last executing test programs: 8.775620124s ago: executing program 2 (id=3372): syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$uac1(0x4, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x41, &(0x7f0000000200)=ANY=[@ANYBLOB="4103bf52aca215e37089b966543a40c220186d5a607065a9faa2dd0ff3519e96075214ad8f4dd1839c3d32037dda2b7c45a604e575560115d40421ec35a041c8b1"]}]}) r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x0, 0x0, {0x0, 0x1}, {0x74, 0x2}, @const={0x6, {0xfffe, 0x0, 0x8000}}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) 7.889497529s ago: executing program 2 (id=3374): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f00000001c0)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) setsockopt$ax25_int(r1, 0x101, 0xa, &(0x7f0000000040)=0x801, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x2c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0x2c}}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000180)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in=@multicast2, @in6=@initdev}}, {{@in6=@mcast2}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8) chdir(&(0x7f0000000140)='./bus\x00') r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f0000002700)=ANY=[@ANYRESOCT=r3], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, 0x0, 0x0) 7.66335049s ago: executing program 2 (id=3375): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, &(0x7f0000000100)=""/242, 0xf2) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xa8, &(0x7f0000000000)=ANY=[]) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x1e, 0x3f, 0xf8, 0x20, 0x2040, 0x6502, 0x14b6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xce, 0x0, 0x1, 0xc, 0x8f, 0x63, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) read$char_usb(r4, 0x0, 0x0) read$char_usb(r4, 0x0, 0x0) syz_usb_connect(0x2, 0x963, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0xda, 0x34, 0xeb, 0xff, 0x1740, 0x3701, 0x7464, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x951, 0x3, 0x6, 0x3, 0x40, 0x0, [{{0x9, 0x4, 0x4, 0x1, 0x9, 0x2f, 0xbb, 0x5d, 0xcd, [@hid_hid={0x9, 0x21, 0x1000, 0x17, 0x1, {0x22, 0x882}}], [{{0x9, 0x5, 0x80, 0x10, 0x40, 0xa6, 0x6, 0x1, [@generic={0x43, 0x8, "ce12dd292e74a0fbe53e10be4e641e1a552e955dc75cc5344ba0e64419c6108e87ce18bea2ce04dcc53fd606a0cd4f0090f21000bbf54e432f32b75390ae6ae04f"}]}}, {{0x9, 0x5, 0xb, 0x1, 0x40, 0x4, 0x7, 0x2, [@generic={0x29, 0xd, "0211a2c03301efc3c40c6a182d23e16b309959adfb72534d94e13c515181846665532ef1b6e7a4"}]}}, {{0x9, 0x5, 0xb, 0xc, 0x40, 0x8, 0x3, 0x5, [@generic={0x2, 0xa}]}}, {{0x9, 0x5, 0x5, 0x10, 0x400, 0xfa, 0x1, 0x8, [@generic={0xfa, 0xa, "64de330453e1db28b60868dccb8aa6b9e819dda7caef9d3e7b8cb9ea333b0ae802cbab10dc41bbe94d907e07521469be8e0c016ff96064a5a517cfefe5802ba94aec61855ad0cea89fc8232e89103c721016dc4f4d4956b232b615799fdc41e2892e1921a4405c2741937411dd29fb8ce368b27729acf292e08fd9063f43cd3ddc11dd5b15b12bc2117b47fa4eac4824824094e525c450133cd0654c36016231d8048797c6d413bf65dd2c7c37e5db579fd2f6bf01a5e90be051a504288b390ffd84f0ecbfbf0ba1afb7042f45d58ce5f42bc311928fc24d64afd486ae820bc006c70c80b0271387188706a75c54e7fe94a00759162fd609"}]}}, {{0x9, 0x5, 0x4, 0xc, 0x3ff, 0x2, 0x9, 0x1, [@generic={0xc3, 0x4416212ca8f8817a, "ecfc5fbfcb7c09b4400e64fda81d2a7db0cb11d1a25cc124ec4bd0a517e3c0b4fd9fcd8c1ffee3d9db7c173246a4d6d09e227c6664242fd29dba7df252a32a0b21b120d42ab46b64abe1c714ddd565118d836f7333e7b5cfe3f6595216dfe205c1ccb96f524578ac8384f19094fb8d86fc6f93656e0a80917a411e94f5be402dc70591a712170b2b1df0ee0a5f0f8bbc38db21dc9074aeabd4800d3d9c9e1be8d4cce2005e5b89e36a0bc520f7ebd68f78d8c605c16ec2d1ad61e2b8f4f20ae1f7"}]}}, {{0x9, 