last executing test programs: 6.245543301s ago: executing program 4 (id=1559): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) close(0xffffffffffffffff) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001400) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006604000008000300", @ANYRES32, @ANYBLOB="0800b70004000000080026009409"], 0x4c}}, 0x0) 6.003457568s ago: executing program 4 (id=1562): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)="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"}) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000200)={0x24, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x22, @string={0x22, 0x3, "5d95b5db2648b4c56db3094885239e187f30232fb4711d740fabfa519a43621b"}}, 0x0, 0x0}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) r0 = io_uring_setup(0x253d, &(0x7f0000000180)) close_range(r0, 0xffffffffffffffff, 0x0) 5.266769824s ago: executing program 4 (id=1566): r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x600) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) fcntl$setlease(r0, 0x400, 0x2) listen(0xffffffffffffffff, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x101042) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) writev(r2, &(0x7f0000003600)=[{&(0x7f0000002580)="d6", 0x4}], 0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x8d, 0x4a, 0x30, 0x20, 0x6cd, 0x110, 0x7171, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x22, 0x63, 0x47}}]}}]}}, 0x0) syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x0, 0x1, @tid=r5}, &(0x7f0000bbdffc)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha12-simd,aes-ce,sha1-avx)\x00'}, 0x31) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="7000000010001fff00"/20, @ANYRESHEX=r4, @ANYBLOB="81ffffff00000000480012800b0001006272696467650000380002800800050001000000080004000100000005001800000000000c001f000000000000000000060006000700000008001d000100000008000a0001"], 0x70}}, 0x0) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x3) 4.410519999s ago: executing program 1 (id=1576): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)="387ed7626d850509a2d6c1aa38f15cd00f85c263cb226db671261fff7ce9c555f18dafae3530db6dd493f2a3cc88721b9ae21b3e3b4523ae2594f47d8f62b480c4160b1f90ac9c41fae6ab12ac4c113fef588684ef494c89092883b902a41cd75387ef6f7bc7d460d5e665f398ff95596dc94ec97003c7e6f3c82fbd8de6e11aa4031a61c51caf7a65a2b613bda33f3eaeae635d7cd81761e74c38a7695800a15516eb337056e02335f9a7d10aa2eaf7beb7e1aed6e850ecb3421143c5c4ded0f06affc524dcf3208272619b6a952db5bc96141b26c54d13c7a5416287a3b6f7aadf50bc549974b6401a19cdb130282b955592efa94242065a4c8d695a2cdd9ada350defd58c775b92d348305774d3a256c7520b285d8da0dbf5e20d604413ed2ddf9bcbf881caf811852806175d63892a15234fbcd7a88a2a0aea45d19148f0e7dada7d6d0d77881387fdeaa0284abe90b88dfff412bff40c31c6415c54ae3335e54a49d315851feffe30d999c36def4df7df747695efbd649f42f310859122c0d2c1e558dc6586958a283762386ecf369274e43003a0fdff59ea515eb44521901ef0d00baa91c10a8e44a76aac3468a15bd3d45ad389977467f306f9bcde071b30769795eed2f1580414d168f557cd90040c4bd2a3d6bc5092548feaef7204a12cece59181fcb5bad8c24bd9f8f78d17ab82831325501e80d899e9252f99d3a2666343392fda11504800f4dd9f45657f8224fc78eb1168fe0527fac33466aadf48f16994d29a47778566e0f3945b2bf36b6eecc7fa18914beb66ac9e519bd333b30d3ce2f50dddeea3447aebbe3bed781e39d5a0fb0cdc60e196f2261305feb596b68986af3eee7b199fefb5f79ffb2d1050e46982af1c14a88dd9000400002f56a8404755c73e74bb90e64bab9647c70ed5afca1c3d87907d14df8aa9df6f40a80ace2bb8a2aad3b0c66915927db4233181943d88c0c76d5969e2043db5bd77fd60ba0f013139929ccfec965c0c769785a4d23332ba1f0875e3146afef5b20cc306d3ecee65944fe9829e0ad0c3f6bb2fd81bc31152538db50f47dc38ba908a0d808687e478a609fe0daa02d4e9c618b99266e7f2e98597e2813e1dba9c3c16e9fab3bda6ed33cb1c75513e2264b69d472dd0e1338688ba782b41bde141f99c4894ded98eff9aa53d22eb77c9d93169c04ab2490bf28106f770e07eb7a9e87dde71929f918b98c4cbfcb11a90139264a9ee8081973167f493760278df0cc34be9e8f86f948d9a62e63ad6ca9d2195ff9c6320c85bddc42915e4f3a5db642447bc2195a3d64e04c9ecd1c313c08e29b814bd8fed1ab6d2846c73345962895d289ac77152cac2e0e32b75ce814731c542091f218dd1e68a15f8226577bf9481ae0555db64a717eb23a811356d00"}) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000200)={0x24, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x22, @string={0x22, 0x3, "5d95b5db2648b4c56db3094885239e187f30232fb4711d740fabfa519a43621b"}}, 0x0, 0x0}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) r0 = io_uring_setup(0x253d, &(0x7f0000000180)) close_range(r0, 0xffffffffffffffff, 0x0) 3.726729593s ago: executing program 0 (id=1581): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000014001a80100004800c00038008"], 0x34}}, 0x0) 3.56843518s ago: executing program 0 (id=1583): r0 = syz_open_dev$usbfs(0x0, 0x201, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r2, 0xc0405627, &(0x7f0000000080)={0x980900}) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x401) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r4, 0x0, 0x0) sendmsg$rds(r4, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffff34, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0x3c}}, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5393, &(0x7f0000000000)) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x6a, 0x3, 0x0, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x101) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x88100) 3.540948019s ago: executing program 1 (id=1584): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) close(0xffffffffffffffff) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001400) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006604000008000300", @ANYRES32=r3, @ANYBLOB="0800b70004000000080026009409"], 0x4c}}, 0x0) 3.287486278s ago: executing program 1 (id=1585): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000a58000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000000000000014d564b00000000af"]) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.037446344s ago: executing program 1 (id=1586): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="c00000001100070000000000000000", @ANYRES32, @ANYBLOB="004004001000000008001c", @ANYRESDEC=r0, @ANYBLOB, @ANYRES32, @ANYRES8=r0], 0xc0}}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/config', 0x0, 0x0) lseek(r1, 0x8000, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000040)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x0, @private=0xa010100}]}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, 0x0, &(0x7f00000005c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x5, &(0x7f0000000280)=@framed={{}, [@btf_id={0x18, 0x7, 0x3, 0x0, 0x1}]}, &(0x7f00000004c0)='syzkaller\x00', 0x1, 0x55, &(0x7f0000000100)=""/85, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x90) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, r5, 0x1, 0x0, 0x0, {{}, {}, {0x9, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r5, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x9, 0x81, 0x6, 0x7fff}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x4091}, 0x20004000) getdents64(r1, 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f0000000f00)=ANY=[@ANYBLOB="00020201000000aa00"/24], 0x18) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, 0x1c) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0xec, 0x10, 0x713, 0x0, 0x25dfdbfb, {{@in=@empty, @in=@multicast1}, {@in=@multicast2, 0x0, 0x32}, @in=@empty, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x24}}, 0xec}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x5, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0xffffffbd}, [@exit, @jmp]}, &(0x7f0000003ff6)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r8, 0x0, 0x0, &(0x7f00000000c0), 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 2.635485529s ago: executing program 0 (id=1589): r0 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0], 0x24}}, 0x0) recvmmsg$unix(r0, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000c40)=""/4105, 0x1009}, {&(0x7f0000000140)=""/37, 0x25}], 0x2}}], 0x1, 0x0, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) 2.449267581s ago: executing program 0 (id=1590): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300000a00000000000000000000000300060000000000020000000000000000000000000000000200010000000000000000fc00000000030005000000000002000000ac140baa00"], 0x50}, 0x1, 0x7}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x1081, 0x4) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_mr_vif\x00') read$snddsp(r2, &(0x7f0000000300)=""/4096, 0x1000) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x1d80}, 0x10, 0x0) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000240)=[@in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e24, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, @in6={0xa, 0x4e20, 0x7f, @loopback, 0x5}, @in6={0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, @in6={0xa, 0x4e23, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, @in6={0xa, 0x4e22, 0xfff, @mcast2, 0x3f90f482}], 0x9c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@empty, @in6=@remote, 0x0, 0x0, 0x4e24, 0xffff, 0xa, 0x20, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @private}, 0x0, 0x32}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe4) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x94002, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a6, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r7, 0x8990, &(0x7f0000000200)={'veth1_vlan\x00', @ifru_mtu}) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000038c0)) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{0x400000b0}]}) landlock_restrict_self(r3, 0x0) 2.422033559s ago: executing program 3 (id=1591): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(0xffffffffffffffff) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001400) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006604000008000300", @ANYRES32=r3, @ANYBLOB="0800b70004000000080026009409"], 0x4c}}, 0x0) 2.32331923s ago: executing program 3 (id=1592): keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB], 0x7) syz_emit_vhci(0x0, 0x7) shutdown(0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r3, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000a000000140004"], 0x58}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r6, @ANYBLOB="080026008f0900000800b7"], 0x2c}}, 0x0) 2.182681685s ago: executing program 3 (id=1593): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000014001a80100004800c00038008"], 0x34}}, 0x0) 2.124819342s ago: executing program 4 (id=1594): socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1", 0x12) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x20040010) prlimit64(0x0, 0x0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b4000000190001000000000000000000e0000002000000000000000000000000fc01000000000000000000000000000000000000000000000000005400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000fdffffffffffffff000000000000010002000003000000000000000000000000fdffffffff2835ff0073b2d68ad40000000000000000000000000000000000000000000000000000000000000053e04b4c7388a80100"/112], 0xb4}}, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000001540)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000240)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x2000}) syz_emit_ethernet(0x6a, &(0x7f0000000500)={@local, @random="cce390677742", @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0cbb05", 0x30, 0x2f, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "0120d2", 0x0, 0x0, 0x0, @mcast2, @remote}}}}}}}, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x20a0c0, 0x0) epoll_wait(r4, &(0x7f0000000100)=[{}], 0x1, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGKEYCODE(r5, 0x80284504, &(0x7f0000000400)) syz_open_dev$usbfs(&(0x7f0000000100), 0x45e, 0x101701) msgsnd(0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="12000007"], 0x8, 0x0) msgrcv(0x0, 0x0, 0x0, 0x2, 0x0) 2.068083755s ago: executing program 3 (id=1595): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) close(0xffffffffffffffff) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001400) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006604000008000300", @ANYRES32=r3, @ANYBLOB="0800b70004000000080026009409"], 0x4c}}, 0x0) 1.998467496s ago: executing program 1 (id=1596): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000006c0)=@gettaction={0x54, 0x32, 0x0, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xffffffffffffff19, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x54}}, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendto(r3, &(0x7f0000001fc0)="120000001200e7ef007b00000000000000a173d21bc5c4c079f6da29af30ca0c6dc79ad347cb5f2974167d3decfe7aa02f0be26bb7f20052b66789a67f4536ae2244ea49e31295f75165304fa5cbe2fcf0dc1cd4de94d74d469e9061605e15b71e21bd586030518d65709c4c1b86064aee00000000000000", 0x78, 0x24008800, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380), 0x0, &(0x7f0000000740)=""/193, 0xc1}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(r1, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) chdir(&(0x7f0000000140)='./bus\x00') ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0xc008ae88, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000e497f36c3b91ceb4a4"]) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000080)=0xb0000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) accept4(r2, &(0x7f00000000c0)=@in={0x2, 0x0, @loopback}, 0x0, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket(0x200000000000011, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 1.997197601s ago: executing program 4 (id=1598): write$vga_arbiter(0xffffffffffffffff, 0x0, 0xa) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) dup3(0xffffffffffffffff, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) mknod$loop(0x0, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) fcntl$getflags(0xffffffffffffffff, 0x0) link(&(0x7f0000000240)='./file0\x00', 0x0) write$binfmt_script(r1, &(0x7f0000000200), 0xfffffd9d) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='illinois\x00', 0x9) sendfile(r0, r1, 0x0, 0x7ffff002) 1.817892586s ago: executing program 3 (id=1599): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) prlimit64(0x0, 0x8, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1, 0x0, 0x0, 0xff, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000079000000090000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5a}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x20, 0x40, 0x7, 0x500, 0x0, r2, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000002000000008000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x62, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x80801) ioctl$USBDEVFS_IOCTL(r5, 0xc0105500, &(0x7f0000000000)=@usbdevfs_connect={0xb00}) r6 = dup(0xffffffffffffffff) write$UHID_INPUT(r6, &(0x7f0000001040)={0xd, {"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", 0x1000}}, 0x1006) read$FUSE(r6, &(0x7f0000002080)={0x2020}, 0x2) socket$netlink(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x800, 0x4, 0x4, 0x1, r2, 0x0, '\x00', 0x0, r6, 0x1, 0x1, 0x1, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b5cf8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.817025289s ago: executing program 2 (id=1600): r0 = syz_open_dev$usbfs(0x0, 0x201, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r2, 0xc0405627, &(0x7f0000000080)={0x980900}) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x401) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r4, 0x0, 0x0) sendmsg$rds(r4, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffff34, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0x3c}}, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5393, &(0x7f0000000000)) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x6a, 0x3, 0x0, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x101) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x88100) 1.489585035s ago: executing program 0 (id=1601): r0 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0], 0x24}}, 0x0) recvmmsg$unix(r0, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000c40)=""/4105, 0x1009}, {&(0x7f0000000140)=""/37, 0x25}], 0x2}}], 0x1, 0x0, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) 1.430704628s ago: executing program 1 (id=1602): io_uring_setup(0x3367, &(0x7f00000000c0)) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="73c8"], 0x0) ioctl$EVIOCRMFF(r0, 0x4004550f, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.231283725s