last executing test programs: 30.152547336s ago: executing program 3 (id=226): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x9, "c46e9fd1a84b7fefa0bf2cca6beb9363a680b652a86bcf56a1b9f4e6b54cc6beca5462202c484c10ca5386103a5ccbe47b7b9aa6d8d701a3ba6a6c0ce8b978", 0x1}, 0x60) r1 = dup(r0) getsockopt$inet_buf(r1, 0x118, 0x26, 0x0, &(0x7f00000003c0)) 30.069281465s ago: executing program 3 (id=227): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r1) sendmsg$NFC_CMD_LLC_SDREQ(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x526c41b91a75882e}, 0x40000094) 29.92808228s ago: executing program 3 (id=228): syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x68942, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1000, &(0x7f00004aa000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 29.721782138s ago: executing program 3 (id=229): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000180)='./file1\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 29.476150122s ago: executing program 3 (id=231): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) 29.239890054s ago: executing program 3 (id=236): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x1800013, &(0x7f0000000680)={'trans=virtio,', {[{@cache_readahead}]}}) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) 28.945619299s ago: executing program 32 (id=236): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x1800013, &(0x7f0000000680)={'trans=virtio,', {[{@cache_readahead}]}}) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) 7.859303777s ago: executing program 4 (id=398): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=fscache']) 7.605898323s ago: executing program 4 (id=400): r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x639) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x2}) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x3, 0x6c4ba42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0xfffffffffffffffb, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x0, 0x200, 0x0, 0x40000000000, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x100000001]}) syz_open_dev$sndctrl(0x0, 0x0, 0x0) getpgrp(0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, 0x0, 0x4) inotify_init1(0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x200000008, 0x0, 0x4cb, 0x8, 0x0, 0x1}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0x9, 0x0, 0x0, 0x10, 0x4}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 6.807051801s ago: executing program 4 (id=404): syz_open_dev$video4linux(&(0x7f0000000000), 0x3fe, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, 0x0, 0x0) syz_open_dev$media(0x0, 0x34, 0x0) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) bind$netlink(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 6.18028026s ago: executing program 1 (id=405): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r3, &(0x7f00000000c0)=""/4096, 0x1000) mount$9p_rdma(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[]) 5.896044164s ago: executing program 2 (id=406): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffc) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffe, @local, 0x1}, 0x1c) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) 5.161914203s ago: executing program 4 (id=408): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000280)={0x20, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0x2}, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 4.396056096s ago: executing program 1 (id=409): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r4, &(0x7f0000000200)=[{&(0x7f0000000140)='2', 0x1}], 0x1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1018, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 4.310923807s ago: executing program 2 (id=411): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)={0x1c, r1, 0x1, 0x0, 0x3, {}, [@WGDEVICE_A_IFINDEX={0x8}]}, 0x1c}}, 0x0) 4.16387037s ago: executing program 2 (id=412): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, 0x0, 0x0) 2.797969251s ago: executing program 2 (id=414): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000340)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={0x0, r1, 0x0, 0x3}}, 0x20) 2.092118242s ago: executing program 2 (id=415): syz_open_dev$sndmidi(0x0, 0x2, 0x141101) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040f0200f80d20"], 0x7) 2.09193231s ago: executing program 0 (id=416): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$inet6(r1, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="a251becd7a6b645a3a0fbca1e05643adbf012ab917cece3a3afb2704ae2f1d01696e7c5a4000cf923de5899374d0b9ab5fe7d3046e45a242967b11fe0a08745924d2ad4df5ec3072d06700081be428b77268e7b1bfe8ec7a8554a08035b715e017a47f0393fc39f362c41fc3f3bb3c436c1fdfb70d2940554134592fb9382b1e", 0x80}], 0x1}}], 0x1, 0x4000081) 1.836249305s ago: executing program 2 (id=417): r0 = gettid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000d80), 0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)={'cryptd(blake2b-160)\x00'}}) r2 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0) syz_usb_disconnect(r2) 1.815931905s ago: executing program 1 (id=418): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002600)={0x2c, 0x1, 0x4, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0xfa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) 1.604076543s ago: executing program 0 (id=419): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000180)="adaf44bb2eaaa91b341bab35f60f", 0xe, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0xfe, 0x2, 0x0, 0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000100)=0x6, 0x4) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 1.305820907s ago: executing program 1 (id=420): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x402}}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000280)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 1.267928527s ago: executing program 0 (id=421): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000040)={0x0, 0x1, 0x6, @local}, 0x10) 959.824575ms ago: executing program 0 (id=422): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, &(0x7f00000001c0)={0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) bind$inet(r0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, 0x0, 0x0) 940.769323ms ago: executing program 1 (id=423): capset(&(0x7f00000002c0)={0x20071026}, &(0x7f0000000300)) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) ioctl$BLKBSZSET(r0, 0x40081271, 0x0) 855.99813ms ago: executing program 4 (id=424): r0 = socket$inet(0x2, 0x801, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0xe803, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(r0, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000580)="fdba", 0x2}], 0x1}}], 0x1, 0x0) sendto$inet(r0, &(0x7f00000001c0), 0xfffffffffffffe58, 0x2000c094, 0x0, 0xffffffe6) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0x0) 172.04834ms ago: executing program 0 (id=425): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) 125.710941ms ago: executing program 1 (id=426): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) write$P9_RREMOVE(r3, &(0x7f00000002c0)={0x7, 0x7b, 0x2}, 0x7) 92.205874ms ago: executing program 4 (id=427): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) openat$uinput(0xffffff9c, &(0x7f0000000040), 0x802, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) socket$caif_stream(0x25, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xfffffbfffffffffd, 0x20000000002, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0xd}, 0x0, &(0x7f00000002c0)={0x3fb, 0x3, 0x400000000001, 0x9, 0x771c, 0xf, 0x80000002, 0x2}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=428): connect$can_bcm(0xffffffffffffffff, &(0x7f00000002c0), 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0xfffffffe, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000003100)=@gcm_128={{0x303}, "0000780000800008", "0dd12f0d004fcf0000e8bfff1a8600", "cf0f00", "8657e2b7e63b34e4"}, 0x28) write$binfmt_script(r0, &(0x7f0000001300), 0x8f) recvmmsg(r0, 0x0, 0x0, 0x40000002, 0x0) writev(r0, &(0x7f00000030c0)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000013c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001380)=0x40) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000380)="ac", 0x1}], 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.65' (ED25519) to the list of known hosts. [ 73.761304][ T5835] cgroup: Unknown subsys name 'net' [ 73.933895][ T5835] cgroup: Unknown subsys name 'cpuset' [ 73.943351][ T5835] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.337679][ T5835] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.258883][ T5856] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.269479][ T5856] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.278894][ T5858] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.281512][ T5863] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.293771][ T5858] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.301906][ T5863] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.314996][ T5861] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.322849][ T5858] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.331055][ T5863] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.338781][ T5858] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.339529][ T5863] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.354395][ T5861] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.364511][ T5863] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.367501][ T5862] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.372943][ T5858] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.387631][ T5855] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.395401][ T5862] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.404506][ T5855] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.414290][ T5855] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.424248][ T5855] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.976401][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 78.996114][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 79.095899][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 79.134941][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 79.266104][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.273680][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.281786][ T5845] bridge_slave_0: entered allmulticast mode [ 79.289011][ T5845] bridge_slave_0: entered promiscuous mode [ 79.297801][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.305897][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.313232][ T5845] bridge_slave_1: entered allmulticast mode [ 79.320218][ T5845] bridge_slave_1: entered promiscuous mode [ 79.327734][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.335134][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.342597][ T5844] bridge_slave_0: entered allmulticast mode [ 79.349603][ T5844] bridge_slave_0: entered promiscuous mode [ 79.402918][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.410063][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.417508][ T5844] bridge_slave_1: entered allmulticast mode [ 79.426096][ T5844] bridge_slave_1: entered promiscuous mode [ 79.457378][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.464908][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.472254][ T5847] bridge_slave_0: entered allmulticast mode [ 79.479318][ T5847] bridge_slave_0: entered promiscuous mode [ 79.496207][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.519081][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.527852][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.535373][ T5847] bridge_slave_1: entered allmulticast mode [ 79.542430][ T5847] bridge_slave_1: entered promiscuous mode [ 79.576416][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.624604][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.632158][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.639403][ T5846] bridge_slave_0: entered allmulticast mode [ 79.647693][ T5846] bridge_slave_0: entered promiscuous mode [ 79.671417][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.683704][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.693202][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.700507][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.708524][ T5846] bridge_slave_1: entered allmulticast mode [ 79.716264][ T5846] bridge_slave_1: entered promiscuous mode [ 79.738120][ T5845] team0: Port device team_slave_0 added [ 79.746413][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.768967][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.803809][ T5845] team0: Port device team_slave_1 added [ 79.860294][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.878968][ T5844] team0: Port device team_slave_0 added [ 79.886984][ T5847] team0: Port device team_slave_0 added [ 79.896250][ T5847] team0: Port device team_slave_1 added [ 79.915757][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.928037][ T5844] team0: Port device team_slave_1 added [ 79.947543][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.954698][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.981614][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.029566][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.037095][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.063409][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.076722][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.084243][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.111300][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.148504][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.156016][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.182211][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.202506][ T5846] team0: Port device team_slave_0 added [ 80.209890][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.217515][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.243811][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.266819][ T5846] team0: Port device team_slave_1 added [ 80.273648][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.281005][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.307337][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.391803][ T51] Bluetooth: hci1: command tx timeout [ 80.394791][ T5855] Bluetooth: hci0: command tx timeout [ 80.401020][ T5847] hsr_slave_0: entered promiscuous mode [ 80.409380][ T5847] hsr_slave_1: entered promiscuous mode [ 80.427693][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.435256][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.461584][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.470687][ T5855] Bluetooth: hci3: command tx timeout [ 80.472584][ T51] Bluetooth: hci2: command tx timeout [ 80.517034][ T5845] hsr_slave_0: entered promiscuous mode [ 80.523610][ T5845] hsr_slave_1: entered promiscuous mode [ 80.529700][ T5845] debugfs: 'hsr0' already exists in 'hsr' [ 80.536113][ T5845] Cannot create hsr debugfs directory [ 80.542609][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.549537][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.575807][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.603762][ T5844] hsr_slave_0: entered promiscuous mode [ 80.609984][ T5844] hsr_slave_1: entered promiscuous mode [ 80.616182][ T5844] debugfs: 'hsr0' already exists in 'hsr' [ 80.621942][ T5844] Cannot create hsr debugfs directory [ 80.766838][ T5846] hsr_slave_0: entered promiscuous mode [ 80.773586][ T5846] hsr_slave_1: entered promiscuous mode [ 80.779937][ T5846] debugfs: 'hsr0' already exists in 'hsr' [ 80.786560][ T5846] Cannot create hsr debugfs directory [ 81.159189][ T5844] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.173766][ T5844] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.185866][ T5844] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.210200][ T5844] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.275414][ T5847] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.285924][ T5847] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.311855][ T5847] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.321749][ T5847] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.386781][ T5846] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.412007][ T5846] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.429368][ T5846] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.447463][ T5846] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.558309][ T5845] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.574203][ T5845] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.603344][ T5845] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.625201][ T5845] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.678669][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.712648][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.747704][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.787726][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.812261][ T1105] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.819635][ T1105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.865555][ T1105] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.872781][ T1105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.893680][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.917777][ T1105] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.924963][ T1105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.938897][ T1105] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.946100][ T1105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.999976][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.084146][ T1105] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.091427][ T1105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.146186][ T1116] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.153583][ T1116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.209340][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.305955][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.368802][ T1116] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.376262][ T1116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.395046][ T1116] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.402878][ T1116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.471840][ T51] Bluetooth: hci0: command tx timeout [ 82.474782][ T5855] Bluetooth: hci1: command tx timeout [ 82.553691][ T5855] Bluetooth: hci2: command tx timeout [ 82.553806][ T51] Bluetooth: hci3: command tx timeout [ 82.735240][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.858614][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.913210][ T5844] veth0_vlan: entered promiscuous mode [ 82.972272][ T5844] veth1_vlan: entered promiscuous mode [ 83.011957][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.039415][ T5847] veth0_vlan: entered promiscuous mode [ 83.068596][ T5847] veth1_vlan: entered promiscuous mode [ 83.114334][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.124797][ T5844] veth0_macvtap: entered promiscuous mode [ 83.142989][ T5844] veth1_macvtap: entered promiscuous mode [ 83.182977][ T5847] veth0_macvtap: entered promiscuous mode [ 83.195219][ T5846] veth0_vlan: entered promiscuous mode [ 83.219444][ T5846] veth1_vlan: entered promiscuous mode [ 83.248887][ T5847] veth1_macvtap: entered promiscuous mode [ 83.265712][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.281870][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.306600][ T5845] veth0_vlan: entered promiscuous mode [ 83.338669][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.348549][ T996] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.359070][ T1146] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.377622][ T1146] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.387871][ T1146] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.406527][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.440445][ T5845] veth1_vlan: entered promiscuous mode [ 83.452649][ T1116] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.487332][ T1116] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.496341][ T1116] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.523529][ T1116] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.577119][ T1105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.598226][ T1105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.617743][ T5846] veth0_macvtap: entered promiscuous mode [ 83.650495][ T5846] veth1_macvtap: entered promiscuous mode [ 83.701067][ T996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.708997][ T996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.717819][ T1105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.727826][ T1105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.741148][ T5845] veth0_macvtap: entered promiscuous mode [ 83.788555][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.801808][ T5845] veth1_macvtap: entered promiscuous mode [ 83.817088][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.826109][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.845584][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.863179][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.903645][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.936701][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.995289][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.021325][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.030881][ T64] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.056885][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.131233][ T1105] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.146419][ T1105] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.172294][ T1105] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.184533][ T1105] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.273107][ T996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.290947][ T996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.376587][ T1116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.381188][ T43] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 84.401774][ T1116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.508568][ T1105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.535745][ T1105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.551684][ T51] Bluetooth: hci1: command tx timeout [ 84.551723][ T5855] Bluetooth: hci0: command tx timeout [ 84.586183][ T43] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 84.605616][ T43] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 84.615663][ T43] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 84.625483][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.634168][ T5855] Bluetooth: hci2: command tx timeout [ 84.641786][ T5855] Bluetooth: hci3: command tx timeout [ 84.665063][ T5945] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 84.697179][ T43] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 84.758685][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.797175][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.980877][ T980] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 85.027337][ T5902] usb 3-1: USB disconnect, device number 2 [ 85.154299][ T980] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 85.166483][ T980] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 85.177069][ T980] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 85.187459][ T980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.200247][ T5954] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 85.220255][ T980] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 85.273774][ T43] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 85.340814][ T5916] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 85.415360][ T5915] usb 4-1: USB disconnect, device number 2 [ 85.437192][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 85.456351][ T43] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.474826][ T43] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 85.487751][ T43] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 85.496952][ T5916] usb 1-1: Using ep0 maxpacket: 32 [ 85.502200][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.510195][ T43] usb 2-1: Product: syz [ 85.516434][ T43] usb 2-1: Manufacturer: syz [ 85.521942][ T43] usb 2-1: SerialNumber: syz [ 85.531256][ T5916] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 85.542206][ T43] usb 2-1: config 0 descriptor?? [ 85.547395][ T5916] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 85.559847][ T5916] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 85.569283][ T5916] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 85.599423][ T5916] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 85.609852][ T5916] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 85.623658][ T5916] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 85.646782][ T5916] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 85.648120][ T5967] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 85.678157][ T5916] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 85.695741][ T5916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.720689][ T5916] usb 1-1: config 0 descriptor?? [ 85.776836][ T5967] loop6: detected capacity change from 0 to 63 [ 85.806857][ T5852] Buffer I/O error on dev loop6, logical block 