduct=0307, bcdDevice=e4.df [ 1460.354616][ T5682] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1460.590522][ T5682] usb 1-1: string descriptor 0 read error: -71 [ 1460.626470][ T5682] uvcvideo 1-1:63.66: Found UVC 0.07 device (0471:0307) [ 1460.645390][ T5682] uvcvideo 1-1:63.66: No valid video chain found. [ 1460.665772][ T5682] pwc: Philips PCVC675K (Vesta) USB webcam detected. [ 1460.687726][ T5682] pwc: send_video_command error -71 [ 1460.697659][ T5682] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1460.708602][ T5682] Philips webcam 1-1:63.0: probe with driver Philips webcam failed with error -71 [ 1460.725678][ T5682] usb 1-1: USB disconnect, device number 118 [ 1461.172439][ T8521] pimreg: entered allmulticast mode [ 1461.204065][ T8521] pimreg: left allmulticast mode [ 1462.371365][T21020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1462.770015][ T8559] netlink: 32 bytes leftover after parsing attributes in process `syz.5.15795'. [ 1462.835049][ T8563] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1463.310713][ T3590] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1463.516495][ T3590] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1463.555616][ T3590] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1463.594096][ T3590] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1463.625032][ T3590] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1463.660034][ T3590] usb 2-1: SerialNumber: syz [ 1463.938320][ T3590] usb 2-1: 0:2 : does not exist [ 1464.095692][ T3590] usb 2-1: USB disconnect, device number 9 [ 1464.284949][ T5041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1464.720258][ T3590] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 1464.905346][ T3590] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 1464.914661][ T3590] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1464.928661][ T3590] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1464.941031][ T3590] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1464.954201][ T3590] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1464.965287][ T3590] usb 1-1: Product: syz [ 1464.970616][ T3590] usb 1-1: Manufacturer: syz [ 1464.975654][ T3590] usb 1-1: SerialNumber: syz [ 1464.991217][ T3590] usb 1-1: config 0 descriptor?? [ 1465.017062][ T3590] hub 1-1:0.0: bad descriptor, ignoring hub [ 1465.029856][ T5690] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1465.048340][ T3590] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1465.095563][ T3590] usb 1-1: selecting invalid altsetting 0 [ 1465.231502][ T5690] usb 2-1: Using ep0 maxpacket: 8 [ 1465.253760][ T5690] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1465.303422][ T5690] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1465.353361][ T5690] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1465.395105][ T5690] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1465.462867][ T5690] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1465.507866][ T5690] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1465.580605][ T5280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1465.589093][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1465.599619][ T5041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1465.784443][ T5690] usb 2-1: GET_CAPABILITIES returned 0 [ 1465.798159][ T5690] usbtmc 2-1:16.0: can't read capabilities [ 1465.895308][ T8628] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15827'. [ 1465.988765][ T8607] usb 1-1: reset high-speed USB device number 119 using dummy_hcd [ 1466.045953][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1466.062257][T23340] usb 2-1: USB disconnect, device number 10 [ 1466.648499][ T8644] netlink: 'syz.3.15834': attribute type 13 has an invalid length. [ 1466.693759][ T8644] netlink: 'syz.3.15834': attribute type 17 has an invalid length. [ 1466.834479][ T5622] usb 1-1: USB disconnect, device number 119 [ 1466.875909][ T993] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1466.889753][ T8644] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 1467.389819][ T3590] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1467.484815][T21020] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1467.512438][T21020] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1467.612435][ T3590] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1467.787058][ T8673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15845'. [ 1467.873568][ T8674] netlink: 34959 bytes leftover after parsing attributes in process `syz.0.15845'. [ 1467.915484][ T8676] netlink: 'syz.3.15846': attribute type 11 has an invalid length. [ 1467.931109][ T8676] netlink: 88 bytes leftover after parsing attributes in process `syz.3.15846'. [ 1468.126051][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1469.352064][ T8712] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1469.412354][ T5041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1470.084741][ T8732] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.15871'. [ 1470.392837][ T8745] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15876'. [ 1470.648441][ T8752] bridge0: port 2(bridge_slave_1) entered disabled state [ 1470.656359][ T8752] bridge0: port 1(bridge_slave_0) entered disabled state [ 1470.759524][T23340] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1470.811618][ T8752] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1470.888856][ T8752] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1470.949530][T23340] usb 2-1: Using ep0 maxpacket: 32 [ 1470.978046][T23340] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1471.039569][T23340] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1471.064721][T23340] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1471.111904][T23340] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1471.151504][T23340] usb 2-1: config 0 descriptor?? [ 1471.262387][ T5041] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1471.295243][ T5041] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1471.334995][ T5262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1471.343508][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1471.355301][ T5041] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1471.426725][ T5041] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1471.469048][ T5041] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1471.483478][ T8766] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15885'. [ 1471.520162][ T5041] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1471.558431][ T5041] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1471.603818][ T5041] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1471.637308][ T8766] bond0: ARP target 128.0.0.0 is already present [ 1471.676391][ T8766] bond0: option arp_ip_target: invalid value (128) [ 1472.045322][T23340] corsair-cpro 0003:1B1C:0C10.0081: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.1-1/input0 [ 1472.149446][ T5622] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1472.218975][T23340] corsair-cpro 0003:1B1C:0C10.0081: probe with driver corsair-cpro failed with error -61 [ 1472.339579][ T5622] usb 1-1: Using ep0 maxpacket: 32 [ 1472.367555][ T5622] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1472.408506][ T5622] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1472.433804][ T5622] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1472.465989][ T5690] usb 2-1: USB disconnect, device number 11 [ 1472.478418][ T5622] usb 1-1: Product: syz [ 1472.511313][ T5622] usb 1-1: Manufacturer: syz [ 1472.528001][ T5622] usb 1-1: SerialNumber: syz [ 1472.550925][ T5622] usb 1-1: config 0 descriptor?? [ 1472.574290][ T8782] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1472.602128][ T5622] hub 1-1:0.0: bad descriptor, ignoring hub [ 1472.630750][ T5622] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1473.244049][ T5041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1473.669877][ T8782] usb 1-1: reset high-speed USB device number 120 using dummy_hcd [ 1473.955378][ T8782] usb 1-1: device firmware changed [ 1473.996655][ T5690] usb 1-1: USB disconnect, device number 120 [ 1474.179400][ T5690] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1474.329265][ T5622] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1474.340117][ T5690] usb 1-1: Using ep0 maxpacket: 32 [ 1474.348029][ T5690] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1474.383099][ T5690] usb 1-1: string descriptor 0 read error: -22 [ 1474.399351][ T5690] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1474.415033][ T5690] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1474.446145][ T5690] usb 1-1: config 0 descriptor?? [ 1474.461191][ T8799] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1474.476338][ T5690] hub 1-1:0.0: bad descriptor, ignoring hub [ 1474.493886][ T5690] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1474.509837][ T5622] usb 4-1: Using ep0 maxpacket: 16 [ 1474.536861][ T5622] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1474.583523][ T5622] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1474.621932][ T5622] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1474.661977][ T5622] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1474.691883][ T5622] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1474.731881][ T5622] usb 4-1: config 0 descriptor?? [ 1474.769880][ T3590] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1474.850077][ T5690] usb 1-1: USB disconnect, device number 121 [ 1474.942016][ T3590] usb 2-1: Using ep0 maxpacket: 16 [ 1474.960264][ T3590] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1474.981408][ T3590] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1475.007184][ T3590] usb 2-1: config 0 descriptor?? [ 1475.045868][ T3590] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1475.163110][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1475.242975][ T5622] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0082/input/input152 [ 1475.257778][ T3590] gspca_sonixj: reg_w1 err -71 [ 1475.286171][ T3590] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 1475.328640][ T3590] usb 2-1: USB disconnect, device number 12 [ 1475.467253][ T5622] microsoft 0003:045E:07DA.0082: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 1475.562797][ T5622] usb 4-1: USB disconnect, device number 15 [ 1475.773776][ T8830] fido_id[8830]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1476.231267][ T3590] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1476.259604][ T5622] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1476.352125][T23340] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1476.411274][ T3590] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1476.446163][ T3590] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1476.452976][ T5622] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1476.453012][ T5622] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1476.453036][ T5622] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1476.453079][ T5622] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1476.453104][ T5622] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1476.455958][ T5622] usb 2-1: config 0 descriptor?? [ 1476.531998][ T3590] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1476.565090][ T3590] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1476.631458][ T3590] usb 1-1: Product: syz [ 1476.647610][ T3590] usb 1-1: Manufacturer: syz [ 1476.677776][ T3590] usb 1-1: SerialNumber: syz [ 1476.713675][ T3590] usb 1-1: config 0 descriptor?? [ 1476.733438][ T3590] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1476.790222][ T3590] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1476.817157][ T8849] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.15918'. [ 1476.852031][ T3590] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1476.870070][ T7004] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1476.885668][ T3590] usb 1-1: media controller created [ 1476.983403][ T3590] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1477.086488][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1477.095603][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1477.122470][ T5622] plantronics 0003:047F:FFFF.0083: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1477.211072][ T3590] DVB: Unable to find symbol tda10046_attach() [ 1477.238117][ T3590] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1477.286864][ T3590] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1477.964442][ T3590] dvb_usb_m920x 1-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1478.014701][ T3590] usb 1-1: USB disconnect, device number 122 [ 1478.423061][ T3590] ip6_tunnel: K xmit: Local address not yet configured! [ 1478.456582][ T993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1478.478371][ T8836] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 1478.500239][ T993] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1478.710438][ T993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1479.001187][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1479.060884][ T993] ip6_tunnel: K xmit: Local address not yet configured! [ 1479.235059][ T3590] usb 2-1: USB disconnect, device number 13 [ 1479.400364][ T993] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1479.479602][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1479.739397][ T3590] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 1479.904087][ T3590] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1479.938637][ T3590] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1479.964141][ T3590] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1479.987271][ T3590] usb 4-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 1480.035217][ T3590] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1480.084708][ T3590] usb 4-1: config 0 descriptor?? [ 1480.152733][ T8899] netlink: 'syz.1.15938': attribute type 21 has an invalid length. [ 1480.165712][ T8899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15938'. [ 1480.195443][ T8899] netlink: 'syz.1.15938': attribute type 21 has an invalid length. [ 1480.232524][ T8899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15938'. [ 1480.556667][ T3590] hid_parser_main: 5 callbacks suppressed [ 1480.556693][ T3590] hid-steam 0003:28DE:1102.0084: unknown main item tag 0x0 [ 1480.618698][ T3590] hid-steam 0003:28DE:1102.0084: unknown main item tag 0x0 [ 1480.645967][ T3590] hid-steam 0003:28DE:1102.0084: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.3-1/input0 [ 1480.721149][ T3590] hid-steam 0003:28DE:1102.0084: Steam Controller 'XXXXXXXXXX' connected [ 1480.748941][ T3590] input: Steam Controller as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28DE:1102.0084/input/input153 [ 1480.837065][ T3590] hid-steam 0003:28DE:1102.0085: unknown main item tag 0x0 [ 1480.873325][ T3590] hid-steam 0003:28DE:1102.0085: unknown main item tag 0x0 [ 1480.931389][ T5262] net_ratelimit: 2 callbacks suppressed [ 1480.931408][ T5262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1481.060622][ T3590] hid-steam 0003:28DE:1102.0085: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.3-1/input0 [ 1481.069305][ T5622] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 1481.092436][ T3590] usb 4-1: USB disconnect, device number 16 [ 1481.134008][ T3590] hid-steam 0003:28DE:1102.0084: Steam Controller 'XXXXXXXXXX' disconnected [ 1481.211696][ T8908] fido_id[8908]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1481.259357][ T5622] usb 1-1: Using ep0 maxpacket: 32 [ 1481.280474][ T5622] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1481.302061][ T5622] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1481.340392][ T5622] usb 1-1: config 0 descriptor?? [ 1481.463101][ T30] audit: type=1800 audit(1777462125.884:930): pid=8912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.15944" name="bus" dev="tmpfs" ino=6414 res=0 errno=0 [ 1481.579507][ T5622] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1481.632452][ T5622] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1481.669963][ T5622] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1481.690930][ T5622] usb 1-1: media controller created [ 1481.750699][ T5622] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1481.923671][ T5622] DVB: Unable to find symbol dib7000p_attach() [ 1481.953382][ T5622] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1482.079797][ T5622] rc_core: IR keymap rc-dib0700-rc5 not found [ 1482.098476][ T5622] Registered IR keymap rc-empty [ 1482.115704][ T5622] dvb-usb: could not initialize remote control. [ 1482.136533][ T5622] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1482.180120][ T5622] usb 1-1: USB disconnect, device number 123 [ 1482.332839][ T5622] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1482.533530][ T3590] hid-generic 0000:0000:0000.0086: unknown main item tag 0x0 [ 1482.571414][ T3590] hid-generic 0000:0000:0000.0086: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1482.919862][ T5622] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1483.103238][ T5622] usb 4-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 1483.140612][ T5622] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1483.177384][ T5622] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1483.221702][ T5622] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1483.276901][ T5622] usb 4-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 1483.307055][ T5622] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1483.337799][ T5622] usb 4-1: Product: syz [ 1483.352118][ T5622] usb 4-1: Manufacturer: syz [ 1483.373817][ T5622] usb 4-1: SerialNumber: syz [ 1483.420306][ T5622] usb 4-1: config 0 descriptor?? [ 1483.482059][ T5622] uvcvideo 4-1:0.0: Found UVC 34.00 device syz (8086:0b5b) [ 1483.536883][ T5622] uvcvideo 4-1:0.0: No valid video chain found. [ 1484.760734][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.770685][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.778354][ T5041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1485.405923][ T5262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1485.763869][ T5622] usb 4-1: USB disconnect, device number 17 [ 1485.777937][ T9005] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1485.813102][ T9005] bond2: (slave lo): Enslaving as an active interface with an up link [ 1485.833177][ T9005] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1486.239802][T26571] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 1486.402239][T26571] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1486.429480][T26571] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1486.474535][T26571] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1486.499745][ T5622] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1486.510490][T26571] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1486.545314][T26571] usb 1-1: config 0 descriptor?? [ 1486.649656][ T5622] usb 2-1: Using ep0 maxpacket: 8 [ 1486.649930][ T3590] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1486.671704][ T5622] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1486.692844][T21020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1486.699512][ T5622] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1486.730370][ T5622] usb 2-1: Product: syz [ 1486.749480][ T5622] usb 2-1: Manufacturer: syz [ 1486.759303][ T5622] usb 2-1: SerialNumber: syz [ 1486.781262][ T5622] usb 2-1: config 0 descriptor?? [ 1486.805605][ T5622] gspca_main: sq930x-2.14.0 probing 2770:930c [ 1486.844961][ T3590] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1486.857473][ T3590] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1486.871147][ T3590] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1486.881461][ T3590] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 1486.896881][ T3590] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 1486.913452][ T3590] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1486.926159][ T3590] usb 4-1: config 1 interface 1 has no altsetting 0 [ 1486.941041][ T3590] usb 4-1: string descriptor 0 read error: -22 [ 1486.948881][ T3590] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1486.961241][ T3590] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1487.000514][T26571] cm6533_jd 0003:0D8C:0022.0087: unknown main item tag 0x0 [ 1487.019638][T26571] cm6533_jd 0003:0D8C:0022.0087: unknown main item tag 0x0 [ 1487.053895][T26571] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.0087/input/input155 [ 1487.134785][T26571] cm6533_jd 0003:0D8C:0022.0087: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 1487.276131][ T7527] usb 1-1: USB disconnect, device number 124 [ 1487.355368][ T9030] fido_id[9030]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 1487.458591][ T3590] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1487.512052][ T3590] usb 4-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 1487.543923][ T3590] usb 4-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 1487.622561][ T3590] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1488.079298][ T5622] gspca_sq930x: reg_w 0105 0c00 failed -71 [ 1488.111811][ T3590] usb 4-1: 2:0: failed to get current value for ch 1 (-71) [ 1488.187864][ T3590] usb 4-1: USB disconnect, device number 18 [ 1488.309288][ T5622] gspca_sq930x: Sensor ov9630 not yet treated [ 1488.330713][ T5622] sq930x 2-1:0.0: probe with driver sq930x failed with error -22 [ 1488.381609][ T5622] usb 2-1: USB disconnect, device number 14 [ 1488.400515][ T9043] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1980170576 (3960341152 ns) > initial count (2789370162 ns). Using initial count to start timer. [ 1489.141571][ T9056] netlink: 'syz.1.16001': attribute type 1 has an invalid length. [ 1489.160095][T26571] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 1489.284633][ T9056] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1489.339461][T26571] usb 1-1: Using ep0 maxpacket: 16 [ 1489.390393][T26571] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 1489.414997][ T9057] bond7: (slave gretap1): making interface the new active one [ 1489.444249][T26571] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1489.476315][ T9057] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 1489.509484][T26571] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1489.542782][T26571] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 1489.604623][T26571] usb 1-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 1489.634260][T26571] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1489.681469][T26571] usb 1-1: config 0 descriptor?? [ 1489.879408][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1489.908501][ T9071] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16007'. [ 1489.994389][ T9075] netlink: 'syz.1.16008': attribute type 9 has an invalid length. [ 1490.003530][ T9075] netlink: 212340 bytes leftover after parsing attributes in process `syz.1.16008'. [ 1490.094184][ T9071] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1490.196753][ T9072] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1490.238419][T26571] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5013.0088/input/input156 [ 1490.251681][ T9072] bond5: (slave batadv1): Enslaving as an active interface with an up link [ 1490.388369][T26571] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5013.0088/input/input157 [ 1490.520020][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1490.566827][T26571] kye 0003:0458:5013.0088: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.0-1/input0 [ 1490.661416][T26571] usb 1-1: USB disconnect, device number 125 [ 1490.744236][ T9088] fido_id[9088]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 1491.161014][ T5265] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1491.819286][ T7004] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 1492.012384][ T7004] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1492.046759][ T7004] usb 1-1: config 63 has an invalid interface number: 66 but max is 0 [ 1492.065627][ T7004] usb 1-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 1492.099252][ T7004] usb 1-1: config 63 has no interface number 0 [ 1492.120246][ T7004] usb 1-1: config 63 interface 66 has no altsetting 0 [ 1492.153093][ T7004] usb 1-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 1492.179289][ T7004] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1492.200471][ T7004] usb 1-1: Product: syz [ 1492.209531][ T7004] usb 1-1: Manufacturer: syz [ 1492.229637][ T7004] usb 1-1: SerialNumber: syz [ 1492.451805][ T5262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1492.493996][ T7004] uvcvideo 1-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 1492.520030][ T7004] uvcvideo 1-1:63.66: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1). [ 1492.552555][ T7004] uvcvideo 1-1:63.66: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1). [ 1492.590226][ T7004] uvcvideo 