ago: executing program 2 (id=1603): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(0xffffffffffffffff) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006604000008000300", @ANYRES32=r4, @ANYBLOB="0800b70004000000080026009409"], 0x4c}}, 0x0) 1.133887947s ago: executing program 0 (id=1604): r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x600) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) fcntl$setlease(r0, 0x400, 0x2) listen(0xffffffffffffffff, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x101042) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) writev(r2, &(0x7f0000003600)=[{&(0x7f0000002580)="d6", 0x4}], 0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x8d, 0x4a, 0x30, 0x20, 0x6cd, 0x110, 0x7171, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x22, 0x63, 0x47}}]}}]}}, 0x0) syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x0, 0x1, @tid=r5}, &(0x7f0000bbdffc)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha12-simd,aes-ce,sha1-avx)\x00'}, 0x31) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="7000000010001fff00"/20, @ANYRESHEX=r4, @ANYBLOB="81ffffff00000000480012800b0001006272696467650000380002800800050001000000080004000100000005001800000000000c001f000000000000000000060006000700000008001d000100000008000a0001"], 0x70}}, 0x0) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x3) 1.044253694s ago: executing program 2 (id=1605): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000014001a80100004800c00038008"], 0x34}}, 0x0) 968.16881ms ago: executing program 4 (id=1606): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="c00000001100070000000000000000", @ANYRES32, @ANYBLOB="004004001000000008001c", @ANYRESDEC=r0, @ANYBLOB, @ANYRES32, @ANYRES8=r0], 0xc0}}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/config', 0x0, 0x0) lseek(r1, 0x8000, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000040)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x0, @private=0xa010100}]}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, 0x0, &(0x7f00000005c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x5, &(0x7f0000000280)=@framed={{}, [@btf_id={0x18, 0x7, 0x3, 0x0, 0x1}]}, &(0x7f00000004c0)='syzkaller\x00', 0x1, 0x55, &(0x7f0000000100)=""/85, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x90) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, r5, 0x1, 0x0, 0x0, {{}, {}, {0x9, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r5, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x9, 0x81, 0x6, 0x7fff}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x4091}, 0x20004000) getdents64(r1, 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f0000000f00)=ANY=[@ANYBLOB="00020201000000aa00"/24], 0x18) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, 0x1c) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0xec, 0x10, 0x713, 0x0, 0x25dfdbfb, {{@in=@empty, @in=@multicast1}, {@in=@multicast2, 0x0, 0x32}, @in=@empty, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x24}}, 0xec}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x6, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0xffffffbd}, [@ldst={0x0, 0x0, 0x6, 0x0, 0x0, 0x18}, @exit, @jmp]}, &(0x7f0000003ff6)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r8, 0x0, 0x0, &(0x7f00000000c0), 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 930.014212ms ago: executing program 2 (id=1607): dup(0xffffffffffffffff) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(0xffffffffffffffff, 0x0, 0x0) sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000100)=0x5, 0x4) syz_io_uring_setup(0x39fd, &(0x7f00000003c0)={0x0, 0xffffffff, 0x0, 0x0, 0x800100}, 0x0, &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102399, 0x18fff}], 0x1, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42802, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSNPMODE(r4, 0x4008744b, &(0x7f00000000c0)={0x283}) 199.362771ms ago: executing program 2 (id=1608): connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="73c8"], 0x0) ioctl$EVIOCRMFF(r0, 0x4004550f, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 0s ago: executing program 3 (id=1609): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) close(0xffffffffffffffff) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001400) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, 0x0, 0x0) kernel console output (not intermixed with test programs): 642][ T9144] loop0: unable to read partition table [ 253.868129][ T9144] loop0: partition table beyond EOD, truncated [ 253.876634][ T9067] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.887579][ T9144] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 253.887579][ T9144] ) failed (rc=-5) [ 253.900345][ T9067] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.909307][ T9067] bridge_slave_0: entered allmulticast mode [ 253.942125][ T9067] bridge_slave_0: entered promiscuous mode [ 253.982205][ T9067] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.989366][ T9067] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.038285][ T9067] bridge_slave_1: entered allmulticast mode [ 254.061780][ T9067] bridge_slave_1: entered promiscuous mode [ 254.303909][ T9067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.333766][ T9067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.507821][ T12] bridge_slave_1: left allmulticast mode [ 254.538905][ T12] bridge_slave_1: left promiscuous mode [ 254.559335][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.582073][ T12] bridge_slave_0: left allmulticast mode [ 254.587768][ T12] bridge_slave_0: left promiscuous mode [ 254.630583][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.663896][ T12] bridge_slave_1: left allmulticast mode [ 254.669595][ T12] bridge_slave_1: left promiscuous mode [ 254.692393][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.721066][ T12] bridge_slave_0: left allmulticast mode [ 254.737899][ T12] bridge_slave_0: left promiscuous mode [ 254.751142][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.801692][ T5094] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 254.867305][ T55] Bluetooth: hci5: command tx timeout [ 255.012400][ T5094] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 255.030346][ T5094] usb 5-1: config 1 has an invalid descriptor of length 115, skipping remainder of the config [ 255.070733][ T5094] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 255.079767][ T5094] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 255.116904][ T5094] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 255.137816][ T5094] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 255.153908][ T5094] usb 5-1: Product: syz [ 255.158138][ T5094] usb 5-1: Manufacturer: syz [ 255.191138][ T5094] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 255.403077][ T5094] usb 5-1: USB disconnect, device number 43 [ 256.144748][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.152350][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.436127][ T29] audit: type=1326 audit(1721673533.500:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9191 comm="syz.2.1179" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 256.528669][ T29] audit: type=1326 audit(1721673533.510:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9191 comm="syz.2.1179" exe="/root/syz-executor" sig=0 arch=40000003 syscall=100 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 256.552773][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.580943][ T29] audit: type=1326 audit(1721673533.510:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9191 comm="syz.2.1179" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 256.616738][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.663196][ T12] bond0 (unregistering): Released all slaves [ 256.670265][ T29] audit: type=1326 audit(1721673533.510:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9191 comm="syz.2.1179" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 256.941115][ T55] Bluetooth: hci5: command tx timeout [ 257.089711][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.110777][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.143915][ T12] bond0 (unregistering): Released all slaves [ 257.196586][ T9067] team0: Port device team_slave_0 added [ 257.233180][ T9067] team0: Port device team_slave_1 added [ 257.523167][ T9067] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.539411][ T9067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.566417][ T9067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.721274][ T9067] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.743675][ T9067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.820729][ T9067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.120077][ T9001] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 258.281180][ T9001] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 258.439270][ T9067] hsr_slave_0: entered promiscuous mode [ 258.515762][ T9067] hsr_slave_1: entered promiscuous mode [ 258.541125][ T9067] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 258.548734][ T9067] Cannot create hsr debugfs directory [ 258.575197][ T9001] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 258.678120][ T9001] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 259.259819][ T12] hsr_slave_0: left promiscuous mode [ 259.283650][ T12] hsr_slave_1: left promiscuous mode [ 259.289851][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.327603][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.356862][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.374960][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.518555][ T12] hsr_slave_0: left promiscuous mode [ 259.530423][ T12] hsr_slave_1: left promiscuous mode [ 259.571357][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.573356][ T29] audit: type=1326 audit(1721673536.630:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9235 comm="syz.2.1187" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 259.578803][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.684961][ T29] audit: type=1326 audit(1721673536.630:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9235 comm="syz.2.1187" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 259.701010][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.750102][ T29] audit: type=1326 audit(1721673536.670:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9235 comm="syz.2.1187" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 259.763716][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.812631][ T29] audit: type=1326 audit(1721673536.670:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9235 comm="syz.2.1187" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 259.940323][ T12] veth1_macvtap: left promiscuous mode [ 259.945913][ T12] veth0_macvtap: left promiscuous mode [ 259.990541][ T12] veth1_vlan: left promiscuous mode [ 259.995953][ T12] veth0_vlan: left promiscuous mode [ 260.019842][ T12] veth1_macvtap: left promiscuous mode [ 260.026752][ T12] veth0_macvtap: left promiscuous mode [ 260.049392][ T12] veth1_vlan: left promiscuous mode [ 260.070708][ T12] veth0_vlan: left promiscuous mode [ 261.255686][ T5109] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 261.267552][ T5109] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 261.276748][ T5109] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 261.287210][ T5109] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 261.295280][ T5109] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 261.302886][ T5109] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 261.532524][ T12] team0 (unregistering): Port device team_slave_1 removed [ 261.624311][ T12] team0 (unregistering): Port device team_slave_0 removed [ 263.249857][ T12] team0 (unregistering): Port device team_slave_1 removed [ 263.321017][ T12] team0 (unregistering): Port device team_slave_0 removed [ 263.340596][ T5109] Bluetooth: hci0: command tx timeout [ 264.053100][ T9263] loop0: detected capacity change from 0 to 7 [ 264.060908][ T9263] Dev loop0: unable to read RDB block 7 [ 264.073989][ T9263] loop0: unable to read partition table [ 264.079890][ T9263] loop0: partition table beyond EOD, truncated [ 264.107503][ T9263] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 264.107503][ T9263] ) failed (rc=-5) [ 264.125599][ T9014] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 264.157874][ T9014] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 264.331399][ T9014] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 264.353786][ T9014] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 264.424760][ T9001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.766796][ T9001] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.947499][ T5154] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.954715][ T5154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.070450][ T7199] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.077622][ T7199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.219502][ T9253] chnl_net:caif_netlink_parms(): no params data found [ 265.365328][ T9281] loop0: detected capacity change from 0 to 7 [ 265.373047][ T9281] Dev loop0: unable to read RDB block 7 [ 265.379725][ T9281] loop0: unable to read partition table [ 265.385974][ T9281] loop0: partition table beyond EOD, truncated [ 265.400020][ T9281] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 265.400020][ T9281] ) failed (rc=-5) [ 265.420382][ T5109] Bluetooth: hci0: command tx timeout [ 265.545347][ T9001] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 265.641799][ T9067] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 265.666384][ T9067] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 265.841953][ T9014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.934547][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.968961][ T9067] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 266.001251][ T9067] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 266.030807][ T9253] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.037980][ T9253] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.067904][ T9253] bridge_slave_0: entered allmulticast mode [ 266.092710][ T9253] bridge_slave_0: entered promiscuous mode [ 266.102710][ T9253] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.109837][ T9253] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.141255][ T9253] bridge_slave_1: entered allmulticast mode [ 266.148637][ T9253] bridge_slave_1: entered promiscuous mode [ 266.206471][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.423418][ T9014] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.503705][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.536459][ T9253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.618551][ T9001] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.662276][ T9253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.683255][ T5155] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.690470][ T5155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.746058][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.867992][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.875188][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.962242][ T9253] team0: Port device team_slave_0 added [ 267.051741][ T9253] team0: Port device team_slave_1 added [ 267.381971][ T9253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.389040][ T9253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.461561][ T9253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.501653][ T5109] Bluetooth: hci0: command tx timeout [ 267.572818][ T9253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.579809][ T9253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.650285][ T9253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.751056][ T12] bridge_slave_1: left allmulticast mode [ 267.756745][ T12] bridge_slave_1: left promiscuous mode [ 267.770569][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.815387][ T12] bridge_slave_0: left allmulticast mode [ 267.830491][ T12] bridge_slave_0: left promiscuous mode [ 267.850650][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.435875][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.454249][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 268.484854][ T12] bond0 (unregistering): Released all slaves [ 268.594733][ T9001] veth0_vlan: entered promiscuous mode [ 268.745609][ T9253] hsr_slave_0: entered promiscuous mode [ 268.767041][ T9253] hsr_slave_1: entered promiscuous mode [ 268.785599][ T9253] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 268.810824][ T9253] Cannot create hsr debugfs directory [ 268.818275][ T9001] veth1_vlan: entered promiscuous mode [ 268.937112][ T9067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.152651][ T12] hsr_slave_0: left promiscuous mode [ 269.179965][ T12] hsr_slave_1: left promiscuous mode [ 269.187509][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.200381][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.218714][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.226335][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.287370][ T12] veth1_macvtap: left promiscuous mode [ 269.310633][ T12] veth0_macvtap: left promiscuous mode [ 269.316374][ T12] veth1_vlan: left promiscuous mode [ 269.349226][ T12] veth0_vlan: left promiscuous mode [ 269.581196][ T5109] Bluetooth: hci0: command tx timeout [ 270.160275][ T5094] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 270.281956][ T12] team0 (unregistering): Port device team_slave_1 removed [ 270.347792][ T12] team0 (unregistering): Port device team_slave_0 removed [ 270.363905][ T5094] usb 3-1: Using ep0 maxpacket: 32 [ 270.378674][ T5094] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 270.390201][ T5094] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 270.417561][ T5094] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.439211][ T5094] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 270.455282][ T5094] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 270.473499][ T5094] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 270.483508][ T5094] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 270.497226][ T5094] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 270.506672][ T5094] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.528166][ T5094] usb 3-1: config 0 descriptor?? [ 270.964670][ T9014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.096529][ T9067] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.204488][ T9001] veth0_macvtap: entered promiscuous mode [ 271.247783][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.255014][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.345051][ T5094] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.352244][ T5094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.376230][ T9001] veth1_macvtap: entered promiscuous mode [ 271.532908][ T9001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.572746][ T9001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.592871][ T9001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.615572][ T9001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.629129][ T9001] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.764670][ T9014] veth0_vlan: entered promiscuous mode [ 271.803383][ T9001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.831686][ T9001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.854385][ T9001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.884558][ T9001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.908751][ T9001] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.951327][ T9001] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.960313][ T9001] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.980930][ T9001] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.996811][ T9001] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.051240][ T9014] veth1_vlan: entered promiscuous mode [ 272.287009][ T9014] veth0_macvtap: entered promiscuous mode [ 272.342687][ T9014] veth1_macvtap: entered promiscuous mode [ 272.413214][ T9067] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.448804][ T9253] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 272.469038][ T9253] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 272.511093][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.524724][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.550132][ T9014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.580210][ T9014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.600694][ T9014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.617847][ T9014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.636550][ T9014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.650893][ T9014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.669398][ T9014] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.690927][ T9253] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 272.733823][ T9253] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 272.779415][ T9014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.810260][ T9014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.820117][ T9014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.850473][ T9014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.875354][ T47] usb 3-1: USB disconnect, device number 43 [ 272.875606][ T9014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.930269][ T9014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.971891][ T9014] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.025893][ T3859] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.051956][ T9014] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.060569][ T3859] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.068294][ T9014] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.109537][ T9014] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.137505][ T9014] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.272311][ T9067] veth0_vlan: entered promiscuous mode [ 273.475334][ T9067] veth1_vlan: entered promiscuous mode [ 273.614382][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.624825][ C1] eth0: bad gso: type: 1, size: 1408 [ 273.650203][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.768209][ T1081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.798250][ T9067] veth0_macvtap: entered promiscuous mode [ 273.812203][ T1081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.849177][ T9067] veth1_macvtap: entered promiscuous mode [ 273.949743][ T9253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.000533][ T47] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 274.011414][ T9067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.050347][ T9067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.076844][ T9067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.122071][ T9067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.173105][ T9067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.193457][ T9067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.206886][ T9067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.217552][ T9067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.259239][ T47] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 274.261490][ T9067] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.291101][ T47] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 274.332675][ T47] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 274.347212][ T9067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.362162][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.379081][ T9067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.390338][ T7199] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 274.407152][ T9388] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 274.422604][ T9067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.450289][ T9067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.473432][ T9067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.500321][ T9067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.520245][ T9067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.540790][ T9067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.572278][ T9067] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.581500][ T7199] usb 3-1: Using ep0 maxpacket: 32 [ 274.603586][ T7199] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 274.604923][ T9253] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.620616][ T7199] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 274.639539][ T7199] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 274.680580][ T7199] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 274.699879][ T5094] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.707087][ T5094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.720675][ T7199] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 274.740973][ T7199] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 274.757479][ T9067] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.781463][ T7199] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 274.802650][ T9067] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.815989][ T7199] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.830753][ T9067] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.852495][ T7199] usb 3-1: config 0 descriptor?? [ 274.859250][ T9067] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.884793][ T5094] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.891980][ T5094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.080012][ T7199] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 44 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 275.094866][ T9253] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 275.129701][ T7199] usb 3-1: USB disconnect, device number 44 [ 275.172113][ T7199] usblp0: removed [ 275.250651][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.266131][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.366872][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.405074][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.427798][ T9253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.603609][ T9253] veth0_vlan: entered promiscuous mode [ 275.651478][ T9253] veth1_vlan: entered promiscuous mode [ 275.706145][ T9406] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1166'. [ 275.724200][ T9253] veth0_macvtap: entered promiscuous mode [ 275.759124][ T9253] veth1_macvtap: entered promiscuous mode [ 275.802731][ T9253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.842936][ T47] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 275.860346][ T9253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.880345][ T47] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input8 [ 275.909378][ T9253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.938739][ T9253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.967936][ T9253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.006279][ T9253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.039558][ T9253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.076777][ T9253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.102973][ T9408] loop0: detected capacity change from 0 to 16384 [ 276.114012][ T9253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.150313][ T9253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.180076][ T9253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.199668][ T5155] usb 4-1: USB disconnect, device number 28 [ 276.199710][ C1] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 276.254184][ T9253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.289102][ T9253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.307243][ T9253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.339518][ T9253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.356255][ T9253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.376433][ T9253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.396792][ T9253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.426539][ T9253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.451115][ T9253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.474456][ T9253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.499116][ T9253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.603545][ T9253] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.636018][ T9253] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.670010][ T9253] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.682820][ T9253] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.038488][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.058524][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.149346][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.176637][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.475229][ T9442] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1228'. [ 277.590610][ T7199] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 277.790240][ T7199] usb 3-1: Using ep0 maxpacket: 32 [ 277.802480][ T9451] loop0: detected capacity change from 0 to 16384 [ 277.809901][ T7199] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 277.818596][ T7199] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 277.838114][ T7199] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 277.851405][ T7199] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 277.870142][ T7199] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 277.890614][ T9451] loop0: detected capacity change from 16384 to 16383 [ 277.893432][ T7199] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 277.908849][ T9451] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 277.952872][ T7199] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 277.966740][ T9451] Buffer I/O error on dev loop0, logical block 0, async page read [ 277.970739][ T7199] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.991492][ T7199] usb 3-1: config 0 descriptor?? [ 278.014493][ T9451] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 278.090511][ T9451] Buffer I/O error on dev loop0, logical block 0, async page read [ 278.108916][ T9451] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 278.129788][ T9451] Buffer I/O error on dev loop0, logical block 0, async page read [ 278.150589][ T9451] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 278.170018][ T9451] Buffer I/O error on dev loop0, logical block 0, async page read [ 278.191649][ T9451] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 278.235610][ T9451] Buffer I/O error on dev loop0, logical block 0, async page read [ 278.247288][ T7199] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 45 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 278.260429][ T9451] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 278.284058][ T7199] usb 3-1: USB disconnect, device number 45 [ 278.296898][ T9451] Buffer I/O error on dev loop0, logical block 0, async page read [ 278.313710][ T7199] usblp0: removed [ 278.324819][ T9451] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 278.357677][ T9451] Buffer I/O error on dev loop0, logical block 0, async page read [ 278.367043][ T9451] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 278.390935][ T9451] Buffer I/O error on dev loop0, logical block 0, async page read [ 278.403511][ T9451] ldm_validate_partition_table(): Disk read failed. [ 278.431024][ T9451] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 278.471665][ T9451] Buffer I/O error on dev loop0, logical block 0, async page read [ 278.487507][ T9451] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 278.505307][ T9451] Buffer I/O error on dev loop0, logical block 0, async page read [ 278.513436][ T9451] Dev loop0: unable to read RDB block 0 [ 278.519388][ T9451] loop0: unable to read partition table [ 278.530525][ T9451] loop_reread_partitions: partition scan of loop0 (K>i) /480# $qZI[u@3bj!5MM]z) failed (rc=-5) [ 278.917502][ T9476] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 279.022177][ T9480] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1239'. [ 279.136983][ T9476] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1239'. [ 279.160498][ T9483] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1241'. [ 279.194101][ T9476] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1239'. [ 279.788506][ T9498] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1247'. [ 279.865355][ T9501] loop0: detected capacity change from 0 to 16384 [ 279.920244][ T9501] loop0: detected capacity change from 16384 to 16383 [ 279.956337][ T9501] ldm_validate_partition_table(): Disk read failed. [ 279.981016][ T9501] Dev loop0: unable to read RDB block 0 [ 280.009793][ T9501] loop0: unable to read partition table [ 280.038559][ T9501] loop_reread_partitions: partition scan of loop0 (K>i) /480# $qZI[u@3bj!5MM]z) failed (rc=-5) [ 280.290286][ T5094] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 280.521223][ T5094] usb 3-1: Using ep0 maxpacket: 32 [ 280.540198][ T5094] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 280.563013][ T5094] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 280.580775][ T5094] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 280.593166][ T5094] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 280.619961][ T5094] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 280.640215][ T5094] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 280.656764][ T5094] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 280.670612][ T1737] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 280.707141][ T5094] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.747813][ T5094] usb 3-1: config 0 descriptor?? [ 280.794982][ T9525] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1258'. [ 280.893507][ T1737] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 280.920875][ T1737] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 280.951213][ T1737] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 280.970335][ T1737] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 280.987459][ T5094] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 46 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 280.991896][ T1737] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 281.022934][ T1737] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 281.040986][ T5094] usb 3-1: USB disconnect, device number 46 [ 281.061877][ T1737] usb 4-1: Product: syz [ 281.066080][ T1737] usb 4-1: Manufacturer: syz [ 281.079338][ T5094] usblp0: removed [ 281.090798][ T1737] cdc_wdm 4-1:1.0: skipping garbage [ 281.096054][ T1737] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 281.320725][ T1737] usb 4-1: USB disconnect, device number 29 [ 281.697882][ T9542] loop0: detected capacity change from 0 to 16384 [ 281.750439][ T9542] loop0: detected capacity change from 16384 to 16383 [ 282.283905][ T1737] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 282.400404][ T7199] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 282.490515][ T1737] usb 5-1: Using ep0 maxpacket: 32 [ 282.497803][ T1737] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 282.515352][ T1737] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.535894][ T1737] usb 5-1: config 0 descriptor?? [ 282.549932][ T1737] gspca_main: sunplus-2.14.0 probing 041e:400b [ 282.602371][ T7199] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 64, changing to 10 [ 282.629917][ T7199] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 282.650277][ T7199] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 282.659558][ T7199] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.676822][ T9552] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 282.960853][ T5153] usb 4-1: USB disconnect, device number 30 [ 283.100338][ T1148] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 283.310569][ T1148] usb 2-1: Using ep0 maxpacket: 32 [ 283.342683][ T1148] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 283.377390][ T1148] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 283.400691][ T1148] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 283.415542][ T1148] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 283.435906][ T1148] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 283.453656][ T1148] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 283.516230][ T1148] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 283.535731][ T1148] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.568447][ T1148] usb 2-1: config 0 descriptor?? [ 283.819468][ T1148] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 33 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 283.841876][ T1148] usb 2-1: USB disconnect, device number 33 [ 283.853036][ T1148] usblp0: removed [ 283.910506][ T7199] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 283.960414][ T47] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 284.100521][ T5094] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 284.110271][ T7199] usb 3-1: Using ep0 maxpacket: 32 [ 284.130432][ T7199] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 284.138841][ T7199] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 284.158633][ T47] usb 1-1: Using ep0 maxpacket: 32 [ 284.166266][ T7199] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 284.180944][ T7199] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 284.194338][ T47] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 284.211113][ T7199] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 284.223582][ T47] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 284.242514][ T7199] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 284.253003][ T47] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 284.264339][ T7199] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 284.287903][ T47] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 284.302296][ T7199] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 284.315416][ T5094] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 284.329421][ T47] usb 1-1: config 0 interface 0 has no altsetting 0 [ 284.337599][ T7199] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.340275][ T5094] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 284.370500][ T7199] usb 3-1: config 0 descriptor?? [ 284.378891][ T5094] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 284.380934][ T47] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 284.405462][ T5094] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 284.425051][ T47] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 284.436327][ T1737] gspca_sunplus: reg_w_riv err -71 [ 284.451581][ T1737] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 284.457387][ T5094] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 284.459571][ T47] usb 1-1: Product: syz [ 284.478584][ T1737] usb 5-1: USB disconnect, device number 44 [ 284.484703][ T5094] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 284.484742][ T47] usb 1-1: Manufacturer: syz [ 284.510361][ T5094] usb 4-1: Product: syz [ 284.513768][ T47] usb 1-1: SerialNumber: syz [ 284.518463][ T5094] usb 4-1: Manufacturer: syz [ 284.530069][ T47] usb 1-1: config 0 descriptor?? [ 284.557551][ T47] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 284.577861][ T5094] cdc_wdm 4-1:1.0: skipping garbage [ 284.594362][ T47] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 284.602569][ T5094] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 284.798698][ T5094] usb 4-1: USB disconnect, device number 31 [ 285.279096][ C0] ldusb 1-1:0.0: usb_submit_urb failed (-19) [ 285.296457][ T5094] usb 1-1: USB disconnect, device number 45 [ 285.325117][ T5094] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 285.595040][ T9600] loop0: detected capacity change from 0 to 7 [ 285.606103][ T9601] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1286'. [ 285.621521][ T9600] Dev loop0: unable to read RDB block 7 [ 285.627139][ T9600] loop0: unable to read partition table [ 285.639527][ T9600] loop0: partition table beyond EOD, truncated [ 285.659556][ T9600] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 285.659556][ T9600] ) failed (rc=-5) [ 286.362613][ T1148] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 286.502471][ T5094] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 286.566920][ T1148] usb 1-1: Using ep0 maxpacket: 32 [ 286.594649][ T1737] usb 3-1: USB disconnect, device number 47 [ 286.598986][ T1148] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 286.629495][ T1148] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 286.670429][ T1148] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 286.710737][ T1148] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 286.720513][ T5094] usb 5-1: Using ep0 maxpacket: 32 [ 286.747868][ T1148] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 286.760710][ T5094] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 286.769782][ T5094] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.802580][ T1148] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 286.832405][ T5094] usb 5-1: config 0 descriptor?? [ 286.840787][ T1148] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 286.849855][ T1148] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.860063][ T5094] gspca_main: sunplus-2.14.0 probing 041e:400b [ 286.919162][ T1148] usb 1-1: config 0 descriptor?? [ 287.184697][ T1148] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 46 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 287.254896][ T1148] usb 1-1: USB disconnect, device number 46 [ 287.282694][ T1148] usblp0: removed [ 287.300385][ T5153] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 287.481684][ T9637] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1300'. [ 287.520388][ T5153] usb 4-1: Using ep0 maxpacket: 16 [ 287.532803][ T5153] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 287.554520][ T5153] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 287.590267][ T5153] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.618308][ T5153] usb 4-1: config 0 descriptor?? [ 287.670163][ C0] hrtimer: interrupt took 70866 ns [ 288.048834][ T5153] usbhid 4-1:0.0: can't add hid device: -71 [ 288.066698][ T5153] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 288.095278][ T5153] usb 4-1: USB disconnect, device number 32 [ 288.151344][ T9644] loop0: detected capacity change from 0 to 16384 [ 288.186483][ T9644] loop0: detected capacity change from 16384 to 16383 [ 288.627383][ T5094] gspca_sunplus: reg_w_riv err -71 [ 288.669059][ T5094] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 288.730537][ T5094] usb 5-1: USB disconnect, device number 45 [ 288.930424][ T1737] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 289.060544][ T5151] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 289.140307][ T1737] usb 2-1: Using ep0 maxpacket: 32 [ 289.149019][ T1737] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 289.180332][ T1737] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 289.198235][ T1737] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 289.236744][ T1737] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 289.247534][ T5151] usb 4-1: device descriptor read/64, error -71 [ 289.263459][ T1737] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 289.275030][ T9666] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1310'. [ 289.285719][ T1737] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 289.290996][ T9670] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1312'. [ 289.305751][ T1737] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 289.306228][ T9672] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1313'. [ 289.326460][ T1737] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 289.351513][ T1737] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 289.365775][ T1737] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.403850][ T1737] usb 2-1: config 0 descriptor?? [ 289.537081][ T9675] loop0: detected capacity change from 0 to 16384 [ 289.540492][ T5151] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 289.605079][ T9675] loop0: detected capacity change from 16384 to 16383 [ 289.645120][ T1737] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 34 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 289.710438][ T5151] usb 4-1: device descriptor read/64, error -71 [ 289.840619][ T5151] usb usb4-port1: attempt power cycle [ 289.853874][ T1737] usb 2-1: USB disconnect, device number 34 [ 289.874220][ T1737] usblp0: removed [ 290.064116][ T5094] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 290.270421][ T5151] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 290.282891][ T5094] usb 5-1: Using ep0 maxpacket: 16 [ 290.293118][ T5094] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 290.311049][ T5151] usb 4-1: device descriptor read/8, error -71 [ 290.320241][ T5094] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 290.329473][ T5094] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.349947][ T5094] usb 5-1: config 0 descriptor?? [ 290.585414][ T5151] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 290.650681][ T5151] usb 4-1: device descriptor read/8, error -71 [ 290.760498][ T5155] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 290.790843][ T5151] usb usb4-port1: unable to enumerate USB device [ 290.876377][ T5094] usbhid 5-1:0.0: can't add hid device: -71 [ 290.893492][ T5094] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 290.932812][ T5094] usb 5-1: USB disconnect, device number 46 [ 290.986894][ T5155] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 64, changing to 10 [ 291.004929][ T5155] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 291.015401][ T5155] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 291.024584][ T5155] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.058535][ T9687] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 291.371906][ T29] audit: type=1326 audit(1721673568.440:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9686 comm="syz.0.1318" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f77579 code=0x0 [ 291.434275][ T9702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.450428][ T7199] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 291.491553][ T9702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.538909][ T9704] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1324'. [ 291.652898][ T7199] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 291.667381][ T7199] usb 3-1: config 1 has an invalid descriptor of length 200, skipping remainder of the config [ 291.689888][ T7199] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 291.709514][ T7199] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 291.765315][ T7199] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 291.780537][ T7199] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 291.788577][ T7199] usb 3-1: Product: syz [ 291.810282][ T7199] usb 3-1: Manufacturer: syz [ 291.832422][ T7199] cdc_wdm 3-1:1.0: skipping garbage [ 291.853166][ T7199] cdc_wdm 3-1:1.0: skipping garbage [ 291.858441][ T7199] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 291.891407][ T9711] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1327'. [ 292.058678][ T7199] usb 3-1: USB disconnect, device number 48 [ 292.520325][ T1737] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 292.720344][ T1737] usb 2-1: Using ep0 maxpacket: 32 [ 292.730319][ T1737] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 292.750313][ T1737] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 292.762467][ T1737] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 292.790279][ T1737] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 292.799985][ T1737] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 292.811071][ T1737] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 292.829543][ T1737] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 292.846103][ T1737] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 292.870283][ T1737] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 292.879362][ T1737] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.904898][ T1737] usb 2-1: config 0 descriptor?? [ 292.910391][ T5155] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 293.110343][ T5155] usb 3-1: Using ep0 maxpacket: 32 [ 293.134872][ T5155] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 293.145813][ T5155] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 293.159224][ T5155] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 293.171355][ T5155] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 293.182013][ T5155] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 293.192996][ T5155] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 293.200327][ T1737] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 35 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 293.206983][ T5155] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 293.241362][ T5155] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.259147][ T5155] usb 3-1: config 0 descriptor?? [ 293.351110][ T5094] usb 2-1: USB disconnect, device number 35 [ 293.363775][ T5094] usblp0: removed [ 293.488647][ T5155] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 49 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 293.517369][ T5155] usb 3-1: USB disconnect, device number 49 [ 293.534113][ T5155] usblp0: removed [ 293.536744][ T1737] usb 1-1: USB disconnect, device number 47 [ 294.108868][ T9748] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 294.171870][ T9748] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1339'. [ 294.247831][ T9748] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1339'. [ 294.290379][ T9748] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1339'. [ 295.328833][ T9771] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1349'. [ 295.431350][ T5151] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 295.474225][ T9781] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1352'. [ 295.620290][ T1737] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 295.632367][ T5151] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 64, changing to 10 [ 295.647535][ T5151] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 295.658962][ T5151] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 295.669040][ T5151] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.684668][ T9767] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 295.800541][ T1737] usb 1-1: Using ep0 maxpacket: 32 [ 295.816534][ T1737] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 295.845150][ T1737] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 295.855378][ T1737] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 295.864497][ T1737] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 295.875619][ T1737] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 295.885400][ T1737] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 295.912326][ T1737] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 295.923138][ T29] audit: type=1326 audit(1721673572.990:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9765 comm="syz.2.1347" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf740d579 code=0x0 [ 295.923905][ T1737] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.976755][ T1737] usb 1-1: config 0 descriptor?? [ 295.987943][ T9786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.024642][ T9786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.231473][ T1737] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 48 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 296.269944][ T1737] usb 1-1: USB disconnect, device number 48 [ 296.297788][ T1737] usblp0: removed [ 296.667408][ T9798] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 296.727614][ T9798] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1357'. [ 296.776823][ T9800] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1359'. [ 296.809702][ T9798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1357'. [ 296.835337][ T9798] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1357'. [ 297.742264][ T47] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 297.815610][ T9825] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1370'. [ 297.952503][ T47] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 297.970578][ T47] usb 5-1: config 1 has an invalid descriptor of length 200, skipping remainder of the config [ 297.992555][ T47] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 298.011432][ T47] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 298.041237][ T47] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 298.059147][ T47] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 298.068585][ T47] usb 5-1: Product: syz [ 298.073587][ T47] usb 5-1: Manufacturer: syz [ 298.083140][ T47] cdc_wdm 5-1:1.0: skipping garbage [ 298.090094][ T47] cdc_wdm 5-1:1.0: skipping garbage [ 298.095740][ T47] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 298.139698][ T5153] usb 3-1: USB disconnect, device number 50 [ 298.180621][ T5155] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 298.292961][ T1737] usb 5-1: USB disconnect, device number 47 [ 298.400274][ T5155] usb 2-1: Using ep0 maxpacket: 32 [ 298.407827][ T5155] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 298.423792][ T5155] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 298.430563][ T47] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 298.452791][ T5155] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 298.462236][ T5155] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 298.480246][ T5155] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 298.495659][ T5155] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 298.525463][ T5155] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 298.534883][ T5155] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.545851][ T5155] usb 2-1: config 0 descriptor?? [ 298.630249][ T47] usb 4-1: Using ep0 maxpacket: 32 [ 298.641128][ T47] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 298.650301][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.660474][ T5153] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 298.672931][ T47] usb 4-1: config 0 descriptor?? [ 298.686222][ T47] gspca_main: sunplus-2.14.0 probing 041e:400b [ 298.768760][ T5155] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 36 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 298.791680][ T5155] usb 2-1: USB disconnect, device number 36 [ 298.813739][ T5155] usblp0: removed [ 298.861444][ T5153] usb 3-1: Using ep0 maxpacket: 8 [ 298.868486][ T5153] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 298.890256][ T5153] usb 3-1: config 0 has no interface number 0 [ 298.896412][ T5153] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 101, changing to 10 [ 298.920205][ T5153] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 59093, setting to 1024 [ 298.940827][ T5153] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 298.949900][ T5153] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.982629][ T5153] usb 3-1: config 0 descriptor?? [ 298.988320][ T9832] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 299.005701][ T5153] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 299.241930][ T5155] usb 3-1: USB disconnect, device number 51 [ 299.241982][ C0] iowarrior 3-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 299.273440][ T5155] iowarrior 3-1:0.1: I/O-Warror #0 now disconnected [ 299.458905][ T9849] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1381'. [ 299.970819][ T5151] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 300.152339][ T5151] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 64, changing to 10 [ 300.187988][ T5151] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 300.215033][ T5151] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 300.236654][ T5151] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.260799][ T9858] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 300.451623][ T9866] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1388'. [ 300.519641][ T29] audit: type=1326 audit(1721673577.580:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9857 comm="syz.4.1385" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f31579 code=0x0 [ 300.557307][ T47] gspca_sunplus: reg_w_riv err -71 [ 300.569129][ T47] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 300.583032][ T9871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.597624][ T47] usb 4-1: USB disconnect, device number 37 [ 300.620668][ T9871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.749491][ T9875] loop0: detected capacity change from 0 to 16384 [ 300.790480][ T5153] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 300.791019][ T9875] loop0: detected capacity change from 16384 to 16383 [ 300.938936][ T9880] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1392'. [ 300.982047][ T5153] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 301.012660][ T5153] usb 3-1: config 1 has an invalid descriptor of length 200, skipping remainder of the config [ 301.031914][ T5153] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 301.041057][ T5153] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 301.056240][ T5153] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 301.070778][ T5153] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 301.079131][ T5153] usb 3-1: Product: syz [ 301.090230][ T5153] usb 3-1: Manufacturer: syz [ 301.101729][ T5153] cdc_wdm 3-1:1.0: skipping garbage [ 301.106973][ T5153] cdc_wdm 3-1:1.0: skipping garbage [ 301.128137][ T5153] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 301.170313][ T5155] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 301.320842][ T5154] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 301.323402][ T5153] usb 3-1: USB disconnect, device number 52 [ 301.370288][ T5155] usb 2-1: Using ep0 maxpacket: 32 [ 301.372816][ T9887] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1396'. [ 301.387809][ T5155] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 301.405827][ T5155] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 301.416395][ T5155] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 301.429394][ T5155] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 301.439260][ T5155] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 301.449112][ T5155] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 301.462493][ T5155] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 301.486527][ T5155] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.510914][ T5155] usb 2-1: config 0 descriptor?? [ 301.520661][ T5154] usb 1-1: Using ep0 maxpacket: 8 [ 301.546183][ T5154] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 301.562618][ T5154] usb 1-1: config 0 has no interface number 0 [ 301.568971][ T5154] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 101, changing to 10 [ 301.600552][ T5154] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 59093, setting to 1024 [ 301.620575][ T9891] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 301.623205][ T5154] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 301.647600][ T5154] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.668558][ T5154] usb 1-1: config 0 descriptor?? [ 301.678890][ T9882] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 301.679092][ T9891] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1397'. [ 301.700073][ T5154] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 301.715740][ T9891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1397'. [ 301.745539][ T9891] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1397'. [ 301.754409][ T5155] usblp 2-1:0.0: usblp1: USB Bidirectional printer dev 37 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 301.978661][ T5155] usb 1-1: USB disconnect, device number 49 [ 301.978675][ C1] iowarrior 1-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 302.026467][ T5155] iowarrior 1-1:0.1: I/O-Warror #0 now disconnected [ 302.161665][ T5151] usb 2-1: USB disconnect, device number 37 [ 302.187043][ T5151] usblp1: removed [ 302.713560][ T9902] netlink: 'syz.3.1401': attribute type 7 has an invalid length. [ 302.714159][ T5151] usb 5-1: USB disconnect, device number 48 [ 302.725973][ T9902] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1401'. [ 302.865677][ T9905] loop0: detected capacity change from 0 to 16384 [ 302.938996][ T9908] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1404'. [ 302.951546][ T9905] loop0: detected capacity change from 16384 to 16383 [ 303.426990][ T1737] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 303.530292][ T5151] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 303.590292][ T5154] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 303.650634][ T1737] usb 1-1: Using ep0 maxpacket: 32 [ 303.657575][ T1737] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 303.674331][ T1737] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.704684][ T1737] usb 1-1: config 0 descriptor?? [ 303.722199][ T5151] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 303.752420][ T1737] gspca_main: sunplus-2.14.0 probing 041e:400b [ 303.758835][ T5151] usb 3-1: config 1 has an invalid descriptor of length 200, skipping remainder of the config [ 303.777200][ T5151] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 303.797707][ T5151] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 303.812057][ T5154] usb 2-1: Using ep0 maxpacket: 32 [ 303.840687][ T5154] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 303.849336][ T5154] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 303.863143][ T5151] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 303.881322][ T5151] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 303.889530][ T5154] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 303.910451][ T5151] usb 3-1: Product: syz [ 303.914773][ T5154] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 303.925617][ T5151] usb 3-1: Manufacturer: syz [ 303.943798][ T5151] cdc_wdm 3-1:1.0: skipping garbage [ 303.949732][ T5151] cdc_wdm 3-1:1.0: skipping garbage [ 303.955300][ T5154] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 303.970464][ T5151] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 303.984514][ T5154] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 304.011719][ T5154] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 304.031785][ T5154] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.051038][ T5154] usb 2-1: config 0 descriptor?? [ 304.100251][ T8] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 304.159746][ T7199] usb 3-1: USB disconnect, device number 53 [ 304.221064][ T9941] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 304.269298][ T5154] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 38 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 304.322151][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 304.342391][ T8] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 304.372767][ T8] usb 4-1: config 0 has no interface number 0 [ 304.381506][ T9944] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1419'. [ 304.397601][ T8] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 101, changing to 10 [ 304.410020][ T8] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 59093, setting to 1024 [ 304.427652][ T8] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 304.444404][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.461870][ T8] usb 4-1: config 0 descriptor?? [ 304.468973][ T9941] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1419'. [ 304.478790][ T9941] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1419'. [ 304.489117][ T9935] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 304.506321][ T8] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 304.734883][ T8] usb 4-1: USB disconnect, device number 38 [ 304.751298][ T8] iowarrior 4-1:0.1: I/O-Warror #1 now disconnected [ 305.175207][ T9949] loop0: detected capacity change from 0 to 16384 [ 305.231061][ T9949] loop0: detected capacity change from 16384 to 16383 [ 305.255277][ T9949] blk_print_req_error: 24 callbacks suppressed [ 305.255321][ T9949] I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 305.282983][ T9949] buffer_io_error: 24 callbacks suppressed [ 305.283049][ T9949] Buffer I/O error on dev loop0, logical block 1, async page read [ 305.300264][ T9949] Dev loop0: unable to read RDB block 8 [ 305.313085][ T9949] I/O error, dev loop0, sector 24 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 305.322563][ T8] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 305.343964][ T9949] Buffer I/O error on dev loop0, logical block 3, async page read [ 305.370272][ T9949] loop0: unable to read partition table [ 305.376204][ T9949] loop_reread_partitions: partition scan of loop0 (K>i) /480# $qZI[u@3bj!5MM]z) failed (rc=-5) [ 305.523664][ T8] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 305.536923][ T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 305.558580][ T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 305.590314][ T8] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 305.645765][ T8] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 305.670407][ T8] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 305.690684][ T1737] gspca_sunplus: reg_w_riv err -110 [ 305.691203][ T8] usb 3-1: Product: syz [ 305.702924][ T1737] sunplus 1-1:0.0: probe with driver sunplus failed with error -110 [ 305.712545][ T8] usb 3-1: Manufacturer: syz [ 305.737436][ T8] cdc_wdm 3-1:1.0: skipping garbage [ 305.740880][ T1737] usb 1-1: USB disconnect, device number 50 [ 305.764464][ T8] cdc_wdm 3-1:1.0: skipping garbage [ 305.776252][ T9960] dccp_invalid_packet: P.Data Offset(172) too large [ 305.785369][ T8] cdc_wdm 3-1:1.0: skipping garbage [ 305.825116][ T8] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 305.871792][ T9959] syz.3.1423 uses obsolete (PF_INET,SOCK_PACKET) [ 305.964370][ T5155] usb 3-1: USB disconnect, device number 54 [ 306.349921][ T5151] usb 2-1: USB disconnect, device number 38 [ 306.405806][ T5151] usblp0: removed [ 306.666008][ T9969] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1428'. [ 306.943847][ T9970] vxcan0: tx drop: invalid sa for name 0x0000000000100000 [ 306.958409][ T9977] loop0: detected capacity change from 0 to 16384 [ 307.000348][ T9977] loop0: detected capacity change from 16384 to 16383 [ 307.137436][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.277126][ T7199] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 307.331870][ T5155] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 307.343261][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.488087][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.490430][ T7199] usb 3-1: Using ep0 maxpacket: 8 [ 307.522236][ T7199] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 307.540939][ T7199] usb 3-1: config 0 has no interface number 0 [ 307.547088][ T7199] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 101, changing to 10 [ 307.566167][ T5155] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 307.572110][ T7199] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 59093, setting to 1024 [ 307.580198][ T5155] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 307.610317][ T5151] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 307.624825][ T7199] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 307.637761][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.639989][ T5155] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 307.660606][ T7199] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.685523][ T5155] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 307.704613][ T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 307.715188][ T5155] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 307.722035][ T7199] usb 3-1: config 0 descriptor?? [ 307.729521][ T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 307.746325][ T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 307.749819][ T5155] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 307.754355][ T9979] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 307.779223][ T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 307.784375][ T5155] usb 2-1: Product: syz [ 307.790366][ T7199] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 307.793076][ T55] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 307.810374][ T5151] usb 1-1: Using ep0 maxpacket: 32 [ 307.818320][ T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 307.836847][ T5151] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 307.850266][ T5151] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 307.858926][ T5151] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 307.876347][ T5151] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 307.888387][ T5151] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 307.914156][ T5151] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 307.915758][ T5155] usb 2-1: Manufacturer: syz [ 307.932320][ T5151] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 307.942825][ T5151] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.953137][ T5151] usb 1-1: config 0 descriptor?? [ 308.019277][ T11] bridge_slave_1: left allmulticast mode [ 308.027947][ T5155] cdc_wdm 2-1:1.0: skipping garbage [ 308.033721][ T1737] usb 3-1: USB disconnect, device number 55 [ 308.033768][ C1] iowarrior 3-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 308.044218][ T5155] cdc_wdm 2-1:1.0: skipping garbage [ 308.049761][ T11] bridge_slave_1: left promiscuous mode [ 308.060087][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.079218][ T5155] cdc_wdm 2-1:1.0: skipping garbage [ 308.085815][ T11] bridge_slave_0: left allmulticast mode [ 308.087792][ T5155] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 308.109312][ T11] bridge_slave_0: left promiscuous mode [ 308.122812][ T1737] iowarrior 3-1:0.1: I/O-Warror #0 now disconnected [ 308.130474][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.207977][ T29] audit: type=1326 audit(1721673585.270:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9983 comm="syz.4.1436" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f31579 code=0x7fc00000 [ 308.236286][ T5154] usb 2-1: USB disconnect, device number 39 [ 308.338245][ T5151] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 51 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 309.074379][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 309.102107][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.123816][ T11] bond0 (unregistering): Released all slaves [ 309.849462][T10021] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1445'. [ 309.901517][ T5109] Bluetooth: hci1: command tx timeout [ 310.009382][ T5154] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 310.161226][ T11] hsr_slave_0: left promiscuous mode [ 310.207760][ T11] hsr_slave_1: left promiscuous mode [ 310.243047][ T5154] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 64, changing to 10 [ 310.261229][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.287945][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.295232][ T5154] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 310.317670][ T5154] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 310.338285][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 310.358645][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.372379][ T5154] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.388824][ T1737] usb 1-1: USB disconnect, device number 51 [ 310.410727][ T1737] usblp0: removed [ 310.422444][T10018] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 310.456509][ T11] veth1_macvtap: left promiscuous mode [ 310.468760][ T11] veth0_macvtap: left promiscuous mode [ 310.499688][ T11] veth1_vlan: left promiscuous mode [ 310.516279][ T11] veth0_vlan: left promiscuous mode [ 310.650914][ T5153] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 310.775716][ T29] audit: type=1326 audit(1721673587.840:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10017 comm="syz.2.1444" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf740d579 code=0x0 [ 310.836858][T10018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.851027][T10018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.879595][ T5153] usb 5-1: Using ep0 maxpacket: 8 [ 310.887013][ T5153] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 310.901366][ T5153] usb 5-1: config 0 has no interface number 0 [ 310.920300][ T5153] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 101, changing to 10 [ 310.960486][ T5153] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 59093, setting to 1024 [ 310.991728][ T5153] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 311.010344][ T5155] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 311.028231][ T5153] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.082365][ T5153] usb 5-1: config 0 descriptor?? [ 311.088145][T10037] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 311.118034][ T5153] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 311.208750][T10049] dccp_invalid_packet: P.Data Offset(172) too large [ 311.230360][ T5155] usb 1-1: Using ep0 maxpacket: 8 [ 311.238781][ T5155] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 311.258437][ T5155] usb 1-1: config 0 has no interface number 0 [ 311.272184][ T5155] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 101, changing to 10 [ 311.296533][ T5155] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 59093, setting to 1024 [ 311.322567][ T5155] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 311.344107][ T5155] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.346544][ T7199] usb 5-1: USB disconnect, device number 49 [ 311.352242][ C1] iowarrior 5-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 311.363468][ T5155] usb 1-1: config 0 descriptor?? [ 311.389659][ T7199] iowarrior 5-1:0.1: I/O-Warror #0 now disconnected [ 311.403083][T10041] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 311.457436][ T5155] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 311.602296][ T11] team0 (unregistering): Port device team_slave_1 removed [ 311.681995][ T11] team0 (unregistering): Port device team_slave_0 removed [ 311.682894][ C1] iowarrior 1-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 311.738616][ T7199] usb 1-1: USB disconnect, device number 52 [ 311.758827][ T7199] iowarrior 1-1:0.1: I/O-Warror #0 now disconnected [ 311.980433][ T5109] Bluetooth: hci1: command tx timeout [ 312.570420][ T9988] chnl_net:caif_netlink_parms(): no params data found [ 312.873927][ T5153] usb 3-1: USB disconnect, device number 56 [ 313.072927][ T9988] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.080106][ T9988] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.124986][ T9988] bridge_slave_0: entered allmulticast mode [ 313.161991][ T9988] bridge_slave_0: entered promiscuous mode [ 313.182030][ T9988] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.203580][ T9988] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.213323][ T9988] bridge_slave_1: entered allmulticast mode [ 313.224100][ T5154] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 313.231201][ T9988] bridge_slave_1: entered promiscuous mode [ 313.300790][ T7199] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 313.384889][ T9988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.440278][ T5154] usb 5-1: Using ep0 maxpacket: 32 [ 313.446760][ T9988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.470876][ T5154] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 313.479269][ T5154] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 313.529267][ T5154] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 313.538502][ T7199] usb 1-1: Using ep0 maxpacket: 32 [ 313.557175][ T5154] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 313.590831][ T5154] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 313.621466][ T5154] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 313.622959][T10082] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1462'. [ 313.638689][ T7199] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 313.661553][ T9988] team0: Port device team_slave_0 added [ 313.672567][ T9988] team0: Port device team_slave_1 added [ 313.681170][ T5154] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 313.700814][ T7199] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 313.712993][ T5154] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.731206][ T7199] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 313.754576][ T5154] usb 5-1: config 0 descriptor?? [ 313.760902][ T7199] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 313.781951][ T7199] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 313.847733][ T9988] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.847853][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 313.869788][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 313.870634][ T7199] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 313.892417][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 313.913847][ T9988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.925791][ T7199] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 313.954490][ T7199] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.957386][ T9988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.977900][ T5154] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 50 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 313.990547][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 313.992403][ T7199] usb 1-1: config 0 descriptor?? [ 314.008006][ T55] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 314.018131][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 314.073286][ T9988] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.087763][ T55] Bluetooth: hci1: command tx timeout [ 314.110201][ T9988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.139195][ T9988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.199455][ C1] usblp0: nonzero read bulk status received: -71 [ 314.210544][ T1737] usb 5-1: USB disconnect, device number 50 [ 314.236265][ T7199] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 53 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 314.257581][ T7199] usb 1-1: USB disconnect, device number 53 [ 314.299435][ T7199] usblp0: removed [ 314.365975][ T9988] hsr_slave_0: entered promiscuous mode [ 314.379156][ T9988] hsr_slave_1: entered promiscuous mode [ 314.395847][ T9988] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 314.403745][ T9988] Cannot create hsr debugfs directory [ 314.417638][T10065] usblp0: removed [ 314.470560][ T5154] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 314.670340][ T5154] usb 3-1: Using ep0 maxpacket: 8 [ 314.677956][ T5154] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 314.696170][ T5154] usb 3-1: config 0 has no interface number 0 [ 314.705692][ T5154] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 101, changing to 10 [ 314.717261][ T5154] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 59093, setting to 1024 [ 314.728563][ T5154] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 314.738497][ T5154] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.756598][ T5154] usb 3-1: config 0 descriptor?? [ 314.763943][T10090] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 314.781051][ T5154] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 315.023167][ T5154] usb 3-1: USB disconnect, device number 57 [ 315.023236][ C1] iowarrior 3-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 315.074313][ T5154] iowarrior 3-1:0.1: I/O-Warror #0 now disconnected [ 315.229634][T10088] chnl_net:caif_netlink_parms(): no params data found [ 315.392376][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.618251][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.834923][T10123] loop0: detected capacity change from 0 to 16384 [ 315.860817][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.905214][T10123] loop0: detected capacity change from 16384 to 16383 [ 315.975711][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.017730][T10088] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.040557][T10088] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.047916][T10088] bridge_slave_0: entered allmulticast mode [ 316.077472][T10088] bridge_slave_0: entered promiscuous mode [ 316.141041][ T5109] Bluetooth: hci2: command tx timeout [ 316.141580][ T5110] Bluetooth: hci1: command tx timeout [ 316.185788][T10088] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.210445][T10088] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.217784][T10088] bridge_slave_1: entered allmulticast mode [ 316.239973][T10088] bridge_slave_1: entered promiscuous mode [ 316.447940][T10088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.563053][ T9988] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 316.590473][ T1737] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 316.628055][T10088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.709712][ T11] bridge_slave_1: left allmulticast mode [ 316.716316][ T11] bridge_slave_1: left promiscuous mode [ 316.731830][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.760482][ T11] bridge_slave_0: left allmulticast mode [ 316.766158][ T11] bridge_slave_0: left promiscuous mode [ 316.772898][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.800496][ T1737] usb 5-1: Using ep0 maxpacket: 32 [ 316.822778][ T1737] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 316.831748][ T1737] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 316.846628][ T1737] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 