last executing test programs: 5m37.745275275s ago: executing program 32 (id=1): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x400) 5m37.557839928s ago: executing program 33 (id=2): r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, 0x0) 5m37.552532802s ago: executing program 3 (id=4): capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) prlimit64(0x0, 0x8, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) 5m37.548950008s ago: executing program 34 (id=4): capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) prlimit64(0x0, 0x8, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) 5m37.516779598s ago: executing program 4 (id=5): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000002000010000000000000000000a000080ffffffffffff0000140011"], 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000640012800b0001006970366772650000540002800800150061db0a0008000100", @ANYRES32, @ANYBLOB="14000700fe8000000000000000000000000000aa08000d005fe1ffff060010004e22000008000500200c000014000600fc"], 0x94}}, 0x0) 5m37.504026062s ago: executing program 35 (id=5): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000002000010000000000000000000a000080ffffffffffff0000140011"], 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000640012800b0001006970366772650000540002800800150061db0a0008000100", @ANYRES32, @ANYBLOB="14000700fe8000000000000000000000000000aa08000d005fe1ffff060010004e22000008000500200c000014000600fc"], 0x94}}, 0x0) 3m31.455138965s ago: executing program 2 (id=1567): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000180)=0x200007ff, 0x4) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000080)=0x2, 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 3m31.356981592s ago: executing program 2 (id=1569): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x1c, r1, 0x711, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) 3m31.120377143s ago: executing program 2 (id=1571): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x2c, r2, 0x1, 0x4, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x8, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xffffffffffffffd1}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004014}, 0x4000) 3m30.970846668s ago: executing program 2 (id=1575): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xa) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x240010, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000180)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) 3m30.879144794s ago: executing program 2 (id=1578): r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r0, &(0x7f00000000c0)=[{0x2}], 0x1) semop(r0, &(0x7f0000000000)=[{0x2, 0x0, 0x2000}, {0x3, 0x1, 0x1000}], 0x2) semctl$GETZCNT(r0, 0x2, 0xf, 0x0) 3m30.519255271s ago: executing program 2 (id=1580): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)=0x20) write$binfmt_elf32(r0, 0x0, 0x4cd) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000100)=0xfffffffe) write$dsp(r0, &(0x7f0000000140)="755a5398d512d39077459e67ee110daaf0413bc745ef85b89f2141d513969bd8", 0xffaa) 3m30.272445587s ago: executing program 36 (id=1580): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)=0x20) write$binfmt_elf32(r0, 0x0, 0x4cd) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000100)=0xfffffffe) write$dsp(r0, &(0x7f0000000140)="755a5398d512d39077459e67ee110daaf0413bc745ef85b89f2141d513969bd8", 0xffaa) 3m20.996294583s ago: executing program 7 (id=1658): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x100) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r1, &(0x7f0000000a40)=[{&(0x7f0000000980)=""/131, 0x83}], 0x1) 3m19.970579206s ago: executing program 7 (id=1670): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000040)={0x48, r1, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x2c9}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x4}, @NL80211_ATTR_STA_CAPABILITY={0x6}]}, 0x48}}, 0x0) 3m19.809228555s ago: executing program 7 (id=1672): setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x800}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x7, 0x44, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 3m19.607136404s ago: executing program 7 (id=1675): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 3m19.530253496s ago: executing program 7 (id=1676): sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14"], 0x14}}, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000b40)={0x52, 0x1, 0x1, {0x0, 0x1}, {0x63, 0x2}, @period={0x58, 0x0, 0x0, 0x3, 0x80, {0x1, 0x8001, 0xf, 0x1}, 0x0, 0x0}}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000680)=""/211) 3m19.063191239s ago: executing program 7 (id=1681): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) lseek(r0, 0x40203, 0x4) 3m18.811057324s ago: executing program 37 (id=1681): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) lseek(r0, 0x40203, 0x4) 1m16.697951993s ago: executing program 0 (id=2770): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000002c0), 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 1m16.461157164s ago: executing program 0 (id=2773): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x33, 0x0, 0x0) 1m16.234599696s ago: executing program 0 (id=2776): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x4c, &(0x7f00000008c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010900", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2}, "ff031a4ff244"}}}}}}}, 0x0) 1m15.970997499s ago: executing program 0 (id=2778): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000480)='./file0\x00', 0x0) 1m15.689160137s ago: executing program 0 (id=2783): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000008000003010040"]) 1m13.863268862s ago: executing program 0 (id=2789): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="85000000ae00000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0xffffffff00040000, 0x112) 1m13.482044777s ago: executing program 38 (id=2789): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="85000000ae00000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0xffffffff00040000, 0x112) 1m6.0455738s ago: executing program 5 (id=1847): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x105cc6, 0x1, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}, {0x0}], 0x2, 0x12}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 54.448733333s ago: executing program 5 (id=1847): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x105cc6, 0x1, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}, {0x0}], 0x2, 0x12}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 42.130067082s ago: executing program 5 (id=1847): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x105cc6, 0x1, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}, {0x0}], 0x2, 0x12}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 29.464755166s ago: executing program 5 (id=1847): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x105cc6, 0x1, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}, {0x0}], 0x2, 0x12}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 19.130909633s ago: executing program 5 (id=1847): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x105cc6, 0x1, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}, {0x0}], 0x2, 0x12}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 6.376063808s ago: executing program 1 (id=3295): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000020c0)=ANY=[@ANYBLOB="18000000900c0000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) ioctl$TCXONC(r1, 0x540a, 0x2) 6.126165435s ago: executing program 1 (id=3299): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) write$P9_RLERRORu(r1, &(0x7f00000023c0)=ANY=[@ANYBLOB="5300000007000046009d40edce82cd28", @ANYRESHEX=r0], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 6.019976951s ago: executing program 5 (id=1847): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x105cc6, 0x1, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}, {0x0}], 0x2, 0x12}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 4.040862535s ago: executing program 1 (id=3304): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x1c, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 2.313859869s ago: executing program 8 (id=3307): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a0000000000fa82a3fa211411fa0008000a40000000000900020073797a3100000000090001"], 0x6c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340"], 0xec}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 2.244442597s ago: executing program 1 (id=3308): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000020c0)={@ipv4={'\x00', '\xff\xff', @empty}, 0x80, r2}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000140)={@loopback, 0x80, r2}) 2.158889623s ago: executing program 9 (id=3309): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000900)=0x15) io_setup(0x3, &(0x7f0000000180)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f0000002340)=[&(0x7f0000000040)={0x0, 0x300, 0x0, 0x5, 0x0, r2, 0x0}]) 2.114619676s ago: executing program 8 (id=3310): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) read$usbfs(r1, &(0x7f0000000440)=""/225, 0xe1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x515f3157, 0x4, "78e114100985a79874342a70e113343972d01f"}) write$UHID_INPUT(r1, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) 1.993943283s ago: executing program 1 (id=3311): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x1802, 0x0) epoll_create1(0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) pselect6(0x900, 0x0, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 1.96221051s ago: executing program 9 (id=3312): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, r1, 0xa71289e97d328ca3, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x4054080) 1.834046149s ago: executing program 8 (id=3313): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/23, 0x17}, 0x2}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 1.751703923s ago: executing program 1 (id=3314): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1b1c, 0xc10, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x80, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x406, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0x8, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x9, 0x9, 0x9}}]}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000040)='\x00') 1.651713634s ago: executing program 9 (id=3316): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008b86d3106d04b50801d7010203030902120001000000000904"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) capset(0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0) 1.624483543s ago: executing program 6 (id=3317): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)="1747f345938ae00bbd09092422174cce30d4b91136b981d531c8c7dde3579c2e7ba5aaceaa6a29d0165a97b97c348b0a608e00bfd362d82863c08ddaa4b1077d8abcd80c2208f63d1df9ca3a70b1758808d9b07c4d78f0d8ff4f6f6e0acd99ba11c1032864d4fc1f0ac6f262e6f88c06da6a18e261133a96faae800acc321aa799dfebd42d9711d1a38f217a1675bc1e46a5c6bb9b92c7028b4f8b80b6347f1963822f0e3e9fd8b033ec7e0e723cbc75109b459183d9", 0xb6}], 0x1, &(0x7f00000001c0)}}], 0x1, 0x40) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000ac0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fcdbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="24002d800500010002"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 1.515442897s ago: executing program 6 (id=3318): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r1}) 1.444847327s ago: executing program 6 (id=3319): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2000003, 0x4082172, 0xffffffffffffffff, 0x418a6000) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) setrlimit(0x40000000000008, &(0x7f0000000000)={0x1, 0xfffffffffffff006}) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)) mount$nfs4(0x0, 0x0, 0x0, 0x4020432, &(0x7f0000000500)) 1.355704974s ago: executing program 6 (id=3320): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000003e00)=[{{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000b00)="37abfb8690c86ceedb80b43e28754cec9d73ee54df3f64c8b37d5de23e0e07ac611ecd964d0b92166126", 0x2a}, {&(0x7f0000000c00)="2e45e4a429e1", 0x6}], 0x2, 0x0, 0x0, 0x40}}], 0x1, 0x4000040) 1.194359002s ago: executing program 6 (id=3321): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [], {0x14}}, 0x28}}, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_128={{0xd733043595a52279}, "a8e0930a1a884884", "74743275e5fc20c3ab14916504a8ca92", '\x00', "3e6a808941a488cc"}, 0x28) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4, 0x0, @loopback, 0x5}, 0x1c) 871.205712ms ago: executing program 8 (id=3322): r0 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\x98\b\x00\x00\x00\b\x84\xa2{\x00\v\x18\x004\x03\x96\x00\x00\xcf\xb0\x18\xd3\xad*\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb+Y\x9e\r\xc83\x12\xd7\xdb\x93\xcc]x\xaa\x8f~\xb90a\xa9\xb2\x041=\x9f\x99\xabQ\xf6\a\x81\x01\xe5\x98\t\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa9\xf0I{\x00\x00\xd7\x802\xf3\r|\x86\x82\xf1\xb2\x06\xb0\x1e\xd6l\xbc_\xcb\xec\x83#?\xf4\x81\x16+\x14\xd0\xb8\x88RW\xa9\xef\xe9\"]\xa8W?r\x88\xe6K\xc1gb\xc0\x9d\"*\xe2X\xb5#', 0x7) r1 = dup(r0) r2 = fanotify_init(0x2, 0x40000) unshare(0x2a020480) fanotify_mark(r2, 0x1, 0x32, r1, 0x0) 718.339571ms ago: executing program 8 (id=3323): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x20, 0x3c000, @mcast2, 0x5}, 0x1c) r1 = dup2(r0, r0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8891}, 0x24008800) sendmmsg$unix(r1, &(0x7f0000008380), 0x400000000000174, 0x4008890) 492.107804ms ago: executing program 8 (id=3324): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(r1, 0x0, 0xa00) 226.607091ms ago: executing program 6 (id=3325): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={r2, 0x5, 0x73, 0x8, 0xd, 0x3}, &(0x7f00000000c0)=0x1d) 147.547127ms ago: executing program 9 (id=3326): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, 0x0, 0x0, 0x20048814, 0x0, 0x0) 86.015097ms ago: executing program 9 (id=3327): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x36, &(0x7f0000000280)=[{0x2, 0xa6, 0x2, 0x3}, {0x2, 0x8, 0x8, 0xfffc}, {0xaee, 0x2, 0xac, 0x1000}, {0x40, 0xaf, 0x5, 0x2}, {0x6, 0x80, 0x0, 0x2}, {0x0, 0x3, 0x5, 0x9}]}, 0x10) write$binfmt_misc(r0, &(0x7f0000000100), 0x6) 0s ago: executing program 9 (id=3328): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x1, 0x0, 0x401, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x401, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xfff2, 0xa}, {0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0x4000) kernel console output (not intermixed with test programs): k timer overrun [ 322.071358][ T7298] veth1_macvtap: left promiscuous mode [ 322.077197][ T7298] veth0_macvtap: left promiscuous mode [ 322.083161][T10477] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 322.092699][ T7298] veth1_vlan: left promiscuous mode [ 322.098156][ T7298] veth0_vlan: left promiscuous mode [ 322.160898][ T9] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 322.257152][T10477] usb 1-1: Using ep0 maxpacket: 32 [ 322.264488][T10477] usb 1-1: config 0 interface 0 has no altsetting 0 [ 322.271433][T10477] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 322.281997][T10477] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.327229][T10477] usb 1-1: config 0 descriptor?? [ 322.332375][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 322.345526][ T9] usb 9-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 322.363356][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.389653][ T9] usb 9-1: config 0 descriptor?? [ 322.413713][ T9] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 322.782465][T10477] corsair-cpro 0003:1B1C:0C10.0021: unknown main item tag 0x0 [ 322.804664][T10477] corsair-cpro 0003:1B1C:0C10.0021: unknown main item tag 0x0 [ 322.831765][T10477] corsair-cpro 0003:1B1C:0C10.0021: unknown main item tag 0x0 [ 322.839403][T10477] corsair-cpro 0003:1B1C:0C10.0021: unknown