1-1:63.66: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 1492.621517][ T7004] uvcvideo 1-1:63.66: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 1492.669878][ T7004] uvcvideo 1-1:63.66: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 1492.709770][ T7004] uvcvideo 1-1:63.66: No streaming interface found for terminal 29. [ 1492.744015][ T7004] uvcvideo 1-1:63.66: Entity type for entity Output 32773 was not initialized! [ 1492.814180][ T7004] usb 1-1: USB disconnect, device number 126 [ 1493.229336][ T7004] usb 1-1: new full-speed USB device number 127 using dummy_hcd [ 1493.412410][ T7004] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1493.434492][ T7004] usb 1-1: not running at top speed; connect to a high speed hub [ 1493.481593][ T7004] usb 1-1: config 63 has an invalid interface number: 66 but max is 0 [ 1493.515290][ T7004] usb 1-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 1493.567534][ T7004] usb 1-1: config 63 has no interface number 0 [ 1493.596206][ T7004] usb 1-1: config 63 interface 66 has no altsetting 0 [ 1493.629073][ T7004] usb 1-1: string descriptor 0 read error: -22 [ 1493.646663][ T9141] bridge0: port 2(bridge_slave_1) entered disabled state [ 1493.654440][ T9141] bridge0: port 1(bridge_slave_0) entered disabled state [ 1493.657349][ T7004] usb 1-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 1493.718498][ T7004] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1493.786619][ T7004] uvcvideo 1-1:63.66: Found UVC 0.07 device (174f:8acf) [ 1493.948305][ T9141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1493.972746][ T9141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1494.233565][ T7004] uvcvideo 1-1:63.66: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1). [ 1494.285759][ T7004] uvcvideo 1-1:63.66: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 1494.337684][ T7004] uvcvideo 1-1:63.66: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 1494.380836][ T7004] uvcvideo 1-1:63.66: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 1494.419579][ T7004] uvcvideo 1-1:63.66: No streaming interface found for terminal 29. [ 1494.448685][ T7004] uvcvideo 1-1:63.66: Entity type for entity Output 32773 was not initialized! [ 1494.491992][ T7004] usb 1-1: USB disconnect, device number 127 [ 1494.515892][ T5041] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1494.567270][ T5041] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1494.627598][ T5041] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1494.681911][ T5041] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1496.211976][ T5041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1496.280461][ T5280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1496.288921][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1496.304853][ T5041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1496.459967][ T9184] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1497.490592][ T5041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1498.028279][T21020] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1498.110170][T21020] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1498.336137][ T9217] xt_hashlimit: size too large, truncated to 1048576 [ 1498.731128][ T5989] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1498.758777][ T5989] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1498.774234][ T5989] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1498.785277][ T5989] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1498.793582][ T5989] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1499.114617][ T9216] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1499.739343][ T9231] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1499.910276][ T9231] usb 2-1: Using ep0 maxpacket: 8 [ 1499.926662][ T9216] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 1499.946715][ T9231] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1499.977171][ T9231] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1500.022301][ T9231] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1500.071196][ T9231] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1500.120001][ T9231] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1500.191356][ T9231] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1500.253497][ T9231] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1500.253747][T21020] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1500.343766][T21020] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1500.503502][T21015] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1500.540316][ T9231] usb 2-1: usb_control_msg returned -32 [ 1500.557034][T21015] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1500.571643][ T9231] usbtmc 2-1:16.0: can't read capabilities [ 1500.615495][T21015] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1500.654469][T21015] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1500.699064][T21015] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1500.733197][T21015] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1500.925800][ T50] Bluetooth: hci0: command tx timeout [ 1501.085525][T21020] team0: Port device netdevsim1 removed [ 1501.146105][T21020] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1501.170305][T21020] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1501.217542][T21015] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1501.256106][T21015] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1501.307271][ T9262] bond2: option mode: unable to set because the bond device has slaves [ 1501.328301][ T9263] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1501.352371][ T9264] usbtmc 2-1:16.0: CHECK_CLEAR_STATUS returned 3 [ 1501.556965][ T7004] usb 2-1: USB disconnect, device number 15 [ 1501.660647][ T30] audit: type=1804 audit(1777462146.084:931): pid=9270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.16078" name="file1" dev="ramfs" ino=158725 res=1 errno=0 [ 1503.001712][ T50] Bluetooth: hci0: command tx timeout [ 1503.591801][ T7527] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1503.779871][ T7527] usb 4-1: Using ep0 maxpacket: 32 [ 1503.806471][ T7527] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1503.858687][ T7527] usb 4-1: config 0 has no interface number 0 [ 1503.887188][ T7527] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1503.902321][T21020] bridge_slave_1: left allmulticast mode [ 1503.911583][ T7527] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1503.929195][ T7527] usb 4-1: Product: syz [ 1503.939925][ T7527] usb 4-1: Manufacturer: syz [ 1503.945548][ T7527] usb 4-1: SerialNumber: syz [ 1503.958725][T21020] bridge_slave_1: left promiscuous mode [ 1503.962826][ T7527] usb 4-1: config 0 descriptor?? [ 1503.985944][ T7527] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1504.014637][T21020] bridge0: port 2(bridge_slave_1) entered disabled state [ 1504.051812][T21020] bridge_slave_0: left allmulticast mode [ 1504.057928][T21020] bridge0: port 1(bridge_slave_0) entered disabled state [ 1504.227388][ T7527] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1504.342574][ T7527] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1505.168360][ T50] Bluetooth: hci0: command tx timeout [ 1505.301636][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1505.313192][ T7527] usb 4-1: USB disconnect, device number 19 [ 1505.340723][ T7527] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1505.425710][ T7527] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1505.455294][ T7527] quatech2 4-1:0.51: device disconnected [ 1505.568304][ T30] audit: type=1326 audit(1777462149.994:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9342 comm="syz.2.16101" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0a2959cdd9 code=0x0 [ 1506.751027][T21020] batman_adv: batadv0: Removing interface: vlan2 [ 1507.240515][ T50] Bluetooth: hci0: command tx timeout [ 1507.641507][T21020] bond1 (unregistering): Released all slaves [ 1507.702209][T21020] bond2 (unregistering): Released all slaves [ 1507.803734][T21020] bond3 (unregistering): Released all slaves [ 1507.994871][T21020] bond0 (unregistering): Released all slaves [ 1508.055482][T21020] bond4 (unregistering): Released all slaves [ 1508.220455][ T5289] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1508.354541][ T9226] bridge0: port 1(bridge_slave_0) entered blocking state [ 1508.391323][ T9226] bridge0: port 1(bridge_slave_0) entered disabled state [ 1508.416977][ T9226] bridge_slave_0: entered allmulticast mode [ 1508.448776][ T9226] bridge_slave_0: entered promiscuous mode [ 1508.483853][ T9226] bridge0: port 2(bridge_slave_1) entered blocking state [ 1508.512388][ T9226] bridge0: port 2(bridge_slave_1) entered disabled state [ 1508.543804][ T9226] bridge_slave_1: entered allmulticast mode [ 1508.569282][ T9231] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1508.587323][ T9226] bridge_slave_1: entered promiscuous mode [ 1508.617262][T21020] hma(sha224): left promiscuous mode [ 1508.753930][ T9231] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1508.796403][ T9231] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1508.841146][ T9231] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1508.909723][ T9231] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1508.949357][ T9231] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1508.996520][ T9231] usb 2-1: config 0 descriptor?? [ 1509.299054][ T9226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1509.388156][ T9367] dvmrp0: entered allmulticast mode [ 1509.416737][T21020] tipc: Disabling bearer [ 1509.438319][T21020] tipc: Left network mode [ 1509.458107][ T9226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1509.543347][ T9231] plantronics 0003:047F:FFFF.0089: reserved main item tag 0xe [ 1509.574191][ T9231] plantronics 0003:047F:FFFF.0089: unknown main item tag 0x4 [ 1509.672250][ T9231] plantronics 0003:047F:FFFF.0089: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1509.713019][ T9226] team0: Port device team_slave_0 added [ 1509.772136][ T9226] team0: Port device team_slave_1 added [ 1510.045134][ T9226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1510.091405][ T30] audit: type=1326 audit(1777462154.504:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9381 comm="syz.3.16113" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0b71f9cdd9 code=0x0 [ 1510.145748][ T9226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1510.299420][ T9226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1510.414226][ T9226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1510.457150][ T9226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1510.597340][ T9226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1510.853550][ T9359] usb 2-1: string descriptor 0 read error: -2 [ 1511.400469][ T9226] hsr_slave_0: entered promiscuous mode [ 1511.420723][ T9226] hsr_slave_1: entered promiscuous mode [ 1511.468260][ T9226] debugfs: 'hsr0' already exists in 'hsr' [ 1511.505130][ T9226] Cannot create hsr debugfs directory [ 1511.651555][ T7527] usb 2-1: USB disconnect, device number 16 [ 1511.914974][ T9419] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.16123'. [ 1512.039653][ T7527] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1512.220275][ T7527] usb 2-1: Using ep0 maxpacket: 8 [ 1512.233652][ T9422] erspan0: left promiscuous mode [ 1512.246939][ T7527] usb 2-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1512.322118][ T7527] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1512.370906][ T7527] usb 2-1: string descriptor 0 read error: -22 [ 1512.384570][ T7527] usb 2-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.40 [ 1512.396679][ T9422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1512.403056][ T7527] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1512.436284][ T9422] 8021q: adding VLAN 0 to HW filter on device team0 [ 1512.482487][ T9422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1512.518099][ T9422] bridge0: port 3(vlan0) entered blocking state [ 1512.524681][ T9422] bridge0: port 3(vlan0) entered forwarding state [ 1512.568638][ T9422] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1512.582355][ T9422] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1512.601634][ T9422] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1512.612799][ T9422] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1512.662624][ T9422] veth1_macvtap: left promiscuous mode [ 1512.681174][ T9422] veth0_macvtap: left promiscuous