last executing test programs: 19.627815219s ago: executing program 0 (id=3134): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x4, @tid=r0}, 0x0) socket(0x10, 0x3, 0x0) setfsgid(0xee00) mkdir(&(0x7f0000000180)='./file0\x00', 0x163) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mknod$loop(&(0x7f00000002c0)='./file0/../file0/file0\x00', 0xffff8000, 0x0) write$FUSE_INIT(r1, &(0x7f0000000380)={0x50, 0x0, r2, {0x7, 0x28, 0x0, 0x40488060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24522716a989086f, 0xfffffffc}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7f, 0x0, {0x5, 0x20000000000000, 0x7, 0x1000007, 0x3, 0x0, 0xfffffffe, 0x8000000, 0x4, 0xa000, 0x10000, 0x0, r3, 0x734, 0x200000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.783629549s ago: executing program 1 (id=3184): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x1, 0x4fed0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 7.648991958s ago: executing program 1 (id=3185): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) writev(r0, &(0x7f00000006c0)=[{&(0x7f00000005c0)="49e61f481e890871c1aa811bc86486", 0xf}], 0x1) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='h', 0x1}], 0x1}, 0x20044800) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x1, 0x20}, 0xc) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000340)}], 0x1) 7.114212825s ago: executing program 3 (id=3188): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c00000010004b0400000000000000007a00"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00') r2 = socket$inet(0x2, 0xa, 0x80) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) socket$xdp(0x2c, 0x3, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[@ANYBLOB="554000bc0f8f0400aaaaa7bb08060001080006040004aaaaaaaaaa2b64010101"], 0x0) 6.993244862s ago: executing program 4 (id=3189): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)={0x40, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000b80)={0x34, &(0x7f00000009c0)={0x40, 0x11, 0x1, '$'}, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.715921147s ago: executing program 1 (id=3190): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000090024206d041cc340009100000109022400010000b00009040000010301010009210008000122"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000d80)={0x0, 0xa, 0x4, "7d470003"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 5.487453743s ago: executing program 3 (id=3191): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r1, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x40000103}) io_uring_enter(0xffffffffffffffff, 0x46f3, 0x0, 0x63, 0x0, 0x0) write(r0, 0x0, 0x0) 5.373655338s ago: executing program 3 (id=3192): openat$audio(0xffffffffffffff9c, 0x0, 0x40000, 0x0) io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xdf07, 0x2, 0x2}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24041, 0x0) io_setup(0x202, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r4, 0xc0406400, &(0x7f0000000280)={0x2, 0x5, 0x4, 0x90, &(0x7f0000000140)=""/144, 0x76, &(0x7f00000009c0)=""/118, 0x5d, &(0x7f0000000940)=""/93}) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)={[{0x2b, 'rdma'}, {0x2b, 'cpuset'}]}, 0xe) dup(r2) 4.658422816s ago: executing program 4 (id=3193): open(&(0x7f00000000c0)='./file0\x00', 0x121000, 0x109) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xc, 0xa}, {0x0, 0xc}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}}, 0x4810) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.56651234s ago: executing program 2 (id=3194): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x1, 0x4fed0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 4.34878657s ago: executing program 2 (id=3195): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f) r2 = openat$cgroup_pressure(r0, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) ppoll(&(0x7f0000000180)=[{r1}], 0x1, 0x0, 0x0, 0x0) write$cgroup_pressure(r2, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f) close(r2) 4.020724126s ago: executing program 4 (id=3196): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, @void, @value}, 0x45) bpf$PROG_LOAD(0x2, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setregid(0xee00, 0xee00) keyctl$session_to_parent(0x12) syz_init_net_socket$netrom(0x6, 0x5, 0x0) mount$cgroup(0x0, 0x0, &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}, {@xattr}]}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') read$FUSE(r3, &(0x7f0000005000)={0x2020}, 0x2020) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() 3.023352899s ago: executing program 1 (id=3197): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r0 = syz_io_uring_setup(0x460, &(0x7f0000000480)={0x0, 0x40000020, 0x10, 0x2, 0x34f}, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 2.988518043s ago: executing program 2 (id=3198): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000840) 2.943269721s ago: executing program 4 (id=3199): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c000180140003"], 0xe4}, 0x1, 0x0, 0x0, 0x2048014}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) capset(0x0, &(0x7f0000000040)={0x200000, 0x200000}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.888498815s ago: executing program 0 (id=3139): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x7fc, 0x0, 0x0, 0x0, 0xa5, 0xad, 0x9, 0xa9, 0x4, 0x0, 0x0, 0x4000000040000003}, {0x8, 0x4005, 0x0, 0x0, 0x41, 0x20, 0x0, 0x0, 0x86, 0xff, 0x0, 0x2, 0x6}, {0x401, 0x9, 0x0, 0xfd, 0x0, 0xfb, 0xb3, 0x0, 0x3, 0xfe, 0x80, 0xf6, 0x4}], 0x9}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.717253596s ago: executing program 3 (id=3200): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c00000010004b0400000000000000007a00"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00') r2 = socket$inet(0x2, 0xa, 0x80) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) socket$xdp(0x2c, 0x3, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[@ANYBLOB="554000bc0f8f0400aaaaa7bb08060001080006040004aaaaaaaaaa2b640101010180c20000"], 0x0) 2.693678334s ago: executing program 2 (id=3201): listen(0xffffffffffffffff, 0x8) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x12}, 0x10) r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x2, 0xb4, 0x8c, 0xbb, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f00000002c0)={0x0, 0x1, 0x6, "cc17fc47a9ae"}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 2.619654401s ago: executing program 1 (id=3202): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xbd, 0xf7, 0x13, 0x8, 0x2770, 0x930c, 0x8d6a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2a, 0xc5, 0x98}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f00000000c0)={0x0, 0x13}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.597803709s ago: executing program 4 (id=3203): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)={0x40, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000b80)={0x34, &(0x7f00000009c0)={0x40, 0x11, 0x1, '$'}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.852506116s ago: executing program 0 (id=3204): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x220000, 0x40) symlink(&(0x7f000000a900)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)='./file1\x00') 1.738644892s ago: executing program 0 (id=3205): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cgroups\x00', 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.2753377s ago: executing program 0 (id=3206): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)=@gettaction={0x180, 0x32, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xffffb294}, @action_gd=@TCA_ACT_TAB={0x80, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x1011, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x100a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3d7}}, {0x14, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x68, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1c}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffe01}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x8}, @action_gd=@TCA_ACT_TAB={0x58, 0x1, [{0x14, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x24040000}, 0x20004000) socket$inet6(0xa, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000240)=0x10000, 0x12) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000003c0), 0x0) 1.05268061s ago: executing program 0 (id=3207): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000090024206d041cc340009100000109022400010000b00009040000010301010009210008000122010009"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000d80)={0x0, 0xa, 0x4, "7d470003"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 946.621569ms ago: executing program 3 (id=3208): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f) r2 = openat$cgroup_pressure(r0, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) ppoll(&(0x7f0000000180)=[{r1}], 0x1, 0x0, 0x0, 0x0) write$cgroup_pressure(r2, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f) close(r2) 899.871503ms ago: executing program 1 (id=3209): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0) 205.364168ms ago: executing program 4 (id=3210): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000090024206d041cc340009100000109022400010000b00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, &(0x7f0000000080)={0x20, 0x24, 0x94, {0x94, 0x10, "a0226afca0467a55b710ae4c0e088382041809b2b7ca1f0f5c4190d982ef657dcccac0a7cb4993a56d9d554ff9b6f4c28e1dc740a8f855fbd86a12429ac788372a05ae86642f1806bc93e8e62800a90ed4fd02ebc1fe5aec9117aca03c1e5185963549a87312960f00e98ec5ecdea7bb66660d6788fe5eb4146c163e3758a55b8ff2ff8b86ed3bbff164a4c62400db23e43a"}}, &(0x7f0000000340)={0x0, 0x3, 0x65, @string={0x65, 0x3, "fc00c743ee5c792b3df90c2a95bcf67f0edae94ec0663fb6e013b4185e61a9250c2f89462b869260733d4f4bdcd594a1b9a1022211366364a7e2aa29e28c60d74f496a5b54e6c3eed322f8e1b44e27038a3392278c42e6f993da3efb8d4524b911ad6a"}}, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x5, "1618be27"}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x3, 0x1, {0x22, 0x672}}}}, &(0x7f0000000600)={0x2c, &(0x7f0000000440)={0x0, 0xc, 0xae, "a87dff630f2dff42fd204e2057cd451e28398d6efc50496232b3c641ab5518a20834b5b0811da8455b0a7bed1b5c26c860fe1c5d4d556294af12cce63783bf91aaaf08875050cdf32565a94bb7030ae9c7ca7500bacdf1ba316880b687a0ef73b1366c1c32399bdd331961d917a62eb423fc2ba23341cf8c9aeee26f88856436611dcf4a094f2c5e967e082e97cb30227d218619e659fd040f1cf64dba7cfd817c8ee873fe81f99013758619c879"}, 0x0, &(0x7f0000000540)={0x0, 0x8, 0x1, 0xa4}, &(0x7f0000000580)={0x20, 0x1, 0xc, "8aaacb1f84504cbd03f66f7b"}, &(0x7f00000005c0)={0x20, 0x3, 0x1, 0x7}}) 110.781442ms ago: executing program 2 (id=3211): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000840) 73.427644ms ago: executing program 2 (id=3212): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e40)) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x2000c000) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 0s ago: executing program 3 (id=3213): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) capset(0x0, &(0x7f0000000040)={0x200000, 0x200000}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): : Mfr=1, Product=2, SerialNumber=3 [ 801.900658][ T9] usb 2-1: Product: syz [ 801.905787][ T9] usb 2-1: Manufacturer: syz [ 801.910917][ T9] usb 2-1: SerialNumber: syz [ 801.916121][T14649] netlink: 596 bytes leftover after parsing attributes in process `syz.3.2605'. [ 801.935937][ T9] usb 2-1: config 0 descriptor?? [ 801.964913][ T52] usb 3-1: Using ep0 maxpacket: 32 [ 801.977321][ T52] usb 3-1: no configurations [ 801.981953][ T52] usb 3-1: can't read configurations, error -22 [ 802.005219][ T52] usb usb3-port1: attempt power cycle [ 802.354953][ T52] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 802.388969][ T52] usb 3-1: Using ep0 maxpacket: 32 [ 802.404958][ T52] usb 3-1: no configurations [ 802.409614][ T52] usb 3-1: can't read configurations, error -22 [ 802.554990][ T52] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 802.595679][ T52] usb 3-1: Using ep0 maxpacket: 32 [ 802.604989][ T52] usb 3-1: no configurations [ 802.609636][ T52] usb 3-1: can't read configurations, error -22 [ 802.616457][ T52] usb usb3-port1: unable to enumerate USB device [ 803.136027][ T52] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 803.246881][T14663] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 803.862595][ T52] usb 4-1: Using ep0 maxpacket: 16 [ 804.190053][ T5868] r8152-cfgselector 5-1: Unknown version 0x0000 [ 804.196952][ T5868] r8152-cfgselector 5-1: bad CDC descriptors [ 804.219087][ T5868] r8152-cfgselector 5-1: USB disconnect, device number 118 [ 804.230381][ T52] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 804.244870][ T52] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.252897][ T52] usb 4-1: Product: syz [ 804.259599][ T52] usb 4-1: Manufacturer: syz [ 804.264394][ T52] usb 4-1: SerialNumber: syz [ 804.273309][ T52] r8152-cfgselector 4-1: Unknown version 0x0000 [ 804.279650][ T52] r8152-cfgselector 4-1: config 0 descriptor?? [ 804.391408][T14672] netlink: 'syz.2.2611': attribute type 10 has an invalid length. [ 804.472789][T14672] team0: Device ipvlan1 failed to register rx_handler [ 804.544773][ T5868] usb 2-1: USB disconnect, device number 122 [ 804.563938][T14676] veth0_to_bond: entered allmulticast mode [ 804.572803][T14682] netlink: 'syz.4.2616': attribute type 10 has an invalid length. [ 804.594149][ T52] r8152-cfgselector 4-1: Unknown version 0x0000 [ 804.607290][ T52] r8152-cfgselector 4-1: bad CDC descriptors [ 804.619478][T14682] team0: Device ipvlan1 failed to register rx_handler [ 804.650938][ T52] r8152-cfgselector 4-1: USB disconnect, device number 8 [ 804.777360][T14688] syzkaller1: entered promiscuous mode [ 804.782877][T14688] syzkaller1: entered allmulticast mode [ 804.921465][T14693] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2621'. [ 805.345848][ T5868] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 806.247642][ T5868] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 806.261376][ T5868] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 806.292724][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.335081][ T5868] usb 2-1: config 0 descriptor?? [ 806.338054][T14718] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 806.357764][ T5868] pwc: Askey VC010 type 2 USB webcam detected. [ 806.402492][T14720] netlink: 'syz.2.2634': attribute type 10 has an invalid length. [ 806.414791][T14720] team0: Device ipvlan1 failed to register rx_handler [ 806.485194][ T5867] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 806.603231][T14724] warning: `syz.2.2636' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 806.623855][T14724] netlink: 'syz.2.2636': attribute type 10 has an invalid length. [ 806.635178][ T5867] usb 4-1: Using ep0 maxpacket: 32 [ 806.638057][T14724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 806.645373][ T5867] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 806.648619][T14724] bond0: (slave wlan1): Opening slave failed [ 806.655841][ T5867] usb 4-1: config 0 has no interface number 0 [ 806.669956][ T5867] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 806.679329][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.688354][ T5867] usb 4-1: Product: syz [ 806.692677][ T5867] usb 4-1: Manufacturer: syz [ 806.698071][ T5867] usb 4-1: SerialNumber: syz [ 806.714751][ T5867] usb 4-1: config 0 descriptor?? [ 806.726189][ T5867] smsc95xx v2.0.0 [ 806.767070][ T5868] pwc: recv_control_msg error -32 req 02 val 2b00 [ 806.778346][ T5868] pwc: recv_control_msg error -32 req 02 val 2700 [ 806.787644][ T5868] pwc: recv_control_msg error -32 req 02 val 2c00 [ 806.798328][ T5868] pwc: recv_control_msg error -32 req 04 val 1000 [ 806.807884][ T5868] pwc: recv_control_msg error -32 req 04 val 1300 [ 806.816056][ T5868] pwc: recv_control_msg error -32 req 04 val 1400 [ 806.823275][ T5868] pwc: recv_control_msg error -32 req 02 val 2000 [ 806.833872][ T5868] pwc: recv_control_msg error -32 req 02 val 2100 [ 806.842695][ T5868] pwc: recv_control_msg error -32 req 04 val 1500 [ 806.853105][ T5868] pwc: recv_control_msg error -32 req 02 val 2500 [ 806.861123][ T5868] pwc: recv_control_msg error -32 req 02 val 2400 [ 806.871837][ T5868] pwc: recv_control_msg error -71 req 02 val 2600 [ 806.879800][ T5868] pwc: recv_control_msg error -71 req 02 val 2900 [ 806.892739][ T5868] pwc: recv_control_msg error -71 req 02 val 2800 [ 806.900787][ T5868] pwc: recv_control_msg error -71 req 04 val 1100 [ 806.913261][ T5868] pwc: recv_control_msg error -71 req 04 val 1200 [ 807.092615][ T5868] pwc: Registered as video103. [ 807.103691][ T5868] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input42 [ 807.120039][ T5868] usb 2-1: USB disconnect, device number 123 [ 807.132041][ T5867] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 807.151403][ T5867] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 807.378925][ T5867] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 807.391403][ T5867] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -32 [ 807.675408][ T5868] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 807.823856][T14740] veth0_to_bond: entered allmulticast mode [ 807.844963][ T5868] usb 2-1: Using ep0 maxpacket: 32 [ 807.860334][ T5868] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 807.869006][ T5868] usb 2-1: config 0 has no interface number 0 [ 807.886821][ T5868] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 807.898208][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.907556][ T5868] usb 2-1: Product: syz [ 807.924955][ T5868] usb 2-1: Manufacturer: syz [ 807.949950][ T5868] usb 2-1: SerialNumber: syz [ 807.977970][ T5868] usb 2-1: config 0 descriptor?? [ 808.015643][ T5868] smsc95xx v2.0.0 [ 808.132004][T14744] netlink: 'syz.4.2644': attribute type 10 has an invalid length. [ 808.162409][T14746] bond4: (slave ip6erspan0): Releasing active interface [ 808.224311][T14744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 808.284761][T14744] bond0: (slave wlan1): Opening slave failed [ 808.421252][ T5868] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 808.433776][ T5868] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 808.565420][T14766] netlink: 'syz.4.2649': attribute type 10 has an invalid length. [ 808.584364][T14766] bond0: (slave wlan1): Opening slave failed [ 808.629180][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.635833][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.269230][T10688] usb 4-1: USB disconnect, device number 9 [ 809.799171][ T5868] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 809.812729][ T5868] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 810.200237][ T5868] usb 2-1: USB disconnect, device number 124 [ 811.297906][T14808] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2664'. [ 811.594923][ T5868] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 811.774906][ T5868] usb 2-1: Using ep0 maxpacket: 32 [ 812.285825][ T5868] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 812.301755][ T5868] usb 2-1: config 0 has no interface number 0 [ 812.324218][ T5868] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 812.341868][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.360325][ T5868] usb 2-1: Product: syz [ 812.374791][ T5868] usb 2-1: Manufacturer: syz [ 812.390085][ T5868] usb 2-1: SerialNumber: syz [ 812.461670][ T5868] usb 2-1: config 0 descriptor?? [ 812.485780][ T5868] smsc95xx v2.0.0 [ 812.609391][T14814] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2666'. [ 812.619600][T14814] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2666'. [ 812.647243][T14814] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2666'. [ 812.694205][T14814] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2666'. [ 812.883151][ T5868] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 812.903042][ T5868] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 813.075809][T10688] usb 5-1: new full-speed USB device number 119 using dummy_hcd [ 813.129006][T14836] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2675'. [ 813.134733][ T5868] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 813.158701][ T5868] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -32 [ 813.215127][ T5910] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 813.247520][T10688] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 813.277042][T10688] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 813.304099][T10688] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 813.313249][T10688] usb 5-1: New USB device strings: Mfr=145, Product=0, SerialNumber=0 [ 813.322678][T10688] usb 5-1: Manufacturer: syz [ 813.334995][T10688] usb 5-1: config 0 descriptor?? [ 813.352359][T10688] hub 5-1:0.0: USB hub found [ 813.414933][ T5910] usb 3-1: Using ep0 maxpacket: 8 [ 813.492132][ T5910] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 813.815482][ T5910] usb 3-1: config 0 has no interfaces? [ 813.822763][ T5910] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 813.833238][T10688] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 813.854746][ T5910] usb 3-1: config 0 has no interfaces? [ 813.866222][ T5910] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 813.877745][ T5910] usb 3-1: config 0 has no interfaces? [ 813.884379][ T5910] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 813.894734][ T5910] usb 3-1: config 0 has no interfaces? [ 813.903239][ T5910] usb 3-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a [ 813.912698][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.936006][ T5910] usb 3-1: config 0 descriptor?? [ 814.007107][T14851] syzkaller1: entered promiscuous mode [ 814.019800][T14851] syzkaller1: entered allmulticast mode [ 814.060479][T10688] hid-generic 0003:046D:C31C.001A: item fetching failed at offset 0/1 [ 814.071986][T10688] hid-generic 0003:046D:C31C.001A: probe with driver hid-generic failed with error -22 [ 814.177225][T14858] tipc: Enabling of bearer rejected, failed to enable media [ 814.205318][T10688] usb 2-1: USB disconnect, device number 125 [ 814.377544][ T9] usb 5-1: USB disconnect, device number 119 [ 814.472223][T14865] syzkaller0: entered promiscuous mode [ 814.491050][T14865] syzkaller0: entered allmulticast mode [ 814.642567][T14871] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2685'. [ 816.542991][T14888] syzkaller1: entered promiscuous mode [ 816.555029][T14888] syzkaller1: entered allmulticast mode [ 816.700221][T10688] usb 3-1: USB disconnect, device number 119 [ 817.197167][T10688] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 817.277558][ T9] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 817.405041][T10688] usb 3-1: Using ep0 maxpacket: 32 [ 817.437549][T10688] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 817.535856][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 817.569856][ T9] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 817.578527][T10688] usb 3-1: config 0 has no interface number 0 [ 817.589078][ T9] usb 5-1: config 0 has no interface number 0 [ 817.619574][ T9] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 817.628031][T10688] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 817.628758][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.654262][T10688] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.691986][T10688] usb 3-1: Product: syz [ 817.699442][T10688] usb 3-1: Manufacturer: syz [ 817.700045][ T9] usb 5-1: Product: syz [ 817.704076][T10688] usb 3-1: SerialNumber: syz [ 817.732061][T10688] usb 3-1: config 0 descriptor?? [ 817.739724][ T9] usb 5-1: Manufacturer: syz [ 817.748832][ T9] usb 5-1: SerialNumber: syz [ 817.759759][T10688] smsc95xx v2.0.0 [ 817.783740][ T9] usb 5-1: config 0 descriptor?? [ 817.802822][ T9] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 818.175010][ T5873] usb 2-1: new full-speed USB device number 126 using dummy_hcd [ 818.242610][T10688] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 818.270911][T10688] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 818.397770][ T5873] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 818.410060][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.423628][ T5873] usb 2-1: config 0 descriptor?? [ 818.570301][T10688] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 818.605122][T10688] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -32 [ 818.639692][ T5873] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 818.649095][ T5873] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 818.701791][ T5873] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 818.724312][ T5873] [drm] Initialized udl on minor 2 [ 818.918027][ T5873] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 818.954087][ T5873] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 818.990824][ T5867] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 819.013244][ T5867] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 819.020579][ T5873] usb 2-1: USB disconnect, device number 126 [ 819.519160][T14956] netlink: 'syz.3.2708': attribute type 10 has an invalid length. [ 819.543512][T14956] bond0: (slave wlan1): refused to change device type [ 819.587166][T14958] netlink: 79 bytes leftover after parsing attributes in process `syz.1.2709'. [ 819.892297][ T5910] usb 3-1: USB disconnect, device number 120 [ 820.070324][ T9] usb 5-1: qt2_attach - failed to power on unit: -71 [ 820.087728][ T9] quatech2 5-1:0.51: probe with driver quatech2 failed with error -71 [ 820.126335][ T9] usb 5-1: USB disconnect, device number 120 [ 820.334906][ T5910] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 820.636083][ T5910] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 820.648921][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 820.685720][ T5910] usb 3-1: Product: syz [ 820.689925][ T5910] usb 3-1: SerialNumber: syz [ 820.710199][ T5910] usb 3-1: config 0 descriptor?? [ 821.128002][ T5910] usb 3-1: USB disconnect, device number 121 [ 821.624955][ T5910] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 821.785843][ T5910] usb 5-1: Using ep0 maxpacket: 32 [ 821.816636][ T5910] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 821.928542][ T5910] usb 5-1: config 0 has no interface number 0 [ 822.002846][ T5910] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 822.021465][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.041376][ T5910] usb 5-1: Product: syz [ 822.048078][ T5910] usb 5-1: Manufacturer: syz [ 822.052807][ T5910] usb 5-1: SerialNumber: syz [ 822.164762][ T5910] usb 5-1: config 0 descriptor?? [ 822.294935][T10688] usb 3-1: new full-speed USB device number 122 using dummy_hcd [ 822.435082][ T5910] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 822.556474][T15033] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.631250][T10688] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 822.909702][T10688] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.937781][T10688] usb 3-1: config 0 descriptor?? [ 823.015102][T15033] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.196073][T10688] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 823.213321][T10688] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 823.257512][T10688] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 823.275386][T10688] [drm] Initialized udl on minor 2 [ 823.322890][T15033] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.452148][T10688] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 823.463021][T10688] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 823.482853][T15033] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.506116][ T5820] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 823.516232][T10688] usb 3-1: USB disconnect, device number 122 [ 823.523569][ T5820] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 823.728742][T15033] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.810685][T15033] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.831372][T15033] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.852564][T15033] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.897228][ T5867] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 824.124924][ T5867] usb 2-1: Using ep0 maxpacket: 16 [ 824.133746][ T5867] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 824.146248][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.232604][ T5867] usb 2-1: Product: syz [ 824.242808][ T5867] usb 2-1: Manufacturer: syz [ 824.253206][ T5867] usb 2-1: SerialNumber: syz [ 824.299848][ T5867] r8152-cfgselector 2-1: Unknown version 0x0000 [ 824.318176][ T5867] r8152-cfgselector 2-1: config 0 descriptor?? [ 824.870508][ T5910] usb 5-1: qt2_attach - failed to power on unit: -71 [ 824.877429][ T5910] quatech2 5-1:0.51: probe with driver quatech2 failed with error -71 [ 825.267601][ T5910] usb 5-1: USB disconnect, device number 121 [ 826.008855][ T5867] r8152-cfgselector 2-1: Unknown version 0x0000 [ 826.025193][ T5867] r8152-cfgselector 2-1: bad CDC descriptors [ 826.074998][ T5867] r8152-cfgselector 2-1: USB disconnect, device number 127 [ 826.138359][T15079] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2756'. [ 826.990244][T15098] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 829.306086][T15119] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2770'. [ 829.329461][T15119] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2770'. [ 829.516711][T15130] netlink: 596 bytes leftover after parsing attributes in process `syz.1.2772'. [ 829.642204][T15128] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.973458][T15128] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.582139][T15170] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2785'. [ 830.597228][T15170] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 830.803405][T15128] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.056609][T15128] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.197526][T15128] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.241122][T15128] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.321085][T15128] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.378206][T15128] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.447513][T15192] netlink: 596 bytes leftover after parsing attributes in process `syz.1.2793'. [ 831.893109][T15212] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2801'. [ 831.959206][T15212] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2801'. [ 833.783238][T15255] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 834.122358][T15260] netlink: 79 bytes leftover after parsing attributes in process `syz.4.2815'. [ 834.233126][T15269] netlink: 596 bytes leftover after parsing attributes in process `syz.1.2816'. [ 836.395273][T15319] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2833'. [ 837.930915][T15334] trusted_key: encrypted_key: keylen parameter is missing [ 839.014439][T15341] netlink: 596 bytes leftover after parsing attributes in process `syz.4.2840'. [ 840.145708][T15363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2847'. [ 840.375616][T15368] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2845'. [ 842.098493][T15397] netlink: 596 bytes leftover after parsing attributes in process `syz.2.2855'. [ 842.119932][T15396] netlink: 'syz.2.2855': attribute type 29 has an invalid length. [ 842.460491][T15384] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2850'. [ 842.470946][T15376] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2850'. [ 842.485261][T15376] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2850'. [ 843.140087][T15409] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2860'. [ 843.369306][T15412] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2859'. [ 844.063504][ T5867] usb 3-1: new full-speed USB device number 123 using dummy_hcd [ 844.249058][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 844.290538][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 844.320964][ T5867] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 844.335974][ T5867] usb 3-1: New USB device strings: Mfr=145, Product=0, SerialNumber=0 [ 844.344281][ T5867] usb 3-1: Manufacturer: syz [ 844.355627][ T5867] usb 3-1: config 0 descriptor?? [ 844.380253][ T5867] hub 3-1:0.0: USB hub found [ 844.601726][ T5867] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 845.212155][ T5867] hid-generic 0003:046D:C31C.001B: item fetching failed at offset 0/1 [ 845.225778][ T5867] hid-generic 0003:046D:C31C.001B: probe with driver hid-generic failed with error -22 [ 845.260751][ T5867] usb 3-1: USB disconnect, device number 123 [ 847.169351][T15472] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2877'. [ 848.847514][T15500] capability: warning: `syz.1.2887' uses deprecated v2 capabilities in a way that may be insecure [ 849.672167][T15518] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2892'. [ 850.317383][T15526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2895'. [ 850.334910][T15526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2895'. [ 850.369146][T15526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2895'. [ 850.404264][T15526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2895'. [ 850.413341][ T5873] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 850.421171][T15526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2895'. [ 850.623147][ T5873] usb 5-1: Using ep0 maxpacket: 32 [ 850.637446][ T5873] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 850.659983][ T5873] usb 5-1: config 0 has no interface number 0 [ 850.672836][ T5873] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 851.309735][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.456099][ T5873] usb 5-1: Product: syz [ 851.462202][ T5873] usb 5-1: Manufacturer: syz [ 851.485897][ T5873] usb 5-1: SerialNumber: syz [ 851.503940][ T5873] usb 5-1: config 0 descriptor?? [ 851.528919][ T5873] smsc95xx v2.0.0 [ 851.781436][ T5910] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 851.945042][ T5820] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 851.952694][ T5910] usb 2-1: Using ep0 maxpacket: 8 [ 851.960205][ T5873] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 851.973127][ T5910] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 851.983509][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.984086][ T5873] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 852.003187][ T5910] usb 2-1: Product: syz [ 852.007522][ T5910] usb 2-1: Manufacturer: syz [ 852.012236][ T5910] usb 2-1: SerialNumber: syz [ 852.021644][ T5910] usb 2-1: config 0 descriptor?? [ 852.029699][ T5910] gspca_main: sq930x-2.14.0 probing 2770:930c [ 852.107360][ T5820] usb 4-1: Using ep0 maxpacket: 32 [ 852.128657][ T5820] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 852.172690][ T5820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.190629][ T5820] usb 4-1: Product: syz [ 852.197473][ T5820] usb 4-1: Manufacturer: syz [ 852.202205][ T5820] usb 4-1: SerialNumber: syz [ 852.342968][ T5873] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 852.344199][ T5820] usb 4-1: config 0 descriptor?? [ 852.355153][ T5873] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -32 [ 852.438081][T15560] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2907'. [ 852.979095][ T5910] gspca_sq930x: ucbus_write failed -110 [ 852.986343][ T5820] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 853.152135][T15565] Bluetooth: MGMT ver 1.23 [ 853.194978][ T5910] gspca_sq930x: Sensor ov9630 not yet treated [ 853.208051][ T5910] sq930x 2-1:0.0: probe with driver sq930x failed with error -22 [ 853.228052][ T5910] usb 2-1: USB disconnect, device number 2 [ 853.255878][ T5820] gspca_ov534_9: reg_w failed -71 [ 853.394946][ T52] usb 5-1: USB disconnect, device number 122 [ 853.576537][ T5910] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 853.694913][ T5820] gspca_ov534_9: Unknown sensor 0000 [ 853.695002][ T5820] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 853.750568][ T5820] usb 4-1: USB disconnect, device number 10 [ 853.775700][ T5910] usb 3-1: Using ep0 maxpacket: 32 [ 853.835924][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 853.880059][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 853.937460][ T5910] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 853.954938][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.978944][ T5910] usb 3-1: config 0 descriptor?? [ 855.257544][ T5870] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 855.394337][T15087] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 855.405354][T15087] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 855.413975][T15087] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 855.422998][T15087] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 855.433147][ T5870] usb 4-1: Using ep0 maxpacket: 32 [ 855.441572][T15087] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 855.454021][ T5870] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 855.472204][ T5870] usb 4-1: config 0 has no interface number 0 [ 855.481533][ T5870] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 855.490803][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.499259][ T5870] usb 4-1: Product: syz [ 855.503595][ T5870] usb 4-1: Manufacturer: syz [ 855.508370][ T5870] usb 4-1: SerialNumber: syz [ 855.517829][ T5870] usb 4-1: config 0 descriptor?? [ 855.526298][ T5870] smsc95xx v2.0.0 [ 855.870989][T15605] chnl_net:caif_netlink_parms(): no params data found [ 856.061083][ T5870] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 856.072424][ T5870] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 856.841502][ T5870] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 856.856429][ T5870] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -32 [ 857.029190][ T5910] usbhid 3-1:0.0: can't add hid device: -71 [ 857.069696][ T5910] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 857.110903][ T5910] usb 3-1: USB disconnect, device number 124 [ 857.150921][T15605] bridge0: port 1(bridge_slave_0) entered blocking state [ 857.168919][T15605] bridge0: port 1(bridge_slave_0) entered disabled state [ 857.177033][T15605] bridge_slave_0: entered allmulticast mode [ 857.187748][T15605] bridge_slave_0: entered promiscuous mode [ 857.250179][T15605] bridge0: port 2(bridge_slave_1) entered blocking state [ 857.270436][T15605] bridge0: port 2(bridge_slave_1) entered disabled state [ 857.301240][T15605] bridge_slave_1: entered allmulticast mode [ 857.342487][T15605] bridge_slave_1: entered promiscuous mode [ 857.385096][T15639] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.497784][T15639] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.512182][T15087] Bluetooth: hci2: command tx timeout [ 857.524188][T15605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 857.568064][T15605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 857.629011][T15639] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.682558][T15605] team0: Port device team_slave_0 added [ 857.690473][T15639] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.725764][T15605] team0: Port device team_slave_1 added [ 857.809736][T15605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 857.824105][T15605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 857.825318][ T5867] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 857.868442][T15605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 857.889414][T15605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 857.900613][T15605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 857.933477][T15605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 857.954701][T15639] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.979258][T15639] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.008985][T10688] usb 4-1: USB disconnect, device number 11 [ 858.027769][T15639] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.046747][ T5867] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 858.073450][T15639] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.092349][ T5867] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 858.109036][ T5867] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 858.132445][ T5867] usb 2-1: New USB device strings: Mfr=145, Product=0, SerialNumber=0 [ 858.150369][ T5867] usb 2-1: Manufacturer: syz [ 858.184791][ T5867] usb 2-1: config 0 descriptor?? [ 858.206727][T15605] hsr_slave_0: entered promiscuous mode [ 858.223486][T15605] hsr_slave_1: entered promiscuous mode [ 858.235492][T15605] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 858.247865][T15605] Cannot create hsr debugfs directory [ 858.425638][ T9] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 858.465141][ T5867] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 858.486516][T15605] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.575569][T15605] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.595517][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 858.608873][ T9] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 858.621535][ T5867] usb 4-1: Using ep0 maxpacket: 32 [ 858.627372][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.638051][ T9] usb 3-1: Product: syz [ 858.642350][ T5867] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 858.642811][T15605] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.651324][ T9] usb 3-1: Manufacturer: syz [ 858.667150][ T5867] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 858.675995][ T5867] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 858.677828][T15653] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2937'. [ 858.685486][ T9] usb 3-1: SerialNumber: syz [ 858.687132][ T5867] usb 4-1: config 1 has no interface number 0 [ 858.705196][T15652] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2937'. [ 858.706729][ T5867] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 858.732316][T15652] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2937'. [ 858.733000][ T9] r8152-cfgselector 3-1: Unknown version 0x0000 [ 858.748371][ T9] r8152-cfgselector 3-1: config 0 descriptor?? [ 858.756915][ T5867] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 858.772148][ T5867] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 858.782801][ T5867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.793154][T15605] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.830550][ T5867] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 858.983992][T15605] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 859.007046][T15605] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 859.018313][T15605] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 859.031842][ T5867] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 859.040504][ T9] r8152-cfgselector 3-1: Unknown version 0x0000 [ 859.045932][T15605] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 859.053717][ T9] r8152-cfgselector 3-1: bad CDC descriptors [ 859.069442][ T9] r8152-cfgselector 3-1: USB disconnect, device number 125 [ 859.163155][T15605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 859.184288][T15605] 8021q: adding VLAN 0 to HW filter on device team0 [ 859.197164][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 859.204345][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 859.223736][T14019] bridge0: port 2(bridge_slave_1) entered blocking state [ 859.230892][T14019] bridge0: port 2(bridge_slave_1) entered forwarding state [ 859.449699][T15605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 859.539689][ T9] usb 4-1: USB disconnect, device number 12 [ 859.565015][ T9] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 859.585148][T15087] Bluetooth: hci2: command tx timeout [ 859.718536][T15675] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2940'. [ 859.770585][T15605] veth0_vlan: entered promiscuous mode [ 859.781772][T15605] veth1_vlan: entered promiscuous mode [ 859.810464][T15605] veth0_macvtap: entered promiscuous mode [ 859.819796][T15605] veth1_macvtap: entered promiscuous mode [ 859.836523][T15605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 859.848861][T15605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 859.864649][T15605] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.874191][T15605] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.883013][T15605] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.891934][T15605] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.975628][ T5867] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 859.995087][T10221] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 860.014212][T10221] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 860.042020][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 860.053149][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 860.145898][ T5867] usb 3-1: Using ep0 maxpacket: 32 [ 860.160661][ T5867] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 860.173294][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.184237][ T5867] usb 3-1: Product: syz [ 860.190445][ T5867] usb 3-1: Manufacturer: syz [ 860.198454][ T5867] usb 3-1: SerialNumber: syz [ 860.206988][ T5867] usb 3-1: config 0 descriptor?? [ 860.224594][ T5867] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 860.621188][ T5867] gspca_ov534_9: reg_w failed -71 [ 860.645207][ T5820] usb 2-1: USB disconnect, device number 3 [ 861.026181][ T5867] gspca_ov534_9: Unknown sensor 0000 [ 861.026275][ T5867] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 861.064777][ T5867] usb 3-1: USB disconnect, device number 126 [ 861.516629][ T5832] bridge0: port 1(syz_tun) entered disabled state [ 861.561375][ T5832] syz_tun (unregistering): left allmulticast mode [ 861.568038][ T5820] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 861.582446][ T5832] syz_tun (unregistering): left promiscuous mode [ 861.590767][ T5821] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 861.603859][ T5832] bridge0: port 1(syz_tun) entered disabled state [ 861.611842][ T5821] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 861.619861][ T5821] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 861.627885][ T5821] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 861.636972][ T5821] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 861.665040][ T5821] Bluetooth: hci2: command tx timeout [ 861.704982][ T5867] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 861.735044][ T5820] usb 4-1: Using ep0 maxpacket: 32 [ 861.743218][ T5820] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 861.751877][ T5820] usb 4-1: config 0 has no interface number 0 [ 861.776866][ T5820] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 861.795105][ T5820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.805304][ T5820] usb 4-1: Product: syz [ 861.824721][ T5820] usb 4-1: Manufacturer: syz [ 861.832455][ T5820] usb 4-1: SerialNumber: syz [ 861.843005][ T5820] usb 4-1: config 0 descriptor?? [ 861.854983][ T5867] usb 5-1: Using ep0 maxpacket: 8 [ 861.856676][ T5820] smsc95xx v2.0.0 [ 861.878533][ T5867] usb 5-1: config 0 has an invalid interface number: 151 but max is 1 [ 861.890345][ T5867] usb 5-1: config 0 has no interface number 1 [ 861.905491][ T5867] usb 5-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 861.917956][ T5867] usb 5-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 861.948106][ T5867] usb 5-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 861.978012][ T5867] usb 5-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 861.989558][ T5867] usb 5-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 862.004105][ T5867] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 862.021666][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 862.037408][ T5867] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 862.053937][ T5867] usb 5-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 862.071126][ T5867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.093568][ T5867] usb 5-1: Product: syz [ 862.111885][ T5867] usb 5-1: Manufacturer: syz [ 862.122000][ T5867] usb 5-1: SerialNumber: syz [ 862.139464][ T5867] usb 5-1: config 0 descriptor?? [ 862.151419][T15693] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 862.163713][ T5867] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 862.222002][ T5867] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 862.270459][ T5820] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 862.305389][ T5820] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 862.338512][ T5867] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 862.402590][ T5867] usb 5-1: USB disconnect, device number 123 [ 862.442770][T15695] chnl_net:caif_netlink_parms(): no params data found [ 862.509677][T15704] udevd[15704]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 862.545647][ T5820] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 862.575251][ T5820] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -61 [ 862.703945][T15695] bridge0: port 1(bridge_slave_0) entered blocking state [ 862.712170][T15695] bridge0: port 1(bridge_slave_0) entered disabled state [ 862.719763][T15695] bridge_slave_0: entered allmulticast mode [ 862.728049][T15695] bridge_slave_0: entered promiscuous mode [ 862.736171][T15695] bridge0: port 2(bridge_slave_1) entered blocking state [ 862.743300][T15695] bridge0: port 2(bridge_slave_1) entered disabled state [ 862.750724][T15695] bridge_slave_1: entered allmulticast mode [ 862.758133][T15695] bridge_slave_1: entered promiscuous mode [ 862.800294][T15695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 862.816375][T15695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 862.884299][T15695] team0: Port device team_slave_0 added [ 862.896745][T15695] team0: Port device team_slave_1 added [ 862.948936][T15695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 862.957036][T15695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 862.973373][T15717] xt_hashlimit: size too large, truncated to 1048576 [ 863.014440][T15695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 863.038594][T15695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 863.056394][T15695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 863.099734][T15695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 863.130477][T15722] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2951'. [ 863.147258][T15722] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2951'. [ 863.158783][T15722] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2951'. [ 863.168552][T15722] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2951'. [ 863.224500][T15695] hsr_slave_0: entered promiscuous mode [ 863.246088][T15695] hsr_slave_1: entered promiscuous mode [ 863.264091][T15695] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 863.277179][T15695] Cannot create hsr debugfs directory [ 