main item tag 0x0 [ 322.851171][T10477] corsair-cpro 0003:1B1C:0C10.0021: unknown main item tag 0x0 [ 322.883156][T10477] corsair-cpro 0003:1B1C:0C10.0021: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.0-1/input0 [ 323.086902][ T7298] team0 (unregistering): Port device team_slave_1 removed [ 323.166197][ T7298] team0 (unregistering): Port device team_slave_0 removed [ 323.330414][ T5847] Bluetooth: hci1: command tx timeout [ 323.337856][T10477] corsair-cpro 0003:1B1C:0C10.0021: probe with driver corsair-cpro failed with error -110 [ 323.461758][ T5893] usb 9-1: USB disconnect, device number 36 [ 323.533258][T10477] usb 1-1: USB disconnect, device number 13 [ 323.924207][T10477] kernel read not supported for file /dsp (pid: 10477 comm: kworker/0:8) [ 324.324886][T13082] input: syz1 as /devices/virtual/input/input48 [ 324.383571][T10477] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 324.534452][T13027] chnl_net:caif_netlink_parms(): no params data found [ 324.557778][T10477] usb 9-1: Using ep0 maxpacket: 16 [ 324.576596][T10477] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 324.599417][T10477] usb 9-1: config 0 has no interface number 0 [ 324.632163][T10477] usb 9-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 324.660412][T10477] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.688833][T10477] usb 9-1: Product: syz [ 324.714641][T10477] usb 9-1: Manufacturer: syz [ 324.732809][T10477] usb 9-1: SerialNumber: syz [ 324.748033][T10477] usb 9-1: config 0 descriptor?? [ 324.769754][T10477] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 324.974268][T13027] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.000355][T13027] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.011036][T13027] bridge_slave_0: entered allmulticast mode [ 325.041231][T13027] bridge_slave_0: entered promiscuous mode [ 325.082051][T13027] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.090814][T13027] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.098066][T13027] bridge_slave_1: entered allmulticast mode [ 325.146680][T13027] bridge_slave_1: entered promiscuous mode [ 325.349208][T13027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.410641][ T5847] Bluetooth: hci1: command tx timeout [ 325.441960][T13027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.578803][T13027] team0: Port device team_slave_0 added [ 325.603283][T13027] team0: Port device team_slave_1 added [ 325.740066][T13027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.758695][T13027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.780358][ T5921] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 325.804401][T10477] gspca_spca1528: reg_w err -71 [ 325.809395][T10477] spca1528 9-1:0.1: probe with driver spca1528 failed with error -71 [ 325.828103][T13027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.843453][T13027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.859382][T13027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.859679][T10477] usb 9-1: USB disconnect, device number 37 [ 325.889433][T13027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.030577][ T5921] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 326.043947][ T5921] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 326.065739][T13027] hsr_slave_0: entered promiscuous mode [ 326.074645][ T5921] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 326.085421][ T5921] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 326.095137][T13027] hsr_slave_1: entered promiscuous mode [ 326.100833][ T5921] usb 10-1: SerialNumber: syz [ 326.107680][T13027] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 326.117452][T13027] Cannot create hsr debugfs directory [ 326.339833][ T5921] usb 10-1: 0:2 : does not exist [ 326.378754][ T5921] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 326.443068][ T5921] usb 10-1: USB disconnect, device number 14 [ 326.554223][ T6066] udevd[6066]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 326.611419][ T5841] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 326.794520][ T5841] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.814289][ T5841] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.825732][ T5841] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 326.845039][ T5841] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.856613][ T5841] usb 1-1: config 0 descriptor?? [ 327.203977][T13027] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 327.218552][T13163] veth1_to_bond: entered allmulticast mode [ 327.225816][T13027] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 327.236307][T13163] veth1_to_bond: entered promiscuous mode [ 327.246636][T13027] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 327.257227][T13161] veth1_to_bond: left promiscuous mode [ 327.266741][T13161] veth1_to_bond: left allmulticast mode [ 327.272922][T13027] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 327.275911][ T5841] cm6533_jd 0003:0D8C:0022.0022: unknown main item tag 0x0 [ 327.309002][ T5841] cm6533_jd 0003:0D8C:0022.0022: unknown main item tag 0x0 [ 327.322647][ T5841] cm6533_jd 0003:0D8C:0022.0022: unknown main item tag 0x0 [ 327.333016][ T5841] cm6533_jd 0003:0D8C:0022.0022: unknown main item tag 0x0 [ 327.340512][ T5841] cm6533_jd 0003:0D8C:0022.0022: unknown main item tag 0x0 [ 327.358176][ T5841] cm6533_jd 0003:0D8C:0022.0022: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 327.510429][ T5847] Bluetooth: hci1: command tx timeout [ 327.562026][T10477] usb 1-1: USB disconnect, device number 14 [ 327.574089][T13027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.632564][T13027] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.674061][ T7298] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.681282][ T7298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.716329][ T7293] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.723511][ T7293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.734212][ T5893] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 327.902100][ T5893] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 327.925190][ T5893] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.951256][ T5893] usb 10-1: config 0 descriptor?? [ 327.973206][ T5893] cp210x 10-1:0.0: cp210x converter detected [ 328.228708][T13027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.386540][ T5893] cp210x 10-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 328.422694][ T5893] usb 10-1: cp210x converter now attached to ttyUSB0 [ 328.500592][ T10] usb 9-1: new full-speed USB device number 38 using dummy_hcd [ 328.674277][ T10] usb 9-1: config 150 has an invalid interface number: 204 but max is 1 [ 328.691181][ T10] usb 9-1: config 150 has no interface number 0 [ 328.697662][ T10] usb 9-1: config 150 interface 204 has no altsetting 0 [ 328.721734][ T10] usb 9-1: config 150 interface 1 has no altsetting 0 [ 328.732718][T13027] veth0_vlan: entered promiscuous mode [ 328.752290][ T10] usb 9-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 328.770496][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.782734][T13027] veth1_vlan: entered promiscuous mode [ 328.792645][ T10] usb 9-1: Product: syz [ 328.797225][ T10] usb 9-1: Manufacturer: syz [ 328.816877][ T10] usb 9-1: SerialNumber: syz [ 328.863690][T13027] veth0_macvtap: entered promiscuous mode [ 328.877539][T13027] veth1_macvtap: entered promiscuous mode [ 328.908661][T13027] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 328.927218][T13027] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 328.946727][T13027] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.955673][T13027] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.964902][T13027] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.974658][T13027] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.070773][ T10] xr_serial 9-1:150.204: xr_serial converter detected [ 329.085526][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.106304][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.120454][ T5841] usb 10-1: USB disconnect, device number 15 [ 329.149416][ T5841] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 329.242247][ T7293] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.265590][ T7293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.297069][ T5841] cp210x 10-1:0.0: device disconnected [ 329.610550][ T5893] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 329.811833][ T5893] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 329.827276][ T5893] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 329.846244][ T5893] usb 1-1: config 1 has no interface number 0 [ 329.860718][ T5893] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.873457][ T5893] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 329.878946][ T10] xr_serial ttyUSB1: Failed to set reg 0x0e: -71 [ 329.889333][ T5893] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 329.900918][ T10] xr_serial ttyUSB1: probe with driver xr_serial failed with error -71 [ 329.905183][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.925565][ T5893] usb 1-1: Product: syz [ 329.930940][ T5893] usb 1-1: Manufacturer: syz [ 329.936309][ T5893] usb 1-1: SerialNumber: syz [ 329.938165][ T10] usb 9-1: USB disconnect, device number 38 [ 329.971233][ T10] xr_serial 9-1:150.204: device disconnected [ 330.341142][ T7293] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.552624][ T7293] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.786296][ T5893] cdc_ncm 1-1:1.1: bind() failure [ 330.817208][ T7293] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.995538][ T5893] usb 1-1: USB disconnect, device number 15 [ 331.023500][ T7293] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.138580][ T7293] bridge_slave_1: left allmulticast mode [ 331.146486][ T7293] bridge_slave_1: left promiscuous mode [ 331.153037][ T7293] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.163812][ T7293] bridge_slave_0: left allmulticast mode [ 331.169470][ T7293] bridge_slave_0: left promiscuous mode [ 331.176068][ T7293] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.758326][ T7293] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 331.793060][ T7293] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 331.819591][ T7293] bond0 (unregistering): Released all slaves [ 331.828275][T13248] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 331.837102][T13246] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 332.225019][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 332.236587][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 332.246783][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 332.256949][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 332.267837][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 332.347641][ T10] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 332.540957][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 332.553685][ T10] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 332.573983][ T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 332.612354][ T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 332.630926][ T7293] hsr_slave_0: left promiscuous mode [ 332.640392][ T7293] hsr_slave_1: left promiscuous mode [ 332.640646][ T10] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 332.646708][ T7293] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 332.667125][ T7293] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 332.675617][ T7293] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 332.680027][ T10] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 332.683332][ T7293] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 332.710257][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.720072][ T7293] veth1_macvtap: left promiscuous mode [ 332.726129][ T7293] veth0_macvtap: left promiscuous mode [ 332.733171][ T7293] veth1_vlan: left promiscuous mode [ 332.738621][ T7293] veth0_vlan: left promiscuous mode [ 332.790254][ T5841] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 332.942536][ T5841] usb 9-1: config 0 interface 0 altsetting 185 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.955056][ T10] usb 7-1: GET_CAPABILITIES returned 0 [ 332.971991][ T10] usbtmc 7-1:16.0: can't read capabilities [ 332.982028][ T5841] usb 9-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.996533][ T5841] usb 9-1: config 0 interface 0 has no altsetting 0 [ 333.003388][ T5841] usb 9-1: New USB device found, idVendor=05ac, idProduct=029f, bcdDevice= 0.00 [ 333.017470][ T5841] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.039316][ T5841] usb 9-1: config 0 descriptor?? [ 333.294993][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 333.304432][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 333.313587][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 333.363246][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 333.372400][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 333.381479][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 333.390547][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 333.405108][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 333.414272][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 333.429058][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 333.438330][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 333.447456][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 333.456567][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 333.474228][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 333.483386][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 333.486379][ T5841] apple 0003:05AC:029F.0023: item fetching failed at offset 3/5 [ 333.492488][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 333.533264][ T5841] apple 0003:05AC:029F.0023: parse failed [ 333.539158][ T5841] apple 0003:05AC:029F.0023: probe with driver apple failed with error -22 [ 333.569048][ T10] usb 7-1: USB disconnect, device number 18 [ 333.707285][ T5841] usb 9-1: USB disconnect, device number 39 [ 334.003406][ T7293] team0 (unregistering): Port device team_slave_1 removed [ 334.066691][ T7293] team0 (unregistering): Port device team_slave_0 removed [ 334.370926][ T5847] Bluetooth: hci1: command tx timeout [ 335.750461][ T5921] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 335.876000][T13259] chnl_net:caif_netlink_parms(): no params data found [ 335.964815][ T5921] usb 10-1: Using ep0 maxpacket: 16 [ 335.995819][ T5921] usb 10-1: config 0 has an invalid interface number: 64 but max is 0 [ 336.043243][ T5921] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 336.070980][ T5921] usb 10-1: config 0 has no interface number 0 [ 336.087505][ T5921] usb 10-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 336.152092][ T5921] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.190278][ T10] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 336.214404][ T5921] usb 10-1: config 0 descriptor?? [ 336.255959][ T5921] usb 10-1: Found UVC 0.00 device (0bd3:0555) [ 336.317497][ T5921] usb 10-1: No valid video chain found. [ 336.389832][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 336.420430][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 336.451272][ T5847] Bluetooth: hci1: command 0x041b tx timeout [ 336.459883][ T10] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 336.472191][T13259] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.478324][T13328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.495035][T13259] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.497598][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.519386][T13328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.527922][T13259] bridge_slave_0: entered allmulticast mode [ 336.535078][ T10] usb 1-1: config 0 descriptor?? [ 336.552525][T13259] bridge_slave_0: entered promiscuous mode [ 336.561083][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 