0, async page read [ 85.827195][ T5852] Buffer I/O error on dev loop6, logical block 0, async page read [ 85.857293][ T5852] Buffer I/O error on dev loop6, logical block 0, async page read [ 85.875744][ T5852] Buffer I/O error on dev loop6, logical block 0, async page read [ 85.900330][ T5852] Buffer I/O error on dev loop6, logical block 0, async page read [ 85.963253][ T5916] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 86.151160][ T5951] usb 1-1: USB disconnect, device number 2 [ 86.169595][ T5951] usblp0: removed [ 86.250953][ T5902] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 86.422517][ T5902] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 86.431122][ T5902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.443787][ T5902] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 86.454454][ T5902] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 86.463067][ T5902] usb 3-1: Manufacturer: syz [ 86.470469][ T5902] usb 3-1: config 0 descriptor?? [ 86.533349][ T5902] rc_core: IR keymap rc-hauppauge not found [ 86.539260][ T5902] Registered IR keymap rc-empty [ 86.546097][ T5902] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 86.563687][ T5902] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input5 [ 86.631480][ T5855] Bluetooth: hci1: command tx timeout [ 86.631495][ T51] Bluetooth: hci0: command tx timeout [ 86.713049][ T5855] Bluetooth: hci3: command tx timeout [ 86.714065][ T51] Bluetooth: hci2: command tx timeout [ 86.755903][ T980] usb 3-1: USB disconnect, device number 3 [ 86.890101][ T9] cfg80211: failed to load regulatory.db [ 87.139207][ T5995] comedi comedi0: comedi_test: 236 microvolt, 100000 microsecond waveform attached [ 87.376378][ T5998] kvm: pic: single mode not supported [ 87.378029][ T5998] kvm: pic: single mode not supported [ 87.411728][ T6001] comedi comedi3: mpc624: I/O port conflict (0xec,16) [ 87.619928][ T6006] input: syz1 as /devices/virtual/input/input6 [ 88.055201][ T6019] 9pnet_virtio: no channels available for device syz [ 88.132582][ T30] audit: type=1326 audit(1751727734.303:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6018 comm="syz.0.25" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1f44f8e929 code=0x0 [ 88.858550][ T9] usb 2-1: USB disconnect, device number 2 [ 89.066393][ T6049] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 89.260737][ T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 89.308360][ T51] block nbd1: Receive control failed (result -32) [ 89.376121][ T5852] block nbd1: shutting down sockets [ 89.446020][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 89.461963][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.510169][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 89.548598][ T24] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 89.558586][ T6062] netlink: 'syz.1.41': attribute type 10 has an invalid length. [ 89.570197][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 89.583511][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 89.611256][ T24] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 89.625125][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.673006][ T6048] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 89.697154][ T24] hub 1-1:1.0: bad descriptor, ignoring hub [ 89.718671][ T24] hub 1-1:1.0: probe with driver hub failed with error -5 [ 89.725217][ T6062] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 89.730952][ T24] cdc_wdm 1-1:1.0: skipping garbage [ 89.741517][ T24] cdc_wdm 1-1:1.0: skipping garbage [ 89.754058][ T24] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 89.760007][ T24] cdc_wdm 1-1:1.0: Unknown control protocol [ 90.662232][ T24] usb 1-1: USB disconnect, device number 3 [ 90.668195][ T6048] cdc_wdm 1-1:1.0: Error autopm - -16 [ 90.780632][ T5916] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 90.846594][ T6108] syzkaller1: entered promiscuous mode [ 90.853128][ T24] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 90.854503][ T6108] syzkaller1: entered allmulticast mode [ 90.940880][ T5916] usb 3-1: Using ep0 maxpacket: 32 [ 90.953385][ T5916] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 90.960203][ T6111] syz.1.56 uses obsolete (PF_INET,SOCK_PACKET) [ 90.965129][ T5916] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 91.000886][ T5916] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 91.022249][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.043932][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 91.061664][ T5916] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 91.075055][ T24] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 91.087700][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 91.096526][ T5916] usb 3-1: Product: syz [ 91.101070][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 91.113018][ T5916] usb 3-1: Manufacturer: syz [ 91.117648][ T5916] usb 3-1: SerialNumber: syz [ 91.125558][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 91.138667][ T6097] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 91.161056][ T24] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 91.174428][ T5916] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input7 [ 91.185927][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.221130][ T6073] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 91.249915][ T24] hub 1-1:1.0: bad descriptor, ignoring hub [ 91.279659][ T24] hub 1-1:1.0: probe with driver hub failed with error -5 [ 91.310617][ T24] cdc_wdm 1-1:1.0: skipping garbage [ 91.316048][ T24] cdc_wdm 1-1:1.0: skipping garbage [ 91.327500][ T24] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 91.337780][ T24] cdc_wdm 1-1:1.0: Unknown control protocol [ 91.443315][ T5888] usb 3-1: USB disconnect, device number 4 [ 91.449256][ C0] appletouch 3-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 91.517188][ T5888] appletouch 3-1:1.0: input: appletouch disconnected [ 91.561982][ T24] usb 1-1: USB disconnect, device number 4 [ 91.808929][ T6135] netlink: 52 bytes leftover after parsing attributes in process `syz.3.62'. [ 92.230179][ T6150] tipc: Started in network mode [ 92.255831][ T6150] tipc: Node identity 9e03033b2c83, cluster identity 4711 [ 92.263554][ T6150] tipc: Enabled bearer , priority 0 [ 92.277600][ T6150] syzkaller0: entered promiscuous mode [ 92.285031][ T6150] syzkaller0: entered allmulticast mode [ 92.299063][ T6149] tipc: Resetting bearer [ 92.333400][ T6149] tipc: Disabling bearer [ 92.349914][ T6156] i2c i2c-0: Invalid block write size 37 [ 92.507213][ T6163] 9pnet_virtio: no channels available for device syz [ 93.291826][ T6177] 9pnet_virtio: no channels available for device syz [ 94.182292][ T5916] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 94.341650][ T5916] usb 4-1: Using ep0 maxpacket: 8 [ 94.353920][ T5916] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 94.365054][ T5916] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 94.378584][ T5916] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 94.389557][ T5916] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 94.404291][ T5916] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 94.417583][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.658364][ T5916] usb 4-1: GET_CAPABILITIES returned 0 [ 94.671043][ T5916] usbtmc 4-1:16.0: can't read capabilities [ 94.865214][ T5916] usb 4-1: USB disconnect, device number 3 [ 96.149541][ T30] audit: type=1400 audit(1751727742.323:3): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=6220 comm="syz.3.97" [ 96.437232][ T6233] 9pnet_virtio: no channels available for device syz [ 97.405525][ T51] Bluetooth: Frame is too long (len 12, expected len 4) [ 97.780264][ T6283] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 97.786955][ T6283] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 97.846003][ T6283] vhci_hcd vhci_hcd.0: Device attached [ 97.944429][ T6290] syzkaller1: entered promiscuous mode [ 97.953916][ T6290] syzkaller1: entered allmulticast mode [ 98.080647][ T5888] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 98.150725][ T5902] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 98.330795][ T5902] usb 4-1: Using ep0 maxpacket: 16 [ 98.351942][ T5902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.363754][ T5902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.377615][ T5902] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 98.400608][ T5902] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 98.409779][ T5902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.438420][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 98.469327][ T5902] usb 4-1: config 0 descriptor?? [ 98.613027][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 98.628830][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 98.643622][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 98.667301][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 98.689890][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 98.715261][ T5902] usbhid 4-1:0.0: can't add hid device: -71 [ 98.722230][ T6284] usb 39-1: recv xbuf, 0 [ 98.726797][ T5902] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 98.759147][ T996] vhci_hcd: stop threads [ 98.761899][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.771193][ T996] vhci_hcd: release socket [ 98.781730][ T996] vhci_hcd: disconnect device [ 98.807597][ T5902] usb 4-1: USB disconnect, device number 4 [ 98.820751][ T5888] vhci_hcd: vhci_device speed not set [ 98.833236][ T9] usb 3-1: config 0 descriptor?? [ 98.851311][ T6295] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 99.156333][ T6316] process 'syz.1.133' launched './file0' with NULL argv: empty string added [ 99.300219][ T9] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 99.323869][ T9] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 99.334251][ T9] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 99.346177][ T9] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 99.357952][ T9] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 99.368157][ T9] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 99.376764][ T9] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 99.385406][ T9] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 99.393609][ T9] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 99.402485][ T9] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 99.455538][ T9] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 99.583435][ T5916] usb 3-1: USB disconnect, device number 5 [ 99.727545][ T6322] fido_id[6322]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 99.788384][ T6329] netlink: 8 bytes leftover after parsing attributes in process `syz.3.138'. [ 100.304671][ T6337] block nbd2: shutting down sockets [ 100.646537][ T6343] kvm: emulating exchange as write [ 100.721567][ T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 100.791881][ T51] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 100.800457][ T51] Bluetooth: hci1: Injecting HCI hardware error event [ 100.808925][ T51] Bluetooth: hci1: hardware error 0x00 [ 100.880991][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 100.913915][ T24] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 100.930762][ T24] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 100.990645][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 101.025103][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 101.054688][ T24] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 101.089246][ T24] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 101.118911][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.359674][ T24] usb 3-1: usb_control_msg returned -32 [ 101.365419][ T24] usbtmc 3-1:16.0: can't read capabilities [ 101.717887][ T6360] usbtmc 3-1:16.0: INITIATE_CLEAR returned 0 [ 101.920401][ T24] usb 3-1: USB disconnect, device number 6 [ 102.871296][ T51] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 103.015473][ T6405] trusted_key: syz.1.165 sent an empty control message without MSG_MORE. [ 103.156309][ T6410] netlink: 4 bytes leftover after parsing attributes in process `syz.1.168'. [ 103.335736][ T6416] syzkaller1: entered promiscuous mode [ 103.344251][ T6416] syzkaller1: entered allmulticast mode [ 103.381849][ T6418] Zero length message leads to an empty skb [ 103.594450][ T5855] Bluetooth: hci0: command 0x0406 tx timeout [ 103.888678][ T6434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.179'. [ 104.301977][ T6454] 9pnet_virtio: no channels available for device syz [ 104.317648][ T5862] Bluetooth: hci0: unexpected event for opcode 0x0407 [ 104.470763][ T5902] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 104.655947][ T5902] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 104.696658][ T5902] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 104.713358][ T5862] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 104.722095][ T5862] Bluetooth: hci0: Injecting HCI hardware error event [ 104.731118][ T5855] Bluetooth: hci0: hardware error 0x00 [ 104.746252][ T5902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 104.794924][ T5902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 104.833811][ T5902] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 104.856413][ T5902] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 104.869505][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.914868][ T5902] usb 2-1: config 0 descriptor?? [ 104.926871][ T6449] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 105.040856][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 105.200769][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 105.213324][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 105.233272][ T9] usb 3-1: config 0 has no interface number 0 [ 105.240367][ T9] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 105.258136][ T9] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 105.268139][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.289280][ T9] usb 3-1: config 0 descriptor?? [ 105.301608][ T9] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 105.355957][ T5902] plantronics 0003:047F:FFFF.0002: reserved main item tag 0xd [ 105.370977][ T5902] plantronics 0003:047F:FFFF.0002: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 105.427188][ T6477] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 105.437219][ T6477] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 105.460402][ T6477] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 105.473225][ T6477] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 105.479349][ T6477] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 105.486713][ T6477] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 105.500298][ T5902] usb 3-1: USB disconnect, device number 7 [ 105.568102][ T9] usb 2-1: USB disconnect, device number 3 [ 106.227117][ T5862] Bluetooth: hci2: unexpected event for opcode 0x0c46 [ 106.790644][ T5855] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 106.852623][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 107.020850][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 107.031000][ T9] usb 3-1: config index 0 descriptor too short (expected 28277, got 36) [ 107.039582][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.049938][ T9] usb 3-1: config 0 has no interfaces? [ 107.055695][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 107.064972][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.075735][ T9] usb 3-1: config 0 descriptor?? [ 107.512638][ T5855] Bluetooth: hci3: command 0x0c1a tx timeout [ 108.048829][ T6510] 9pnet_virtio: no channels available for device syz [ 108.138616][ T5855] Bluetooth: hci3: unexpected event for opcode 0x0428 [ 108.140429][ T6513] syz_tun: entered allmulticast mode [ 108.163069][ T6513] syz_tun: left allmulticast mode [ 108.335637][ T6520] netlink: 28 bytes leftover after parsing attributes in process `syz.0.214'. [ 108.385513][ T6522] team0: No ports can be present during mode change [ 108.599153][ T6528] evm: overlay not supported [ 108.651435][ T5855] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 108.788715][ T6537] binder: 6535:6537 ioctl c0306201 200000000900 returned -14 [ 109.598412][ T24] usb 3-1: USB disconnect, device number 8 [ 110.105971][ T64] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.206831][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 110.217759][ T64] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.298210][ T64] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.370795][ T24] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 110.380463][ T9] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 110.408301][ T64] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.410597][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.450346][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.467063][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 110.489846][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 110.503066][ T9] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 