863.446803][T15727] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2953'. [ 863.539154][T15695] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.620238][T15695] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.664967][ T5821] Bluetooth: hci4: command tx timeout [ 863.693366][T15695] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.735357][ T5867] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 863.745332][ T5821] Bluetooth: hci2: command tx timeout [ 863.783190][T15695] netdevsim netdevsim1  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.900521][T15695] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 863.904936][ T5867] usb 3-1: Using ep0 maxpacket: 32 [ 863.917243][T15695] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 863.918728][ T5867] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 863.937499][T15695] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 863.948054][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.951131][T15695] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 863.956568][ T5867] usb 3-1: Product: syz [ 863.967482][ T5867] usb 3-1: Manufacturer: syz [ 863.972168][ T5867] usb 3-1: SerialNumber: syz [ 863.980904][ T5867] usb 3-1: config 0 descriptor?? [ 863.995425][ T5867] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 864.045137][T10688] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 864.081969][T15695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 864.106231][T15695] 8021q: adding VLAN 0 to HW filter on device team0 [ 864.119294][T10221] bridge0: port 1(bridge_slave_0) entered blocking state [ 864.126528][T10221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 864.146875][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 864.154071][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 864.215517][T10688] usb 5-1: Using ep0 maxpacket: 8 [ 864.223952][T10688] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 864.258256][T10688] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.275240][T10688] usb 5-1: Product: syz [ 864.279545][T10688] usb 5-1: Manufacturer: syz [ 864.284243][T10688] usb 5-1: SerialNumber: syz [ 864.302963][T10688] usb 5-1: config 0 descriptor?? [ 864.330426][T10688] gspca_main: sq930x-2.14.0 probing 2770:930c [ 864.360218][ T5870] usb 4-1: USB disconnect, device number 13 [ 864.404188][ T5867] gspca_ov534_9: reg_w failed -71 [ 864.494140][T15695] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 864.539288][T15695] veth0_vlan: entered promiscuous mode [ 864.542903][T10688] gspca_sq930x: reg_r 001f failed -71 [ 864.558369][T10688] sq930x 5-1:0.0: probe with driver sq930x failed with error -71 [ 864.570338][T15695] veth1_vlan: entered promiscuous mode [ 864.576264][T10688] usb 5-1: USB disconnect, device number 124 [ 864.615492][T15695] veth0_macvtap: entered promiscuous mode [ 864.624127][T15695] veth1_macvtap: entered promiscuous mode [ 864.647925][T15695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 864.658701][T15695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.670779][T15695] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 864.684516][T15695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 864.695269][T15695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.707207][T15695] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 864.720209][T15695] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.729292][T15695] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.738428][T15695] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.747596][T15695] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.823873][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 864.842292][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 864.868961][ T6017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 864.878200][ T5867] gspca_ov534_9: Unknown sensor 0000 [ 864.878261][ T5867] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 864.895000][ T6017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 864.907829][ T5867] usb 3-1: USB disconnect, device number 127 [ 865.183469][T15750] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2959'. [ 865.225030][T10688] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 865.375496][ T5910] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 865.397305][T10688] usb 2-1: Using ep0 maxpacket: 32 [ 865.431387][T10688] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 865.439900][T10688] usb 2-1: config 0 has no interface number 0 [ 865.448427][T10688] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 865.457842][T10688] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.471575][T10688] usb 2-1: Product: syz [ 865.476579][T10688] usb 2-1: Manufacturer: syz [ 865.482498][T10688] usb 2-1: SerialNumber: syz [ 865.491261][T10688] usb 2-1: config 0 descriptor?? [ 865.500782][T10688] smsc95xx v2.0.0 [ 865.559553][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 865.605850][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 865.616950][ T5910] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 865.648109][ T5910] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 865.665745][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.678606][ T5910] usb 5-1: config 0 descriptor?? [ 865.755610][ T5821] Bluetooth: hci4: command tx timeout [ 865.847088][T15760] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 866.755279][T10688] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 866.772442][T10688] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 867.031166][T10688] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 867.043742][ T5910] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 867.080162][T10688] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -32 [ 867.088553][ T5910] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 867.105609][ T5910] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 867.113040][ T5910] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 867.153381][ T5910] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 867.165128][ T5867] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 867.175100][ T5910] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 867.183449][ T5910] plantronics 0003:047F:FFFF.001C: No inputs registered, leaving [ 867.239950][ T5910] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 867.345091][ T5867] usb 4-1: Using ep0 maxpacket: 32 [ 867.352624][ T5867] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 867.363698][ T5867] usb 4-1: config 0 has no interface number 0 [ 867.392535][ T5867] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 867.418367][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.447071][ T5867] usb 4-1: Product: syz [ 867.462975][ T5867] usb 4-1: Manufacturer: syz [ 867.479973][ T5867] usb 4-1: SerialNumber: syz [ 867.497983][ T5867] usb 4-1: config 0 descriptor?? [ 867.509026][ T975] usb 5-1: USB disconnect, device number 125 [ 867.515115][T15768] plantronics 0003:047F:FFFF.001C: usb_submit_urb(ctrl) failed: -19 [ 867.542108][ T5867] smsc95xx v2.0.0 [ 867.685584][T15087] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 867.695175][T15087] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 867.706537][T15087] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 867.718335][T15087] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 867.726719][T15087] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 867.825310][ T5821] Bluetooth: hci4: command tx timeout [ 867.862405][T10221] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.941054][T10221] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.957309][ T5867] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 867.972745][ T5867] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 868.005137][T10221] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.072454][ T5873] usb 2-1: USB disconnect, device number 4 [ 868.112589][T10221] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.153655][T15777] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2966'. [ 868.182470][T15770] chnl_net:caif_netlink_parms(): no params data found [ 868.184457][ T5867] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 868.221689][ T5867] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -61 [ 868.250653][T15781] overlayfs: failed to resolve './file0': -2 [ 868.451427][T15788] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2970'. [ 868.491637][T15770] bridge0: port 1(bridge_slave_0) entered blocking state [ 868.500374][T15770] bridge0: port 1(bridge_slave_0) entered disabled state [ 868.507852][T15770] bridge_slave_0: entered allmulticast mode [ 868.515702][T15770] bridge_slave_0: entered promiscuous mode [ 868.541352][ T5873] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 868.550896][T15770] bridge0: port 2(bridge_slave_1) entered blocking state [ 868.560615][T15770] bridge0: port 2(bridge_slave_1) entered disabled state [ 868.575443][T15770] bridge_slave_1: entered allmulticast mode [ 868.585639][T15770] bridge_slave_1: entered promiscuous mode [ 868.642467][T15795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2972'. [ 868.715376][ T5873] usb 2-1: Using ep0 maxpacket: 32 [ 868.731297][ T5873] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 868.750081][ T5873] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.770701][ T5873] usb 2-1: Product: syz [ 868.775201][ T5873] usb 2-1: Manufacturer: syz [ 868.779832][ T5873] usb 2-1: SerialNumber: syz [ 868.800231][ T5873] usb 2-1: config 0 descriptor?? [ 868.813734][ T5873] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 868.957268][T10221] bond0 (unregistering): Released all slaves [ 869.066147][T10221] bond1 (unregistering): Released all slaves [ 869.173673][T10221] bond2 (unregistering): Released all slaves [ 869.212625][ T5873] gspca_ov534_9: reg_w failed -71 [ 869.294273][T10221] bond3 (unregistering): Released all slaves [ 869.334602][T15795] macvtap1: entered promiscuous mode [ 869.343212][T15795] bond0: entered promiscuous mode [ 869.359923][T15795] macvtap1: entered allmulticast mode [ 869.371927][T15795] bond0: entered allmulticast mode [ 869.377760][T15795] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 869.405908][T15797] bond0: left allmulticast mode [ 869.410781][T15797] bond0: left promiscuous mode [ 869.488967][T10221] tipc: Disabling bearer [ 869.495168][T10221] tipc: Disabling bearer [ 869.510609][T10221] tipc: Left network mode [ 869.517146][T15770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 869.547782][T15770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 869.655592][ T5873] gspca_ov534_9: Unknown sensor 0000 [ 869.655676][ T5873] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 869.657629][T15770] team0: Port device team_slave_0 added [ 869.720633][ T5867] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 869.724586][T15770] team0: Port device team_slave_1 added [ 869.732067][ T5873] usb 2-1: USB disconnect, device number 5 [ 869.753270][ T5821] Bluetooth: hci0: command tx timeout [ 869.906308][ T5821] Bluetooth: hci4: command tx timeout [ 869.924498][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 869.942565][ T5910] usb 4-1: USB disconnect, device number 14 [ 869.976422][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 870.022229][ T5867] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 870.038269][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.070966][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.077453][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.175846][ T5867] usb 5-1: config 0 descriptor?? [ 870.202418][T15770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 870.216857][T15770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 870.403675][T15770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 871.017382][T15770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 871.042019][T15820] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2978'. [ 871.051361][T15770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 871.087564][ T5867] pyra 0003:1E7D:2CF6.001D: unknown main item tag 0x0 [ 871.094632][ T5867] pyra 0003:1E7D:2CF6.001D: unknown main item tag 0x0 [ 871.132301][ T5867] pyra 0003:1E7D:2CF6.001D: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0 [ 871.141351][T15770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 871.209717][T15826] overlayfs: failed to resolve './file0': -2 [ 871.265978][T10221] hsr_slave_0: left promiscuous mode [ 871.280346][T10221] hsr_slave_1: left promiscuous mode [ 871.294634][ T5867] pyra 0003:1E7D:2CF6.001D: couldn't init struct pyra_device [ 871.320247][ T5867] pyra 0003:1E7D:2CF6.001D: couldn't install mouse [ 871.333578][ T5867] pyra 0003:1E7D:2CF6.001D: probe with driver pyra failed with error -32 [ 871.351745][ T5867] usb 5-1: USB disconnect, device number 126 [ 871.375177][T10221] veth1_macvtap: left promiscuous mode [ 871.387628][T10221] veth0_macvtap: left promiscuous mode [ 871.401440][T10221] veth1_vlan: left promiscuous mode [ 871.415421][T10221] veth0_vlan: left promiscuous mode [ 871.454265][T15832] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2980'. [ 871.538947][T10221] pimreg3 (unregistering): left allmulticast mode [ 871.825578][ T5821] Bluetooth: hci0: command tx timeout [ 871.923189][T15837] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2981'. [ 872.533529][T15770] hsr_slave_0: entered promiscuous mode [ 872.541457][T15770] hsr_slave_1: entered promiscuous mode [ 872.713003][T15849] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2985'. [ 872.759595][ T975] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 872.934904][ T975] usb 5-1: Using ep0 maxpacket: 16 [ 872.949969][ T975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 872.986084][ T975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 873.005598][ T5910] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 873.019109][ T975] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 873.053596][ T975] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 873.072375][ T975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.100172][ T975] usb 5-1: config 0 descriptor?? [ 873.175172][ T5910] usb 2-1: Using ep0 maxpacket: 32 [ 873.210481][ T5910] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 873.249612][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.264785][ T5910] usb 2-1: Product: syz [ 873.272577][ T5910] usb 2-1: Manufacturer: syz [ 873.303744][ T5910] usb 2-1: SerialNumber: syz [ 873.329172][ T5910] usb 2-1: config 0 descriptor?? [ 873.371374][ T5910] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 873.520198][T15770] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 873.521408][T15845] random: crng reseeded on system resumption [ 873.543422][T15770] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 873.567979][T15770] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 873.600400][T15770] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 873.676013][ T5867] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 873.741658][ T5910] gspca_ov534_9: reg_w failed -71 [ 873.808829][T15770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 873.849877][ T5867] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 873.882277][T15770] 8021q: adding VLAN 0 to HW filter on device team0 [ 873.889329][ T5867] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 873.907156][ T5821] Bluetooth: hci0: command tx timeout [ 873.920962][T10221] bridge0: port 1(bridge_slave_0) entered blocking state [ 873.928189][T10221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 873.938571][ T5867] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 873.983516][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 873.990727][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 873.995030][ T5867] usb 4-1: New USB device strings: Mfr=145, Product=0, SerialNumber=0 [ 874.022581][ T5867] usb 4-1: Manufacturer: syz [ 874.032695][ T975] usbhid 5-1:0.0: can't add hid device: -71 [ 874.064239][ T975] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 874.078445][ T5867] usb 4-1: config 0 descriptor?? [ 874.098317][ T5867] hub 4-1:0.0: USB hub found [ 874.109180][ T975] usb 5-1: USB disconnect, device number 127 [ 874.155278][ T5910] gspca_ov534_9: Unknown sensor 0000 [ 874.155367][ T5910] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 874.199367][ T5910] usb 2-1: USB disconnect, device number 6 [ 874.298828][ T5867] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 874.662207][ T5867] hid-generic 0003:046D:C31C.001E: item fetching failed at offset 0/1 [ 874.684082][ T5867] hid-generic 0003:046D:C31C.001E: probe with driver hid-generic failed with error -22 [ 874.764051][T15890] overlayfs: missing 'lowerdir' [ 875.265890][ T5867] usb 4-1: USB disconnect, device number 15 [ 875.446392][T15898] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2991'. [ 875.601402][T15770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 