316.866022][ T1737] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 316.890313][ T1737] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 316.906529][ T1737] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 316.958040][ T1737] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 316.977646][ T1737] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.996415][ T1737] usb 5-1: config 0 descriptor?? [ 317.221923][ T1737] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 51 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 317.304210][ T5154] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 317.386889][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 317.401732][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 317.414082][ T11] bond0 (unregistering): Released all slaves [ 317.427104][ C1] usblp0: nonzero read bulk status received: -71 [ 317.445454][ T1737] usb 5-1: USB disconnect, device number 51 [ 317.452395][ T9988] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 317.469542][ T9988] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 317.490298][ T5154] usb 1-1: Using ep0 maxpacket: 32 [ 317.512625][ T5154] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 317.538645][ T5154] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 317.549495][ T5154] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 317.561937][ T5154] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 317.589731][T10088] team0: Port device team_slave_0 added [ 317.596963][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.603873][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.624639][ T5154] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 317.634470][ T5154] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 317.649527][T10137] usblp0: removed [ 317.655769][ T5154] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 317.665843][ T9988] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 317.673853][ T5154] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.687316][T10088] team0: Port device team_slave_1 added [ 317.696410][ T5154] usb 1-1: config 0 descriptor?? [ 317.833002][T10088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.854492][T10088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.883308][T10088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.925081][T10088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.934089][T10088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.973466][ T5154] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 54 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 317.989064][T10088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.011795][ T5154] usb 1-1: USB disconnect, device number 54 [ 318.032819][ T5154] usblp0: removed [ 318.220442][ T5110] Bluetooth: hci2: command tx timeout [ 318.340411][ T11] hsr_slave_0: left promiscuous mode [ 318.359261][ T11] hsr_slave_1: left promiscuous mode [ 318.372768][T10162] loop0: detected capacity change from 0 to 16384 [ 318.404546][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 318.415895][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.430430][T10162] loop0: detected capacity change from 16384 to 16383 [ 318.442982][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 318.461773][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 318.533112][ T11] veth1_macvtap: left promiscuous mode [ 318.538695][ T11] veth0_macvtap: left promiscuous mode [ 318.561486][ T11] veth1_vlan: left promiscuous mode [ 318.587404][ T11] veth0_vlan: left promiscuous mode [ 318.670430][ T8] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 318.865405][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 318.882155][ T8] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 318.896690][ T8] usb 3-1: config 0 has no interface number 0 [ 318.906700][T10174] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1480'. [ 318.926867][ T8] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 101, changing to 10 [ 318.954006][ T8] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 59093, setting to 1024 [ 318.971645][ T8] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 318.990533][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.024073][ T8] usb 3-1: config 0 descriptor?? [ 319.047625][T10163] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 319.073413][ T8] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 319.302674][ T8] usb 3-1: USB disconnect, device number 58 [ 319.308642][ C0] iowarrior 3-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 319.366892][ T8] iowarrior 3-1:0.1: I/O-Warror #0 now disconnected [ 319.931791][ T11] team0 (unregistering): Port device team_slave_1 removed [ 320.031411][ T11] team0 (unregistering): Port device team_slave_0 removed [ 320.300772][ T5110] Bluetooth: hci2: command tx timeout [ 320.864202][ T1737] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 320.936913][T10088] hsr_slave_0: entered promiscuous mode [ 320.953704][T10088] hsr_slave_1: entered promiscuous mode [ 320.968893][T10088] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 320.976634][T10088] Cannot create hsr debugfs directory [ 321.061706][ T1737] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 321.086676][ T1737] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 321.120291][ T1737] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 321.135742][ T1737] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.181783][T10221] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 321.436798][ T9988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.530795][ T5151] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 321.587788][ T9988] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.640543][ T5153] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.647733][ T5153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.735145][ T7199] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.742351][ T7199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.751017][ T5151] usb 1-1: Using ep0 maxpacket: 16 [ 321.769369][ T5151] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 321.815078][ T5151] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 321.861903][ T5151] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.900355][ T5151] usb 1-1: config 0 descriptor?? [ 322.039487][ T9988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.351356][T10088] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 322.379653][T10088] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 322.390356][ T5110] Bluetooth: hci2: command tx timeout [ 322.405864][T10088] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 322.423500][ T5151] usbhid 1-1:0.0: can't add hid device: -71 [ 322.444715][T10088] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 322.458318][ T5151] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 322.499503][ T9988] veth0_vlan: entered promiscuous mode [ 322.500561][ T5151] usb 1-1: USB disconnect, device number 55 [ 322.572421][ T9988] veth1_vlan: entered promiscuous mode [ 322.631151][ T1737] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 322.640015][ T1737] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input10 [ 322.806847][ T9988] veth0_macvtap: entered promiscuous mode [ 322.883213][ T5153] usb 3-1: USB disconnect, device number 59 [ 322.883315][ C1] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 322.976534][T10088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.033774][ T9988] veth1_macvtap: entered promiscuous mode [ 323.139346][T10088] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.170581][ T9988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.205425][ T9988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.240343][ T9988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.280454][ T9988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.305849][ T9988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.343364][ T9988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.347942][T10270] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1493'. [ 323.363617][ T9988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.384526][ T9988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.406947][ T9988] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.471719][ T5153] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.478949][ T5153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.523479][ T5153] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.530707][ T5153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.531301][ C1] eth0: bad gso: type: 1, size: 1408 [ 323.602728][ T9988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.624640][ T9988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.670442][ T9988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.705030][ T9988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.738681][ T9988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.771071][ T9988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.783687][ T9988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.810135][ T9988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.831301][ T9988] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.898111][ T9988] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.945656][ T9988] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.973891][ T9988] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.012205][ T9988] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.350437][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.378967][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.436106][T10088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.469560][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.490858][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.571021][ T1737] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 324.646809][T10088] veth0_vlan: entered promiscuous mode [ 324.683917][T10088] veth1_vlan: entered promiscuous mode [ 324.780312][ T1737] usb 3-1: Using ep0 maxpacket: 16 [ 324.788994][T10088] veth0_macvtap: entered promiscuous mode [ 324.801204][ T1737] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 324.831645][ T1737] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 324.844412][T10088] veth1_macvtap: entered promiscuous mode [ 324.850536][ T1737] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.872660][ T1737] usb 3-1: config 0 descriptor?? [ 324.902657][T10302] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 324.919243][T10088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.950610][T10088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.962462][T10088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.990218][T10088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.002491][T10088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.017006][T10308] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1502'. [ 325.027290][T10088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.043394][T10088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.054487][T10088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.064903][T10088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.079044][T10088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.121126][T10088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.160056][T10308] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1502'. [ 325.192670][ T5094] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 325.201735][T10308] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1502'. [ 325.238546][T10088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.249891][T10088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.282417][T10088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.293441][T10088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.303871][T10088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.314996][T10088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.329406][T10088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.340640][T10088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.351089][T10088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.362146][T10088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.375344][T10088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.419735][ T5094] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 325.440041][T10088] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.457394][ T5094] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 325.459172][T10088] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.489061][ T5094] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 325.493587][T10088] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.516647][ T5094] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.517724][T10088] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.549695][T10304] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 325.566493][ T1737] usbhid 3-1:0.0: can't add hid device: -71 [ 325.574891][ T1737] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 325.588434][T10313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1504'. [ 325.617532][ T1737] usb 3-1: USB disconnect, device number 60 [ 325.771624][ C1] eth0: bad gso: type: 1, size: 1408 [ 325.843717][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.864253][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.903258][T10317] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1506'. [ 325.938402][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.956854][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.636306][T10340] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 326.687278][T10340] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1515'. [ 326.738608][T10340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1515'. [ 326.758409][T10340] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1515'. [ 326.951196][ T5094] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 326.959981][ T5094] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input11 [ 327.089203][T10349] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1518'. [ 327.211657][ T47] usb 4-1: USB disconnect, device number 39 [ 327.211766][ C0] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 327.253667][T10351] loop0: detected capacity change from 0 to 16384 [ 327.320713][T10351] loop0: detected capacity change from 16384 to 16383 [ 327.351733][T10351] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 327.372736][T10351] Buffer I/O error on dev loop0, logical block 0, async page read [ 327.390404][T10351] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 327.415506][T10351] Buffer I/O error on dev loop0, logical block 0, async page read [ 327.440412][T10351] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 327.457912][T10351] Buffer I/O error on dev loop0, logical block 0, async page read [ 327.472180][T10351] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 327.486313][T10351] Buffer I/O error on dev loop0, logical block 0, async page read [ 327.507171][T10351] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 327.565102][T10351] Buffer I/O error on dev loop0, logical block 0, async page read [ 327.590457][T10351] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 327.610330][T10351] Buffer I/O error on dev loop0, logical block 0, async page read [ 327.658446][T10351] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 327.680308][T10351] Buffer I/O error on dev loop0, logical block 0, async page read [ 327.688667][T10351] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 327.709913][T10351] Buffer I/O error on dev loop0, logical block 0, async page read [ 327.719766][T10351] ldm_validate_partition_table(): Disk read failed. [ 327.732782][T10351] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 327.748262][T10351] Buffer I/O error on dev loop0, logical block 0, async page read [ 327.760620][T10351] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 327.769899][T10351] Buffer I/O error on dev loop0, logical block 0, async page read [ 327.797465][T10351] Dev loop0: unable to read RDB block 0 [ 327.805079][T10351] loop0: unable to read partition table [ 327.813883][T10351] loop_reread_partitions: partition scan of loop0 (K>i) /480# $qZI[u@3bj!5MM]z) failed (rc=-5) [ 328.260290][ T5154] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 328.464862][ T5154] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 328.475995][ T5154] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 328.509438][ T5154] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 328.539160][ T5154] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.598873][ T5154] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 328.618133][ T5154] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 328.646102][ T5154] usb 5-1: Product: syz [ 328.665114][ T5154] usb 5-1: Manufacturer: syz [ 328.677338][ T5154] cdc_wdm 5-1:1.0: skipping garbage [ 328.683901][ T5154] cdc_wdm 5-1:1.0: skipping garbage [ 328.698786][ T5154] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 328.725714][T10399] netlink: 'syz.0.1537': attribute type 11 has an invalid length. [ 328.728065][ T5154] cdc_wdm 5-1:1.0: Unknown control protocol [ 328.799434][T10399] netlink: 'syz.0.1537': attribute type 11 has an invalid length. [ 328.836769][T10399] debugfs: Directory 'netdev:' with parent 'phy43' already present! [ 328.887384][ T5154] usb 5-1: USB disconnect, device number 52 [ 328.960339][ T47] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 329.128222][T10409] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1542'. [ 329.152677][ T47] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 329.165092][ T47] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 329.179310][ T47] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 329.200295][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.215006][T10400] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 329.350567][ T1737] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 329.551595][ T1737] usb 1-1: Using ep0 maxpacket: 8 [ 329.578219][ T1737] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 329.596333][ T1737] usb 1-1: config 0 has no interface number 0 [ 329.611882][ T1737] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 101, changing to 10 [ 329.625640][ T1737] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 59093, setting to 1024 [ 329.637843][ T1737] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 329.650459][ T1737] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.661372][ T1737] usb 1-1: config 0 descriptor?? [ 329.667823][T10405] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 329.690665][ T1737] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 329.903286][ T5155] usb 1-1: USB disconnect, device number 56 [ 329.913076][ T5155] iowarrior 1-1:0.1: I/O-Warror #0 now disconnected [ 330.185158][T10419] netlink: 'syz.1.1546': attribute type 11 has an invalid length. [ 330.325380][T10422] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1547'. [ 330.622519][ T47] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 330.633565][ T47] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input12 [ 330.719914][T10432] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1550'. [ 330.863227][ T47] usb 3-1: USB disconnect, device number 61 [ 330.863283][ C1] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 331.559989][T10453] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1559'. [ 331.629122][T10457] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1561'. [ 331.750408][ T47] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 331.939069][T10466] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 331.960551][ T47] usb 3-1: Using ep0 maxpacket: 32 [ 331.978185][ T47] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 331.990250][ T47] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 332.012640][ T47] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 332.027673][T10466] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1564'. [ 332.049738][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 332.070998][ T47] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 332.090239][ T47] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 332.109664][T10466] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1564'. [ 332.123845][ T47] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 332.141229][T10466] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1564'. [ 332.155162][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.181270][ T47] usb 3-1: config 0 descriptor?? [ 332.418189][ T47] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 62 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 332.465332][ T47] usb 3-1: USB disconnect, device number 62 [ 332.498473][ T47] usblp0: removed [ 333.811766][T10512] netlink: 'syz.0.1579': attribute type 11 has an invalid length. [ 334.757553][T10533] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1586'. [ 335.178368][T10540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1587'. [ 335.297722][T10544] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1591'. [ 335.422955][T10549] netlink: 'syz.3.1592': attribute type 11 has an invalid length. [ 335.722114][T10558] loop0: detected capacity change from 0 to 16384 [ 335.749417][T10560] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1597'. [ 335.779360][T10558] loop0: detected capacity change from 16384 to 16383 [ 335.808570][T10558] blk_print_req_error: 7 callbacks suppressed [ 335.808588][T10558] I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 335.880280][T10558] buffer_io_error: 7 callbacks suppressed [ 335.880299][T10558] Buffer I/O error on dev loop0, logical block 1, async page read [ 335.941316][T10558] Dev loop0: unable to read RDB block 8 [ 335.947166][T10558] I/O error, dev loop0, sector 24 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 336.008723][T10558] Buffer I/O error on dev loop0, logical block 3, async page read [ 336.048428][T10558] loop0: unable to read partition table [ 336.073852][T10558] loop_reread_partitions: partition scan of loop0 (K>i) /480# $qZI[u@3bj!5MM]z) failed (rc=-5) [ 336.537034][T10578] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1603'. [ 336.860393][ T5152] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 337.059308][T10590] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1606'. [ 337.070474][ T5152] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 337.086104][ T5152] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 337.099544][ T5152] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 337.119718][ T5152] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.143681][ T5152] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 337.165301][ T5152] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 337.187673][ T5152] usb 2-1: Product: syz [ 337.200553][ T5152] usb 2-1: Manufacturer: syz [ 337.218782][ T5152] cdc_wdm 2-1:1.0: skipping garbage [ 337.237264][ T5152] cdc_wdm 2-1:1.0: skipping garbage [ 337.245997][ T5152] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 337.261159][ T5152] cdc_wdm 2-1:1.0: Unknown control protocol [ 337.462737][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 337.468458][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 337.474373][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 337.480257][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 337.486136][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 337.492001][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 337.497868][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 337.503737][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 337.509606][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 337.515483][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 337.521358][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 337.527326][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 337.533190][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 337.539076][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 337.544940][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 337.550813][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 337.556673][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 337.562533][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 337.568210][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 337.573993][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 337.579944][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 337.585815][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 337.591700][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 337.597555][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 337.603433][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 337.609292][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 337.615137][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 337.621005][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 337.626866][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 337.632717][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 337.638582][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 337.644454][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 337.650312][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 337.656180][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 337.662040][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 337.667908][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 337.673769][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 337.679627][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 337.685488][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 337.691349][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 337.697207][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 337.703084][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 337.708941][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 337.714791][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 337.720632][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 337.726483][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 337.732346][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 337.738211][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 337.743966][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 337.754899][ T5094] ------------[ cut here ]------------ [ 337.756984][ T47] usb 2-1: USB disconnect, device number 40 [ 337.760858][ C0] cdc_wdm 2-1:1.0: Unexpected error -71 [ 337.760982][ T5094] URB ffff88806a122700 submitted while active [ 337.761419][ T5094] WARNING: CPU: 0 PID: 5094 at drivers/usb/core/urb.c:379 usb_submit_urb+0x1039/0x18c0 [ 337.790931][ T5094] Modules linked in: [ 337.794868][ T5094] CPU: 0 UID: 0 PID: 5094 Comm: kworker/0:3 Not tainted 6.10.0-syzkaller-11840-g933069701c1b #0 [ 337.805365][ T5094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 337.815579][ T5094] Workqueue: events wdm_rxwork [ 337.820580][ T5094] RIP: 0010:usb_submit_urb+0x1039/0x18c0 [ 337.826243][ T5094] Code: 00 eb 66 e8 f9 4c 71 fa e9 79 f0 ff ff e8 ef 4c 71 fa c6 05 80 c7 77 08 01 90 48 c7 c7 80 f0 6e 8c 4c 89 ee e8 58 5c 33 fa 90 <0f> 0b 90 90 e9 40 f0 ff ff e8 c9 4c 71 fa eb 12 e8 c2 4c 71 fa 41 [ 337.845998][ T5094] RSP: 0018:ffffc9000367fae8 EFLAGS: 00010246 [ 337.852167][ T5094] RAX: 3fca135bd1d20e00 RBX: 0000000000000cc0 RCX: ffff8880177bbc00 [ 337.860259][ T5094] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 337.868260][ T5094] RBP: ffff88806a122708 R08: ffffffff81559432 R09: 1ffffffff2600526 [ 337.877390][ T5094] R10: dffffc0000000000 R11: fffffbfff2600527 R12: 1ffff1100cd62c12 [ 337.886499][ T5094] R13: ffff88806a122700 R14: dffffc0000000000 R15: ffff888066b16028 [ 337.894553][ T5094] FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 337.903813][ T5094] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 337.910588][ T5094] CR2: 0000000057ab199c CR3: 000000005950e000 CR4: 00000000003506f0 [ 337.918583][ T5094] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 337.926668][ T5094] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 337.934743][ T5094] Call Trace: [ 337.938036][ T5094] [ 337.941078][ T5094] ? __warn+0x163/0x4e0 [ 337.945256][ T5094] ? usb_submit_urb+0x1039/0x18c0 [ 337.950343][ T5094] ? report_bug+0x2b3/0x500 [ 337.954864][ T5094] ? usb_submit_urb+0x1039/0x18c0 [ 337.959913][ T5094] ? handle_bug+0x3e/0x70 [ 337.964342][ T5094] ? exc_invalid_op+0x1a/0x50 [ 337.969041][ T5094] ? asm_exc_invalid_op+0x1a/0x20 [ 337.974156][ T5094] ? __warn_printk+0x292/0x360 [ 337.980077][ T5094] ? usb_submit_urb+0x1039/0x18c0 [ 337.986211][ T5094] ? usb_submit_urb+0x1038/0x18c0 [ 337.991349][ T5094] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 337.997703][ T5094] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 338.004163][ T5094] wdm_rxwork+0x116/0x1f0 [ 338.008613][ T5094] ? process_scheduled_works+0x945/0x1830 [ 338.014438][ T5094] process_scheduled_works+0xa2c/0x1830 [ 338.020047][ T5094] ? __pfx_process_scheduled_works+0x10/0x10 [ 338.026141][ T5094] ? assign_work+0x364/0x3d0 [ 338.030791][ T5094] worker_thread+0x86d/0xd40 [ 338.035406][ T5094] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 338.041392][ T5094] ? __kthread_parkme+0x169/0x1d0 [ 338.046918][ T5094] ? __pfx_worker_thread+0x10/0x10 [ 338.052142][ T5094] kthread+0x2f0/0x390 [ 338.056231][ T5094] ? __pfx_worker_thread+0x10/0x10 [ 338.065092][ T5094] ? __pfx_kthread+0x10/0x10 [ 338.069710][ T5094] ret_from_fork+0x4b/0x80 [ 338.076102][ T5094] ? __pfx_kthread+0x10/0x10 [ 338.081922][ T5094] ret_from_fork_asm+0x1a/0x30 [ 338.086738][ T5094] [ 338.089770][ T5094] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 338.097052][ T5094] CPU: 0 UID: 0 PID: 5094 Comm: kworker/0:3 Not tainted 6.10.0-syzkaller-11840-g933069701c1b #0 [ 338.107473][ T5094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 338.117542][ T5094] Workqueue: events wdm_rxwork [ 338.122336][ T5094] Call Trace: [ 338.125628][ T5094] [ 338.128572][ T5094] dump_stack_lvl+0x241/0x360 [ 338.133275][ T5094] ? __pfx_dump_stack_lvl+0x10/0x10 [ 338.138490][ T5094] ? __pfx__printk+0x10/0x10 [ 338.143106][ T5094] ? vscnprintf+0x5d/0x90 [ 338.147452][ T5094] panic+0x349/0x860 [ 338.151386][ T5094] ? __warn+0x172/0x4e0 [ 338.155535][ T5094] ? __pfx_panic+0x10/0x10 [ 338.159956][ T5094] ? ret_from_fork_asm+0x1a/0x30 [ 338.164896][ T5094] __warn+0x346/0x4e0 [ 338.168873][ T5094] ? usb_submit_urb+0x1039/0x18c0 [ 338.173901][ T5094] report_bug+0x2b3/0x500 [ 338.178238][ T5094] ? usb_submit_urb+0x1039/0x18c0 [ 338.183270][ T5094] handle_bug+0x3e/0x70 [ 338.187422][ T5094] exc_invalid_op+0x1a/0x50 [ 338.191924][ T5094] asm_exc_invalid_op+0x1a/0x20 [ 338.196785][ T5094] RIP: 0010:usb_submit_urb+0x1039/0x18c0 [ 338.202417][ T5094] Code: 00 eb 66 e8 f9 4c 71 fa e9 79 f0 ff ff e8 ef 4c 71 fa c6 05 80 c7 77 08 01 90 48 c7 c7 80 f0 6e 8c 4c 89 ee e8 58 5c 33 fa 90 <0f> 0b 90 90 e9 40 f0 ff ff e8 c9 4c 71 fa eb 12 e8 c2 4c 71 fa 41 [ 338.222018][ T5094] RSP: 0018:ffffc9000367fae8 EFLAGS: 00010246 [ 338.228079][ T5094] RAX: 3fca135bd1d20e00 RBX: 0000000000000cc0 RCX: ffff8880177bbc00 [ 338.236042][ T5094] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 338.244004][ T5094] RBP: ffff88806a122708 R08: ffffffff81559432 R09: 1ffffffff2600526 [ 338.251966][ T5094] R10: dffffc0000000000 R11: fffffbfff2600527 R12: 1ffff1100cd62c12 [ 338.259932][ T5094] R13: ffff88806a122700 R14: dffffc0000000000 R15: ffff888066b16028 [ 338.267901][ T5094] ? __warn_printk+0x292/0x360 [ 338.272707][ T5094] ? usb_submit_urb+0x1038/0x18c0 [ 338.277728][ T5094] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 338.284053][ T5094] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 338.290389][ T5094] wdm_rxwork+0x116/0x1f0 [ 338.294724][ T5094] ? process_scheduled_works+0x945/0x1830 [ 338.300438][ T5094] process_scheduled_works+0xa2c/0x1830 [ 338.306028][ T5094] ? __pfx_process_scheduled_works+0x10/0x10 [ 338.312023][ T5094] ? assign_work+0x364/0x3d0 [ 338.316714][ T5094] worker_thread+0x86d/0xd40 [ 338.321303][ T5094] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 338.327193][ T5094] ? __kthread_parkme+0x169/0x1d0 [ 338.332217][ T5094] ? __pfx_worker_thread+0x10/0x10 [ 338.337325][ T5094] kthread+0x2f0/0x390 [ 338.341387][ T5094] ? __pfx_worker_thread+0x10/0x10 [ 338.346493][ T5094] ? __pfx_kthread+0x10/0x10 [ 338.351073][ T5094] ret_from_fork+0x4b/0x80 [ 338.355481][ T5094] ? __pfx_kthread+0x10/0x10 [ 338.360058][ T5094] ret_from_fork_asm+0x1a/0x30 [ 338.364852][ T5094] [ 338.368082][ T5094] Kernel Offset: disabled [ 338.372473][ T5094] Rebooting in 86400 seconds..