mode [ 1512.706857][ T9422] veth0_macvtap: entered promiscuous mode [ 1512.734353][ T9422] veth1_macvtap: entered promiscuous mode [ 1512.783492][ T9422] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1512.794147][ T9422] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1512.825069][ T9422] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1512.871178][ T7527] sony 0003:054C:0268.008A: unknown main item tag 0x0 [ 1512.875973][ T9422] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1512.922446][ T9422] erspan0: entered promiscuous mode [ 1512.942225][ T7527] sony 0003:054C:0268.008A: unknown main item tag 0x0 [ 1512.964234][ T9422] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 1512.980608][ T5690] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1512.992926][ T7527] sony 0003:054C:0268.008A: unknown main item tag 0x0 [ 1513.002883][ T7527] sony 0003:054C:0268.008A: unknown main item tag 0x0 [ 1513.011065][ T7527] sony 0003:054C:0268.008A: unknown main item tag 0x0 [ 1513.052383][ T7527] sony 0003:054C:0268.008A: unknown main item tag 0x0 [ 1513.091109][ T7527] sony 0003:054C:0268.008A: unknown main item tag 0x0 [ 1513.116504][ T5289] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1513.121036][ T7527] sony 0003:054C:0268.008A: unknown main item tag 0x0 [ 1513.183919][ T7527] sony 0003:054C:0268.008A: unknown main item tag 0x0 [ 1513.200431][ T5280] bridge0: port 1(bridge_slave_0) entered blocking state [ 1513.207681][ T5280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1513.284240][ T5280] bridge0: port 2(bridge_slave_1) entered blocking state [ 1513.291569][ T5280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1513.326269][ T30] audit: type=1326 audit(1777462157.754:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9436 comm="syz.3.16130" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0b71f9cdd9 code=0x0 [ 1513.432418][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1513.454965][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1513.477638][ T7527] sony 0003:054C:0268.008A: hiddev0,hidraw0: USB HID v80.01 Device [HID 054c:0268] on usb-dummy_hcd.1-1/input0 [ 1513.500299][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1513.517754][ T7527] sony 0003:054C:0268.008A: failed to claim input [ 1513.525990][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1513.582265][ T7527] usb 2-1: USB disconnect, device number 17 [ 1513.732190][ T9441] fido_id[9441]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1513.895778][ T7527] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1513.934244][ T5041] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1513.942850][ T9446] xt_hashlimit: size too large, truncated to 1048576 [ 1513.945383][ T5041] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1513.958535][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1513.976264][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1514.087788][ C0] blk_print_req_error: 28 callbacks suppressed [ 1514.087813][ C0] I/O error, dev loop7, sector 8704 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 1514.099474][ T9444] loop7: detected capacity change from 16384 to 0 [ 1514.106251][ C0] I/O error, dev loop7, sector 8960 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 1514.183193][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1514.205746][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1514.759620][ T5690] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1514.987057][ T30] audit: type=1326 audit(1777462159.384:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9462 comm="syz.5.16138" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f714299cdd9 code=0x0 [ 1515.035816][ T30] audit: type=1326 audit(1777462159.464:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9473 comm="syz.2.16140" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0a2959cdd9 code=0x0 [ 1516.164547][ T30] audit: type=1326 audit(1777462160.584:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9491 comm="syz.2.16144" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0a2959cdd9 code=0x0 [ 1516.285306][ T9501] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16147'. [ 1516.315122][ T9501] netlink: 'syz.5.16147': attribute type 5 has an invalid length. [ 1516.374636][ T9501] netlink: 28 bytes leftover after parsing attributes in process `syz.5.16147'. [ 1516.453222][ T9501] geneve2: entered promiscuous mode [ 1516.465356][ T9501] geneve2: entered allmulticast mode [ 1516.506136][ T9226] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1516.555278][ T9226] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1516.591224][ T9226] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1516.698326][ T9226] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1516.735005][T21011] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 1516.762016][T21011] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 1516.793462][ T5289] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1516.801776][ T9226] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1516.834455][ T9226] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1516.843561][T21011] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 1516.900423][T21020] hsr_slave_0: left promiscuous mode [ 1516.919451][ T5682] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1516.936872][T21020] hsr_slave_1: left promiscuous mode [ 1516.956895][T21020] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1517.103233][ T5682] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1517.128754][ T5682] usb 2-1: string descriptor 0 read error: -22 [ 1517.144624][ T5682] usb 2-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.40 [ 1517.185853][ T5682] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1517.649972][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1517.692992][ T5682] hid_parser_main: 4006 callbacks suppressed [ 1517.693018][ T5682] hid_mf 0003:0079:1801.008B: unknown main item tag 0x0 [ 1517.747217][ T5682] hid_mf 0003:0079:1801.008B: unknown main item tag 0x0 [ 1517.773188][ T5682] hid_mf 0003:0079:1801.008B: unknown main item tag 0x0 [ 1517.796021][ T5682] hid_mf 0003:0079:1801.008B: unknown main item tag 0x0 [ 1517.825208][ T5682] hid_mf 0003:0079:1801.008B: unknown main item tag 0x0 [ 1517.845177][ T5682] hid_mf 0003:0079:1801.008B: unknown main item tag 0x0 [ 1517.858245][T21020] team0 (unregistering): Port device team_slave_1 removed [ 1517.873440][ T5682] hid_mf 0003:0079:1801.008B: unknown main item tag 0x0 [ 1517.904713][ T5682] hid_mf 0003:0079:1801.008B: unknown main item tag 0x0 [ 1517.929106][ T5682] hid_mf 0003:0079:1801.008B: unknown main item tag 0x0 [ 1517.940959][T21020] team0 (unregistering): Port device team_slave_0 removed [ 1517.958870][ T5682] hid_mf 0003:0079:1801.008B: unknown main item tag 0x0 [ 1518.186392][ T5682] hid_mf 0003:0079:1801.008B: hidraw0: USB HID vf.ff Device [HID 0079:1801] on usb-dummy_hcd.1-1/input0 [ 1518.231076][ T5682] hid_mf 0003:0079:1801.008B: Invalid report, this should never happen! [ 1518.258542][ T5682] hid_mf 0003:0079:1801.008B: Force feedback init failed. [ 1518.334958][ T5682] usb 2-1: USB disconnect, device number 18 [ 1518.917088][ T9527] netlink: 20 bytes leftover after parsing attributes in process `syz.2.16155'. [ 1518.974906][ T9226] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1519.029015][ T9226] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1519.067073][T21011] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 1519.167265][ T9528] netlink: 20 bytes leftover after parsing attributes in process `syz.2.16155'. [ 1519.545399][ T9545] fuse: Bad value for 'fd' [ 1519.560219][ T9545] fuse: Bad value for 'fd' [ 1519.671140][ T9226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1519.797049][ T9226] 8021q: adding VLAN 0 to HW filter on device team0 [ 1519.878061][ T5041] bridge0: port 1(bridge_slave_0) entered blocking state [ 1519.885314][ T5041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1519.961384][ T5041] bridge0: port 2(bridge_slave_1) entered blocking state [ 1519.968625][ T5041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1519.973315][T21020] IPVS: stop unused estimator thread 0... [ 1520.485457][ T9226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1520.788699][ T9226] veth0_vlan: entered promiscuous mode [ 1520.871112][ T9226] veth1_vlan: entered promiscuous mode [ 1520.873422][ T9571] netlink: 12 bytes leftover after parsing attributes in process `syz.5.16167'. [ 1521.056374][ T9571] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1521.196586][ T9574] bond3: (slave batadv1): Opening slave failed [ 1521.468042][ T9226] veth0_macvtap: entered promiscuous mode [ 1521.544137][ T9226] veth1_macvtap: entered promiscuous mode [ 1521.594921][ T5289] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1521.793900][ T9226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1521.867737][ T9226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1522.006573][ T5265] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1522.063184][ T5265] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1522.125884][ T5265] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1522.171977][ T5265] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1522.253040][ T9600] ip6erspan0: entered allmulticast mode [ 1522.660449][ T5265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1522.679243][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 1522.802454][ T5265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1523.061811][ T5265] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1523.122224][ T5265] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1523.399701][ T7527] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1523.609360][ T7527] usb 2-1: Using ep0 maxpacket: 8 [ 1523.630698][ T7527] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1523.655807][ T7527] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1523.675369][ T7527] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1523.701288][ T7527] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1523.756951][ T7527] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1523.793210][ T7527] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1523.866878][ T7527] hub 2-1:1.0: bad descriptor, ignoring hub [ 1523.899048][ T7527] hub 2-1:1.0: probe with driver hub failed with error -5 [ 1523.926052][ T7527] cdc_wdm 2-1:1.0: skipping garbage [ 1523.955294][ T7527] cdc_wdm 2-1:1.0: skipping garbage [ 1524.019283][ T7527] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1524.047713][ T7527] cdc_wdm 2-1:1.0: Unknown control protocol [ 1524.067432][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1524.074390][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1524.081183][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1524.087818][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1524.094941][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1524.101577][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1524.108169][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1524.114800][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1524.121618][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1524.128264][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1524.134780][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1524.141410][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1524.148111][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1524.154757][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1524.161336][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1524.167980][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1524.174365][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1524.180990][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1524.187345][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1524.193976][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1524.282577][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 1524.310461][ T7527] usb 2-1: Failed to suspend device, error -71 [ 1524.373536][ T7527] usb 2-1: USB disconnect, device number 19 [ 1524.969509][ T7527] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1525.052754][ T9657] fuse: Bad value for 'fd' [ 1525.079432][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1525.169712][ T7527] usb 2-1: Using ep0 maxpacket: 8 [ 1525.188451][ T7527] usb 2-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 1525.217687][ T7527] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1525.237457][ T7527] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1525.257812][ T9666] netlink: 12 bytes leftover after parsing attributes in process `syz.6.16199'. [ 1525.268880][ T7527] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1525.282041][ T7527] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1525.328127][ T7527] hub 2-1:1.0: bad descriptor, ignoring hub [ 1525.340988][ T7527] hub 2-1:1.0: probe with driver hub failed with error -5 [ 1525.365414][ T7527] cdc_wdm 2-1:1.0: skipping garbage [ 1525.379345][ T7527] cdc_wdm 2-1:1.0: skipping garbage [ 1525.396274][ T7527] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1525.710032][ T7527] usb 2-1: USB disconnect, device number 20 [ 1527.781192][ T9714] bridge0: port 2(bridge_slave_1) entered disabled state [ 1527.789028][ T9714] bridge0: port 1(bridge_slave_0) entered disabled state [ 1528.133994][ T9714] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1528.186981][ T9714] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1528.878580][ T9721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1528.908275][ T9721] 8021q: adding VLAN 0 to HW filter on device team0 [ 1528.938447][ T9721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1529.001432][ T9721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1529.015469][ T9721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1529.031846][ T9721] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1529.044067][ T9721] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1529.065221][ T9721] veth1_vlan: left promiscuous mode [ 1529.074337][ T9721] veth0_vlan: left promiscuous mode [ 1529.082548][ T9721] veth0_vlan: entered promiscuous mode [ 1529.093343][ T9721] veth1_vlan: entered promiscuous mode [ 1529.107740][ T9721] veth1_macvtap: left promiscuous mode [ 1529.116984][ T9721] veth0_macvtap: left promiscuous mode [ 1529.125026][ T9721] veth0_macvtap: entered promiscuous mode [ 1529.133797][ T9721] veth1_macvtap: entered promiscuous mode [ 1529.151587][ T9721] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1529.164330][ T9721] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1529.174971][ T9721] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1529.189104][ T9721] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1529.210598][ T9721] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1529.232779][ T9721] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1529.256182][ T9721] batadv_slave_0: entered promiscuous mode [ 1529.274501][T21020] bridge0: port 1(bridge_slave_0) entered blocking state [ 1529.281768][T21020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1529.319176][T21020] bridge0: port 2(bridge_slave_1) entered blocking state [ 1529.326439][T21020] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1529.433424][ T5041] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1529.461558][ T5041] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1529.573021][ T5041] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1529.614812][ T5041] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1529.656945][ T5041] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1529.706767][ T5041] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1529.741692][ T5041] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1529.784067][ T5041] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1530.100297][ T7527] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 1530.272645][ T7527] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1530.309568][ T7527] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1530.330610][ T7527] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1530.356135][ T7527] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1530.367622][ T7527] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1530.395505][ T7527] usb 2-1: config 0 descriptor?? [ 1530.855915][ T7527] plantronics 0003:047F:FFFF.008C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1532.123699][ T7063] usb 2-1: USB disconnect, device number 21 [ 1532.200641][ T9810] xt_hashlimit: size too large, truncated to 1048576 [ 1532.737923][ T9826] netlink: 35 bytes leftover after parsing attributes in process `syz.5.16258'. [ 1532.774705][ T9826] netlink: 24 bytes leftover after parsing attributes in process `syz.5.16258'. [ 1533.071036][ T9838] –: entered allmulticast mode [ 1533.141283][ T9835] –: left allmulticast mode [ 1534.773735][ T9907] netlink: 'syz.3.16286': attribute type 21 has an invalid length. [ 1534.782338][ T9907] netlink: 132 bytes leftover after parsing attributes in process `syz.3.16286'. [ 1536.091485][ T9949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16297'. [ 1536.158868][ T9950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16297'. [ 1536.191925][ T9950] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16297'. [ 1536.734159][ T9961] bridge0: port 3(vlan0) entered disabled state [ 1536.744362][ T9961] bridge0: port 2(bridge_slave_1) entered disabled state [ 1536.753891][ T9961] bridge0: port 1(bridge_slave_0) entered disabled state [ 1536.909414][ T9238] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1537.095127][ T9238] usb 2-1: Using ep0 maxpacket: 16 [ 1537.128890][ T9238] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1537.197121][ T9238] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1537.248196][ T9238] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1537.261996][ T9973] input: syz0 as /devices/virtual/input/input158 [ 1537.303832][ T9238] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1537.348918][ T9238] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1537.416628][ T9238] usb 2-1: config 0 descriptor?? [ 1537.950476][ T9995] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1537.972531][ T9238] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.008D/input/input159 [ 1538.117981][ T9238] microsoft 0003:045E:07DA.008D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1538.273396][ T9238] usb 2-1: USB disconnect, device number 22 [ 1538.513493][T10000] fido_id[10000]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1538.528343][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1539.034692][T10020] bridge0: port 3(vlan0) entered blocking state [ 1539.043586][T10020] bridge0: port 3(vlan0) entered listening state [ 1539.050322][T10020] bridge0: port 2(bridge_slave_1) entered blocking state [ 1539.057553][T10020] bridge0: port 2(bridge_slave_1) entered listening state [ 1539.065048][T10020] bridge0: port 1(bridge_slave_0) entered blocking state [ 1539.072303][T10020] bridge0: port 1(bridge_slave_0) entered listening state [ 1539.116341][T10020] bridge0: entered promiscuous mode [ 1539.124768][T10020] bridge0: entered allmulticast mode [ 1541.482420][T10082] vivid-002: disconnect [ 1541.517690][T10082] vivid-002: reconnect [ 1542.439568][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1542.466869][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1542.478188][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1542.486331][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1542.496977][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1542.642211][T10107] netlink: 4 bytes leftover after parsing attributes in process `syz.6.16351'. [ 1542.692136][T10107] netlink: 'syz.6.16351': attribute type 14 has an invalid length. [ 1542.782225][T10107] netlink: 'syz.6.16351': attribute type 13 has an invalid length. [ 1543.366337][T10107] vxlan0: entered promiscuous mode [ 1543.460521][T21006] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1543.495891][T21006] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1543.523065][T21006] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1543.664945][T21006] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1543.705946][T10126] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16357'. [ 1544.141608][ T9238] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 1544.343425][ T9238] usb 4-1: config 0 has no interfaces? [ 1544.405577][ T9238] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1544.447043][ T9238] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1544.465509][ T9238] usb 4-1: Product: syz [ 1544.484049][ T9238] usb 4-1: Manufacturer: syz [ 1544.501997][ T9238] usb 4-1: SerialNumber: syz [ 1544.534240][ T9238] usb 4-1: config 0 descriptor?? [ 1544.583415][T10105] bridge0: port 1(bridge_slave_0) entered blocking state [ 1544.609943][ T50] Bluetooth: hci2: command tx timeout [ 1544.633607][T10105] bridge0: port 1(bridge_slave_0) entered disabled state [ 1544.648024][T10105] bridge_slave_0: entered allmulticast mode [ 1544.657751][T10105] bridge_slave_0: entered promiscuous mode [ 1544.667725][T10105] bridge0: port 2(bridge_slave_1) entered blocking state [ 1544.676490][T10105] bridge0: port 2(bridge_slave_1) entered disabled state [ 1544.684703][T10105] bridge_slave_1: entered allmulticast mode [ 1544.693398][T10105] bridge_slave_1: entered promiscuous mode [ 1544.734276][T10105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1544.751191][T10105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1544.810426][ T9238] usb 4-1: USB disconnect, device number 20 [ 1544.887037][T10105] team0: Port device team_slave_0 added [ 1544.897147][T10105] team0: Port device team_slave_1 added [ 1544.957398][T10105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1544.975034][T10105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1545.050905][T10105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1545.102327][T10105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1545.118289][T10105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1545.155242][T10105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1545.332437][T10155] tipc: Enabled bearer , priority 10 [ 1545.393665][T10105] hsr_slave_0: entered promiscuous mode [ 1545.445454][T10105] hsr_slave_1: entered promiscuous mode [ 1545.483168][T10105] debugfs: 'hsr0' already exists in 'hsr' [ 1545.514049][T10105] Cannot create hsr debugfs directory [ 1546.205449][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.214466][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.466622][ T9238] tipc: Node number set to 2886997007 [ 1546.679699][ T50] Bluetooth: hci2: command tx timeout [ 1546.723155][T10105] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1546.745737][T10105] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1546.777950][T10105] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1546.825263][T10105] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1546.856047][T10105] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1546.952342][T10105] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1546.978833][T10105] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1547.019270][T10105] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1547.337921][T10192] netlink: 'syz.3.16381': attribute type 29 has an invalid length. [ 1547.382769][T10192] netlink: 'syz.3.16381': attribute type 29 has an invalid length. [ 1547.416936][T10192] netlink: 'syz.3.16381': attribute type 32 has an invalid length. [ 1547.445953][T10192] netlink: 500 bytes leftover after parsing attributes in process `syz.3.16381'. [ 1547.476133][T10105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1547.532539][T10105] 8021q: adding VLAN 0 to HW filter on device team0 [ 1547.597743][T21006] bridge0: port 1(bridge_slave_0) entered blocking state [ 1547.605022][T21006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1547.716254][ T5262] bridge0: port 2(bridge_slave_1) entered blocking state [ 1547.723546][ T5262] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1547.828072][T10196] netlink: 104 bytes leftover after parsing attributes in process `syz.2.16383'. [ 1548.082547][T10105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1548.204662][ T30] audit: type=1326 audit(1777462192.634:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10200 comm="syz.2.16385" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0a2959cdd9 code=0x0 [ 1548.303524][T10105] veth0_vlan: entered promiscuous mode [ 1548.351374][T10105] veth1_vlan: entered promiscuous mode [ 1548.481187][T10105] veth0_macvtap: entered promiscuous mode [ 1548.528269][T10105] veth1_macvtap: entered promiscuous mode [ 