875.695758][ T975] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 875.708711][T15770] veth0_vlan: entered promiscuous mode [ 875.758168][T15770] veth1_vlan: entered promiscuous mode [ 875.861053][T15770] veth0_macvtap: entered promiscuous mode [ 875.875219][ T975] usb 2-1: Using ep0 maxpacket: 32 [ 875.898018][ T975] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 875.905407][T15912] No control pipe specified [ 875.922094][T15770] veth1_macvtap: entered promiscuous mode [ 875.940679][ T975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.985397][ T975] usb 2-1: Product: syz [ 875.986408][ T5821] Bluetooth: hci0: command tx timeout [ 875.989593][ T975] usb 2-1: Manufacturer: syz [ 875.989610][ T975] usb 2-1: SerialNumber: syz [ 876.009407][T15770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 876.014606][ T975] usb 2-1: config 0 descriptor?? [ 876.033472][T15770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.047914][T15770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 876.058842][T15770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.070500][T15770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 876.083991][T15770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 876.095238][T15770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.123272][T15770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 876.135232][T15917] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2998'. [ 876.146566][ T975] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 876.181348][T15770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.544074][T15770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 876.601096][ T5867] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 876.609456][ T975] gspca_ov534_9: reg_w failed -71 [ 876.678096][T15770] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.693168][T15770] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.702230][T15770] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.716394][T15770] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.844088][ T5867] usb 4-1: Using ep0 maxpacket: 32 [ 876.871076][ T5867] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 876.888659][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.914906][ T5867] usb 4-1: Product: syz [ 876.934946][ T5867] usb 4-1: Manufacturer: syz [ 876.958121][ T5867] usb 4-1: SerialNumber: syz [ 876.987465][ T5867] usb 4-1: config 0 descriptor?? [ 876.987494][ T6017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 877.009274][ T5867] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 877.018988][ T5820] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 877.032867][ T6017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 877.110916][T10221] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 877.118353][ T975] gspca_ov534_9: Unknown sensor 0000 [ 877.118857][ T975] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 877.133014][T10221] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 877.175152][ T975] usb 2-1: USB disconnect, device number 7 [ 877.215783][ T5820] usb 5-1: Using ep0 maxpacket: 8 [ 877.232891][ T5820] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 877.259839][ T5820] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 877.293523][ T5820] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 877.323774][ T5820] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 877.397222][ T5820] usb 5-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 877.405144][ T5867] gspca_ov534_9: reg_w failed -71 [ 877.419210][ T5820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.442587][ T5820] usb 5-1: Product: syz [ 877.455304][ T5820] usb 5-1: Manufacturer: syz [ 877.465087][ T5820] usb 5-1: SerialNumber: syz [ 877.476829][ T5820] usb 5-1: config 0 descriptor?? [ 877.495797][T15929] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 877.712195][ T5820] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 877.782131][ T5820] input: Griffin SoundKnob as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input43 [ 877.825455][ T5867] gspca_ov534_9: Unknown sensor 0000 [ 877.825538][ T5867] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 877.865824][T15956] netlink: 'syz.2.3005': attribute type 29 has an invalid length. [ 877.907383][T15960] netlink: 'syz.2.3005': attribute type 29 has an invalid length. [ 877.921509][ C1] powermate: config urb returned -71 [ 877.928045][ C1] powermate: config urb returned -71 [ 877.933695][ C1] powermate: config urb returned -71 [ 877.939996][ C1] powermate: config urb returned -71 [ 877.948226][ T5867] usb 4-1: USB disconnect, device number 16 [ 877.961742][ T52] usb 5-1: USB disconnect, device number 2 [ 877.961790][ C1] powermate 5-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 878.245530][ T5820] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 878.435532][ T5820] usb 2-1: Using ep0 maxpacket: 16 [ 878.453131][ T5820] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 878.492509][ T5820] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 878.525458][ T5820] usb 2-1: config 0 has no interface number 0 [ 878.542346][ T5820] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 878.574888][ T5820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.605946][ T5820] usb 2-1: Product: syz [ 878.610161][ T5820] usb 2-1: Manufacturer: syz [ 878.833260][ T5820] usb 2-1: SerialNumber: syz [ 878.879388][ T5867] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 878.893021][ T5820] usb 2-1: config 0 descriptor?? [ 879.283734][ T5820] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 879.376181][ T5820] usb 2-1: No valid video chain found. [ 879.485137][ T5867] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 879.515002][ T5867] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 879.548031][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 879.604997][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 879.661465][ T5867] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 879.718968][ T5867] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 879.738319][ T5867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 879.769530][ T5867] usb 5-1: Product: syz [ 879.773740][ T5867] usb 5-1: Manufacturer: syz [ 879.785624][T16001] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3018'. [ 879.807177][T16000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3019'. [ 879.807176][ T5867] usb 5-1: SerialNumber: syz [ 879.811932][ T5867] usb 5-1: config 0 descriptor?? [ 879.852230][T16000] batadv0: entered promiscuous mode [ 879.857643][T16000] batadv0: entered allmulticast mode [ 880.065748][ T5820] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 880.086265][ T5867] radio-si470x 5-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 880.118314][ T5867] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -5 [ 880.150715][ T5867] usb 5-1: USB disconnect, device number 3 [ 880.215886][ T5820] usb 4-1: Using ep0 maxpacket: 32 [ 880.238527][ T5820] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 880.260400][ T5820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.282083][ T5820] usb 4-1: Product: syz [ 880.294460][ T5820] usb 4-1: Manufacturer: syz [ 880.328361][ T5820] usb 4-1: SerialNumber: syz [ 880.354080][ T5820] usb 4-1: config 0 descriptor?? [ 880.382378][ T5820] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 880.781691][ T5820] gspca_ov534_9: reg_w failed -71 [ 881.205054][ T5820] gspca_ov534_9: Unknown sensor 0000 [ 881.205152][ T5820] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 881.237097][ T5820] usb 4-1: USB disconnect, device number 17 [ 881.285424][ T5910] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 881.474967][ T5910] usb 3-1: Using ep0 maxpacket: 16 [ 881.489684][ T5910] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 881.515168][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.542112][ T5910] usb 3-1: Product: syz [ 881.548613][ T5910] usb 3-1: Manufacturer: syz [ 881.553238][ T5910] usb 3-1: SerialNumber: syz [ 881.595385][ T5910] r8152-cfgselector 3-1: Unknown version 0x0000 [ 881.596336][ T5870] usb 2-1: USB disconnect, device number 8 [ 881.612968][ T5910] r8152-cfgselector 3-1: config 0 descriptor?? [ 881.631586][T16033] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3028'. [ 881.847178][T16028] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3026'. [ 881.869030][T16027] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3026'. [ 881.895633][T16028] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3026'. [ 883.900291][T15087] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 883.912703][T15087] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 883.965982][T15087] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 883.978412][T15087] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 883.988573][T15087] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 884.323969][ T5910] r8152-cfgselector 3-1: Unknown version 0x0000 [ 884.350713][ T5910] r8152-cfgselector 3-1: bad CDC descriptors [ 884.390305][ T5910] r8152-cfgselector 3-1: USB disconnect, device number 2 [ 884.544695][T16041] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3031'. [ 884.983695][T16040] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3031'. [ 885.008203][T16041] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3031'. [ 885.222493][T16045] chnl_net:caif_netlink_parms(): no params data found [ 885.445115][T16066] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3037'. [ 885.976368][T16070] bridge0: port 2(bridge_slave_1) entered disabled state [ 885.983827][T16070] bridge0: port 1(bridge_slave_0) entered disabled state [ 886.145306][ T5910] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 886.145459][ T5821] Bluetooth: hci3: command tx timeout [ 886.200458][T16070] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 886.213355][T16070] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 886.320040][ T5910] usb 5-1: Using ep0 maxpacket: 32 [ 886.356034][ T5910] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 886.372367][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.385369][T16070] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 886.394272][T16070] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 886.404864][ T5910] usb 5-1: Product: syz [ 886.409076][ T5910] usb 5-1: Manufacturer: syz [ 886.413684][ T5910] usb 5-1: SerialNumber: syz [ 886.432941][ T5910] usb 5-1: config 0 descriptor?? [ 886.450339][ T5910] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 886.462741][T16070] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 886.472208][T16070] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 886.564713][T16091] netlink: 'syz.0.3044': attribute type 29 has an invalid length. [ 886.574007][T16045] bridge0: port 1(bridge_slave_0) entered blocking state [ 886.581739][T16045] bridge0: port 1(bridge_slave_0) entered disabled state [ 886.589162][T16045] bridge_slave_0: entered allmulticast mode [ 886.601476][T16045] bridge_slave_0: entered promiscuous mode [ 886.611485][T16092] netlink: 'syz.0.3044': attribute type 29 has an invalid length. [ 886.627936][T16045] bridge0: port 2(bridge_slave_1) entered blocking state [ 886.650932][T16045] bridge0: port 2(bridge_slave_1) entered disabled state [ 886.660251][T16045] bridge_slave_1: entered allmulticast mode [ 886.669081][T16045] bridge_slave_1: entered promiscuous mode [ 886.754262][T16045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 886.778638][T16045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 886.839286][T16045] team0: Port device team_slave_0 added [ 886.849103][T16045] team0: Port device team_slave_1 added [ 886.859712][ T5910] gspca_ov534_9: reg_w failed -71 [ 886.865353][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 886.886081][T16098] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3046'. [ 886.895773][T16097] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3046'. [ 886.917732][T16098] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3046'. [ 886.931023][T16045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 886.942386][T16045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 886.969845][T16045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 887.016141][T16045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 887.023129][T16045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 887.063892][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 887.069841][T16045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 887.093740][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 887.112174][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 887.133605][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 887.185992][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.275194][ T5910] gspca_ov534_9: Unknown sensor 0000 [ 887.276041][ T5910] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 887.569443][ T9] usb 2-1: config 0 descriptor?? [ 887.571309][ T5910] usb 5-1: USB disconnect, device number 4 [ 887.704208][T16045] hsr_slave_0: entered promiscuous mode [ 887.744203][T16045] hsr_slave_1: entered promiscuous mode [ 887.753297][T16045] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 887.767651][T16045] Cannot create hsr debugfs directory [ 888.147504][ T9] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 888.165079][ T9] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 888.204895][ T9] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 888.212357][ T9] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 888.224947][ T5821] Bluetooth: hci3: command tx timeout [ 888.249003][ T9] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 888.264889][ T9] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 888.273254][ T9] plantronics 0003:047F:FFFF.001F: No inputs registered, leaving [ 888.479274][ T9] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 888.536425][ T9] usb 2-1: USB disconnect, device number 9 [ 888.615983][T16114] fido_id[16114]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 888.733987][T16045] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.908452][T16045] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.009060][T16045] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.123248][T16045] netdevsim netdevsim3  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.145256][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 889.263554][T16131] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3058'. [ 889.314969][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 889.323854][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 889.334484][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 889.337958][T16045] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 889.353703][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 889.369333][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.370584][T16045] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 889.377687][ T9] usb 3-1: Product: syz [ 889.388850][ T9] usb 3-1: Manufacturer: syz [ 889.393462][ T9] usb 3-1: SerialNumber: syz [ 889.396937][T16045] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 889.413675][T16045] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 889.435209][ T5870] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 889.507335][T16045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 889.525338][ T5910] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 889.528401][T16045] 8021q: adding VLAN 0 to HW filter on device team0 [ 889.547266][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 889.554461][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 889.572480][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 889.579643][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 889.600300][ T5870] usb 2-1: Using ep0 maxpacket: 16 [ 889.617230][ T9] usb 3-1: 0:2 : does not exist [ 889.634398][ T5870] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 889.643610][ T9] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 889.655727][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.661331][T16045] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 889.675621][ T5870] usb 2-1: Product: syz [ 889.680093][ T5870] usb 2-1: Manufacturer: syz [ 889.685488][ T5870] usb 2-1: SerialNumber: syz [ 889.705599][ T5910] usb 5-1: Using ep0 maxpacket: 32 [ 889.720842][ T5910] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 889.725590][ T9] usb 3-1: USB disconnect, device number 3 [ 889.741714][ T5870] r8152-cfgselector 2-1: Unknown version 0x0000 [ 889.751909][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.761261][ T5870] r8152-cfgselector 2-1: config 0 descriptor?? [ 889.774204][ T5910] usb 5-1: Product: syz [ 889.793898][ T5910] usb 5-1: Manufacturer: syz [ 889.811368][ T5910] usb 5-1: SerialNumber: syz [ 