336.570442][T13259] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.602440][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 336.613727][T13259] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.644820][T13259] bridge_slave_1: entered allmulticast mode [ 336.664002][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 336.675427][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 336.684904][ T10] usb 1-1: media controller created [ 336.692169][T13259] bridge_slave_1: entered promiscuous mode [ 336.713762][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 336.756524][T13342] dvb-usb: bulk message failed: -22 (2/0) [ 336.777866][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 336.799246][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 336.827012][T13259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.837403][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input49 [ 336.867564][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 336.877527][T13259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.886999][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 336.907397][ T10] usb 1-1: USB disconnect, device number 16 [ 336.944070][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 337.008598][T13259] team0: Port device team_slave_0 added [ 337.027130][T13259] team0: Port device team_slave_1 added [ 337.068151][T13259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.076245][T13259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.103899][T13259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.117389][T13259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.124487][T13259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.151477][T13259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.216359][T13259] hsr_slave_0: entered promiscuous mode [ 337.224386][T13259] hsr_slave_1: entered promiscuous mode [ 337.230944][T13259] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 337.238964][T13259] Cannot create hsr debugfs directory [ 338.293040][T13259] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 338.349173][T13259] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 338.384715][T13259] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 338.408164][T13259] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 338.530380][ T5852] Bluetooth: hci1: command 0x041b tx timeout [ 338.540114][ T5907] usb 10-1: USB disconnect, device number 16 [ 338.664905][T13259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.731743][T13259] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.772393][ T5996] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.779614][ T5996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.815232][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.822474][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.502578][T13259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.688092][T13420] syzkaller1: entered promiscuous mode [ 339.710233][T13420] syzkaller1: entered allmulticast mode [ 340.326059][T13259] veth0_vlan: entered promiscuous mode [ 340.378765][T13259] veth1_vlan: entered promiscuous mode [ 340.473267][T13259] veth0_macvtap: entered promiscuous mode [ 340.502548][T13259] veth1_macvtap: entered promiscuous mode [ 340.523454][ T5841] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 340.574868][T13259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.593167][T13259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.606771][T13259] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.621010][ T5852] Bluetooth: hci1: command 0x041b tx timeout [ 340.627630][T13259] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.638666][T13259] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.670234][T13259] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.716536][ T5841] usb 1-1: config 0 has an invalid interface number: 229 but max is 0 [ 340.748839][ T5841] usb 1-1: config 0 has no interface number 0 [ 340.783718][ T5841] usb 1-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice= c.19 [ 340.811333][ T5841] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.845089][ T5841] usb 1-1: config 0 descriptor?? [ 340.928785][ T5996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.961136][ T5996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.045168][ T5996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.086760][ T5841] usb 1-1: USB disconnect, device number 17 [ 341.093043][ T5996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.464771][T13460] input: syz1 as /devices/virtual/input/input51 [ 341.929588][ T7293] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.088740][ T7293] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.302643][ T7293] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.557459][ T7293] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.702402][ T7293] bridge_slave_1: left allmulticast mode [ 342.708123][ T7293] bridge_slave_1: left promiscuous mode [ 342.713977][ T7293] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.723585][ T7293] bridge_slave_0: left allmulticast mode [ 342.729276][ T7293] bridge_slave_0: left promiscuous mode [ 342.735291][ T7293] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.226935][ T7293] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 343.303271][ T7293] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 343.373494][ T7293] bond0 (unregistering): Released all slaves [ 344.107805][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 344.118016][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 344.126810][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 344.160508][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 344.168572][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 344.638659][ T7293] hsr_slave_0: left promiscuous mode [ 344.653509][ T7293] hsr_slave_1: left promiscuous mode [ 344.691910][ T7293] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 344.699545][ T7293] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 344.719582][ T7293] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 344.747952][ T7293] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 344.814834][ T7293] veth1_macvtap: left promiscuous mode [ 344.828282][ T7293] veth0_macvtap: left promiscuous mode [ 344.834745][ T7293] veth1_vlan: left promiscuous mode [ 344.854191][ T7293] veth0_vlan: left promiscuous mode [ 345.340485][ T5907] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 345.500289][ T5907] usb 10-1: Using ep0 maxpacket: 32 [ 345.507899][ T5907] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.522937][ T5907] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.535380][ T5907] usb 10-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 345.544789][ T5907] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.555838][ T5907] usb 10-1: config 0 descriptor?? [ 345.598952][ T7293] team0 (unregistering): Port device team_slave_1 removed [ 345.650716][ T7293] team0 (unregistering): Port device team_slave_0 removed [ 345.992594][ T5907] ft260 0003:0403:6030.0024: unknown main item tag 0x0 [ 346.187878][ T5907] ft260 0003:0403:6030.0024: chip code: 6424 8183 [ 346.220913][ T5852] Bluetooth: hci1: command tx timeout [ 346.636406][ T10] usb 10-1: USB disconnect, device number 17 [ 346.826053][T13499] chnl_net:caif_netlink_parms(): no params data found [ 346.989733][T13539] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2792'. [ 347.151913][ T24] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 347.198472][T13499] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.219083][T13499] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.260444][T13499] bridge_slave_0: entered allmulticast mode [ 347.279396][T13499] bridge_slave_0: entered promiscuous mode [ 347.319100][T13499] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.329110][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.358559][T13499] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.374254][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 347.382217][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.394931][T13499] bridge_slave_1: entered allmulticast mode [ 347.400993][ T24] usb 7-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 347.410645][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 347.421654][T13499] bridge_slave_1: entered promiscuous mode [ 347.427880][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 347.437075][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.448385][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 347.465360][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 347.474454][ T24] usb 7-1: config 0 descriptor?? [ 347.566661][T13499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.584816][T13499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.660787][ T5961] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 347.702502][T13499] team0: Port device team_slave_0 added [ 347.726955][T13499] team0: Port device team_slave_1 added [ 347.774928][T13499] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.782369][T13499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.812408][T13499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.830074][T13499] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.837313][T13499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.864060][T13499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.880674][ T5961] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 347.891899][ T5961] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 347.908070][ T24] hid-steam 0003:28DE:1142.0025: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.6-1/input0 [ 347.920681][ T5961] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 347.940226][ T5961] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 347.949439][ T5961] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.968330][T13550] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 347.990666][ T24] hid-steam 0003:28DE:1142.0025: Steam wireless receiver connected [ 347.992084][ T5961] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 348.094529][T13499] hsr_slave_0: entered promiscuous mode [ 348.105326][T13499] hsr_slave_1: entered promiscuous mode [ 348.112221][T13499] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 348.119979][T13499] Cannot create hsr debugfs directory [ 348.123326][ T24] hid-steam 0003:28DE:1142.0026: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.6-1/input0 [ 348.210755][ T24] usb 7-1: USB disconnect, device number 19 [ 348.240264][ T24] hid-steam 0003:28DE:1142.0025: Steam wireless receiver disconnected [ 348.271195][T13557] fido_id[13557]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 348.301193][ T5852] Bluetooth: hci1: command tx timeout [ 348.431912][ T24] usb 9-1: USB disconnect, device number 40 [ 348.617260][T13547] chnl_net:caif_netlink_parms(): no params data found [ 348.925481][T13547] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.934216][T13547] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.943211][T13547] bridge_slave_0: entered allmulticast mode [ 348.950548][T13547] bridge_slave_0: entered promiscuous mode [ 348.958340][T13547] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.968469][T13547] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.975944][T13547] bridge_slave_1: entered allmulticast mode [ 348.987688][T13547] bridge_slave_1: entered promiscuous mode [ 349.020967][ T24] usb 10-1: new full-speed USB device number 18 using dummy_hcd [ 349.107729][T13547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.139294][T13547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.202061][ T24] usb 10-1: config 0 has no interfaces? [ 349.208048][ T24] usb 10-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 349.220850][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.237313][ T24] usb 10-1: config 0 descriptor?? [ 349.271094][T13547] team0: Port device team_slave_0 added [ 349.296818][T13547] team0: Port device team_slave_1 added [ 349.398671][T13547] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.406931][T13547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.457623][T13547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.474052][ T24] usb 10-1: USB disconnect, device number 18 [ 349.490297][T13547] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.497639][T13547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.526863][T13547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.578791][ T5852] Bluetooth: hci2: command tx timeout [ 349.614833][T13581] can0: slcan on ttyS3. [ 349.676114][T13499] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 349.688030][T13499] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 349.692154][T13581] can0 (unregistered): slcan off ttyS3. [ 349.718198][T13547] hsr_slave_0: entered promiscuous mode [ 349.744174][T13547] hsr_slave_1: entered promiscuous mode [ 349.768700][T13547] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 349.790686][T13547] Cannot create hsr debugfs directory [ 349.809271][T13499] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 349.849507][T13499] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 350.370410][ T5852] Bluetooth: hci1: command tx timeout [ 350.546760][T13499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.603735][T13607] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2816'. [ 350.727820][T13499] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.759304][ T5997] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.766539][ T5997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.855632][ T5997] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.862885][ T5997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.354694][T13547] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 351.423772][T13547] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 351.495616][T13547] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 351.564944][T13547] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 351.650764][ T5852] Bluetooth: hci2: command tx timeout [ 351.665091][T13499] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.896613][T13547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.939240][T13547] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.972051][ T3094] usb 9-1: new full-speed USB device number 41 using dummy_hcd [ 351.985389][ T5997] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.992620][ T5997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.027554][ T5997] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.034816][ T5997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.142567][ T3094] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 352.175029][ T3094] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 352.218431][ T3094] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 352.250884][ T3094] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.258934][ T3094] usb 9-1: Product: syz [ 352.290942][ T3094] usb 9-1: Manufacturer: syz [ 352.305903][ T3094] usb 9-1: SerialNumber: syz [ 352.456810][ T5852] Bluetooth: hci1: command tx timeout [ 352.480484][T13499] veth0_vlan: entered promiscuous mode [ 352.524882][T13499] veth1_vlan: entered promiscuous mode [ 352.549516][ T3094] usb 9-1: 0:2 : does not exist [ 352.574153][ T3094] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 352.647179][ T3094] usb 9-1: USB disconnect, device number 41 [ 352.671063][T13499] veth0_macvtap: entered promiscuous mode [ 352.685070][T13547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.708544][T13499] veth1_macvtap: entered promiscuous mode [ 352.787108][ T6066] udevd[6066]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 352.791461][T13499] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.845354][T13499] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.874130][T13499] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.894796][T13499] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.913397][T13499] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.922709][T13499] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.982484][T13547] veth0_vlan: entered promiscuous mode [ 353.031203][T13547] veth1_vlan: entered promiscuous mode [ 353.126164][ T7298] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.175439][T13547] veth0_macvtap: entered promiscuous mode [ 353.199509][ T7298] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.235946][T13547] veth1_macvtap: entered promiscuous mode [ 353.333874][ T7468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.353915][T13674] ALSA: mixer_oss: invalid OSS volume '' [ 353.368526][ T7468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.399533][T13547] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.444832][T13547] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.525017][T13547] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.552030][T13547] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.570318][T13547] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.579251][T13547] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.733371][ T5852] Bluetooth: hci2: command tx timeout [ 353.847589][ T5997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.874168][ T5997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.078551][T13689] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 354.123004][ T7468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.171011][ T7468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.288372][T13693] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2847'. [ 354.494562][ T7293] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.665088][ T7293] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.883152][ T7293] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.057057][ T7293] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.216442][ T7293] bridge_slave_1: left allmulticast mode [ 355.223003][ T7293] bridge_slave_1: left promiscuous mode [ 355.228715][ T7293] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.238088][ T7293] bridge_slave_0: left allmulticast mode [ 355.244991][ T7293] bridge_slave_0: left promiscuous mode [ 355.251672][ T7293] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.665351][ T7293] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 355.677719][ T7293] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 355.688994][ T7293] bond0 (unregistering): Released all slaves [ 355.811806][ T5852] Bluetooth: hci2: command tx timeout [ 355.991819][ T7293] hsr_slave_0: left promiscuous mode [ 356.009527][ T7293] hsr_slave_1: left promiscuous mode [ 356.029757][ T7293] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.056220][ T7293] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.220231][ T5921] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 356.374062][ T7293] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.391556][ T5921] usb 2-1: Using ep0 maxpacket: 16 [ 356.396836][ T7293] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.410739][ T5921] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.433546][ T5921] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.464260][ T5921] usb 2-1: config 0 interface 0 has no altsetting 0 [ 356.477574][ T7293] veth1_macvtap: left promiscuous mode [ 356.494771][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 356.504218][ T5921] usb 2-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 356.514473][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 356.526171][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 356.530610][ T7293] veth0_macvtap: left promiscuous mode [ 356.547513][ T7293] veth1_vlan: left promiscuous mode [ 356.553273][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 356.573278][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 356.577739][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.588895][ T7293] veth0_vlan: left promiscuous mode [ 356.639880][ T5921] usb 2-1: config 0 descriptor?? [ 356.769357][T13726] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2858'. [ 357.102319][T13713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.116640][T13713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.196652][ T5921] cougar 0003:060B:500A.0027: unexpected long global item [ 357.211273][ T5921] cougar 0003:060B:500A.0027: parse failed [ 357.217393][ T5921] cougar 0003:060B:500A.0027: probe with driver cougar failed with error -22 [ 357.332057][ T3094] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 357.370065][ T5893] usb 2-1: USB disconnect, device number 2 [ 357.504871][ T3094] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.516427][ T3094] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.527014][ T3094] usb 10-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 357.536457][ T3094] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.554166][ T3094] usb 10-1: config 0 descriptor?? [ 357.808642][ T7293] team0 (unregistering): Port device team_slave_1 removed [ 357.893279][ T7293] team0 (unregistering): Port device team_slave_0 removed [ 358.611927][ T5852] Bluetooth: hci1: command tx timeout [ 358.633737][ T3094] usb 10-1: USB disconnect, device number 19 [ 359.084742][T13755] mkiss: ax0: crc mode is auto. [ 359.242567][ T5961] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 359.431071][ T5961] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.488648][ T5961] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.540713][ T5961] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 359.598232][T13781] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2882'. [ 359.600652][ T5961] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 359.690339][ T5961] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.773356][ T5961] usb 7-1: config 0 descriptor?? [ 359.969201][T13719] chnl_net:caif_netlink_parms(): no params data found [ 360.221205][ T5961] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 360.254936][T13719] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.276163][T13719] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.288788][ T5961] plantronics 0003:047F:FFFF.0029: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 360.320454][T13719] bridge_slave_0: entered allmulticast mode [ 360.336107][T13719] bridge_slave_0: entered promiscuous mode [ 360.391464][T13796] vlan0: entered allmulticast mode [ 360.396665][T13796] bond0: entered allmulticast mode [ 360.460560][T13796] bond_slave_0: entered allmulticast mode [ 360.473881][T13796] bond_slave_1: entered allmulticast mode [ 360.512115][T13796] bridge0: port 3(vlan0) entered blocking state [ 360.520771][T13796] bridge0: port 3(vlan0) entered disabled state [ 360.543388][T13796] vlan0: entered promiscuous mode [ 360.551688][T13796] bridge0: port 3(vlan0) entered blocking state [ 360.558520][T13796] bridge0: port 3(vlan0) entered forwarding state [ 360.576740][ T1209] usb 7-1: USB disconnect, device number 20 [ 360.624328][T13719] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.666835][T13719] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.690382][ T5852] Bluetooth: hci1: command tx timeout [ 360.696147][T13719] bridge_slave_1: entered allmulticast mode [ 360.720998][T13719] bridge_slave_1: entered promiscuous mode [ 360.853577][T13719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.869724][T13719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.927655][T13719] team0: Port device team_slave_0 added [ 360.937233][T13719] team0: Port device team_slave_1 added [ 361.125706][T13719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.145770][T13719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.206392][T13719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.287743][T13719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.310319][T13719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.397599][T13719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.470246][ T5893] usb 9-1: new full-speed USB device number 42 using dummy_hcd [ 361.625812][T13719] hsr_slave_0: entered promiscuous mode [ 361.637678][ T5893] usb 9-1: config 0 has an invalid descriptor of length 191, skipping remainder of the config [ 361.649222][T13719] hsr_slave_1: entered promiscuous mode [ 361.671078][ T5893] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 361.675286][T13719] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 361.701500][T13719] Cannot create hsr debugfs directory [ 361.710358][ T5893] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 33536, setting to 64 [ 361.750310][ T5893] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 361.788919][ T5893] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 361.824229][ T5893] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 361.853224][ T5893] usb 9-1: Manufacturer: syz [ 361.874467][ T5893] usb 9-1: config 0 descriptor?? [ 362.100280][ T3094] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 362.200473][ T5893] rc_core: IR keymap rc-hauppauge not found [ 362.206434][ T5893] Registered IR keymap rc-empty [ 362.212904][ T5893] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 362.237644][ T5893] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 362.250338][ T3094] usb 7-1: Using ep0 maxpacket: 32 [ 362.258321][ T3094] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 362.266792][ T3094] usb 7-1: config 0 has no interface number 0 [ 362.278799][ T5893] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 362.302440][ T3094] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 362.317272][ T5893] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input52 [ 362.334211][ T3094] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.358023][ T3094] usb 7-1: Product: syz [ 362.362430][ T3094] usb 7-1: Manufacturer: syz [ 362.367062][ T3094] usb 7-1: SerialNumber: syz [ 362.385240][ T3094] usb 7-1: config 0 descriptor?? [ 362.401755][ T5893] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 362.419910][ T3094] smsc95xx v2.0.0 [ 362.425418][ T5893] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 362.464716][ T5893] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 362.500574][ T5893] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 362.520620][ T5893] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 362.560789][ T5893] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 362.590822][ T5893] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 362.622979][ T5893] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 362.670658][ T5893] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 362.694962][ T5893] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 362.727080][ T5893] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 362.737480][ T5893] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 362.751631][ T5893] usb 9-1: USB disconnect, device number 42 [ 362.770415][ T5852] Bluetooth: hci1: command tx timeout [ 362.905315][T13719] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 362.941721][T13719] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 362.974089][T13719] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 363.035335][T13719] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 363.271001][T13719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.325143][T13719] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.368126][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.375382][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.386467][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.393725][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.464711][ T3094] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 363.481186][ T5921] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 363.508015][ T3094] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 363.530122][ T3094] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 363.561639][ T3094] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 363.599186][ T3094] usb 7-1: USB disconnect, device number 21 [ 363.607496][T13870] syzkaller1: entered promiscuous mode [ 363.614333][T13870] syzkaller1: entered allmulticast mode [ 363.690825][ T5921] usb 2-1: Using ep0 maxpacket: 8 [ 363.708415][T13878] kernel read not supported for file /file1 (pid: 13878 comm: syz.9.2916) [ 363.733031][ T5921] usb 2-1: unable to get BOS descriptor or descriptor too short [ 363.760488][ T30] audit: type=1800 audit(1751652726.192:177): pid=13878 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.9.2916" name="file1" dev="mqueue" ino=57641 res=0 errno=0 [ 363.800276][ T5921] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 363.807941][ T5921] usb 2-1: can't read configurations, error -71 [ 364.043130][T13719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.735160][T13719] veth0_vlan: entered promiscuous mode [ 364.753361][T13719] veth1_vlan: entered promiscuous mode [ 364.786605][T13719] veth0_macvtap: entered promiscuous mode [ 364.797868][T13719] veth1_macvtap: entered promiscuous mode [ 364.836111][T13719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 364.851616][ T5852] Bluetooth: hci1: command tx timeout [ 364.861397][T13719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 364.875508][T13719] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.884772][T13719] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.894602][T13719] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.903522][T13719] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.997296][ T7298] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.005721][ T7298] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.039819][ T5997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.050020][ T5997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.967612][T13932] sctp: [Deprecated]: syz.1.2935 (pid 13932) Use of int in max_burst socket option deprecated. [ 365.967612][T13932] Use struct sctp_assoc_value instead [ 366.109368][ T8945] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.304203][ T8945] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.523692][ T8945] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.690012][ T8945] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.952517][ T8945] bridge_slave_1: left allmulticast mode [ 366.958228][ T8945] bridge_slave_1: left promiscuous mode [ 366.965355][ T8945] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.975104][ T8945] bridge_slave_0: left allmulticast mode [ 366.981692][ T8945] bridge_slave_0: left promiscuous mode [ 366.987471][ T8945] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.412574][ T8945] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 367.423306][ T8945] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 367.433545][ T8945] bond0 (unregistering): Released all slaves [ 368.191254][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 368.202585][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 368.212766][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 368.249511][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 368.257347][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 368.705203][ T8945] hsr_slave_0: left promiscuous mode [ 368.724880][ T8945] hsr_slave_1: left promiscuous mode [ 368.742702][ T8945] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.773673][ T8945] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.798340][ T8945] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.813964][ T8945] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 368.840416][ T8945] veth1_macvtap: left promiscuous mode [ 368.846430][ T8945] veth0_macvtap: left promiscuous mode [ 368.853015][ T8945] veth1_vlan: left promiscuous mode [ 368.858516][ T8945] veth0_vlan: left promiscuous mode [ 369.139605][T13991] input: syz1 as /devices/virtual/input/input53 [ 369.608066][ T8945] team0 (unregistering): Port device team_slave_1 removed [ 369.663622][ T8945] team0 (unregistering): Port device