1548.583251][T10105] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1548.642401][T10105] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1548.684539][T21011] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1548.717400][T21011] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1548.757508][T21011] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1548.769531][ T50] Bluetooth: hci2: command tx timeout [ 1548.788704][T21011] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1548.965044][ T7525] hid_parser_main: 4002 callbacks suppressed [ 1548.965093][ T7525] hid-generic 0000:0000:0000.008E: unknown main item tag 0x0 [ 1549.095561][ T7525] hid-generic 0000:0000:0000.008E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1549.222951][ T5265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1549.265428][ T5265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1549.501648][ T5041] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1549.536635][ T5041] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1549.775563][ T5265] tipc: Subscription rejected, illegal request [ 1549.802201][ T30] audit: type=1326 audit(1777462194.234:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10224 comm="syz.6.16394" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f626c59cdd9 code=0x0 [ 1550.839664][ T50] Bluetooth: hci2: command tx timeout [ 1550.986210][T10255] veth0: entered promiscuous mode [ 1551.016987][T10255] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16402'. [ 1552.613645][T10314] netlink: 'syz.2.16416': attribute type 1 has an invalid length. [ 1552.654515][T10317] input: syz0 as /devices/virtual/input/input160 [ 1552.699815][T10314] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1554.433984][T10357] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16435'. [ 1554.908051][T10368] netlink: 48 bytes leftover after parsing attributes in process `syz.3.16439'. [ 1554.937243][T10368] netlink: 48 bytes leftover after parsing attributes in process `syz.3.16439'. [ 1558.111389][T10433] syzkaller1: entered promiscuous mode [ 1558.138519][T10433] syzkaller1: entered allmulticast mode [ 1558.725701][ T30] audit: type=1326 audit(1777462203.154:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10450 comm="syz.6.16473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f626c59cdd9 code=0x7ffc0000 [ 1558.836202][ T30] audit: type=1326 audit(1777462203.154:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10450 comm="syz.6.16473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f626c59cdd9 code=0x7ffc0000 [ 1558.956104][ T30] audit: type=1326 audit(1777462203.194:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10450 comm="syz.6.16473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f626c59cdd9 code=0x7ffc0000 [ 1559.008461][T10458] loop3: detected capacity change from 0 to 7 [ 1559.015180][ T30] audit: type=1326 audit(1777462203.194:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10450 comm="syz.6.16473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f626c59cdd9 code=0x7ffc0000 [ 1559.071444][T10458] Dev loop3: unable to read RDB block 7 [ 1559.097650][T10458] loop3: unable to read partition table [ 1559.126897][T10458] loop3: partition table beyond EOD, truncated [ 1559.135087][ T30] audit: type=1326 audit(1777462203.194:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10450 comm="syz.6.16473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f626c59cdd9 code=0x7ffc0000 [ 1559.182654][T10458] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1559.271412][T10462] xt_hashlimit: size too large, truncated to 1048576 [ 1559.293513][ T30] audit: type=1326 audit(1777462203.204:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10450 comm="syz.6.16473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f626c59cdd9 code=0x7ffc0000 [ 1559.428625][ T30] audit: type=1326 audit(1777462203.204:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10450 comm="syz.6.16473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f626c59cdd9 code=0x7ffc0000 [ 1559.488005][ T30] audit: type=1326 audit(1777462203.204:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10450 comm="syz.6.16473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f626c59cdd9 code=0x7ffc0000 [ 1560.499642][ T7527] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1560.703866][ T7527] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1560.764423][ T7527] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1560.808436][ T7527] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1560.844762][ T7527] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1560.898663][T10497] sit3: entered promiscuous mode [ 1560.910385][T10479] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1560.945681][ T7527] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1561.305870][ T7527] usb 4-1: USB disconnect, device number 21 [ 1562.460576][T10541] netlink: 'syz.2.16513': attribute type 1 has an invalid length. [ 1562.710855][T10541] bond7: entered promiscuous mode [ 1562.744767][T10541] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1562.816405][T10558] netlink: 212348 bytes leftover after parsing attributes in process `syz.6.16517'. [ 1562.856393][T10558] netlink: Conntrack attr has 4 unknown bytes [ 1562.868821][T10548] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1562.925685][T10548] bond7: (slave vti0): The slave device specified does not support setting the MAC address [ 1562.980694][T10548] bond7: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 1563.038736][T10548] bond7: (slave vti0): making interface the new active one [ 1563.078649][T10548] vti0: entered promiscuous mode [ 1563.144680][T10548] bond7: (slave vti0): Enslaving as an active interface with an up link [ 1563.470395][ T7527] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1563.652770][ T7527] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1563.711892][ T7527] usb 4-1: string descriptor 0 read error: -22 [ 1563.760033][ T7527] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 1563.791932][ T7527] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1564.497424][ T7527] uclogic 0003:5543:006E.008F: failed retrieving string descriptor #200: -71 [ 1564.536600][ T7527] uclogic 0003:5543:006E.008F: failed retrieving pen parameters: -71 [ 1564.563243][ T7527] uclogic 0003:5543:006E.008F: failed probing pen v2 parameters: -71 [ 1564.588444][ T7527] uclogic 0003:5543:006E.008F: failed probing parameters: -71 [ 1564.609482][ T7527] uclogic 0003:5543:006E.008F: probe with driver uclogic failed with error -71 [ 1564.636253][ T7527] usb 4-1: USB disconnect, device number 22 [ 1564.743618][T10601] fuse: Bad value for 'fd' [ 1565.061074][T10609] vxlan0: left promiscuous mode [ 1565.084605][ T5276] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1565.123404][ T5276] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1565.175844][ T5276] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1565.217432][ T5276] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1565.457234][T10619] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.16544'. [ 1566.679365][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1568.536300][T10670] bridge0: port 2(bridge_slave_1) entered disabled state [ 1568.544208][T10670] bridge0: port 1(bridge_slave_0) entered disabled state [ 1568.664066][T10670] bridge0: port 2(bridge_slave_1) entered blocking state [ 1568.671352][T10670] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1568.678897][T10670] bridge0: port 1(bridge_slave_0) entered blocking state [ 1568.686162][T10670] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1568.740139][T10670] team0: Port device bridge0 added [ 1569.254474][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 1569.266042][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 1569.273468][ C0] bridge0: port 3(vlan0) entered learning state [ 1569.370851][ T5682] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1569.562453][ T5682] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1569.608618][ T5682] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1569.643098][ T5682] usb 4-1: Product: syz [ 1569.668409][ T5682] usb 4-1: Manufacturer: syz [ 1569.683950][ T5682] usb 4-1: SerialNumber: syz [ 1569.724257][ T5682] usb 4-1: config 0 descriptor?? [ 1570.547245][T10707] netlink: 4 bytes leftover after parsing attributes in process `syz.6.16581'. [ 1570.967434][T10716] netlink: 'syz.6.16585': attribute type 11 has an invalid length. [ 1571.059500][ T5682] usb 4-1: Firmware version (0.0) predates our first public release. [ 1571.109306][ T5682] usb 4-1: Please update to version 0.2 or newer [ 1571.273728][ T5682] usb 4-1: USB disconnect, device number 23 [ 1572.700984][T10747] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16597'. [ 1572.989464][T26571] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1573.161203][T26571] usb 4-1: Using ep0 maxpacket: 32 [ 1573.193009][T26571] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 1573.234175][T26571] usb 4-1: config 0 has no interface number 0 [ 1573.267671][T26571] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1573.302396][T26571] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1573.341095][T26571] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1573.366946][T26571] usb 4-1: Product: syz [ 1573.380754][T26571] usb 4-1: Manufacturer: syz [ 1573.411934][T26571] usb 4-1: SerialNumber: syz [ 1573.452731][T26571] usb 4-1: config 0 descriptor?? [ 1573.488096][T26571] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1573.539594][T26571] em28xx 4-1:0.132: Video interface 132 found: [ 1573.923324][T26571] em28xx 4-1:0.132: chip ID is em2874 [ 1574.732100][T26571] em28xx 4-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 1574.768572][T26571] em28xx 4-1:0.132: failed to read eeprom (err=-5) [ 1574.797913][T26571] em28xx 4-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 1574.899207][T26571] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1574.928838][T26571] em28xx 4-1:0.132: analog set to bulk mode. [ 1574.955177][ T7004] em28xx 4-1:0.132: Registering V4L2 extension [ 1574.988105][T26571] usb 4-1: USB disconnect, device number 24 [ 1575.020924][T26571] em28xx 4-1:0.132: Disconnecting em28xx [ 1575.572856][ T7004] usb 4-1: Decoder not found [ 1575.602103][ T7004] em28xx 4-1:0.132: failed to create media graph [ 1575.638332][ T7004] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 1575.766666][ T7004] em28xx 4-1:0.132: Remote control support is not available for this card. [ 1575.807357][T26571] em28xx 4-1:0.132: Closing input extension [ 1576.245233][T26571] em28xx 4-1:0.132: Freeing device [ 1578.636484][T10847] netlink: 'syz.3.16637': attribute type 1 has an invalid length. [ 1578.813268][T10847] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1578.877876][T10855] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1580.864171][T10885] macsec3: left promiscuous mode [ 1580.887032][T10885] hsr1: left promiscuous mode [ 1580.923285][T10885] sit3: left promiscuous mode [ 1580.962550][T10885] bond7: left promiscuous mode [ 1580.990281][T10885] vti0: left promiscuous mode [ 1582.822392][ T30] audit: type=1800 audit(1777462227.254:948): pid=10919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.16665" name="SYSV00000000" dev="tmpfs" ino=3 res=0 errno=0 [ 1582.889604][T26571] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1583.059333][T26571] usb 4-1: Using ep0 maxpacket: 16 [ 1583.078555][T26571] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1583.118598][T26571] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1583.149015][T26571] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1583.189951][T26571] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1583.219598][T26571] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1583.253808][T26571] usb 4-1: config 0 descriptor?? [ 1583.709611][T26571] shield 0003:0955:7214.0090: unknown main item tag 0x0 [ 1583.729458][T26571] shield 0003:0955:7214.0090: unknown main item tag 0x0 [ 1583.749227][T26571] shield 0003:0955:7214.0090: unknown main item tag 0x0 [ 1583.769381][T26571] shield 0003:0955:7214.0090: unknown main item tag 0x0 [ 1583.792047][T26571] shield 0003:0955:7214.0090: unknown main item tag 0x0 [ 1583.823510][T26571] input: HID 0955:7214 Haptics as /devices/virtual/input/input161 [ 1583.899225][T26571] shield 0003:0955:7214.0090: Registered Thunderstrike controller [ 1583.941550][T26571] shield 0003:0955:7214.0090: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 1584.034428][ T7004] shield 0003:0955:7214.0090: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1584.062242][T26571] usb 