889.818562][T11245] udevd[11245]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 889.843087][ T5910] usb 5-1: config 0 descriptor?? [ 889.858522][ T5910] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 890.024564][T16045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 890.125934][ T5870] r8152-cfgselector 2-1: Unknown version 0x0000 [ 890.139087][ T5870] r8152-cfgselector 2-1: bad CDC descriptors [ 890.159026][ T5870] r8152-cfgselector 2-1: USB disconnect, device number 10 [ 890.186054][T16045] veth0_vlan: entered promiscuous mode [ 890.277358][ T5910] gspca_ov534_9: reg_w failed -71 [ 890.315275][ T5821] Bluetooth: hci3: command tx timeout [ 890.378558][T16140] Bluetooth: MGMT ver 1.23 [ 890.936040][ T5910] gspca_ov534_9: Unknown sensor 0000 [ 890.936135][ T5910] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 890.978903][ T5910] usb 5-1: USB disconnect, device number 5 [ 891.725219][ T5910] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 891.886584][ T5910] usb 2-1: Using ep0 maxpacket: 8 [ 891.906434][ T5910] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 891.915918][ T5910] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 891.931659][ T5910] usb 2-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 891.942792][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.951047][ T5910] usb 2-1: Product: syz [ 891.955382][ T5910] usb 2-1: Manufacturer: syz [ 891.959989][ T5910] usb 2-1: SerialNumber: syz [ 891.969372][ T5910] usb 2-1: config 0 descriptor?? [ 891.981553][ T5910] powermate 2-1:0.0: probe with driver powermate failed with error -22 [ 892.109263][ T5820] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 892.264999][ T5820] usb 3-1: Using ep0 maxpacket: 8 [ 892.272118][ T5820] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 892.280509][ T5820] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 892.291298][ T5820] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 892.301461][ T5820] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 892.311614][ T5820] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 892.324688][ T5820] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 892.333825][ T5820] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.387104][T15087] Bluetooth: hci3: command tx timeout [ 892.468973][ T5821] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 892.471119][T15087] Bluetooth: hci0: command 0x1407 tx timeout [ 892.572391][ T5820] usb 3-1: GET_CAPABILITIES returned 0 [ 892.583133][ T5820] usbtmc 3-1:16.0: can't read capabilities [ 892.826813][ T5820] usb 3-1: USB disconnect, device number 4 [ 892.884589][T16045] veth1_vlan: entered promiscuous mode [ 892.986464][T16045] veth0_macvtap: entered promiscuous mode [ 893.018174][T16045] veth1_macvtap: entered promiscuous mode [ 893.052472][T16045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 893.063114][T16045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 893.077540][T16045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 893.088269][T16045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 893.099921][T16045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 893.123703][T16045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 893.151028][T16045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 893.181509][T16045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 893.204919][T16045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 893.224230][T16045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 893.252470][T16045] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 893.266663][T16045] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 893.280935][T16045] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 893.291647][T16045] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 893.534158][T10221] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 893.562029][T10221] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 894.044418][ T6017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 894.052688][ T6017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 894.222602][T16201] netlink: 5128 bytes leftover after parsing attributes in process `syz.0.3085'. [ 894.233753][T16201] netlink: 5128 bytes leftover after parsing attributes in process `syz.0.3085'. [ 894.244071][T16201] netlink: 584 bytes leftover after parsing attributes in process `syz.0.3085'. [ 894.482673][ T5870] usb 2-1: USB disconnect, device number 11 [ 895.045196][T16216] overlayfs: failed to resolve './file1': -2 [ 895.269316][ T5821] Bluetooth: hci0: command 0x1407 tx timeout [ 895.275820][T15087] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 895.545485][ T5910] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 895.815550][ T5910] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 895.920166][ T5910] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 896.071824][ T5910] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 896.083317][ T5910] usb 2-1: New USB device strings: Mfr=145, Product=0, SerialNumber=0 [ 896.092027][ T5910] usb 2-1: Manufacturer: syz [ 896.100055][ T5910] usb 2-1: config 0 descriptor?? [ 896.114302][ T5910] hub 2-1:0.0: bad descriptor, ignoring hub [ 896.122345][ T5910] hub 2-1:0.0: probe with driver hub failed with error -5 [ 896.268654][ T5910] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 896.534938][ T5868] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 896.728621][ T5868] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 896.748187][ T5868] usb 4-1: config 0 has no interface number 0 [ 896.754353][ T5868] usb 4-1: config 0 interface 41 has no altsetting 0 [ 896.789031][ T5868] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 896.804404][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.818298][ T5868] usb 4-1: Product: syz [ 896.822499][ T5868] usb 4-1: Manufacturer: syz [ 896.832514][ T5868] usb 4-1: SerialNumber: syz [ 896.849423][ T5868] usb 4-1: config 0 descriptor?? [ 897.350556][T15087] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 897.356895][ T5821] Bluetooth: hci0: command 0x1407 tx timeout [ 897.721618][ T5868] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 898.355313][ T5868] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 898.460103][ T5868] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 898.471537][ T5868] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 898.483730][ T5868] usb 4-1: USB disconnect, device number 18 [ 898.649019][ T5870] usb 2-1: USB disconnect, device number 12 [ 899.106440][T16270] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3110'. [ 899.155158][ T5870] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 899.315808][ T5870] usb 2-1: Using ep0 maxpacket: 32 [ 899.323026][ T5870] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 899.336281][ T5870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.355113][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 899.363100][ T5870] usb 2-1: config 0 descriptor?? [ 899.379820][ T5870] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 899.535377][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 899.562422][ T9] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 899.581837][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.595287][ T9] usb 3-1: Product: syz [ 899.602230][ T9] usb 3-1: Manufacturer: syz [ 899.612626][ T9] usb 3-1: SerialNumber: syz [ 899.631736][ T9] usb 3-1: config 0 descriptor?? [ 899.643337][ T9] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 900.422756][ T9] gspca_ov534_9: reg_w failed -71 [ 900.635311][ T5821] Bluetooth: hci0: command 0x1407 tx timeout [ 900.636055][T15087] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 900.855012][ T9] gspca_ov534_9: Unknown sensor 0000 [ 900.855107][ T9] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 900.892323][ T9] usb 3-1: USB disconnect, device number 5 [ 900.941462][T16300] xt_hashlimit: size too large, truncated to 1048576 [ 900.985324][ T975] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 901.008372][ T5870] gspca_vc032x: reg_w err -71 [ 901.013105][ T5870] gspca_vc032x: I2c Bus Busy Wait 00 [ 901.038599][ T5870] gspca_vc032x: I2c Bus Busy Wait 00 [ 901.054318][ T5870] gspca_vc032x: I2c Bus Busy Wait 00 [ 901.081725][ T5870] gspca_vc032x: I2c Bus Busy Wait 00 [ 901.087959][ T5870] gspca_vc032x: I2c Bus Busy Wait 00 [ 901.093274][ T5870] gspca_vc032x: I2c Bus Busy Wait 00 [ 901.106769][ T5870] gspca_vc032x: I2c Bus Busy Wait 00 [ 901.112093][ T5870] gspca_vc032x: I2c Bus Busy Wait 00 [ 901.117795][ T5870] gspca_vc032x: I2c Bus Busy Wait 00 [ 901.123094][ T5870] gspca_vc032x: I2c Bus Busy Wait 00 [ 901.129136][ T5870] gspca_vc032x: I2c Bus Busy Wait 00 [ 901.134441][ T5870] gspca_vc032x: I2c Bus Busy Wait 00 [ 901.140380][ T5870] gspca_vc032x: I2c Bus Busy Wait 00 [ 901.148125][ T975] usb 4-1: Using ep0 maxpacket: 8 [ 901.153586][ T5870] gspca_vc032x: I2c Bus Busy Wait 00 [ 901.159762][ T5870] gspca_vc032x: I2c Bus Busy Wait 00 [ 901.166187][ T5870] gspca_vc032x: I2c Bus Busy Wait 00 [ 901.173630][ T5870] gspca_vc032x: I2c Bus Busy Wait 00 [ 901.179220][ T975] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 901.188606][ T5870] gspca_vc032x: I2c Bus Busy Wait 00 [ 901.193915][ T5870] gspca_vc032x: Unknown sensor... [ 901.199848][ T975] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 901.210474][ T5870] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 901.218570][ T975] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 901.230609][ T5870] usb 2-1: USB disconnect, device number 13 [ 901.238937][ T975] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 901.253288][ T975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.262596][ T975] usb 4-1: Product: syz [ 901.267126][ T975] usb 4-1: Manufacturer: syz [ 901.272177][ T975] usb 4-1: SerialNumber: syz [ 901.509758][ T975] usb 4-1: 0:2 : does not exist [ 901.547792][ T975] usb 4-1: USB disconnect, device number 19 [ 901.623430][T11245] udevd[11245]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 902.706471][ T5821] Bluetooth: hci0: command 0x1407 tx timeout [ 902.725240][T15087] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 903.280399][T16329] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3132'. [ 904.047201][ T5867] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 904.226826][ T5867] usb 4-1: Using ep0 maxpacket: 32 [ 904.257534][ T5867] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 904.284124][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.292877][ T5867] usb 4-1: Product: syz [ 904.297367][ T5867] usb 4-1: Manufacturer: syz [ 904.302030][ T5867] usb 4-1: SerialNumber: syz [ 904.320606][ T5867] usb 4-1: config 0 descriptor?? [ 904.348638][ T5867] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 905.075093][ T5867] gspca_ov534_9: reg_w failed -110 [ 905.185335][T15087] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 905.192798][ T5821] Bluetooth: hci0: command 0x1407 tx timeout [ 905.525318][ T5867] gspca_ov534_9: Unknown sensor 0000 [ 905.525409][ T5867] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 905.575457][ T5867] usb 4-1: USB disconnect, device number 20 [ 905.605229][T16362] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 905.624725][T16362] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 905.633382][T16362] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 905.665382][T16362] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 905.678318][T16362] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 905.686441][T16350] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3138'. [ 905.730272][T16349] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3138'. [ 905.739910][T16353] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3138'. [ 905.807756][ T6017] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.939999][ T6017] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.027374][ T5870] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 906.047930][ T6017] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.062445][T16377] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3149'. [ 906.157812][ T6017] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.206972][ T5870] usb 3-1: Using ep0 maxpacket: 8 [ 906.238704][ T5870] usb 3-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice=b0.23 [ 906.268875][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.293571][T16361] chnl_net:caif_netlink_parms(): no params data found [ 906.310447][ T5870] usb 3-1: config 0 descriptor?? [ 906.340203][ T5870] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input44 [ 906.533522][ T5173] bcm5974 3-1:0.0: could not read from device [ 906.559066][ T5173] bcm5974 3-1:0.0: could not read from device [ 906.566695][ T5870] usb 3-1: USB disconnect, device number 6 [ 906.585828][ T5173] bcm5974 3-1:0.0: could not read from device [ 906.624601][T15704] udevd[15704]: Error opening device "/dev/input/event4": No such file or directory [ 906.636744][T15704] udevd[15704]: Unable to EVIOCGABS device "/dev/input/event4" [ 906.651281][T15704] udevd[15704]: Unable to EVIOCGABS device "/dev/input/event4" [ 906.660976][T15704] udevd[15704]: Unable to EVIOCGABS device "/dev/input/event4" [ 906.670176][T15704] udevd[15704]: Unable to EVIOCGABS device "/dev/input/event4" [ 906.735434][ T5867] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 906.743213][ T975] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 906.908653][ T5867] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 906.930707][ T5867] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 906.944156][ T975] usb 2-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config [ 906.954569][ T975] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 906.966347][ T975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 30768, setting to 64 [ 906.977722][ T975] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 906.991360][ T5867] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 907.001226][ T5867] usb 4-1: New USB device strings: Mfr=145, Product=0, SerialNumber=0 [ 907.009542][ T5867] usb 4-1: Manufacturer: syz [ 907.017010][ T975] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 907.026931][ T975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 907.036330][ T5867] usb 4-1: config 0 descriptor?? [ 907.048289][ T975] usb 2-1: Product: syz [ 907.052484][ T975] usb 2-1: Manufacturer: syz [ 907.058960][ T5867] hub 4-1:0.0: bad descriptor, ignoring hub [ 907.065679][ T5867] hub 4-1:0.0: probe with driver hub failed with error -5 [ 907.072872][ T975] usb 2-1: SerialNumber: syz [ 907.079253][ T5867] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 907.090298][ T975] usb 2-1: config 0 descriptor?? [ 907.322533][ T975] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 907.329786][ T975] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 907.523486][ T975] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 907.532837][ T975] radio-si470x 2-1:0.0: si470x_get_scratch: si470x_get_report returned -71 [ 907.546461][ T975] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5 [ 907.565922][ T975] usb 2-1: USB disconnect, device number 14 [ 907.585160][T16362] Bluetooth: hci0: command 0x1407 tx timeout [ 907.591275][ T5821] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 907.748804][ T5821] Bluetooth: hci1: command tx timeout [ 908.215022][T16408] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3160'. [ 908.592084][ T52] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 908.619187][T16361] bridge0: port 1(bridge_slave_0) entered blocking state [ 908.640459][T16361] bridge0: port 1(bridge_slave_0) entered disabled state [ 908.659220][T16361] bridge_slave_0: entered allmulticast mode [ 908.679869][T16361] bridge_slave_0: entered promiscuous mode [ 908.748417][T16361] bridge0: port 2(bridge_slave_1) entered blocking state [ 908.767231][T16361] bridge0: port 2(bridge_slave_1) entered disabled state [ 908.775409][T16361] bridge_slave_1: entered allmulticast mode [ 908.784672][T16361] bridge_slave_1: entered promiscuous mode [ 908.791469][ T52] usb 2-1: Using ep0 maxpacket: 32 [ 908.811060][ T52] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 908.834294][ T52] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.859372][ T52] usb 2-1: Product: syz [ 908.874074][ T52] usb 2-1: Manufacturer: syz [ 908.892178][ T52] usb 2-1: SerialNumber: syz [ 908.906950][ T52] usb 2-1: config 0 descriptor?? [ 908.930920][T16361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 908.943553][ T52] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 909.354520][ T52] gspca_ov534_9: reg_w failed -71 [ 909.625258][ T975] usb 4-1: USB disconnect, device number 21 [ 909.765474][ T52] gspca_ov534_9: Unknown sensor 0000 [ 909.765566][ T52] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 909.766721][T16441] xt_hashlimit: size too large, truncated to 1048576 [ 909.791661][ T52] usb 2-1: USB disconnect, device