team_slave_0 removed [ 370.292236][ T5847] Bluetooth: hci1: command tx timeout [ 370.503755][ T3094] IPVS: starting estimator thread 0... [ 370.515110][T13998] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 370.630309][T14002] IPVS: using max 34 ests per chain, 81600 per kthread [ 370.744167][T14008] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.2964'. [ 370.761034][T14005] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.2964'. [ 370.902092][T13959] chnl_net:caif_netlink_parms(): no params data found [ 371.277830][T14024] Bluetooth: hci5: Frame reassembly failed (-84) [ 371.472964][T14035] netlink: 'syz.8.2974': attribute type 10 has an invalid length. [ 371.624792][T14035] syz_tun: entered promiscuous mode [ 371.662634][T14035] syz_tun: entered allmulticast mode [ 371.668519][T14035] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 371.673056][T14039] netlink: 'syz.6.2976': attribute type 1 has an invalid length. [ 371.688570][T13959] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.696497][T13959] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.710418][T13959] bridge_slave_0: entered allmulticast mode [ 371.726119][T13959] bridge_slave_0: entered promiscuous mode [ 371.737026][T13959] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.748731][T13959] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.757016][T13959] bridge_slave_1: entered allmulticast mode [ 371.769863][T13959] bridge_slave_1: entered promiscuous mode [ 371.860443][ T3094] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 371.893811][T13959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.932897][T13959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.032548][ T3094] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 372.047731][ T3094] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 372.059080][ T3094] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 372.077195][T13959] team0: Port device team_slave_0 added [ 372.087716][T13959] team0: Port device team_slave_1 added [ 372.093849][ T3094] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.108657][T14037] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 372.121922][ T3094] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 372.208131][T13959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.223093][T13959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.250041][T13959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.272752][ T24] usb 7-1: new full-speed USB device number 22 using dummy_hcd [ 372.284896][T13959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.292452][T13959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.330483][T13959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.370270][ T5852] Bluetooth: hci1: command tx timeout [ 372.433342][ T24] usb 7-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 372.437039][ T5961] usb 10-1: USB disconnect, device number 20 [ 372.450674][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.471815][ T24] usb 7-1: config 0 descriptor?? [ 372.528384][T13959] hsr_slave_0: entered promiscuous mode [ 372.542627][T13959] hsr_slave_1: entered promiscuous mode [ 372.554893][T13959] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 372.564089][T13959] Cannot create hsr debugfs directory [ 373.330624][ T5852] Bluetooth: hci5: command 0xfc11 tx timeout [ 373.338269][ T5847] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 373.492371][ T24] pegasus 7-1:0.0: probe with driver pegasus failed with error -71 [ 373.507990][ T24] usb 7-1: USB disconnect, device number 22 [ 373.526533][T14066] can0: slcan on ptm0. [ 373.579754][ T30] audit: type=1400 audit(1751652736.022:178): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=14068 comm="syz.9.2989" src=1 dest=20000 netif=wpan0 [ 373.711076][T14065] can0 (unregistered): slcan off ptm0. [ 373.749218][T14054] netlink: 76 bytes leftover after parsing attributes in process `syz.8.2983'. [ 373.831679][T13959] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 373.896795][T13959] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 373.943557][T13959] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 373.967114][T13959] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 374.004685][T14077] block nbd9: NBD_DISCONNECT [ 374.460364][ T5847] Bluetooth: hci1: command tx timeout [ 374.594966][ T5961] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 374.687490][T13959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.754333][ T5961] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 374.789218][ T5961] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 374.792265][T13959] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.800918][ T5961] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 374.831526][ T5961] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 374.846263][ T5961] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 374.857674][ T7278] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.864889][ T7278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.877174][ T5961] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.904050][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.911342][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.912975][ T5961] usb 10-1: config 0 descriptor?? [ 375.322811][ T30] audit: type=1400 audit(1751652737.772:179): lsm=SMACK fn=smack_inode_removexattr action=denied subject="w" object="_" requested=w pid=14119 comm="syz.1.3008" name="file1" dev="tmpfs" ino=200 [ 375.416934][ T5961] plantronics 0003:047F:FFFF.002A: unknown main item tag 0x0 [ 375.490744][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 375.577857][ T5961] plantronics 0003:047F:FFFF.002A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 375.609986][ T30] audit: type=1326 audit(1751652738.052:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14122 comm="syz.8.3009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f11a9d2ab19 code=0x7ffc0000 [ 375.629678][T13959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.780213][ T30] audit: type=1326 audit(1751652738.052:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14122 comm="syz.8.3009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a9d8e929 code=0x7ffc0000 [ 375.829253][ T5961] usb 10-1: USB disconnect, device number 21 [ 375.916629][ T30] audit: type=1326 audit(1751652738.052:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14122 comm="syz.8.3009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f11a9d2ab19 code=0x7ffc0000 [ 376.019351][ T30] audit: type=1326 audit(1751652738.052:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14122 comm="syz.8.3009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a9d8e929 code=0x7ffc0000 [ 376.090283][ T30] audit: type=1326 audit(1751652738.052:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14122 comm="syz.8.3009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f11a9d2ab19 code=0x7ffc0000 [ 376.111773][ C0] vkms_vblank_simulate: vblank timer overrun [ 376.172530][ T30] audit: type=1326 audit(1751652738.052:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14122 comm="syz.8.3009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a9d8e929 code=0x7ffc0000 [ 376.194110][ C0] vkms_vblank_simulate: vblank timer overrun [ 376.267300][ T30] audit: type=1326 audit(1751652738.052:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14122 comm="syz.8.3009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f11a9d2ab19 code=0x7ffc0000 [ 376.335603][ T30] audit: type=1326 audit(1751652738.052:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14122 comm="syz.8.3009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a9d8e929 code=0x7ffc0000 [ 376.530364][ T5847] Bluetooth: hci1: command tx timeout [ 376.650865][T13959] veth0_vlan: entered promiscuous mode [ 376.697862][T13959] veth1_vlan: entered promiscuous mode [ 376.748330][T14154] sctp: [Deprecated]: syz.8.3018 (pid 14154) Use of struct sctp_assoc_value in delayed_ack socket option. [ 376.748330][T14154] Use struct sctp_sack_info instead [ 376.971887][T13959] veth0_macvtap: entered promiscuous mode [ 377.023223][T13959] veth1_macvtap: entered promiscuous mode [ 377.095838][T13959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 377.147494][T13959] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 377.173612][T13959] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.210545][T13959] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.231586][ T3094] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 377.234173][T13959] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.298868][T13959] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.448857][ T3094] usb 9-1: Using ep0 maxpacket: 8 [ 377.458255][ T3094] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 377.529203][ T3094] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 377.578559][ T3094] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 377.599386][ T3094] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 377.620518][ T3094] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 377.641056][ T5996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.669342][ T3094] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.671453][ T5996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.766776][ T7293] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.799074][ T7293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.810504][ T5841] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 377.900291][ T3094] usb 9-1: GET_CAPABILITIES returned 0 [ 377.910041][ T3094] usbtmc 9-1:16.0: can't read capabilities [ 377.991429][ T5841] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 378.027413][ T5841] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 378.045894][ T5841] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 378.061747][ T5841] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 378.071177][ T5841] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.100958][T14178] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 378.124733][ T5841] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 378.137858][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 378.149429][ T5907] usb 9-1: USB disconnect, device number 43 [ 378.439822][ T5996] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.590094][ T5961] usb 7-1: USB disconnect, device number 23 [ 378.667001][ T5996] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.697187][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.703822][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.890717][ T5996] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.281249][ T5996] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.415737][ T5996] bridge_slave_1: left allmulticast mode [ 379.421767][ T5996] bridge_slave_1: left promiscuous mode [ 379.427467][ T5996] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.436425][ T5996] bridge_slave_0: left allmulticast mode [ 379.442589][ T5996] bridge_slave_0: left promiscuous mode [ 379.449955][ T5996] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.874115][ T5996] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 379.885570][ T5996] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 379.896396][ T5996] bond0 (unregistering): Released all slaves [ 380.187256][T14201] serio: Serial port ptm0 [ 380.344585][ T5996] hsr_slave_0: left promiscuous mode [ 380.437987][ T5996] hsr_slave_1: left promiscuous mode [ 380.462807][ T5996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 380.480849][ T5996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 380.544086][ T5996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 380.570404][ T5996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 380.672179][ T5996] veth1_macvtap: left promiscuous mode [ 380.677958][ T5996] veth0_macvtap: left promiscuous mode [ 380.702047][ T5996] veth1_vlan: left promiscuous mode [ 380.720405][ T5996] veth0_vlan: left promiscuous mode [ 380.987547][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 381.026826][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 381.035985][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 381.051422][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 381.061819][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 381.726777][T14240] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 382.505050][ T5996] team0 (unregistering): Port device team_slave_1 removed [ 382.588049][ T5996] team0 (unregistering): Port device team_slave_0 removed [ 383.105281][ T5852] Bluetooth: hci1: command tx timeout [ 383.156432][T14215] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 383.166337][T14215] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 383.178391][T14215] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 383.491055][T14268] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 383.498633][T14268] IPv6: NLM_F_CREATE should be set when creating new route [ 383.509180][T14246] team0 (unregistering): Port device team_slave_0 removed [ 383.525776][T14246] team0 (unregistering): Port device team_slave_1 removed [ 384.020248][ T5841] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 384.148939][T14286] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode [ 384.182256][T14286] macvlan3: entered allmulticast mode [ 384.196708][T14286] mac80211_hwsim hwsim14 wlan0: entered allmulticast mode [ 384.210071][T14286] mac80211_hwsim hwsim14 wlan0: left allmulticast mode [ 384.217416][ T5841] usb 7-1: Using ep0 maxpacket: 32 [ 384.231140][T14286] mac80211_hwsim hwsim14 wlan0: left promiscuous mode [ 384.249326][ T5841] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 384.258944][ T5841] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 384.289771][ T5841] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 384.304961][ T5841] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 384.329397][T14226] chnl_net:caif_netlink_parms(): no params data found [ 384.336424][ T5841] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 384.349614][ T5841] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 384.413809][ T5841] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 384.432720][ T5841] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.466614][ T5841] usb 7-1: config 0 descriptor?? [ 384.705732][ T5841] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 24 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 384.737017][T14307] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 384.748576][T14226] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.755744][T14307] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 384.772546][T14226] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.779825][T14226] bridge_slave_0: entered allmulticast mode [ 384.789626][T14226] bridge_slave_0: entered promiscuous mode [ 384.799049][T14226] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.806943][T14226] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.815382][T14226] bridge_slave_1: entered allmulticast mode [ 384.826110][T14226] bridge_slave_1: entered promiscuous mode [ 384.930087][T14226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.974846][T14226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.991292][ T5841] usb 7-1: USB disconnect, device number 24 [ 385.003019][ T5841] usblp0: removed [ 385.048190][T14314] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3083'. [ 385.097936][T14226] team0: Port device team_slave_0 added [ 385.112859][T14226] team0: Port device team_slave_1 added [ 385.121535][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 385.121553][ T30] audit: type=1326 audit(1751652747.562:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14315 comm="syz.9.3084" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff82d18e929 code=0x0 [ 385.185863][ T5852] Bluetooth: hci1: command tx timeout [ 