4-1: USB disconnect, device number 25 [ 1584.079671][ T7004] shield 0003:0955:7214.0090: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1584.130890][ T7004] shield 0003:0955:7214.0090: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1584.168457][ T7004] shield 0003:0955:7214.0090: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1585.058771][T10954] netlink: 8 bytes leftover after parsing attributes in process `syz.7.16676'. [ 1585.069890][T10954] netlink: 12 bytes leftover after parsing attributes in process `syz.7.16676'. [ 1585.081811][T10954] netlink: 8 bytes leftover after parsing attributes in process `syz.7.16676'. [ 1585.092333][T10954] netlink: 12 bytes leftover after parsing attributes in process `syz.7.16676'. [ 1585.164843][ T5682] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1585.385720][ T5682] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1585.544314][ T5682] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1585.636670][ T5682] usb 4-1: string descriptor 0 read error: -22 [ 1585.725426][ T5682] usb 4-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.40 [ 1585.839934][ T5682] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1586.196002][T10993] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1586.405813][ T5682] hid (null): report_id 1010848821 is invalid [ 1586.727849][ T5682] glorious 0003:22D4:1503.0091: report_id 1010848821 is invalid [ 1586.777552][ T5682] glorious 0003:22D4:1503.0091: item 0 4 1 8 parsing failed [ 1586.823402][ T5682] glorious 0003:22D4:1503.0091: probe with driver glorious failed with error -22 [ 1586.913651][ T5682] usb 4-1: USB disconnect, device number 26 [ 1589.126915][T11062] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16706'. [ 1589.164376][T11062] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16706'. [ 1590.669608][ T5989] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1590.693949][ T5989] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1590.705076][ T5989] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1590.732256][ T5989] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1590.738288][T11092] vxcan1: tx drop: invalid sa for name 0x0000000000000002 [ 1590.753400][ T5989] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1592.201690][T11112] tipc: Started in network mode [ 1592.217678][T11112] tipc: Node identity ac14140f, cluster identity 4711 [ 1592.274039][T11112] tipc: Enabled bearer , priority 10 [ 1592.485750][T11122] [ 1592.488139][T11122] ===================================================== [ 1592.495080][T11122] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1592.502589][T11122] syzkaller #0 Tainted: G L [ 1592.508583][T11122] ----------------------------------------------------- [ 1592.515528][T11122] syz.2.16731/11122 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1592.523357][T11122] ffffffff8e60a058 (tasklist_lock){.+.+}-{3:3}, at: send_sigio+0x101/0x370 [ 1592.532025][T11122] [ 1592.532025][T11122] and this task is already holding: [ 1592.539406][T11122] ffff888032b339a0 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x38/0x370 [ 1592.548064][T11122] which would create a new lock dependency: [ 1592.553973][T11122] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 1592.561574][T11122] [ 1592.561574][T11122] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1592.571034][T11122] (&client->buffer_lock){..-.}-{3:3} [ 1592.571071][T11122] [ 1592.571071][T11122] ... which became SOFTIRQ-irq-safe at: [ 1592.584143][T11122] lock_acquire+0x106/0x350 [ 1592.588745][T11122] _raw_spin_lock+0x2e/0x40 [ 1592.593334][T11122] evdev_pass_values+0xb9/0xbd0 [ 1592.598294][T11122] evdev_events+0x1e6/0x340 [ 1592.602914][T11122] input_pass_values+0x288/0x890 [ 1592.607957][T11122] input_event_dispose+0x330/0x6b0 [ 1592.613163][T11122] input_event+0x84/0xc0 [ 1592.617496][T11122] xpad360_process_packet+0x641/0xdc0 [ 1592.622963][T11122] xpad_irq_in+0x14e/0x25c0 [ 1592.627556][T11122] __usb_hcd_giveback_urb+0x376/0x540 [ 1592.633029][T11122] dummy_timer+0xbc0/0x4650 [ 1592.637630][T11122] __hrtimer_run_queues+0x3c0/0xa20 [ 1592.642927][T11122] hrtimer_run_softirq+0x17a/0x240 [ 1592.648136][T11122] handle_softirqs+0x22a/0x840 [ 1592.652996][T11122] __irq_exit_rcu+0xca/0x220 [ 1592.657682][T11122] irq_exit_rcu+0x9/0x30 [ 1592.662013][T11122] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1592.667741][T11122] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1592.673815][T11122] rcu_is_watching+0x15/0xb0 [ 1592.678499][T11122] lock_acquire+0x5f/0x350 [ 1592.683010][T11122] unwind_next_frame+0xc3/0x2550 [ 1592.688051][T11122] arch_stack_walk+0x11b/0x150 [ 1592.692911][T11122] stack_trace_save+0xa9/0x100 [ 1592.697782][T11122] kasan_save_track+0x3e/0x80 [ 1592.702556][T11122] __kasan_kmalloc+0x93/0xb0 [ 1592.707243][T11122] __kmalloc_cache_noprof+0x31c/0x660 [ 1592.712719][T11122] dummy_urb_enqueue+0x7c/0x780 [ 1592.717669][T11122] usb_hcd_submit_urb+0x328/0x1b70 [ 1592.722891][T11122] usb_start_wait_urb+0x13f/0x5b0 [ 1592.728019][T11122] usb_control_msg+0x234/0x3e0 [ 1592.732878][T11122] usb_control_msg_recv+0xd2/0x170 [ 1592.738082][T11122] xpad_start_input+0x242/0x310 [ 1592.743029][T11122] input_open_device+0x1f8/0x3b0 [ 1592.748085][T11122] evdev_open+0x4b1/0x5b0 [ 1592.752520][T11122] chrdev_open+0x4cd/0x5e0 [ 1592.757032][T11122] do_dentry_open+0x785/0x14e0 [ 1592.761892][T11122] vfs_open+0x3b/0x340 [ 1592.766051][T11122] path_openat+0x2e08/0x3860 [ 1592.770741][T11122] do_file_open+0x23e/0x4a0 [ 1592.775341][T11122] do_sys_openat2+0x113/0x200 [ 1592.780137][T11122] __x64_sys_openat+0x138/0x170 [ 1592.785092][T11122] do_syscall_64+0x15f/0xf80 [ 1592.789788][T11122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1592.795788][T11122] [ 1592.795788][T11122] to a SOFTIRQ-irq-unsafe lock: [ 1592.802814][T11122] (tasklist_lock){.+.+}-{3:3} [ 1592.802847][T11122] [ 1592.802847][T11122] ... which became SOFTIRQ-irq-unsafe at: [ 1592.815468][T11122] ... [ 1592.815480][T11122] lock_acquire+0x106/0x350 [ 1592.822645][T11122] _raw_read_lock+0x36/0x50 [ 1592.827240][T11122] __do_wait+0xde/0x740 [ 1592.831498][T11122] do_wait+0x1e7/0x510 [ 1592.835665][T11122] kernel_wait+0xd6/0x1c0 [ 1592.840093][T11122] call_usermodehelper_exec_work+0xbe/0x230 [ 1592.846082][T11122] process_scheduled_works+0xb5d/0x1860 [ 1592.851721][T11122] worker_thread+0xa53/0xfc0 [ 1592.856402][T11122] kthread+0x388/0x470 [ 1592.860568][T11122] ret_from_fork+0x514/0xb70 [ 1592.865247][T11122] ret_from_fork_asm+0x1a/0x30 [ 1592.870105][T11122] [ 1592.870105][T11122] other info that might help us debug this: [ 1592.870105][T11122] [ 1592.880350][T11122] Chain exists of: [ 1592.880350][T11122] &client->buffer_lock --> &f_owner->lock --> tasklist_lock [ 1592.880350][T11122] [ 1592.893615][T11122] Possible interrupt unsafe locking scenario: [ 1592.893615][T11122] [ 1592.901931][T11122] CPU0 CPU1 [ 1592.907295][T11122] ---- ---- [ 1592.912674][T11122] lock(tasklist_lock); [ 1592.916933][T11122] local_irq_disable(); [ 1592.923682][T11122] lock(&client->buffer_lock); [ 1592.931061][T11122] lock(&f_owner->lock); [ 1592.937917][T11122] [ 1592.941373][T11122] lock(&client->buffer_lock); [ 1592.946403][T11122] [ 1592.946403][T11122] *** DEADLOCK *** [ 1592.946403][T11122] [ 1592.954548][T11122] 5 locks held by syz.2.16731/11122: [ 1592.959835][T11122] #0: ffff88807ab1e410 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1592.968996][T11122] #1: ffff88807f4bacb8 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: __start_renaming+0x148/0x410 [ 1592.979737][T11122] #2: ffffffff9a4bc998 (&fsnotify_mark_srcu){.+.?}-{0:0}, at: fsnotify+0x74c/0x1ae0 [ 1592.989236][T11122] #3: ffff8880466e1420 (&mark->lock){+.+.}-{3:3}, at: dnotify_handle_event+0x62/0x440 [ 1592.998909][T11122] #4: ffff888032b339a0 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x38/0x370 [ 1593.007975][T11122] [ 1593.007975][T11122] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1593.018385][T11122] -> (&client->buffer_lock){..-.}-{3:3} { [ 1593.024303][T11122] IN-SOFTIRQ-W at: [ 1593.028463][T11122] lock_acquire+0x106/0x350 [ 1593.034975][T11122] _raw_spin_lock+0x2e/0x40 [ 1593.041489][T11122] evdev_pass_values+0xb9/0xbd0 [ 1593.048347][T11122] evdev_events+0x1e6/0x340 [ 1593.054858][T11122] input_pass_values+0x288/0x890 [ 1593.061809][T11122] input_event_dispose+0x330/0x6b0 [ 1593.068922][T11122] input_event+0x84/0xc0 [ 1593.075182][T11122] xpad360_process_packet+0x641/0xdc0 [ 1593.082558][T11122] xpad_irq_in+0x14e/0x25c0 [ 1593.089064][T11122] __usb_hcd_giveback_urb+0x376/0x540 [ 1593.096450][T11122] dummy_timer+0xbc0/0x4650 [ 1593.102957][T11122] __hrtimer_run_queues+0x3c0/0xa20 [ 1593.110157][T11122] hrtimer_run_softirq+0x17a/0x240 [ 1593.117274][T11122] handle_softirqs+0x22a/0x840 [ 1593.124048][T11122] __irq_exit_rcu+0xca/0x220 [ 1593.130649][T11122] irq_exit_rcu+0x9/0x30 [ 1593.136890][T11122] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1593.144527][T11122] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1593.152511][T11122] rcu_is_watching+0x15/0xb0 [ 1593.159109][T11122] lock_acquire+0x5f/0x350 [ 1593.165542][T11122] unwind_next_frame+0xc3/0x2550 [ 1593.172489][T11122] arch_stack_walk+0x11b/0x150 [ 1593.179254][T11122] stack_trace_save+0xa9/0x100 [ 1593.186031][T11122] kasan_save_track+0x3e/0x80 [ 1593.192719][T11122] __kasan_kmalloc+0x93/0xb0 [ 1593.199319][T11122] __kmalloc_cache_noprof+0x31c/0x660 [ 1593.206701][T11122] dummy_urb_enqueue+0x7c/0x780 [ 1593.213561][T11122] usb_hcd_submit_urb+0x328/0x1b70 [ 1593.220677][T11122] usb_start_wait_urb+0x13f/0x5b0 [ 1593.227710][T11122] usb_control_msg+0x234/0x3e0 [ 1593.234474][T11122] usb_control_msg_recv+0xd2/0x170 [ 1593.241587][T11122] xpad_start_input+0x242/0x310 [ 1593.248446][T11122] input_open_device+0x1f8/0x3b0 [ 1593.255391][T11122] evdev_open+0x4b1/0x5b0 [ 1593.261730][T11122] chrdev_open+0x4cd/0x5e0 [ 1593.268156][T11122] do_dentry_open+0x785/0x14e0 [ 1593.274924][T11122] vfs_open+0x3b/0x340 [ 1593.280992][T11122] path_openat+0x2e08/0x3860 [ 1593.287584][T11122] do_file_open+0x23e/0x4a0 [ 1593.294096][T11122] do_sys_openat2+0x113/0x200 [ 1593.300776][T11122] __x64_sys_openat+0x138/0x170 [ 1593.307629][T11122] do_syscall_64+0x15f/0xf80 [ 1593.314222][T11122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1593.322116][T11122] INITIAL USE at: [ 1593.326186][T11122] lock_acquire+0x106/0x350 [ 1593.332601][T11122] _raw_spin_lock+0x2e/0x40 [ 1593.339016][T11122] evdev_pass_values+0xb9/0xbd0 [ 1593.345788][T11122] evdev_events+0x1e6/0x340 [ 1593.352211][T11122] input_pass_values+0x288/0x890 [ 1593.359075][T11122] input_event_dispose+0x330/0x6b0 [ 1593.366116][T11122] input_inject_event+0x1dc/0x330 [ 1593.373060][T11122] evdev_write+0x325/0x4c0 [ 1593.379397][T11122] vfs_write+0x29a/0xb90 [ 1593.385557][T11122] ksys_write+0x150/0x270 [ 1593.391820][T11122] do_syscall_64+0x15f/0xf80 [ 1593.398339][T11122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1593.406158][T11122] } [ 1593.408830][T11122] ... key at: [] evdev_open.__key.27+0x0/0x20 [ 1593.417215][T11122] -> (&new->fa_lock){....}-{3:3} { [ 1593.422434][T11122] INITIAL USE at: [ 1593.426414][T11122] lock_acquire+0x106/0x350 [ 1593.432658][T11122] _raw_write_lock_irq+0x3d/0x50 [ 1593.439338][T11122] fasync_remove_entry+0xf1/0x1c0 [ 1593.446110][T11122] __fput+0x890/0xa60 [ 1593.451834][T11122] task_work_run+0x1d9/0x270 [ 1593.458170][T11122] exit_to_user_mode_loop+0xed/0x480 [ 1593.465197][T11122] do_syscall_64+0x33e/0xf80 [ 1593.471531][T11122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1593.479168][T11122] INITIAL READ USE at: [ 1593.483582][T11122] lock_acquire+0x106/0x350 [ 1593.490263][T11122] _raw_read_lock_irqsave+0x48/0x60 [ 1593.497637][T11122] kill_fasync+0x199/0x4d0 [ 1593.504238][T11122] pipe_release+0x19c/0x330 [ 1593.510913][T11122] __fput+0x44f/0xa60 [ 1593.517070][T11122] task_work_run+0x1d9/0x270 [ 1593.523839][T11122] exit_to_user_mode_loop+0xed/0x480 [ 1593.531304][T11122] do_syscall_64+0x33e/0xf80 [ 1593.538071][T11122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1593.546138][T11122] } [ 1593.548720][T11122] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1593.557526][T11122] ... acquired at: [ 1593.561420][T11122] _raw_read_lock_irqsave+0x48/0x60 [ 1593.566803][T11122] kill_fasync+0x199/0x4d0 [ 1593.571404][T11122] evdev_pass_values+0x627/0xbd0 [ 1593.576522][T11122] evdev_events+0x1e6/0x340 [ 1593.581208][T11122] input_pass_values+0x288/0x890 [ 1593.586327][T11122] input_event_dispose+0x330/0x6b0 [ 1593.591616][T11122] input_inject_event+0x1dc/0x330 [ 1593.596819][T11122] evdev_write+0x325/0x4c0 [ 1593.601416][T11122] vfs_write+0x29a/0xb90 [ 1593.605836][T11122] ksys_write+0x150/0x270 [ 1593.610346][T11122] do_syscall_64+0x15f/0xf80 [ 1593.615114][T11122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1593.621189][T11122] [ 1593.623507][T11122] -> (&f_owner->lock){....