number 15 [ 909.827452][ T5821] Bluetooth: hci1: command tx timeout [ 909.996317][ T6017] bond0 (unregistering): Released all slaves [ 910.767309][ T6017] bond1 (unregistering): Released all slaves [ 911.032514][T16361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 911.047412][T16420] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3162'. [ 911.177870][T16459] ======================================================= [ 911.177870][T16459] WARNING: The mand mount option has been deprecated and [ 911.177870][T16459] and is ignored by this kernel. Remove the mand [ 911.177870][T16459] option from the mount to silence this warning. [ 911.177870][T16459] ======================================================= [ 911.212957][T16459] new mount options do not match the existing superblock, will be ignored [ 911.231625][T16459] option changes via remount are deprecated (pid=16453 comm=syz.3.3168) [ 911.430843][T16447] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3166'. [ 911.955215][ T5873] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 911.968118][ T5821] Bluetooth: hci1: command tx timeout [ 912.090125][ T975] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 912.185121][ T5873] usb 3-1: Using ep0 maxpacket: 8 [ 912.219943][ T5873] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 912.267875][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.312694][ T5873] usb 3-1: Product: syz [ 912.320896][ T975] usb 4-1: Using ep0 maxpacket: 32 [ 912.331970][ T975] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 912.342437][ T5873] usb 3-1: Manufacturer: syz [ 912.350317][ T5873] usb 3-1: SerialNumber: syz [ 912.355546][ T975] usb 4-1: config 0 has no interface number 0 [ 912.368257][ T975] usb 4-1: config 0 interface 12 has no altsetting 0 [ 912.382626][ T975] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 912.394322][T16361] team0: Port device team_slave_0 added [ 912.404575][T16445] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3166'. [ 912.420010][ T6017] tipc: Disabling bearer [ 912.432047][ T6017] tipc: Left network mode [ 912.492392][ T5873] usb 3-1: config 0 descriptor?? [ 912.497865][ T975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.515071][ T975] usb 4-1: Product: syz [ 912.522294][ T5873] gspca_main: sq930x-2.14.0 probing 2770:930c [ 912.535466][ T975] usb 4-1: Manufacturer: syz [ 912.540142][ T975] usb 4-1: SerialNumber: syz [ 912.569593][T16361] team0: Port device team_slave_1 added [ 912.569617][ T975] usb 4-1: config 0 descriptor?? [ 912.735070][T16361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 912.742248][T16361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 912.769434][ T5873] gspca_sq930x: reg_r 001f failed -32 [ 912.783398][T16361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 912.795345][ T5873] sq930x 3-1:0.0: probe with driver sq930x failed with error -32 [ 912.816607][T16476] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3175'. [ 912.833700][ T5873] usb 3-1: USB disconnect, device number 7 [ 912.902149][T16361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 912.909795][T16361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 912.948565][T16361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 913.031059][ T6017] hsr_slave_0: left promiscuous mode [ 913.037244][ T6017] hsr_slave_1: left promiscuous mode [ 913.073040][ T6017] veth1_macvtap: left promiscuous mode [ 913.083623][ T6017] veth0_macvtap: left promiscuous mode [ 913.093510][ T6017] veth1_vlan: left promiscuous mode [ 913.101797][ T6017] veth0_vlan: left promiscuous mode [ 913.206345][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 913.295275][ T6017] pimreg3 (unregistering): left allmulticast mode [ 913.389279][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 913.423583][ T9] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 913.512589][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.615189][ T9] usb 2-1: Product: syz [ 913.619457][ T9] usb 2-1: Manufacturer: syz [ 913.624105][ T9] usb 2-1: SerialNumber: syz [ 913.634540][ T9] usb 2-1: config 0 descriptor?? [ 913.716309][ T975] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 913.915956][ T9] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 913.922402][ T975] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 913.932992][ T975] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 913.941170][ T975] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 913.984996][ T5821] Bluetooth: hci1: command tx timeout [ 914.003195][ T975] usb 4-1: USB disconnect, device number 22 [ 914.027210][T16498] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3177'. [ 914.176482][ T9] gspca_ov534_9: reg_w failed -71 [ 914.596546][ T9] gspca_ov534_9: Unknown sensor 0000 [ 914.596644][ T9] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 914.632180][ T9] usb 2-1: USB disconnect, device number 16 [ 915.302759][T16501] bridge0: port 2(bridge_slave_1) entered disabled state [ 915.310284][T16501] bridge0: port 1(bridge_slave_0) entered disabled state [ 915.696366][ T975] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 915.875974][T16501] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 915.891125][T16501] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 915.934977][ T975] usb 3-1: Using ep0 maxpacket: 16 [ 915.942835][ T975] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 915.952206][ T975] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 915.971130][ T975] usb 3-1: config 0 has no interface number 0 [ 915.990600][ T975] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 916.004148][ T975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.016801][ T975] usb 3-1: Product: syz [ 916.021027][ T975] usb 3-1: Manufacturer: syz [ 916.026132][ T975] usb 3-1: SerialNumber: syz [ 916.030857][T16501] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.033376][ T975] usb 3-1: config 0 descriptor?? [ 916.048983][T16501] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.060670][T16501] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.069954][T16501] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.121238][T16361] hsr_slave_0: entered promiscuous mode [ 916.136271][T16361] hsr_slave_1: entered promiscuous mode [ 916.151831][T16361] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 916.159565][T16361] Cannot create hsr debugfs directory [ 916.263419][ T975] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 916.284239][ T975] usb 3-1: No valid video chain found. [ 916.456605][T16529] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3188'. [ 916.745150][ T975] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 916.825018][ T5868] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 916.924908][ T975] usb 4-1: Using ep0 maxpacket: 32 [ 916.943565][ T975] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 916.963750][ T975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.975091][ T5868] usb 5-1: Using ep0 maxpacket: 32 [ 916.989095][ T5868] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 916.996361][ T975] usb 4-1: Product: syz [ 917.006105][ T975] usb 4-1: Manufacturer: syz [ 917.011301][ T975] usb 4-1: SerialNumber: syz [ 917.015000][ T5868] usb 5-1: config 0 has no interface number 0 [ 917.022002][ T5868] usb 5-1: config 0 interface 12 has no altsetting 0 [ 917.030185][ T975] usb 4-1: config 0 descriptor?? [ 917.055025][ T5820] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 917.062343][ T975] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 917.073538][ T5868] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 917.088293][ T5868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.121679][ T5868] usb 5-1: Product: syz [ 917.128451][ T5868] usb 5-1: Manufacturer: syz [ 917.133079][ T5868] usb 5-1: SerialNumber: syz [ 917.159918][ T5868] usb 5-1: config 0 descriptor?? [ 917.229569][ T5820] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 917.246179][ T5820] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 917.281469][ T5820] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 917.292526][ T5820] usb 2-1: New USB device strings: Mfr=145, Product=0, SerialNumber=0 [ 917.309956][ T5820] usb 2-1: Manufacturer: syz [ 917.331015][ T5820] usb 2-1: config 0 descriptor?? [ 917.344065][ T5820] hub 2-1:0.0: bad descriptor, ignoring hub [ 917.357810][ T5820] hub 2-1:0.0: probe with driver hub failed with error -5 [ 917.371003][ T5820] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 917.410868][T16361] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 917.444986][T16361] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 917.463138][ T975] gspca_ov534_9: reg_w failed -71 [ 917.476829][T16361] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 917.498921][T16361] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 917.636898][T16361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 917.678920][T16361] 8021q: adding VLAN 0 to HW filter on device team0 [ 917.698166][ T4404] bridge0: port 1(bridge_slave_0) entered blocking state [ 917.705313][ T4404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 917.722011][ T4404] bridge0: port 2(bridge_slave_1) entered blocking state [ 917.729210][ T4404] bridge0: port 2(bridge_slave_1) entered forwarding state [ 917.865096][ T975] gspca_ov534_9: Unknown sensor 0000 [ 917.865186][ T975] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 917.896056][ T975] usb 4-1: USB disconnect, device number 23 [ 918.152770][T16361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 918.204534][ T5868] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 918.213880][ T5868] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 918.249365][ T5868] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 918.258811][ T5868] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 918.296345][ T5868] usb 5-1: USB disconnect, device number 6 [ 918.303238][ T975] usb 3-1: USB disconnect, device number 8 [ 918.350182][T16361] veth0_vlan: entered promiscuous mode [ 918.373899][T16361] veth1_vlan: entered promiscuous mode [ 918.572640][T16361] veth0_macvtap: entered promiscuous mode [ 918.620780][T16361] veth1_macvtap: entered promiscuous mode [ 918.655178][T16361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 918.687134][T16361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 918.722585][T16361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 918.755214][T16361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 918.796192][T16361] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 918.892871][T16361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 918.966143][T16361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 918.980615][T16361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 918.993475][T16361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 919.020916][T16361] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 919.165208][T16361] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.228352][T16361] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.281879][T16361] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.327323][T16361] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.638481][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 919.646777][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 919.654385][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 919.662939][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 920.605375][ T5867] usb 2-1: USB disconnect, device number 17 [ 920.889973][T16615] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3200'. [ 921.165101][T10688] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 921.175040][ T5868] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 921.197971][ T52] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 921.235150][ T975] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 921.339947][ T5868] usb 4-1: Using ep0 maxpacket: 32 [ 921.346082][T10688] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 921.359103][ T52] usb 2-1: Using ep0 maxpacket: 8 [ 921.364336][T10688] usb 3-1: config 0 has no interface number 0 [ 921.377656][ T5868] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 921.387659][ T52] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 921.396884][T10688] usb 3-1: config 0 interface 41 has no altsetting 0 [ 921.403850][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.412352][ T52] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.420508][ T975] usb 5-1: Using ep0 maxpacket: 32 [ 921.429179][ T5868] usb 4-1: Product: syz [ 921.433612][ T5868] usb 4-1: Manufacturer: syz [ 921.433669][ T975] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 921.439756][ T52] usb 2-1: Product: syz [ 921.462505][T10688] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 921.465366][ T975] usb 5-1: config 0 has no interface number 0 [ 921.471899][ T5868] usb 4-1: SerialNumber: syz [ 921.490063][T10688] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.494989][ T975] usb 5-1: config 0 interface 12 has no altsetting 0 [ 921.499135][ T52] usb 2-1: Manufacturer: syz [ 921.512536][T10688] usb 3-1: Product: syz [ 921.517741][ T5868] usb 4-1: config 0 descriptor?? [ 921.521379][ T975] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 921.522910][T10688] usb 3-1: Manufacturer: syz [ 921.536862][ T52] usb 2-1: SerialNumber: syz [ 921.542237][T10688] usb 3-1: SerialNumber: syz [ 921.556279][ T52] usb 2-1: config 0 descriptor?? [ 921.562048][ T5868] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 921.570629][ T975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.589520][ T52] gspca_main: sq930x-2.14.0 probing 2770:930c [ 921.599928][T10688] usb 3-1: config 0 descriptor?? [ 921.617093][ T975] usb 5-1: Product: syz [ 921.621284][ T975] usb 5-1: Manufacturer: syz [ 921.641949][ T975] usb 5-1: SerialNumber: syz [ 921.671181][ T975] usb 5-1: config 0 descriptor?? [ 921.722997][T16638] overlayfs: failed to resolve './file1': -2 [ 921.862028][T16641] xt_hashlimit: size too large, truncated to 1048576 [ 921.948682][ T5868] gspca_ov534_9: reg_w failed -71 [ 921.987373][ T52] gspca_sq930x: ucbus_write failed -71 [ 922.365208][ T5868] gspca_ov534_9: Unknown sensor 0000 [ 922.365296][ T5868] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 922.415366][ T5868] usb 4-1: USB disconnect, device number 24 [ 922.426445][T10688] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 922.727538][ T975] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 922.745146][ T975] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 922.752480][ T975] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 922.768423][ T975] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 922.786768][ T975] usb 5-1: USB disconnect, device number 7 [ 922.861812][T10688] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 922.883624][T10688] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 922.893370][ T52] gspca_sq930x: Unknown sensor [ 922.903555][ T52] sq930x 2-1:0.0: probe with driver sq930x failed with error -22 [ 922.914112][T10688] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 922.931972][ T52] usb 2-1: USB disconnect, device number 18 [ 922.943917][T10688] usb 3-1: USB disconnect, device number 9 [ 923.266536][ T52] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 923.431772][ T52] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 923.459797][ T52] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 923.470788][ T52] usb 2-1: config 0 interface 0 has no altsetting 0 [ 923.484353][ T52] usb 2-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 923.503750][ T52] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.523566][ T52] usb 2-1: config 0 descriptor?? [ 923.555012][T10688] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 923.705046][ T9] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 923.707345][T10688] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 923.734809][T10688] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 923.752806][T10688] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 923.762254][T10688] usb 5-1: New USB device strings: Mfr=145, Product=0, SerialNumber=0 [ 923.778523][T10688] usb 5-1: Manufacturer: syz [ 923.791870][T10688] usb 5-1: config 0 descriptor?? [ 923.808965][T10688] hub 5-1:0.0: USB hub found [ 923.887390][ T9] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 923.895889][ T9] usb 3-1: config 179 has no interface number 0 [ 923.902194][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 923.913834][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64 [ 923.925437][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 923.937445][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 64 [ 923.949106][ T9] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 923.962712][ T9] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 