385.197287][T14226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.210598][T14226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.237916][ T30] audit: type=1326 audit(1751652747.692:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14318 comm="syz.1.3085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9a98e929 code=0x7ffc0000 [ 385.265545][ T30] audit: type=1326 audit(1751652747.692:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14318 comm="syz.1.3085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9a98e929 code=0x7ffc0000 [ 385.287710][ T30] audit: type=1326 audit(1751652747.692:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14318 comm="syz.1.3085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcc9a98e929 code=0x7ffc0000 [ 385.295198][T14226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.332183][ T30] audit: type=1326 audit(1751652747.692:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14318 comm="syz.1.3085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9a98e929 code=0x7ffc0000 [ 385.374734][ T30] audit: type=1326 audit(1751652747.692:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14318 comm="syz.1.3085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fcc9a98e929 code=0x7ffc0000 [ 385.407570][ T30] audit: type=1326 audit(1751652747.692:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14318 comm="syz.1.3085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9a98e929 code=0x7ffc0000 [ 385.433124][ T30] audit: type=1326 audit(1751652747.692:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14318 comm="syz.1.3085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7fcc9a98e929 code=0x7ffc0000 [ 385.461931][ T30] audit: type=1326 audit(1751652747.692:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14318 comm="syz.1.3085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9a98e929 code=0x7ffc0000 [ 385.488744][ T30] audit: type=1326 audit(1751652747.692:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14318 comm="syz.1.3085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7fcc9a98e929 code=0x7ffc0000 [ 385.536811][T14226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.553681][T14226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.620343][T14226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.808571][T14226] hsr_slave_0: entered promiscuous mode [ 385.818097][T14226] hsr_slave_1: entered promiscuous mode [ 385.854464][T14226] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 385.898095][T14226] Cannot create hsr debugfs directory [ 387.126607][T14226] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 387.174814][T14226] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 387.225969][T14226] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 387.261220][ T5852] Bluetooth: hci1: command tx timeout [ 387.261532][T14226] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 387.370344][ T5961] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 387.530987][ T5961] usb 10-1: Using ep0 maxpacket: 32 [ 387.554601][ T5961] usb 10-1: unable to get BOS descriptor or descriptor too short [ 387.590062][T14358] syzkaller1: entered promiscuous mode [ 387.595525][ T5961] usb 10-1: config 0 has no interfaces? [ 387.596464][T14358] syzkaller1: entered allmulticast mode [ 387.603856][ T5961] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 387.620281][ T5961] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.629321][ T5961] usb 10-1: Product: syz [ 387.645314][ T5961] usb 10-1: Manufacturer: syz [ 387.658881][ T5961] usb 10-1: SerialNumber: syz [ 387.691584][ T5961] usb 10-1: config 0 descriptor?? [ 387.746771][T14226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.805057][T14226] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.850192][ T8945] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.857429][ T8945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.876856][ T8945] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.884143][ T8945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.993125][T14355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.060362][T14355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.085872][ T5921] usb 10-1: USB disconnect, device number 22 [ 388.175806][T14382] Invalid source name [ 388.560467][ T5921] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 388.564139][T14226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.720299][ T5961] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 388.731334][ T5921] usb 10-1: config index 0 descriptor too short (expected 227, got 149) [ 388.747461][ T5921] usb 10-1: config 220 has an invalid interface number: 76 but max is 2 [ 388.765222][ T5921] usb 10-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 388.775755][ T5921] usb 10-1: config 220 has an invalid descriptor of length 92, skipping remainder of the config [ 388.786555][ T5921] usb 10-1: config 220 has no interface number 2 [ 388.795680][ T5921] usb 10-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 388.810014][ T5921] usb 10-1: config 220 interface 0 has no altsetting 0 [ 388.841772][ T5921] usb 10-1: config 220 interface 76 has no altsetting 0 [ 388.848923][ T5921] usb 10-1: config 220 interface 1 has no altsetting 0 [ 388.882916][ T5921] usb 10-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 388.900250][ T5921] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.919249][ T5921] usb 10-1: Product: syz [ 388.924079][ T5921] usb 10-1: Manufacturer: syz [ 388.935374][ T5961] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 388.950231][ T5921] usb 10-1: SerialNumber: syz [ 388.955180][ T5961] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.980285][ T5961] usb 7-1: Product: syz [ 389.000293][ T5961] usb 7-1: Manufacturer: syz [ 389.018476][ T5961] usb 7-1: SerialNumber: syz [ 389.060115][ T5961] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 389.147876][T10477] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 389.227672][ T5921] usb 10-1: selecting invalid altsetting 0 [ 389.260998][ T5921] usb 10-1: Found UVC 7.01 device syz (8086:0b07) [ 389.297328][ T5921] usb 10-1: No valid video chain found. [ 389.340501][ T5852] Bluetooth: hci1: command tx timeout [ 389.349046][ T5921] usb 10-1: selecting invalid altsetting 0 [ 389.387749][ T5921] usbtest 10-1:220.1: probe with driver usbtest failed with error -22 [ 389.414782][ T5921] usb 10-1: USB disconnect, device number 23 [ 389.444028][T14226] veth0_vlan: entered promiscuous mode [ 389.516853][T14226] veth1_vlan: entered promiscuous mode [ 389.614560][T14226] veth0_macvtap: entered promiscuous mode [ 389.628221][T14226] veth1_macvtap: entered promiscuous mode [ 389.717465][T14226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 389.738359][T14226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 389.768065][T14226] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.783662][T14416] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3122'. [ 389.814764][T14226] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.850265][T14226] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.874595][ T24] usb 7-1: USB disconnect, device number 25 [ 389.881895][T14226] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.939866][T14420] input: syz0 as /devices/virtual/input/input55 [ 390.050443][ T3094] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 390.189332][ T7298] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.199602][ T7298] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.222319][ T3094] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 390.235925][ T3094] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 390.281301][ T8945] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.297959][ T3094] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 390.311072][ T8945] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.328365][ T3094] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 390.358005][ T3094] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 390.398576][ T3094] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 390.408203][ T3094] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 390.426387][ T3094] usb 2-1: Product: syz [ 390.436141][ T3094] usb 2-1: Manufacturer: syz [ 390.465700][ T3094] cdc_wdm 2-1:1.0: skipping garbage [ 390.495574][ T3094] cdc_wdm 2-1:1.0: skipping garbage [ 390.516330][ T3094] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 390.532083][ T3094] cdc_wdm 2-1:1.0: Unknown control protocol [ 390.538357][T10477] usb 7-1: Service connection timeout for: 256 [ 390.560204][T10477] ath9k_htc 7-1:1.0: ath9k_htc: Unable to initialize HTC services [ 390.569279][T10477] ath9k_htc: Failed to initialize the device [ 390.629920][ T24] usb 7-1: ath9k_htc: USB layer deinitialized [ 391.105091][ T5997] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.235555][ T5997] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.273654][ T5961] usb 2-1: USB disconnect, device number 5 [ 391.581154][ T5997] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.757693][ T5997] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.970029][ T5997] bridge_slave_1: left allmulticast mode [ 391.977929][ T5997] bridge_slave_1: left promiscuous mode [ 391.983958][ T5997] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.995293][ T5997] bridge_slave_0: left allmulticast mode [ 392.001373][ T5997] bridge_slave_0: left promiscuous mode [ 392.007074][ T5997] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.384192][ T5997] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 392.399055][ T5997] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 392.409280][ T5997] bond0 (unregistering): Released all slaves [ 392.681859][ T5997] hsr_slave_0: left promiscuous mode [ 392.687881][ T5997] hsr_slave_1: left promiscuous mode [ 392.697070][ T5997] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 392.730464][ T5997] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 392.771654][ T5997] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 392.792985][ T5997] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 392.845689][T14450] xt_CT: No such helper "snmp" [ 392.875347][ T5997] veth1_macvtap: left promiscuous mode [ 392.884746][T14454] block nbd9: Device being setup by another task [ 392.900675][T14452] block nbd9: NBD_DISCONNECT [ 392.909436][T14449] block nbd9: Disconnected due to user request. [ 392.920300][ T5997] veth0_macvtap: left promiscuous mode [ 392.926114][ T5997] veth1_vlan: left promiscuous mode [ 392.943266][ T5997] veth0_vlan: left promiscuous mode [ 392.951265][T14449] block nbd9: shutting down sockets [ 393.154356][T14463] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3140'. [ 393.407203][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 393.418839][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 393.428508][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 393.439297][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 393.449690][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 393.997566][ T5997] team0 (unregistering): Port device team_slave_1 removed [ 394.063832][ T5997] team0 (unregistering): Port device team_slave_0 removed [ 394.811828][T14482] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3146'. [ 395.502774][T14468] chnl_net:caif_netlink_parms(): no params data found [ 395.580353][ T5852] Bluetooth: hci1: command tx timeout [ 395.639860][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 395.639877][ T30] audit: type=1326 audit(1751652758.062:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14489 comm="syz.6.3150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac558e929 code=0x7ffc0000 [ 395.735385][ T30] audit: type=1326 audit(1751652758.062:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14489 comm="syz.6.3150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8ac552ab19 code=0x7ffc0000 [ 395.771977][ T30] audit: type=1326 audit(1751652758.062:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14489 comm="syz.6.3150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac558e929 code=0x7ffc0000 [ 395.793980][ T30] audit: type=1326 audit(1751652758.062:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14489 comm="syz.6.3150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac558e929 code=0x7ffc0000 [ 395.873400][ T30] audit: type=1326 audit(1751652758.062:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14489 comm="syz.6.3150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac558e929 code=0x7ffc0000 [ 396.023210][ T30] audit: type=1326 audit(1751652758.062:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14489 comm="syz.6.3150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8ac552ab19 code=0x7ffc0000 [ 396.169023][T14468] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.187900][ T30] audit: type=1326 audit(1751652758.062:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14489 comm="syz.6.3150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac558e929 code=0x7ffc0000 [ 396.243270][T14468] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.280528][T14468] bridge_slave_0: entered allmulticast mode [ 396.288338][T14468] bridge_slave_0: entered promiscuous mode [ 396.324319][ T30] audit: type=1326 audit(1751652758.072:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14489 comm="syz.6.3150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac558e929 code=0x7ffc0000 [ 396.359999][T14468] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.394649][T14468] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.416598][ T30] audit: type=1326 audit(1751652758.072:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14489 comm="syz.6.3150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8ac552ab19 code=0x7ffc0000 [ 396.440625][T14468] bridge_slave_1: entered allmulticast mode [ 396.448099][T14468] bridge_slave_1: entered promiscuous mode [ 396.530334][ T30] audit: type=1326 audit(1751652758.072:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14489 comm="syz.6.3150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8ac552ab19 code=0x7ffc0000 [ 396.628364][T14534] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3163'. [ 396.747928][T14468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.803252][T14468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.936486][T14468] team0: Port device team_slave_0 added [ 396.949273][T14468] team0: Port device team_slave_1 added [ 397.047148][T14468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.057293][T14468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.140396][T14468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.157352][T14468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.186119][T14468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.221726][T14468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.250339][T10477] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 397.384590][T14468] hsr_slave_0: entered promiscuous mode [ 397.397376][T14468] hsr_slave_1: entered promiscuous mode [ 397.404829][T14468] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 397.422131][T10477] usb 10-1: Using ep0 maxpacket: 8 [ 397.429466][T10477] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 397.430363][T14468] Cannot create hsr debugfs directory [ 397.462996][T10477] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 397.491227][T10477] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 397.507352][T10477] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 397.518282][T10477] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 397.532606][T10477] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 397.541967][T10477] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.650711][ T5852] Bluetooth: hci1: command tx timeout [ 397.779083][T10477] usb 10-1: usb_control_msg returned -32 [ 397.800349][T10477] usbtmc 10-1:16.0: can't read capabilities [ 398.160429][ T3094] usb 9-1: new full-speed USB device number 44 using dummy_hcd [ 