110.515151][ T9] usb 3-1: Manufacturer: syz [ 110.524507][ T9] usb 3-1: config 0 descriptor?? [ 110.534167][ T6575] netlink: 4 bytes leftover after parsing attributes in process `syz.1.240'. [ 110.548946][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 110.573963][ T24] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 110.591677][ T24] usb 1-1: config 0 has no interface number 0 [ 110.597817][ T24] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 110.614094][ T24] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 110.626849][ T24] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 110.647266][ T24] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 110.691816][ T24] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 110.709306][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.730026][ T24] usb 1-1: config 0 descriptor?? [ 110.756600][ T24] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 110.801753][ T64] bridge_slave_1: left allmulticast mode [ 110.807680][ T64] bridge_slave_1: left promiscuous mode [ 110.835132][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.897165][ T64] bridge_slave_0: left allmulticast mode [ 110.904182][ T64] bridge_slave_0: left promiscuous mode [ 110.910188][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.946498][ T9] hid_parser_main: 5 callbacks suppressed [ 110.946520][ T9] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 110.956567][ T980] usb 1-1: USB disconnect, device number 5 [ 110.970036][ T5862] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 110.985760][ T5862] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 110.994857][ T5862] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 111.004731][ T5862] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 111.013745][ T5862] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 111.032781][ T9] appleir 0003:05AC:8243.0003: hiddev1,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 111.043427][ T980] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 111.165127][ T5916] usb 3-1: USB disconnect, device number 9 [ 111.303535][ T6584] fido_id[6584]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 111.417311][ T6589] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 111.970105][ T30] audit: type=1326 audit(1751727758.143:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6609 comm="syz.2.247" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc0f338e929 code=0x0 [ 112.041517][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.081289][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.083805][ T6613] 9pnet_virtio: no channels available for device syz [ 112.102065][ T64] bond0 (unregistering): Released all slaves [ 112.197499][ T6615] block nbd0: not configured, cannot reconfigure [ 112.325061][ T64] tipc: Left network mode [ 113.043105][ T1116] wlan1: Trigger new scan to find an IBSS to join [ 113.078112][ T64] hsr_slave_0: left promiscuous mode [ 113.115780][ T5862] Bluetooth: hci3: command tx timeout [ 113.138992][ T64] hsr_slave_1: left promiscuous mode [ 113.148802][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.177171][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.192655][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.205185][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.417755][ T64] veth1_macvtap: left promiscuous mode [ 113.436891][ T64] veth0_macvtap: left promiscuous mode [ 113.454051][ T64] veth1_vlan: left promiscuous mode [ 113.461601][ T64] veth0_vlan: left promiscuous mode [ 114.424902][ T64] team0 (unregistering): Port device team_slave_1 removed [ 114.456991][ T64] team0 (unregistering): Port device team_slave_0 removed [ 115.127294][ T6579] chnl_net:caif_netlink_parms(): no params data found [ 115.191387][ T5862] Bluetooth: hci3: command tx timeout [ 115.656258][ T6579] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.678034][ T6579] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.690769][ T6579] bridge_slave_0: entered allmulticast mode [ 115.710214][ T6579] bridge_slave_0: entered promiscuous mode [ 115.750090][ T6579] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.777923][ T6579] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.796131][ T6579] bridge_slave_1: entered allmulticast mode [ 115.810040][ T6579] bridge_slave_1: entered promiscuous mode [ 115.952551][ T6579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.004587][ T6579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.032612][ T5902] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 116.066314][ T6579] team0: Port device team_slave_0 added [ 116.076891][ T6579] team0: Port device team_slave_1 added [ 116.161113][ T6579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.168252][ T6579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.196567][ T6579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.209925][ T6579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.217031][ T6579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.245195][ T6579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.256759][ T5902] usb 1-1: config 0 has no interfaces? [ 116.266104][ T5902] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 116.288473][ T5902] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.309293][ T5902] usb 1-1: config 0 descriptor?? [ 116.332392][ T6579] hsr_slave_0: entered promiscuous mode [ 116.338948][ T6579] hsr_slave_1: entered promiscuous mode [ 116.533087][ T9] usb 1-1: USB disconnect, device number 6 [ 116.627032][ T6579] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 116.645734][ T6579] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 116.660322][ T6579] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 116.673208][ T6579] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 116.828978][ T6579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.918999][ T6579] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.955695][ T1116] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.963599][ T1116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.016452][ T1116] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.023691][ T1116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.270649][ T5862] Bluetooth: hci3: command tx timeout [ 117.649699][ T6579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.002266][ T64] wlan1: Trigger new scan to find an IBSS to join [ 118.353496][ T6579] veth0_vlan: entered promiscuous mode [ 118.376373][ T6579] veth1_vlan: entered promiscuous mode [ 118.486557][ T6579] veth0_macvtap: entered promiscuous mode [ 118.523470][ T6579] veth1_macvtap: entered promiscuous mode [ 118.579389][ T6579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.612044][ T6579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.647222][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.698280][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.727340][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.746139][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.761033][ T6801] warning: `syz.1.292' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 118.916994][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.955138][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.966730][ T1105] wlan1: Creating new IBSS network, BSSID 42:86:41:4b:9c:8d [ 119.066251][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.084560][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.360695][ T5862] Bluetooth: hci3: command tx timeout [ 120.289167][ T6859] 9pnet_virtio: no channels available for device syz [ 121.491436][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 121.668681][ T24] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 121.695187][ T24] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 121.706902][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 121.741100][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 121.799663][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 121.843939][ T24] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 121.900689][ T24] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 121.931064][ T24] usb 5-1: Product: syz [ 121.949328][ T24] usb 5-1: Manufacturer: syz [ 121.992548][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 121.997891][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 122.036310][ T24] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 122.074780][ T24] cdc_wdm 5-1:1.0: Unknown control protocol [ 122.289254][ T6918] Bluetooth: MGMT ver 