923.972152][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.985205][T16686] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 923.992485][T16686] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 924.040241][T10688] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 924.049767][ T52] hid-steam 0003:28DE:1102.0020: unknown main item tag 0x0 [ 924.090059][ T52] hid-steam 0003:28DE:1102.0020: unknown main item tag 0x0 [ 924.104018][ T52] hid-steam 0003:28DE:1102.0020: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0 [ 924.195394][ T52] hid-steam 0003:28DE:1102.0020: Steam Controller 'XXXXXXXXXX' connected [ 924.247573][ T52] input: Steam Controller as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28DE:1102.0020/input/input45 [ 924.308609][T10688] hid-generic 0003:046D:C31C.0021: item fetching failed at offset 0/1 [ 924.334535][T10688] hid-generic 0003:046D:C31C.0021: probe with driver hid-generic failed with error -22 [ 924.349263][ T52] hid-steam 0003:28DE:1102.0022: unknown main item tag 0x0 [ 924.360386][ T5820] usb 3-1: USB disconnect, device number 10 [ 924.360433][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 924.374924][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 924.383792][ C0] ================================================================== [ 924.391870][ C0] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x23d/0x290 [ 924.399692][ C0] Read of size 4 at addr ffff88806372305c by task kworker/u8:7/4563 [ 924.401872][ T52] hid-steam 0003:28DE:1102.0022: unknown main item tag 0x0 [ 924.407662][ C0] [ 924.407686][ C0] CPU: 0 UID: 0 PID: 4563 Comm: kworker/u8:7 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 924.407710][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 924.407722][ C0] Workqueue: bat_events batadv_nc_worker [ 924.407753][ C0] Call Trace: [ 924.407761][ C0] [ 924.407771][ C0] dump_stack_lvl+0x189/0x250 [ 924.407796][ C0] ? __virt_addr_valid+0x18c/0x540 [ 924.407818][ C0] ? rcu_is_watching+0x15/0xb0 [ 924.407839][ C0] ? __kasan_check_byte+0x12/0x40 [ 924.407866][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 924.407888][ C0] ? rcu_is_watching+0x15/0xb0 [ 924.407912][ C0] ? lock_release+0x4b/0x3e0 [ 924.407934][ C0] ? __virt_addr_valid+0x18c/0x540 [ 924.407954][ C0] ? __virt_addr_valid+0x469/0x540 [ 924.407975][ C0] print_report+0xb4/0x290 [ 924.407995][ C0] ? do_raw_spin_lock+0x23d/0x290 [ 924.408012][ C0] kasan_report+0x118/0x150 [ 924.408037][ C0] ? do_raw_spin_lock+0x23d/0x290 [ 924.408059][ C0] do_raw_spin_lock+0x23d/0x290 [ 924.408077][ C0] ? __wake_up_common_lock+0x2f/0x1f0 [ 924.408097][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 924.408120][ C0] _raw_spin_lock_irqsave+0xb3/0xf0 [ 924.408139][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 924.408158][ C0] ? kcov_remote_stop+0x78/0x6d0 [ 924.408180][ C0] __wake_up_common_lock+0x2f/0x1f0 [ 924.408202][ C0] __usb_hcd_giveback_urb+0x4d7/0x690 [ 924.408229][ C0] ? usb_hcd_unlink_urb_from_ep+0x2c/0x110 [ 924.408256][ C0] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 924.408285][ C0] ? usb_hcd_giveback_urb+0x10e/0x420 [ 924.408312][ C0] dummy_timer+0x862/0x4550 [ 924.408336][ C0] ? current_time+0x8e/0x370 [ 924.408353][ C0] ? atime_needs_update+0x320/0x6d0 [ 924.408371][ C0] ? touch_atime+0x82/0x6d0 [ 924.408388][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.408415][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 924.408432][ C0] ? __lock_acquire+0xaac/0xd20 [ 924.408465][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 924.408489][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 924.408512][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 924.408542][ C0] __hrtimer_run_queues+0x529/0xc60 [ 924.408574][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 924.408596][ C0] ? read_tsc+0x9/0x20 [ 924.408620][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 924.408648][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 924.408673][ C0] handle_softirqs+0x283/0x870 [ 924.408698][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 924.408723][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 924.408750][ C0] __irq_exit_rcu+0xca/0x1f0 [ 924.408773][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 924.408800][ C0] irq_exit_rcu+0x9/0x30 [ 924.408822][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 924.408841][ C0] [ 924.408847][ C0] [ 924.408855][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 924.408873][ C0] RIP: 0010:lock_release+0x2b5/0x3e0 [ 924.408895][ C0] Code: 51 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 75 56 f7 c3 00 02 00 00 74 01 fb 65 48 8b 05 fb cf d3 10 <48> 3b 44 24 28 0f 85 8b 00 00 00 48 83 c4 30 5b 41 5c 41 5d 41 5e [ 924.408911][ C0] RSP: 0018:ffffc9000ec47a58 EFLAGS: 00000206 [ 924.408927][ C0] RAX: e3b0a050c940e300 RBX: 0000000000000206 RCX: e3b0a050c940e300 [ 924.408942][ C0] RDX: 0000000000000002 RSI: ffffffff8d921532 RDI: ffffffff8bc0ffa0 [ 924.408954][ C0] RBP: ffff8880336c2940 R08: 0000000000000000 R09: 0000000000000000 [ 924.408966][ C0] R10: 0000000000000000 R11: ffffffff8b1d0412 R12: 0000000000000002 [ 924.408978][ C0] R13: 0000000000000002 R14: ffffffff8df3b860 R15: ffff8880336c1e00 [ 924.408992][ C0] ? batadv_nc_worker+0xd2/0x610 [ 924.409014][ C0] ? batadv_nc_worker+0xd2/0x610 [ 924.409031][ C0] ? batadv_nc_worker+0xd2/0x610 [ 924.409047][ C0] batadv_nc_worker+0x28c/0x610 [ 924.409064][ C0] ? process_scheduled_works+0x9ec/0x17a0 [ 924.409090][ C0] process_scheduled_works+0xadb/0x17a0 [ 924.409125][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 924.409155][ C0] worker_thread+0x8a0/0xda0 [ 924.409189][ C0] kthread+0x70e/0x8a0 [ 924.409208][ C0] ? __pfx_worker_thread+0x10/0x10 [ 924.409232][ C0] ? __pfx_kthread+0x10/0x10 [ 924.409250][ C0] ? __pfx_kthread+0x10/0x10 [ 924.409266][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 924.409283][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 924.409302][ C0] ? __pfx_kthread+0x10/0x10 [ 924.409320][ C0] ret_from_fork+0x4b/0x80 [ 924.409335][ C0] ? __pfx_kthread+0x10/0x10 [ 924.409352][ C0] ret_from_fork_asm+0x1a/0x30 [ 924.409382][ C0] [ 924.409389][ C0] [ 924.858531][ C0] Allocated by task 9: [ 924.862584][ C0] kasan_save_track+0x3e/0x80 [ 924.867258][ C0] __kasan_kmalloc+0x93/0xb0 [ 924.871839][ C0] __kmalloc_cache_noprof+0x230/0x3d0 [ 924.877203][ C0] xpad_probe+0x41c/0x1ed0 [ 924.881606][ C0] usb_probe_interface+0x641/0xbc0 [ 924.886724][ C0] really_probe+0x26a/0x9a0 [ 924.891241][ C0] __driver_probe_device+0x18c/0x2f0 [ 924.896527][ C0] driver_probe_device+0x4f/0x430 [ 924.901549][ C0] __device_attach_driver+0x2ce/0x530 [ 924.906915][ C0] bus_for_each_drv+0x24e/0x2e0 [ 924.911766][ C0] __device_attach+0x2b8/0x400 [ 924.916517][ C0] bus_probe_device+0x185/0x260 [ 924.921360][ C0] device_add+0x7b6/0xb50 [ 924.925682][ C0] usb_set_configuration+0x1a87/0x20e0 [ 924.931128][ C0] usb_generic_driver_probe+0x8d/0x150 [ 924.936581][ C0] usb_probe_device+0x1c1/0x390 [ 924.941425][ C0] really_probe+0x26a/0x9a0 [ 924.946349][ C0] __driver_probe_device+0x18c/0x2f0 [ 924.951733][ C0] driver_probe_device+0x4f/0x430 [ 924.956766][ C0] __device_attach_driver+0x2ce/0x530 [ 924.962137][ C0] bus_for_each_drv+0x24e/0x2e0 [ 924.966991][ C0] __device_attach+0x2b8/0x400 [ 924.971749][ C0] bus_probe_device+0x185/0x260 [ 924.976595][ C0] device_add+0x7b6/0xb50 [ 924.980927][ C0] usb_new_device+0xa39/0x16c0 [ 924.985693][ C0] hub_event+0x2941/0x4a00 [ 924.990107][ C0] process_scheduled_works+0xadb/0x17a0 [ 924.995654][ C0] worker_thread+0x8a0/0xda0 [ 925.000237][ C0] kthread+0x70e/0x8a0 [ 925.004292][ C0] ret_from_fork+0x4b/0x80 [ 925.008698][ C0] ret_from_fork_asm+0x1a/0x30 [ 925.013454][ C0] [ 925.015776][ C0] Freed by task 5820: [ 925.019737][ C0] kasan_save_track+0x3e/0x80 [ 925.024410][ C0] kasan_save_free_info+0x46/0x50 [ 925.029424][ C0] __kasan_slab_free+0x62/0x70 [ 925.034174][ C0] kfree+0x193/0x440 [ 925.038060][ C0] xpad_disconnect+0x350/0x480 [ 925.042818][ C0] usb_unbind_interface+0x26b/0x8f0 [ 925.048004][ C0] device_release_driver_internal+0x4d6/0x7c0 [ 925.054229][ C0] bus_remove_device+0x34d/0x410 [ 925.059166][ C0] device_del+0x511/0x8e0 [ 925.063657][ C0] usb_disable_device+0x3e9/0x8a0 [ 925.068675][ C0] usb_disconnect+0x330/0x910 [ 925.073340][ C0] hub_event+0x1cdb/0x4a00 [ 925.077743][ C0] process_scheduled_works+0xadb/0x17a0 [ 925.083277][ C0] worker_thread+0x8a0/0xda0 [ 925.087858][ C0] kthread+0x70e/0x8a0 [ 925.091913][ C0] ret_from_fork+0x4b/0x80 [ 925.096315][ C0] ret_from_fork_asm+0x1a/0x30 [ 925.101070][ C0] [ 925.103376][ C0] The buggy address belongs to the object at ffff888063723000 [ 925.103376][ C0] which belongs to the cache kmalloc-1k of size 1024 [ 925.117426][ C0] The buggy address is located 92 bytes inside of [ 925.117426][ C0] freed 1024-byte region [ffff888063723000, ffff888063723400) [ 925.131209][ C0] [ 925.133517][ C0] The buggy address belongs to the physical page: [ 925.139921][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888063725000 pfn:0x63720 [ 925.149982][ C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 925.158469][ C0] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 925.166968][ C0] page_type: f5(slab) [ 925.170937][ C0] raw: 00fff00000000240 ffff88801a041dc0 ffffea0001a0aa10 ffffea000194aa10 [ 925.179510][ C0] raw: ffff888063725000 000000000010000a 00000000f5000000 0000000000000000 [ 925.188084][ C0] head: 00fff00000000240 ffff88801a041dc0 ffffea0001a0aa10 ffffea000194aa10 [ 925.196744][ C0] head: ffff888063725000 000000000010000a 00000000f5000000 0000000000000000 [ 925.205403][ C0] head: 00fff00000000003 ffffea00018dc801 00000000ffffffff 00000000ffffffff [ 925.214056][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 925.222711][ C0] page dumped because: kasan: bad access detected [ 925.229117][ C0] page_owner tracks the page as allocated [ 925.234815][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 12, tgid 12 (kworker/u8:0), ts 868871382776, free_ts 868797118403 [ 925.255387][ C0] post_alloc_hook+0x1d8/0x230 [ 925.260146][ C0] get_page_from_freelist+0x21c7/0x22a0 [ 925.265681][ C0] __alloc_frozen_pages_noprof+0x181/0x370 [ 925.271481][ C0] alloc_pages_mpol+0x232/0x4a0 [ 925.276323][ C0] allocate_slab+0x8a/0x3b0 [ 925.280814][ C0] ___slab_alloc+0xbfc/0x1480 [ 925.285478][ C0] __kmalloc_node_track_caller_noprof+0x2f8/0x4e0 [ 925.291881][ C0] kmalloc_reserve+0x136/0x290 [ 925.296632][ C0] pskb_expand_head+0x18f/0x1290 [ 925.301558][ C0] batadv_skb_head_push+0x169/0x200 [ 925.306743][ C0] batadv_send_skb_packet+0xfa/0x6d0 [ 925.312025][ C0] batadv_iv_send_outstanding_bat_ogm_packet+0x62f/0x7e0 [ 925.319036][ C0] process_scheduled_works+0xadb/0x17a0 [ 925.324570][ C0] worker_thread+0x8a0/0xda0 [ 925.329148][ C0] kthread+0x70e/0x8a0 [ 925.333205][ C0] ret_from_fork+0x4b/0x80 [ 925.337604][ C0] page last free pid 5867 tgid 5867 stack trace: [ 925.343911][ C0] __free_frozen_pages+0xb05/0xcd0 [ 925.349007][ C0] __put_partials+0x161/0x1c0 [ 925.353669][ C0] put_cpu_partial+0x17c/0x250 [ 925.358424][ C0] __slab_free+0x2f7/0x400 [ 925.362826][ C0] qlist_free_all+0x9a/0x140 [ 925.367406][ C0] kasan_quarantine_reduce+0x148/0x160 [ 925.372854][ C0] __kasan_slab_alloc+0x22/0x80 [ 925.377701][ C0] __kmalloc_cache_noprof+0x1be/0x3d0 [ 925.383064][ C0] nsim_fib_event_work+0x835/0x3180 [ 925.388247][ C0] process_scheduled_works+0xadb/0x17a0 [ 925.393784][ C0] worker_thread+0x8a0/0xda0 [ 925.398366][ C0] kthread+0x70e/0x8a0 [ 925.402421][ C0] ret_from_fork+0x4b/0x80 [ 925.406821][ C0] ret_from_fork_asm+0x1a/0x30 [ 925.411576][ C0] [ 925.413882][ C0] Memory state around the buggy address: [ 925.419500][ C0] ffff888063722f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 925.427545][ C0] ffff888063722f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 925.435589][ C0] >ffff888063723000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 925.443629][ C0] ^ [ 925.450545][ C0] ffff888063723080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 925.458591][ C0] ffff888063723100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 925.466634][ C0] ================================================================== [ 925.474708][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 925.481890][ C0] CPU: 0 UID: 0 PID: 4563 Comm: kworker/u8:7 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 925.494024][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 925.504068][ C0] Workqueue: bat_events batadv_nc_worker [ 925.509694][ C0] Call Trace: [ 925.512961][ C0] [ 925.515796][ C0] dump_stack_lvl+0x99/0x250 [ 925.520381][ C0] ? __asan_memcpy+0x40/0x70 [ 925.524961][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 925.530150][ C0] ? __pfx__printk+0x10/0x10 [ 925.534734][ C0] panic+0x2db/0x790 [ 925.538622][ C0] ? __pfx_panic+0x10/0x10 [ 925.543031][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 925.549347][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 925.555667][ C0] ? print_memory_metadata+0x314/0x400 [ 925.561116][ C0] ? do_raw_spin_lock+0x23d/0x290 [ 925.566129][ C0] check_panic_on_warn+0x89/0xb0 [ 925.571057][ C0] ? do_raw_spin_lock+0x23d/0x290 [ 925.576073][ C0] end_report+0x78/0x160 [ 925.580311][ C0] kasan_report+0x129/0x150 [ 925.584804][ C0] ? do_raw_spin_lock+0x23d/0x290 [ 925.589823][ C0] do_raw_spin_lock+0x23d/0x290 [ 925.594662][ C0] ? __wake_up_common_lock+0x2f/0x1f0 [ 925.600025][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 925.605386][ C0] _raw_spin_lock_irqsave+0xb3/0xf0 [ 925.610573][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 925.616455][ C0] ? kcov_remote_stop+0x78/0x6d0 [ 925.621383][ C0] __wake_up_common_lock+0x2f/0x1f0 [ 925.626574][ C0] __usb_hcd_giveback_urb+0x4d7/0x690 [ 925.631940][ C0] ? usb_hcd_unlink_urb_from_ep+0x2c/0x110 [ 925.637741][ C0] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 925.643628][ C0] ? usb_hcd_giveback_urb+0x10e/0x420 [ 925.648997][ C0] dummy_timer+0x862/0x4550 [ 925.653491][ C0] ? current_time+0x8e/0x370 [ 925.658070][ C0] ? atime_needs_update+0x320/0x6d0 [ 925.663254][ C0] ? touch_atime+0x82/0x6d0 [ 925.667744][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.673806][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 925.679164][ C0] ? __lock_acquire+0xaac/0xd20 [ 925.684014][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 925.688944][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 925.693874][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 925.698802][ C0] __hrtimer_run_queues+0x529/0xc60 [ 925.703999][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 925.709711][ C0] ? read_tsc+0x9/0x20 [ 925.713772][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 925.719570][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 925.724673][ C0] handle_softirqs+0x283/0x870 [ 925.729428][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 925.734185][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 925.739465][ C0] __irq_exit_rcu+0xca/0x1f0 [ 925.744045][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 925.749243][ C0] irq_exit_rcu+0x9/0x30 [ 925.753480][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 925.759101][ C0] [ 925.762020][ C0] [ 925.764939][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 925.770914][ C0] RIP: 0010:lock_release+0x2b5/0x3e0 [ 925.776193][ C0] Code: 51 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 75 56 f7 c3 00 02 00 00 74 01 fb 65 48 8b 05 fb cf d3 10 <48> 3b 44 24 28 0f 85 8b 00 00 00 48 83 c4 30 5b 41 5c 41 5d 41 5e [ 925.795788][ C0] RSP: 0018:ffffc9000ec47a58 EFLAGS: 00000206 [ 925.801842][ C0] RAX: e3b0a050c940e300 RBX: 0000000000000206 RCX: e3b0a050c940e300 [ 925.809815][ C0] RDX: 0000000000000002 RSI: ffffffff8d921532 RDI: ffffffff8bc0ffa0 [ 925.817770][ C0] RBP: ffff8880336c2940 R08: 0000000000000000 R09: 0000000000000000 [ 925.825728][ C0] R10: 0000000000000000 R11: ffffffff8b1d0412 R12: 0000000000000002 [ 925.833685][ C0] R13: 0000000000000002 R14: ffffffff8df3b860 R15: ffff8880336c1e00 [ 925.841732][ C0] ? batadv_nc_worker+0xd2/0x610 [ 925.846752][ C0] ? batadv_nc_worker+0xd2/0x610 [ 925.851673][ C0] ? batadv_nc_worker+0xd2/0x610 [ 925.856596][ C0] batadv_nc_worker+0x28c/0x610 [ 925.861432][ C0] ? process_scheduled_works+0x9ec/0x17a0 [ 925.867143][ C0] process_scheduled_works+0xadb/0x17a0 [ 925.872686][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 925.878661][ C0] worker_thread+0x8a0/0xda0 [ 925.883252][ C0] kthread+0x70e/0x8a0 [ 925.887309][ C0] ? __pfx_worker_thread+0x10/0x10 [ 925.892412][ C0] ? __pfx_kthread+0x10/0x10 [ 925.897002][ C0] ? __pfx_kthread+0x10/0x10 [ 925.901575][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 925.906761][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 925.911966][ C0] ? __pfx_kthread+0x10/0x10 [ 925.916568][ C0] ret_from_fork+0x4b/0x80 [ 925.920984][ C0] ? __pfx_kthread+0x10/0x10 [ 925.925620][ C0] ret_from_fork_asm+0x1a/0x30 [ 925.930398][ C0] [ 925.933721][ C0] Kernel Offset: disabled [ 925.938041][ C0] Rebooting in 86400 seconds..