398.257233][T14468] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 398.267322][T14468] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 398.276939][T14468] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 398.287331][T14468] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 398.326741][ T3094] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 398.338649][ T3094] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 398.361875][ T3094] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 398.372940][ T3094] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.382185][ T3094] usb 9-1: Product: syz [ 398.386491][ T3094] usb 9-1: Manufacturer: syz [ 398.392578][ T3094] usb 9-1: SerialNumber: syz [ 398.399232][T14468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 398.436213][T14468] 8021q: adding VLAN 0 to HW filter on device team0 [ 398.449421][ T7298] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.456728][ T7298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.478245][ T5997] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.485453][ T5997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.624949][ T3094] usb 9-1: 0:2 : does not exist [ 398.636922][ T3094] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 398.681791][ T3094] usb 9-1: USB disconnect, device number 44 [ 398.731859][ T6066] udevd[6066]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 398.789021][T14468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 399.125024][T14468] veth0_vlan: entered promiscuous mode [ 399.166040][T14468] veth1_vlan: entered promiscuous mode [ 399.219805][T14468] veth0_macvtap: entered promiscuous mode [ 399.245435][T14605] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3186'. [ 399.256200][T14605] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 399.275853][T14468] veth1_macvtap: entered promiscuous mode [ 399.345088][T14468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 399.384524][T14468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 399.445071][T14468] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.457289][T14468] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.476798][T14468] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.486121][T14468] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.713961][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.731452][ T5852] Bluetooth: hci1: command tx timeout [ 399.743138][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.866888][ T5997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.894053][ T5997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.059758][ T10] usb 10-1: USB disconnect, device number 24 [ 400.255475][T14634] autofs: Bad value for 'fd' [ 400.410453][T10477] usb 9-1: new full-speed USB device number 45 using dummy_hcd [ 400.579048][T10477] usb 9-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 400.601713][T10477] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.609762][T10477] usb 9-1: Product: syz [ 400.626032][T10477] usb 9-1: Manufacturer: syz [ 400.635370][T10477] usb 9-1: SerialNumber: syz [ 400.647405][T10477] usb 9-1: config 0 descriptor?? [ 400.669925][T10477] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 401.553385][ T1143] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.703474][T10477] gspca_sonixj: reg_w1 err -71 [ 401.710256][ T3094] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 401.810992][T10477] sonixj 9-1:0.0: probe with driver sonixj failed with error -71 [ 401.836149][T10477] usb 9-1: USB disconnect, device number 45 [ 401.883428][ T3094] usb 10-1: Using ep0 maxpacket: 32 [ 401.914187][T14653] netlink: 212376 bytes leftover after parsing attributes in process `syz.9.3208'. [ 401.935874][ T3094] usb 10-1: unable to get BOS descriptor or descriptor too short [ 401.952022][ T3094] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 401.970061][ T3094] usb 10-1: can't read configurations, error -71 [ 402.644553][ T1143] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.710671][ T1143] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.793579][ T1143] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.917378][ T1143] bridge_slave_1: left allmulticast mode [ 402.923914][ T1143] bridge_slave_1: left promiscuous mode [ 402.929634][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.939443][ T1143] bridge_slave_0: left allmulticast mode [ 402.945637][ T1143] bridge_slave_0: left promiscuous mode [ 402.951475][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.433662][ T1143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 403.465477][T14659] binder: 14658:14659 ioctl c0306201 2000000003c0 returned -22 [ 403.514590][ T1143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 403.601856][ T1143] bond0 (unregistering): Released all slaves [ 403.870328][T10477] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 404.027099][ T10] usb 7-1: new full-speed USB device number 26 using dummy_hcd [ 404.053256][T10477] usb 2-1: Using ep0 maxpacket: 8 [ 404.063371][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 404.091549][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 404.104943][T10477] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 404.114436][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 404.126229][T10477] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.136443][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 404.160572][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 404.171155][T10477] pvrusb2: Hardware description: Terratec Grabster AV400 [ 404.178384][T10477] pvrusb2: ********** [ 404.182659][T10477] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 404.182804][ T1143] hsr_slave_0: left promiscuous mode [ 404.193506][T10477] pvrusb2: Important functionality might not be entirely working. [ 404.206544][T10477] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 404.220269][T10477] pvrusb2: ********** [ 404.248413][ T1143] hsr_slave_1: left promiscuous mode [ 404.256666][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 404.272574][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 404.280300][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 404.290406][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 404.291416][ T24] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 404.300714][ T10] usb 7-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 404.330828][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 404.331946][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.338459][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 404.364449][ T10] usb 7-1: config 0 descriptor?? [ 404.382741][ T2343] pvrusb2: Invalid write control endpoint [ 404.430966][ T30] kauditd_printk_skb: 78 callbacks suppressed [ 404.430986][ T30] audit: type=1400 audit(1885870494.867:311): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=14684 comm="syz.9.3220" dest=20002 netif=wpan0 [ 404.461295][ T1143] veth1_macvtap: left promiscuous mode [ 404.471138][ T24] usb 9-1: Using ep0 maxpacket: 16 [ 404.490364][ T1143] veth0_macvtap: left promiscuous mode [ 404.496081][ T1143] veth1_vlan: left promiscuous mode [ 404.506895][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.518281][ T1143] veth0_vlan: left promiscuous mode [ 404.523680][ T24] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 404.534087][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.571226][ T24] usb 9-1: config 0 descriptor?? [ 404.613378][ T2343] pvrusb2: Invalid write control endpoint [ 404.655404][ T2343] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 404.669903][ T2343] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 404.699008][ T2343] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 404.736502][ T2343] pvrusb2: Device being rendered inoperable [ 404.755579][T14668] pvrusb2: Attempted to execute control transfer when device not ok [ 404.776523][ T2343] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 404.793806][ T5921] usb 2-1: USB disconnect, device number 6 [ 404.797928][ T2343] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 404.809061][ T10] hid-generic 0003:04F3:0754.002B: failed to start in urb: -90 [ 404.843320][ T10] hid-generic 0003:04F3:0754.002B: hidraw0: USB HID v1.01 Device [HID 04f3:0754] on usb-dummy_hcd.6-1/input0 [ 404.866404][ T2343] pvrusb2: Attached sub-driver cx25840 [ 404.881003][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 404.920268][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 405.028816][ T24] mcp2221 0003:04D8:00DD.002C: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.8-1/input0 [ 405.078267][ T10] usb 7-1: USB disconnect, device number 26 [ 405.473283][ T24] usb 9-1: USB disconnect, device number 46 [ 406.292607][ T5852] Bluetooth: hci1: command tx timeout [ 406.347875][ T1143] team0 (unregistering): Port device team_slave_1 removed [ 406.355869][ T10] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 406.368182][ T5921] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 406.462936][ T1143] team0 (unregistering): Port device team_slave_0 removed [ 406.529465][ T10] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 406.547550][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 406.574757][ T5921] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.586011][ T5921] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.595936][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 406.617944][ T5921] usb 9-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 406.627512][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 406.640638][ T5921] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.652496][ T10] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 406.677077][ T5921] usb 9-1: config 0 descriptor?? [ 406.682189][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.709849][ T10] usb 7-1: config 0 descriptor?? [ 407.122281][ T5921] playstation 0003:054C:0DF2.002D: unknown main item tag 0x0 [ 407.143381][ T10] plantronics 0003:047F:FFFF.002E: ignoring exceeding usage max [ 407.154692][ T5921] playstation 0003:054C:0DF2.002D: unknown main item tag 0x0 [ 407.167954][ T10] plantronics 0003:047F:FFFF.002E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 407.181942][ T5921] playstation 0003:054C:0DF2.002D: unknown main item tag 0x0 [ 407.189389][ T5921] playstation 0003:054C:0DF2.002D: unknown main item tag 0x0 [ 407.198988][ T5921] playstation 0003:054C:0DF2.002D: unknown main item tag 0x0 [ 407.223869][ T5921] playstation 0003:054C:0DF2.002D: hidraw1: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.8-1/input0 [ 407.676744][T14718] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3233'. [ 407.704924][T14718] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 407.743646][ T5921] playstation 0003:054C:0DF2.002D: Failed to retrieve feature with reportID 5: -71 [ 407.754728][ T5921] playstation 0003:054C:0DF2.002D: Failed to retrieve DualSense calibration info: -71 [ 407.769482][ T5921] playstation 0003:054C:0DF2.002D: Failed to get calibration data from DualSense [ 407.779016][ T5921] playstation 0003:054C:0DF2.002D: Failed to create dualsense. [ 407.791022][ T5921] playstation 0003:054C:0DF2.002D: probe with driver playstation failed with error -71 [ 407.806307][ T5921] usb 9-1: USB disconnect, device number 47 [ 407.832693][T14718] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 407.844478][T14718] batadv_slave_1 (unregistering): left promiscuous mode [ 408.326907][T14680] chnl_net:caif_netlink_parms(): no params data found [ 408.391450][ T5852] Bluetooth: hci1: command tx timeout [ 408.696105][T14743] netlink: 104 bytes leftover after parsing attributes in process `syz.9.3242'. [ 408.727509][T14680] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.741365][T14680] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.748871][T14680] bridge_slave_0: entered allmulticast mode [ 408.789990][T14680] bridge_slave_0: entered promiscuous mode [ 408.821967][T14680] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.829154][T14680] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.854940][T14680] bridge_slave_1: entered allmulticast mode [ 408.891205][T14680] bridge_slave_1: entered promiscuous mode [ 408.971893][T14753] IPVS: sh: FWM 4 0x00000004 - no destination available [ 408.974036][ T3094] IPVS: starting estimator thread 0... [ 409.058186][T14680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.100254][T14754] IPVS: using max 30 ests per chain, 72000 per kthread [ 409.131918][T14680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.471041][ T24] usb 7-1: reset high-speed USB device number 27 using dummy_hcd [ 409.531648][T14680] team0: Port device team_slave_0 added [ 409.566607][T14680] team0: Port device team_slave_1 added [ 409.641029][ T24] usb 7-1: device firmware changed [ 409.680250][ T5841] usb 7-1: USB disconnect, device number 27 [ 409.754945][T14680] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.794668][T14680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.824094][T14680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.859756][T14680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.881784][T14680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.916724][ T5841] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 409.933179][T14680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.981245][ T24] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 410.097050][ T5841] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.116243][ T5841] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 410.129275][ T5841] usb 7-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 410.143662][ T5841] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.157592][ T24] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.174737][ T24] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 410.192629][ T5841] usb 7-1: config 0 descriptor?? [ 410.205552][ T24] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 410.227484][T14680] hsr_slave_0: entered promiscuous mode [ 410.237552][T14680] hsr_slave_1: entered promiscuous mode [ 410.247513][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.257951][T14680] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 410.272391][ T24] usb 10-1: Product: syz [ 410.276828][ T24] usb 10-1: Manufacturer: syz [ 410.284129][T14680] Cannot create hsr debugfs directory [ 410.291162][ T24] usb 10-1: SerialNumber: syz [ 410.326857][ T24] cdc_mbim 10-1:1.0: skipping garbage [ 410.451202][ T5852] Bluetooth: hci1: command tx timeout [ 410.527176][T14775] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 410.637771][ T5841] hid-thrustmaster 0003:044F:B65D.002F: unknown main item tag 0x0 [ 410.676902][ T5841] hid-thrustmaster 0003:044F:B65D.002F: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.6-1/input0 [ 410.709015][ T5841] hid-thrustmaster 0003:044F:B65D.002F: Wrong number of endpoints? [ 410.915443][ C1] hid-thrustmaster 0003:044F:B65D.002F: URB to get model id failed with error -71 [ 410.934312][ T5841] usb 7-1: USB disconnect, device number 28 [ 411.021353][ T5921] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 411.118846][T14680] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 411.134308][T14680] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 411.145792][T14680] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 411.156584][T14680] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 411.159415][T14775] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 411.176663][ T24] cdc_mbim 10-1:1.0: setting rx_max = 16384 [ 411.194873][ T5921] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.218413][ T5921] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 411.241389][ T5921] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 411.264395][ T5921] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 411.282102][ T5921] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.293123][ T5921] usb 9-1: config 0 descriptor?? [ 