1.23 [ 122.369528][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 122.370753][ T980] usb 5-1: USB disconnect, device number 2 [ 122.376583][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 122.388610][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 122.460883][ T6922] comedi comedi1: Minor -2147450880 is invalid! [ 123.151581][ T6941] 9pnet_virtio: no channels available for device syz [ 123.367095][ T5862] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 123.860780][ T24] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 123.870776][ T5902] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 124.030699][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 124.042120][ T5902] usb 3-1: Using ep0 maxpacket: 32 [ 124.053864][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 124.074691][ T24] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 124.079125][ T5902] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 124.095784][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.115213][ T5902] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 124.121442][ T24] usb 2-1: Product: syz [ 124.130797][ T5902] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 124.150312][ T5902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 124.154514][ T24] usb 2-1: Manufacturer: syz [ 124.172262][ T5902] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 124.185203][ T24] usb 2-1: SerialNumber: syz [ 124.217084][ T5902] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 124.217823][ T24] usb 2-1: config 0 descriptor?? [ 124.265685][ T24] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 124.291030][ T24] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 124.301911][ T5902] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 124.359786][ T5902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.370894][ T6965] input: syz1 as /devices/virtual/input/input11 [ 124.406750][ T5902] usb 3-1: config 0 descriptor?? [ 124.534841][ T24] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 124.600353][ T6973] 9pnet_virtio: no channels available for device syz [ 124.619417][ T24] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 124.629908][ T24] em28xx 2-1:0.0: board has no eeprom [ 124.639868][ T5902] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 124.666345][ T5902] usb 3-1: USB disconnect, device number 10 [ 124.683319][ T6952] em28xx 2-1:0.0: writing to i2c device at 0x0 failed (error=-5) [ 124.699755][ T5902] usblp0: removed [ 124.710807][ T24] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 124.720977][ T24] em28xx 2-1:0.0: dvb set to bulk mode. [ 124.728034][ T5916] em28xx 2-1:0.0: Binding DVB extension [ 124.751898][ T5895] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 124.769204][ T24] usb 2-1: USB disconnect, device number 4 [ 124.790309][ T24] em28xx 2-1:0.0: Disconnecting em28xx [ 124.805429][ T6976] sd 0:0:1:0: PR command failed: 1026 [ 124.832935][ T6976] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 124.853080][ T6976] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 124.864796][ T5916] em28xx 2-1:0.0: Registering input extension [ 124.875037][ T24] em28xx 2-1:0.0: Closing input extension [ 124.907383][ T24] em28xx 2-1:0.0: Freeing device [ 124.934781][ T5895] usb 1-1: config 0 has no interfaces? [ 124.944993][ T5895] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 124.969155][ T5895] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 124.985393][ T5895] usb 1-1: Manufacturer: syz [ 124.999766][ T5895] usb 1-1: config 0 descriptor?? [ 125.073756][ T6982] 9pnet_virtio: no channels available for device syz [ 125.210921][ T5902] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 125.290027][ T5916] usb 1-1: USB disconnect, device number 7 [ 125.320976][ T5895] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 125.360674][ T5902] usb 3-1: Using ep0 maxpacket: 32 [ 125.368599][ T5902] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 125.387407][ T5902] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 125.396564][ T5902] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 125.412884][ T5902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 125.423965][ T5902] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 125.434179][ T5902] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 125.448094][ T5902] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 125.457594][ T5902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.470674][ T5895] usb 5-1: device descriptor read/64, error -71 [ 125.481749][ T5902] usb 3-1: config 0 descriptor?? [ 125.703167][ T5902] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 125.720614][ T5895] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 125.881292][ T5895] usb 5-1: device descriptor read/64, error -71 [ 125.904979][ T5902] usb 3-1: USB disconnect, device number 11 [ 125.923915][ T5902] usblp0: removed [ 126.005708][ T5895] usb usb5-port1: attempt power cycle [ 126.360779][ T5895] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 126.401771][ T5895] usb 5-1: device descriptor read/8, error -71 [ 126.670893][ T5895] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 126.718829][ T5895] usb 5-1: device descriptor read/8, error -71 [ 126.736225][ T7017] kvm: kvm [7016]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000085) = 0x0 [ 126.844849][ T5895] usb usb5-port1: unable to enumerate USB device [ 126.926284][ T7021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.358'. [ 127.274344][ T7030] 9pnet_virtio: no channels available for device syz [ 127.425201][ T7035] 9pnet_virtio: no channels available for device syz [ 127.434498][ T5862] Bluetooth: hci2: unexpected event for opcode 0x0809 [ 127.711101][ T24] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 127.880783][ T24] usb 3-1: device descriptor read/64, error -71 [ 128.160666][ T24] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 128.278660][ T30] audit: type=1326 audit(1751727774.453:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7062 comm="syz.1.378" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f887298e929 code=0x0 [ 128.313584][ T24] usb 3-1: device descriptor read/64, error -71 [ 128.431447][ T24] usb usb3-port1: attempt power cycle [ 128.780725][ T24] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 128.802143][ T24] usb 3-1: device descriptor read/8, error -71 [ 128.940814][ T5970] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 129.050718][ T24] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 129.084605][ T24] usb 3-1: device descriptor read/8, error -71 [ 129.132554][ T5970] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 129.153669][ T5970] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x3 has invalid maxpacket 15051, setting to 64 [ 129.165514][ T5970] usb 1-1: config 0 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 129.179359][ T5970] usb 1-1: config 0 interface 0 has no altsetting 0 [ 129.186326][ T5970] usb 1-1: New USB device found, idVendor=047f, idProduct=c055, bcdDevice= 0.00 [ 129.196593][ T5970] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.206894][ T24] usb usb3-port1: unable to enumerate USB device [ 129.216134][ T5970] usb 1-1: config 0 descriptor?? [ 129.223198][ T7075] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 129.231194][ T7075] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 129.446750][ T7075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.473970][ T7075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.505409][ T5970] usbhid 1-1:0.0: can't add hid device: -71 [ 129.511621][ T5970] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 129.523427][ T5970] usb 1-1: USB disconnect, device number 8 [ 129.555773][ T7083] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 129.901836][ T5895] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 130.020795][ T5970] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 130.063139][ T5895] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 130.076946][ T5895] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 130.087851][ T5895] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 130.097961][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.120457][ T7085] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 130.138950][ T5895] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 130.183945][ T5970] usb 1-1: Using ep0 maxpacket: 32 [ 130.191253][ T5970] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x3 has invalid maxpacket 