}-{3:3} { [ 1593.628724][T11122] INITIAL USE at: [ 1593.632637][T11122] lock_acquire+0x106/0x350 [ 1593.638725][T11122] _raw_write_lock_irq+0x3d/0x50 [ 1593.645239][T11122] __f_setown+0x67/0x370 [ 1593.651057][T11122] tun_chr_fasync+0x127/0x1a0 [ 1593.657304][T11122] do_fcntl+0x1201/0x1a20 [ 1593.663206][T11122] __se_sys_fcntl+0xc8/0x150 [ 1593.669369][T11122] do_syscall_64+0x15f/0xf80 [ 1593.675532][T11122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1593.683001][T11122] INITIAL READ USE at: [ 1593.687345][T11122] lock_acquire+0x106/0x350 [ 1593.693853][T11122] _raw_read_lock_irqsave+0x48/0x60 [ 1593.701052][T11122] send_sigio+0x38/0x370 [ 1593.707306][T11122] dnotify_handle_event+0x169/0x440 [ 1593.714508][T11122] fsnotify+0x1831/0x1ae0 [ 1593.720847][T11122] path_openat+0x15c2/0x3860 [ 1593.727445][T11122] do_file_open+0x23e/0x4a0 [ 1593.733954][T11122] do_sys_openat2+0x113/0x200 [ 1593.740634][T11122] __x64_sys_openat+0x138/0x170 [ 1593.747485][T11122] do_syscall_64+0x15f/0xf80 [ 1593.754081][T11122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1593.761978][T11122] } [ 1593.764475][T11122] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1593.773335][T11122] ... acquired at: [ 1593.777134][T11122] _raw_read_lock_irqsave+0x48/0x60 [ 1593.782504][T11122] send_sigio+0x38/0x370 [ 1593.786925][T11122] kill_fasync+0x24d/0x4d0 [ 1593.791523][T11122] sock_wake_async+0x137/0x160 [ 1593.796468][T11122] sk_wake_async+0x184/0x280 [ 1593.801241][T11122] unix_release_sock+0x74f/0xc80 [ 1593.806360][T11122] unix_release+0x92/0xd0 [ 1593.810869][T11122] sock_close+0xc3/0x240 [ 1593.815299][T11122] __fput+0x44f/0xa60 [ 1593.819460][T11122] task_work_run+0x1d9/0x270 [ 1593.824229][T11122] exit_to_user_mode_loop+0xed/0x480 [ 1593.829689][T11122] do_syscall_64+0x33e/0xf80 [ 1593.834457][T11122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1593.840613][T11122] [ 1593.842934][T11122] [ 1593.842934][T11122] the dependencies between the lock to be acquired [ 1593.842957][T11122] and SOFTIRQ-irq-unsafe lock: [ 1593.856465][T11122] -> (tasklist_lock){.+.+}-{3:3} { [ 1593.861599][T11122] HARDIRQ-ON-R at: [ 1593.865577][T11122] lock_acquire+0x106/0x350 [ 1593.871743][T11122] _raw_read_lock+0x36/0x50 [ 1593.877912][T11122] __do_wait+0xde/0x740 [ 1593.883727][T11122] do_wait+0x1e7/0x510 [ 1593.889455][T11122] kernel_wait+0xd6/0x1c0 [ 1593.895449][T11122] call_usermodehelper_exec_work+0xbe/0x230 [ 1593.902997][T11122] process_scheduled_works+0xb5d/0x1860 [ 1593.910218][T11122] worker_thread+0xa53/0xfc0 [ 1593.916463][T11122] kthread+0x388/0x470 [ 1593.922186][T11122] ret_from_fork+0x514/0xb70 [ 1593.928425][T11122] ret_from_fork_asm+0x1a/0x30 [ 1593.934846][T11122] SOFTIRQ-ON-R at: [ 1593.938827][T11122] lock_acquire+0x106/0x350 [ 1593.944982][T11122] _raw_read_lock+0x36/0x50 [ 1593.951143][T11122] __do_wait+0xde/0x740 [ 1593.956954][T11122] do_wait+0x1e7/0x510 [ 1593.962682][T11122] kernel_wait+0xd6/0x1c0 [ 1593.968675][T11122] call_usermodehelper_exec_work+0xbe/0x230 [ 1593.976223][T11122] process_scheduled_works+0xb5d/0x1860 [ 1593.983424][T11122] worker_thread+0xa53/0xfc0 [ 1593.989665][T11122] kthread+0x388/0x470 [ 1593.995393][T11122] ret_from_fork+0x514/0xb70 [ 1594.001636][T11122] ret_from_fork_asm+0x1a/0x30 [ 1594.008062][T11122] INITIAL USE at: [ 1594.011953][T11122] lock_acquire+0x106/0x350 [ 1594.018031][T11122] _raw_write_lock_irq+0x3d/0x50 [ 1594.024535][T11122] copy_process+0x2b5e/0x4450 [ 1594.030777][T11122] kernel_clone+0x284/0x8f0 [ 1594.036853][T11122] user_mode_thread+0x110/0x180 [ 1594.043280][T11122] rest_init+0x23/0x300 [ 1594.049012][T11122] start_kernel+0x38a/0x3e0 [ 1594.055175][T11122] x86_64_start_reservations+0x24/0x30 [ 1594.062493][T11122] x86_64_start_kernel+0x143/0x1c0 [ 1594.069184][T11122] common_startup_64+0x13e/0x147 [ 1594.075690][T11122] INITIAL READ USE at: [ 1594.080019][T11122] lock_acquire+0x106/0x350 [ 1594.086523][T11122] _raw_read_lock+0x36/0x50 [ 1594.093026][T11122] __do_wait+0xde/0x740 [ 1594.099189][T11122] do_wait+0x1e7/0x510 [ 1594.105268][T11122] kernel_wait+0xd6/0x1c0 [ 1594.111603][T11122] call_usermodehelper_exec_work+0xbe/0x230 [ 1594.119495][T11122] process_scheduled_works+0xb5d/0x1860 [ 1594.127045][T11122] worker_thread+0xa53/0xfc0 [ 1594.133635][T11122] kthread+0x388/0x470 [ 1594.139708][T11122] ret_from_fork+0x514/0xb70 [ 1594.146294][T11122] ret_from_fork_asm+0x1a/0x30 [ 1594.153063][T11122] } [ 1594.155556][T11122] ... key at: [] tasklist_lock+0x18/0x40 [ 1594.163345][T11122] ... acquired at: [ 1594.167152][T11122] _raw_read_lock+0x36/0x50 [ 1594.171835][T11122] send_sigio+0x101/0x370 [ 1594.176342][T11122] dnotify_handle_event+0x169/0x440 [ 1594.181714][T11122] fsnotify+0x1831/0x1ae0 [ 1594.186226][T11122] fsnotify_move+0x1d7/0x5b0 [ 1594.190993][T11122] vfs_rename+0xcdd/0xeb0 [ 1594.195503][T11122] filename_renameat2+0x539/0x9c0 [ 1594.200706][T11122] __se_sys_renameat2+0x5a/0x2c0 [ 1594.205826][T11122] do_syscall_64+0x15f/0xf80 [ 1594.210598][T11122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1594.216667][T11122] [ 1594.218992][T11122] [ 1594.218992][T11122] stack backtrace: [ 1594.224883][T11122] CPU: 0 UID: 0 PID: 11122 Comm: syz.2.16731 Tainted: G L syzkaller #0 PREEMPT(full) [ 1594.224910][T11122] Tainted: [L]=SOFTLOCKUP [ 1594.224917][T11122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1594.224929][T11122] Call Trace: [ 1594.224938][T11122] [ 1594.224946][T11122] dump_stack_lvl+0xe8/0x150 [ 1594.224968][T11122] __lock_acquire+0x2a94/0x2cf0 [ 1594.224994][T11122] ? send_sigio+0x101/0x370 [ 1594.225016][T11122] lock_acquire+0x106/0x350 [ 1594.225032][T11122] ? send_sigio+0x101/0x370 [ 1594.225057][T11122] _raw_read_lock+0x36/0x50 [ 1594.225074][T11122] ? send_sigio+0x101/0x370 [ 1594.225094][T11122] send_sigio+0x101/0x370 [ 1594.225117][T11122] dnotify_handle_event+0x169/0x440 [ 1594.225136][T11122] fsnotify+0x1831/0x1ae0 [ 1594.225158][T11122] ? __lock_acquire+0x6b5/0x2cf0 [ 1594.225183][T11122] ? fsnotify+0x74c/0x1ae0 [ 1594.225203][T11122] ? __pfx_fsnotify+0x10/0x10 [ 1594.225226][T11122] ? dput+0x37/0x1a0 [ 1594.225245][T11122] fsnotify_move+0x1d7/0x5b0 [ 1594.225264][T11122] vfs_rename+0xcdd/0xeb0 [ 1594.225284][T11122] ? __pfx_vfs_rename+0x10/0x10 [ 1594.225299][T11122] ? do_raw_spin_unlock+0xf5/0x210 [ 1594.225325][T11122] ? bpf_lsm_path_rename+0x9/0x20 [ 1594.225344][T11122] ? security_path_rename+0x17d/0x460 [ 1594.225368][T11122] filename_renameat2+0x539/0x9c0 [ 1594.225385][T11122] ? __might_fault+0xaf/0x130 [ 1594.225405][T11122] ? __might_fault+0xaf/0x130 [ 1594.225427][T11122] ? __pfx_filename_renameat2+0x10/0x10 [ 1594.225448][T11122] ? do_getname+0x151/0x250 [ 1594.225465][T11122] __se_sys_renameat2+0x5a/0x2c0 [ 1594.225483][T11122] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1594.225500][T11122] do_syscall_64+0x15f/0xf80 [ 1594.225518][T11122] ? trace_irq_disable+0x3b/0x140 [ 1594.225542][T11122] ? clear_bhb_loop+0x40/0x90 [ 1594.225560][T11122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1594.225576][T11122] RIP: 0033:0x7f0a2959cdd9 [ 1594.225594][T11122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1594.225610][T11122] RSP: 002b:00007f0a2a3fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 1594.225628][T11122] RAX: ffffffffffffffda RBX: 00007f0a29815fa0 RCX: 00007f0a2959cdd9 [ 1594.225641][T11122] RDX: ffffffffffffff9c RSI: 0000200000000240 RDI: ffffffffffffff9c [ 1594.225653][T11122] RBP: 00007f0a29632d69 R08: 0000000000000004 R09: 0000000000000000 [ 1594.225664][T11122] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000000 [ 1594.225675][T11122] R13: 00007f0a29816038 R14: 00007f0a29815fa0 R15: 00007f0a2993fa48 [ 1594.225692][T11122] [ 1594.319157][ T5989] Bluetooth: hci4: command tx timeout [ 1594.362221][ T5682] tipc: Node number set to 2886997007 [ 1594.938867][T11097] bridge0: port 1(bridge_slave_0) entered blocking state [ 1594.946634][T11097] bridge0: port 1(bridge_slave_0) entered disabled state [ 1594.958868][T11097] bridge_slave_0: entered allmulticast mode [ 1594.968087][T11097] bridge_slave_0: entered promiscuous mode [ 1594.976783][T11097] bridge0: port 2(bridge_slave_1) entered blocking state [ 1594.985696][T11097] bridge0: port 2(bridge_slave_1) entered disabled state [ 1594.994871][T11097] bridge_slave_1: entered allmulticast mode [ 1595.003095][T11097] bridge_slave_1: entered promiscuous mode [ 1595.030734][T11097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1595.043709][T11097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1595.078375][T11097] team0: Port device team_slave_0 added [ 1595.086894][T11097] team0: Port device team_slave_1 added [ 1595.113412][T11097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1595.120887][T11097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1595.150085][T11097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1595.163508][T11097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1595.171220][T11097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1595.203608][T11097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1595.249960][T11097] hsr_slave_0: entered promiscuous mode [ 1595.257273][T11097] hsr_slave_1: entered promiscuous mode [ 1595.264857][T11097] debugfs: 'hsr0' already exists in 'hsr' [ 1595.271978][T11097] Cannot create hsr debugfs directory [ 1595.431041][T11097] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1595.444017][T11097] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1595.486929][T11097] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1595.511425][T11097] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1595.521392][T11097] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1595.536707][T11097] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1595.546984][T11097] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1595.558325][T11097] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1595.636155][T11097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1595.662187][T11097] 8021q: adding VLAN 0 to HW filter on device team0 [ 1595.675212][ T5280] bridge0: port 1(bridge_slave_0) entered blocking state [ 1595.682403][ T5280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1595.711516][ T5280] bridge0: port 2(bridge_slave_1) entered blocking state [ 1595.718680][ T5280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1595.786128][T11097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1595.826893][T11097] veth0_vlan: entered promiscuous mode [ 1595.843217][T11097] veth1_vlan: entered promiscuous mode [ 1595.880212][T11097] veth0_macvtap: entered promiscuous mode [ 1595.891655][T11097] veth1_macvtap: entered promiscuous mode [ 1595.911568][T11097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1595.928665][T11097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1595.946491][T21020] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1595.976777][T21020] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1595.997572][T21020] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1596.017807][T11097] ieee80211 phy74: Selected rate control algorithm 'minstrel_ht' [ 1596.035395][T21020] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1596.062649][T21020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1596.072585][T21020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1596.082931][T11097] ieee80211 phy75: Selected rate control algorithm 'minstrel_ht' [ 1596.127875][T21011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1596.138318][T21011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1596.439412][ T5989] Bluetooth: hci4: command tx timeout [ 1598.519168][ T5989] Bluetooth: hci4: command tx timeout [ 1599.329187][ C0] bridge0: port 3(vlan0) entered forwarding state [ 1599.335685][ C0] bridge0: topology change detected, propagating [ 1599.342269][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1599.349512][ C0] bridge0: topology change detected, propagating [ 1599.355978][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1599.363217][ C0] bridge0: topology change detected, propagating [ 1600.599612][ T5989] Bluetooth: hci4: command tx timeout