411.336146][T14680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.365493][T14680] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.386541][ T24] cdc_mbim 10-1:1.0: setting tx_max = 16384 [ 411.396157][ T8945] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.403410][ T8945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.412706][ T24] cdc_mbim 10-1:1.0: cdc-wdm0: USB WDM device [ 411.434226][ T8945] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.441464][ T8945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.441847][ T24] wwan wwan0: port wwan0mbim0 attached [ 411.486880][ T24] cdc_mbim 10-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.9-1, CDC MBIM, 9e:e0:ee:a8:47:06 [ 411.553084][ T24] usb 10-1: USB disconnect, device number 27 [ 411.579806][ T24] cdc_mbim 10-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.9-1, CDC MBIM [ 411.703605][ T24] wwan wwan0: port wwan0mbim0 disconnected [ 411.735975][ T5921] plantronics 0003:047F:FFFF.0030: reserved main item tag 0xe [ 411.773183][ T5921] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 411.821820][ T5921] plantronics 0003:047F:FFFF.0030: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 412.015534][ T5841] usb 9-1: USB disconnect, device number 48 [ 412.079123][T14820] fido_id[14820]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 412.119276][T14680] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.530429][ T5852] Bluetooth: hci1: command tx timeout [ 412.881561][T14680] veth0_vlan: entered promiscuous mode [ 412.906664][T14680] veth1_vlan: entered promiscuous mode [ 413.055690][T14680] veth0_macvtap: entered promiscuous mode [ 413.086124][T14680] veth1_macvtap: entered promiscuous mode [ 413.167517][T14680] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 413.212397][T14680] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 413.262693][T14680] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.290426][T14680] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.310697][T14680] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.319457][T14680] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.607124][T14859] syzkaller1: entered promiscuous mode [ 413.612866][T14859] syzkaller1: entered allmulticast mode [ 413.694689][ T7468] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.719811][ T7468] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.845940][ T7278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.858063][ T7278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.878428][T14878] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3292'. [ 414.314764][T14892] 9pnet: p9_errstr2errno: server reported unknown error ‌@يخ‚ح(0x0000000000000003 [ 414.457294][ T7468] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.629771][ T7468] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.702185][T14421] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 414.749754][ T7468] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.808877][ T7468] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.860272][T14421] usb 10-1: Using ep0 maxpacket: 16 [ 414.869912][T14421] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 414.882580][T14421] usb 10-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 414.891851][T14421] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.909930][T14421] usb 10-1: config 0 descriptor?? [ 415.079831][ T7468] bridge_slave_1: left allmulticast mode [ 415.086632][ T7468] bridge_slave_1: left promiscuous mode [ 415.092597][ T7468] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.108547][ T7468] bridge_slave_0: left allmulticast mode [ 415.114941][ T7468] bridge_slave_0: left promiscuous mode [ 415.121619][ T7468] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.347191][T14421] input: HID 05ac:8241 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:05AC:8241.0031/input/input56 [ 415.432432][T14421] appleir 0003:05AC:8241.0031: input,hiddev0,hidraw0: USB HID v0.05 Device [HID 05ac:8241] on usb-dummy_hcd.9-1/input0 [ 415.577512][T14421] usb 10-1: USB disconnect, device number 28 [ 415.715296][ T7468] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 415.726607][ T7468] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 415.738050][ T7468] bond0 (unregistering): Released all slaves [ 415.995855][ T7468] hsr_slave_0: left promiscuous mode [ 416.002214][ T7468] hsr_slave_1: left promiscuous mode [ 416.008431][ T7468] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 416.016157][ T7468] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 416.024031][ T7468] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 416.031625][ T7468] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 416.049561][ T7468] veth1_macvtap: left promiscuous mode [ 416.057378][ T7468] veth0_macvtap: left promiscuous mode [ 416.063066][ T7468] veth1_vlan: left promiscuous mode [ 416.068330][ T7468] veth0_vlan: left promiscuous mode [ 416.670281][ T5841] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 416.843620][ T5841] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 416.875413][ T5841] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 416.888818][ T5841] usb 7-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 416.910626][ T5841] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.926091][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 416.952636][ T5841] usb 7-1: config 0 descriptor?? [ 416.958359][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 416.979029][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 416.992158][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 417.005745][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 417.177516][ T7468] team0 (unregistering): Port device team_slave_1 removed [ 417.248064][ T7468] team0 (unregistering): Port device team_slave_0 removed [ 417.784406][ T5841] hid-led 0003:27B8:01ED.0032: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.6-1/input0 [ 417.856494][ T5841] hid-led 0003:27B8:01ED.0032: ThingM blink(1) initialized [ 418.035712][ T5841] usb 7-1: USB disconnect, device number 29 [ 418.145143][T14923] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3307'. [ 418.163702][T14923] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3307'. [ 418.756905][T14913] chnl_net:caif_netlink_parms(): no params data found [ 418.816956][T14949] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3317'. [ 418.898025][T14913] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.907440][T14913] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.915479][T14913] bridge_slave_0: entered allmulticast mode [ 418.920311][ T5907] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 418.923797][T14913] bridge_slave_0: entered promiscuous mode [ 418.938403][T14913] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.945921][T14913] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.953316][T14913] bridge_slave_1: entered allmulticast mode [ 418.961234][T14913] bridge_slave_1: entered promiscuous mode [ 419.008010][T14913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.031731][T14421] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 419.033514][T14913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.090447][ T5847] Bluetooth: hci1: command tx timeout [ 419.090647][ T5907] usb 2-1: Using ep0 maxpacket: 32 [ 419.116039][T14913] team0: Port device team_slave_0 added [ 419.128023][T14913] team0: Port device team_slave_1 added [ 419.133789][ T5907] usb 2-1: config 0 interface 0 has no altsetting 0 [ 419.145225][ T5907] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 419.171089][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.184815][T14913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.192099][T14913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.218145][T14421] usb 10-1: Using ep0 maxpacket: 16 [ 419.219511][ T5907] usb 2-1: config 0 descriptor?? [ 419.233915][T14913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.262208][T14421] usb 10-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 419.271999][T14421] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.282612][T14913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.285959][T14421] usb 10-1: Product: syz [ 419.289571][T14913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.289629][T14913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.294397][T14421] usb 10-1: Manufacturer: syz [ 419.346297][T14421] usb 10-1: SerialNumber: syz [ 419.358169][T14421] usb 10-1: config 0 descriptor?? [ 419.375548][T14421] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected. [ 419.398193][T14913] hsr_slave_0: entered promiscuous mode [ 419.405052][T14913] hsr_slave_1: entered promiscuous mode [ 419.412030][T14913] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 419.419960][T14913] Cannot create hsr debugfs directory [ 419.591865][T14421] pwc: Warning: more than 1 configuration available. [ 419.602358][T14421] pwc: Failed to set LED on/off time (-71) [ 419.608806][T14421] pwc: send_video_command error -71 [ 419.615149][T14421] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 419.623099][T14421] Philips webcam 10-1:0.0: probe with driver Philips webcam failed with error -71 [ 419.642682][T14421] usb 10-1: USB disconnect, device number 29 [ 420.032080][ T5907] corsair-cpro 0003:1B1C:0C10.0033: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.1-1/input0 [ 420.058744][T14913] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 420.074414][T14913] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 420.086378][T14913] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 420.115164][T14913] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 420.330752][T14913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.363594][T14913] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.378404][ T7468] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.385645][ T7468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.409996][T14986] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 420.421938][T14986] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 420.430382][T14986] CPU: 0 UID: 0 PID: 14986 Comm: syz.9.3328 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 420.442461][T14986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 420.452705][T14986] RIP: 0010:__list_del_entry_valid_or_report+0x25/0x190 [ 420.459696][T14986] Code: 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 41 55 41 54 53 48 89 fb 49 bd 00 00 00 00 00 fc ff df 48 83 c7 08 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 05 e8 af b6 60 fd 4c 8b 7b 08 48 89 d8 48 c1 e8 [ 420.479326][T14986] RSP: 0018:ffffc9000409f0c0 EFLAGS: 00010202 [ 420.485398][T14986] RAX: 000000000000000b RBX: 0000000000000050 RCX: 0000000000080000 [ 420.493407][T14986] RDX: ffffc9000dc59000 RSI: 000000000000032a RDI: 0000000000000058 [ 420.501398][T14986] RBP: dffffc0000000000 R08: ffff888028091e00 R09: 0000000000000002 [ 420.509369][T14986] R10: 00000000ffffffff R11: ffffffff89802ae0 R12: 0000000000000000 [ 420.517356][T14986] R13: dffffc0000000000 R14: 0000000000000050 R15: ffff888033248800 [ 420.525460][T14986] FS: 00007ff82df496c0(0000) GS:ffff888125c51000(0000) knlGS:0000000000000000 [ 420.534401][T14986] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 420.540981][T14986] CR2: 0000001b3131bff8 CR3: 0000000079174000 CR4: 00000000003526f0 [ 420.548955][T14986] Call Trace: [ 420.552227][T14986] [ 420.555155][T14986] drr_qlen_notify+0x2c/0xf0 [ 420.559747][T14986] qdisc_tree_reduce_backlog+0x299/0x480 [ 420.565387][T14986] ? qdisc_tree_reduce_backlog+0x3c/0x480 [ 420.571107][T14986] hhf_change+0x764/0xad0 [ 420.575442][T14986] ? __pfx_hhf_change+0x10/0x10 [ 420.580300][T14986] ? __pfx_hhf_init+0x10/0x10 [ 420.584975][T14986] hhf_init+0x213/0x950 [ 420.589125][T14986] ? __pfx_hhf_init+0x10/0x10 [ 420.593795][T14986] qdisc_create+0x7a9/0xea0 [ 420.598297][T14986] tc_modify_qdisc+0x1426/0x2010 [ 420.603232][T14986] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 420.608519][T14986] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 420.613803][T14986] rtnetlink_rcv_msg+0x77c/0xb70 [ 420.618740][T14986] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 420.623846][T14986] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 420.629302][T14986] ? ref_tracker_free+0x63a/0x7d0 [ 420.634322][T14986] ? __copy_skb_header+0xa7/0x550 [ 420.639346][T14986] ? __pfx_ref_tracker_free+0x10/0x10 [ 420.644725][T14986] netlink_rcv_skb+0x205/0x470 [ 420.649485][T14986] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 420.654940][T14986] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 420.660224][T14986] ? netlink_deliver_tap+0x2e/0x1b0 [ 420.665416][T14986] ? netlink_deliver_tap+0x2e/0x1b0 [ 420.670623][T14986] netlink_unicast+0x758/0x8d0 [ 420.675383][T14986] netlink_sendmsg+0x805/0xb30 [ 420.680147][T14986] ? __pfx_netlink_sendmsg+0x10/0x10 [ 420.685445][T14986] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 420.690745][T14986] ? __pfx_netlink_sendmsg+0x10/0x10 [ 420.696023][T14986] __sock_sendmsg+0x219/0x270 [ 420.700698][T14986] ____sys_sendmsg+0x505/0x830 [ 420.705459][T14986] ? __pfx_____sys_sendmsg+0x10/0x10 [ 420.710834][T14986] ? import_iovec+0x74/0xa0 [ 420.715333][T14986] ___sys_sendmsg+0x21f/0x2a0 [ 420.720008][T14986] ? __pfx____sys_sendmsg+0x10/0x10 [ 420.725212][T14986] ? __fget_files+0x2a/0x420 [ 420.729793][T14986] ? __fget_files+0x3a0/0x420 [ 420.734465][T14986] __x64_sys_sendmsg+0x19b/0x260 [ 420.739402][T14986] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 420.744859][T14986] ? rcu_is_watching+0x15/0xb0 [ 420.749621][T14986] ? do_syscall_64+0xbe/0x3b0 [ 420.754293][T14986] do_syscall_64+0xfa/0x3b0 [ 420.758793][T14986] ? lockdep_hardirqs_on+0x9c/0x150 [ 420.763992][T14986] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.770048][T14986] ? clear_bhb_loop+0x60/0xb0 [ 420.774715][T14986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.780599][T14986] RIP: 0033:0x7ff82d18e929 [ 420.785010][T14986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 420.804623][T14986] RSP: 002b:00007ff82df49038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 420.813033][T14986] RAX: ffffffffffffffda RBX: 00007ff82d3b5fa0 RCX: 00007ff82d18e929 [ 420.821000][T14986] RDX: 0000000000004000 RSI: 0000200000000040 RDI: 0000000000000003 [ 420.828964][T14986] RBP: 00007ff82d210b39 R08: 0000000000000000 R09: 0000000000000000 [ 420.836928][T14986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 420.844891][T14986] R13: 0000000000000000 R14: 00007ff82d3b5fa0 R15: 00007fff0ac97398 [ 420.852861][T14986] [ 420.855882][T14986] Modules linked in: [ 420.859920][T14986] ---[ end trace 0000000000000000 ]--- [ 420.865443][T14986] RIP: 0010:__list_del_entry_valid_or_report+0x25/0x190 [ 420.872601][T14986] Code: 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 41 55 41 54 53 48 89 fb 49 bd 00 00 00 00 00 fc ff df 48 83 c7 08 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 05 e8 af b6 60 fd 4c 8b 7b 08 48 89 d8 48 c1 e8 [ 420.892259][T14986] RSP: 0018:ffffc9000409f0c0 EFLAGS: 00010202 [ 420.898354][T14986] RAX: 000000000000000b RBX: 0000000000000050 RCX: 0000000000080000 [ 420.906358][T14986] RDX: ffffc9000dc59000 RSI: 000000000000032a RDI: 0000000000000058 [ 420.914366][T14986] RBP: dffffc0000000000 R08: ffff888028091e00 R09: 0000000000000002 [ 420.922380][T14986] R10: 00000000ffffffff R11: ffffffff89802ae0 R12: 0000000000000000 [ 420.930381][T14986] R13: dffffc0000000000 R14: 0000000000000050 R15: ffff888033248800 [ 420.938372][T14986] FS: 00007ff82df496c0(0000) GS:ffff888125c51000(0000) knlGS:0000000000000000 [ 420.947336][T14986] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 420.953950][T14986] CR2: 0000001b3131bff8 CR3: 0000000079174000 CR4: 00000000003526f0 [ 420.961988][T14986] Kernel panic - not syncing: Fatal exception in interrupt [ 420.969479][T14986] Kernel Offset: disabled [ 420.973803][T14986] Rebooting in 86400 seconds..