8907, setting to 1024 [ 130.214714][ T5970] usb 1-1: config 0 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 130.254339][ T5970] usb 1-1: config 0 interface 0 has no altsetting 0 [ 130.271412][ T5970] usb 1-1: New USB device found, idVendor=047f, idProduct=c055, bcdDevice= 0.00 [ 130.283452][ T5970] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.309420][ T5970] usb 1-1: config 0 descriptor?? [ 130.328266][ T5970] hub 1-1:0.0: bad descriptor, ignoring hub [ 130.335630][ T5970] hub 1-1:0.0: probe with driver hub failed with error -5 [ 130.414541][ T980] usb 2-1: USB disconnect, device number 5 [ 130.763764][ T5970] plantronics 0003:047F:C055.0004: unknown main item tag 0x0 [ 130.790483][ T5970] plantronics 0003:047F:C055.0004: unknown main item tag 0x0 [ 130.800232][ T5970] plantronics 0003:047F:C055.0004: unknown main item tag 0x0 [ 130.808213][ T5970] plantronics 0003:047F:C055.0004: unknown main item tag 0x0 [ 130.817096][ T5970] plantronics 0003:047F:C055.0004: unknown main item tag 0x0 [ 130.854787][ T5970] plantronics 0003:047F:C055.0004: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:c055] on usb-dummy_hcd.0-1/input0 [ 131.132998][ T5970] usb 1-1: USB disconnect, device number 9 [ 131.743399][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 131.752314][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 132.471051][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 132.479658][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 132.731207][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c0!!! [ 132.832929][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 132.833297][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 132.841710][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 132.951176][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 132.956862][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 132.959416][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 133.100768][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.107353][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.144934][ T5888] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 136.504757][ T5888] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.615280][ T5888] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 136.850245][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.033064][ T5888] usb 5-1: config 0 descriptor?? [ 137.054845][ T5888] pwc: Askey VC010 type 2 USB webcam detected. [ 137.205502][ T7172] syz.1.409 (7172): drop_caches: 2 [ 137.463057][ T5888] pwc: recv_control_msg error -32 req 02 val 2b00 [ 137.731895][ T5888] pwc: recv_control_msg error -32 req 02 val 2c00 [ 137.756179][ T5888] pwc: recv_control_msg error -32 req 04 val 1000 [ 137.780673][ T5888] pwc: recv_control_msg error -71 req 04 val 1300 [ 137.788773][ T5888] pwc: recv_control_msg error -71 req 04 val 1400 [ 137.815433][ T5888] pwc: recv_control_msg error -71 req 02 val 2000 [ 137.833375][ T5888] pwc: recv_control_msg error -71 req 02 val 2100 [ 137.863815][ T5888] pwc: recv_control_msg error -71 req 04 val 1500 [ 137.877202][ T5888] pwc: recv_control_msg error -71 req 02 val 2500 [ 137.893996][ T5888] pwc: recv_control_msg error -71 req 02 val 2400 [ 137.905506][ T5888] pwc: recv_control_msg error -71 req 02 val 2600 [ 137.937790][ T5888] pwc: recv_control_msg error -71 req 02 val 2900 [ 137.944542][ T5951] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 137.952502][ T5888] pwc: recv_control_msg error -71 req 02 val 2800 [ 137.971887][ T5888] pwc: recv_control_msg error -71 req 04 val 1100 [ 137.992002][ T5888] pwc: recv_control_msg error -71 req 04 val 1200 [ 138.052788][ T5888] pwc: Registered as video103. [ 138.066628][ T5888] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input13 [ 138.150497][ T5888] usb 5-1: USB disconnect, device number 7 [ 138.162573][ T5951] usb 3-1: config 0 has no interfaces? [ 138.189317][ T5951] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 138.209604][ T5951] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 138.246167][ T5951] usb 3-1: Product: syz [ 138.250460][ T5951] usb 3-1: Manufacturer: syz [ 138.286770][ T7205] could not allocate digest TFM handle cryptd(blake2b-160) [ 138.342996][ T5951] usb 3-1: config 0 descriptor?? [ 138.448965][ T7229] capability: warning: `syz.1.423' uses deprecated v2 capabilities in a way that may be insecure [ 138.694874][ T5951] usb 3-1: USB disconnect, device number 16 [ 139.327722][ T1116] [ 139.330507][ T1116] ============================================ [ 139.337175][ T1116] WARNING: possible recursive locking detected [ 139.343423][ T1116] 6.16.0-rc4-next-20250704-syzkaller #0 Not tainted [ 139.349991][ T1116] -------------------------------------------- [ 139.356119][ T1116] kworker/u8:7/1116 is trying to acquire lock: [ 139.362254][ T1116] ffffe8ffffd71ea8 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x73e/0xb80 [ 139.371464][ T1116] [ 139.371464][ T1116] but task is already holding lock: [ 139.378831][ T1116] ffffe8ffffd71ef8 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x5b5/0xb80 [ 139.388054][ T1116] [ 139.388054][ T1116] other info that might help us debug this: [ 139.396800][ T1116] Possible unsafe locking scenario: [ 139.396800][ T1116] [ 139.404336][ T1116] CPU0 [ 139.407596][ T1116] ---- [ 139.410849][ T1116] lock(&pd_list->lock); [ 139.415167][ T1116] lock(&pd_list->lock); [ 139.419473][ T1116] [ 139.419473][ T1116] *** DEADLOCK *** [ 139.419473][ T1116] [ 139.427594][ T1116] May be due to missing lock nesting notation [ 139.427594][ T1116] [ 139.435897][ T1116] 3 locks held by kworker/u8:7/1116: [ 139.441163][ T1116] #0: ffff888140f38948 ((wq_completion)pencrypt_parallel){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 139.453236][ T1116] #1: ffffc90003d97bc0 ((work_completion)(&pw->pw_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 139.465412][ T1116] #2: ffffe8ffffd71ef8 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x5b5/0xb80 [ 139.475116][ T1116] [ 139.475116][ T1116] stack backtrace: [ 139.481022][ T1116] CPU: 1 UID: 0 PID: 1116 Comm: kworker/u8:7 Not tainted 6.16.0-rc4-next-20250704-syzkaller #0 PREEMPT(full) [ 139.481048][ T1116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 139.481062][ T1116] Workqueue: pencrypt_parallel padata_parallel_worker [ 139.481101][ T1116] Call Trace: [ 139.481108][ T1116] [ 139.481116][ T1116] dump_stack_lvl+0x189/0x250 [ 139.481145][ T1116] ? __pfx_dump_stack_lvl+0x10/0x10 [ 139.481171][ T1116] ? __pfx__printk+0x10/0x10 [ 139.481198][ T1116] ? print_lock_name+0xde/0x100 [ 139.481225][ T1116] print_deadlock_bug+0x28b/0x2a0 [ 139.481251][ T1116] validate_chain+0x1a3f/0x2140 [ 139.481284][ T1116] ? __queue_work+0x102/0xfb0 [ 139.481308][ T1116] ? look_up_lock_class+0x74/0x170 [ 139.481329][ T1116] ? register_lock_class+0x51/0x320 [ 139.481348][ T1116] ? __queue_work+0xc56/0xfb0 [ 139.481373][ T1116] __lock_acquire+0xab9/0xd20 [ 139.481396][ T1116] ? padata_do_serial+0x73e/0xb80 [ 139.481421][ T1116] lock_acquire+0x120/0x360 [ 139.481441][ T1116] ? padata_do_serial+0x73e/0xb80 [ 139.481467][ T1116] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 139.481498][ T1116] _raw_spin_lock+0x2e/0x40 [ 139.481526][ T1116] ? padata_do_serial+0x73e/0xb80 [ 139.481551][ T1116] padata_do_serial+0x73e/0xb80 [ 139.481581][ T1116] ? padata_parallel_worker+0x44/0x1d0 [ 139.481606][ T1116] padata_parallel_worker+0x72/0x1d0 [ 139.481631][ T1116] ? process_scheduled_works+0x9ef/0x17b0 [ 139.481655][ T1116] process_scheduled_works+0xae1/0x17b0 [ 139.481689][ T1116] ? __pfx_process_scheduled_works+0x10/0x10 [ 139.481719][ T1116] worker_thread+0x8a0/0xda0 [ 139.481752][ T1116] kthread+0x70e/0x8a0 [ 139.481780][ T1116] ? __pfx_worker_thread+0x10/0x10 [ 139.481803][ T1116] ? __pfx_kthread+0x10/0x10 [ 139.481830][ T1116] ? _raw_spin_unlock_irq+0x23/0x50 [ 139.481847][ T1116] ? lockdep_hardirqs_on+0x9c/0x150 [ 139.481865][ T1116] ? __pfx_kthread+0x10/0x10 [ 139.481892][ T1116] ret_from_fork+0x3fc/0x770 [ 139.481916][ T1116] ? __pfx_ret_from_fork+0x10/0x10 [ 139.481940][ T1116] ? __switch_to_asm+0x39/0x70 [ 139.481956][ T1116] ? __switch_to_asm+0x33/0x70 [ 139.481972][ T1116] ? __pfx_kthread+0x10/0x10 [ 139.481999][ T1116] ret_from_fork_asm+0x1a/0x30 [ 139.482023][ T1116] [ 140.105369][ T7246] caif:caif_disconnect_client(): nothing to disconnect [ 140.873705][ T7145] syz.1.399 (7145) used greatest stack depth: 19448 bytes left [ 149.012844][ T996] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)