0x5, 0x80, 0x3, 0x8, 0x53, 0x4, 0x5, [@generic={0x9f, 0x23, "f54380d1d0d6ed68f41f1bc69aa8cc3d7e5a290a4e1bc3fae4cb603ab9146c8ab5211b729984e329a8dc06a13b2e643791067469ced765ec60ac582936743c4c99ef0f65f9d5e01fa54ba6906728f29bb04e2fdf7067d5b18bc99ce84738831d5454d139e359342795d0390c0f64b9139d684fccd4a036b3b8ee727973e35f99305d7666a8e8b3bcc2701f052c5439135d1af618a6a5014a0632915948"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x400, 0xa, 0x9, 0x0, [@generic={0xd8, 0x23, "fa5a44a8ce92b8433542cf729690192529d1db119a90eaed198c4465df46406159ec274c8c869b6acd9b844ce6c55a4d4f353dee1175e2ad35b7f049101c645eb10c9561bf199f25e8e33d0f4edff0b4da292a36a0b4cd46ba0afffdcc5b7485add0a0a1b7d1a0b48a78c7eec0b583ffef232b9c0413c601be9e9b47ce0233f5dfa31e8095ebc753f7c0bce3e56f505e282a63be10ce55ee5d42eac1793cf4d59b0eaab8c2db729bd282b47378c010492315c3930a91ba17e08ac243ee0662db6342e613f6f19b97d5dfc2b5ddbbf5b7e2c1448ce0eb"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0x8, 0xad, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x9}, @generic={0x22, 0x10, "0161ea31e66a57b30e704f1b42b0ce097b3d459a1b0507f394392d0457f32750"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x2, 0xe6, 0x49, [@generic={0x6e, 0x23, "008dee26919f5417af6204c434562c4edda396fa0cdf15d6d5ff8c3ff3bfcdbba1fc0e512bd646a1a9fb3495fd36490e7808846945797230c419f8d486d6566733bd6e87e44bc66b3f885d17eebb63f4e62bfd72523ef3e2d7acb4ea5bdefc442e09f92a19078fa6f2263e62"}]}}]}}, {{0x9, 0x4, 0x23, 0xff, 0xc, 0xfe, 0x3, 0x1, 0x1, [@hid_hid={0x9, 0x21, 0xa9, 0xbe, 0x1, {0x22, 0xa1b}}], [{{0x9, 0x5, 0xd, 0x0, 0x200, 0xf8, 0x2, 0x0, [@generic={0xb3, 0x22, "1d43f5fc2b491d71e96b68fd145a6cb13d99b61341f6afc67f28bb47a338748754a56341ea485779c3edca0c8512700d57514e6cf8f579c4e3867da6a392ae778761f00f3c385ebfaa41cfecc4158fdec2822ed6630fd25b7439901a4d73b480deee8a559d747aa7e28ce33e26b3b35f6b91216b37bea5df18a8b0f9b14aed41dfb06fccdf9be96244f1540d75d4e0decb2743d065d1ca743b61cf2e217d230be43bea96db8c70deef7a018f2dfa00a648"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x2}]}}, {{0x9, 0x5, 0x9, 0x1, 0x200, 0x2, 0xc1, 0x50, [@generic={0xf, 0x11, "3950a937a8cfa9b7f43b84d5f2"}]}}, {{0x9, 0x5, 0x7, 0x3, 0x10, 0x4, 0x1, 0xfc, [@generic={0x80, 0x23, "ea6c05ccbb9c94528d749387abd8c3f515fde2a5b8aff34a4a712f374d40b8c6cbed9f8a9c8ff630adf70692e30e95ace980787853b70b5293e14853435ef619efd9ac160fac246114db0d9ab45811a5ed508a561434091f7a3dc61c26db366ad0615c1d480fc360fbea4d9b9fc0c70a3e57a4262806e0bb1ff4968c9735"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x3, 0xcb, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xb8, 0x401}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x2}]}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x4, 0x19, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1c, 0x2}]}}, {{0x9, 0x5, 0x0, 0x4, 0x200, 0xb, 0x8, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0xc}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x7, 0xada}]}}, {{0x9, 0x5, 0xa, 0x1f, 0x20, 0x2, 0x5, 0x4, [@generic={0x8b, 0x23, "8572f9255115dfd5d6618ed0b4ae3b96090fd1cdbba881250ed70e47c12cb8ac31f56d40bac69a8eafbbb0924ab26dabaa36eff5400250f8ee3bab6512f4f88898339c935c0cd2e27bae0359738a912475474c5403a2fa9a5ec210f58cebe81551700af7a1e92818f541bc14a3451ca9598fada45a23269a63ce2517b1e0d8d92c4e546aff06ca0678"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xfd, 0xfff8}]}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0xf8, 0x9, 0x0, [@generic={0xe5, 0x21, "abc31ebc681850577fcd4ed93d41fd7d89ee17a6471a5d99754b5fc8fa9ca9f0e36bcfaaf38cd467f4d110e5da045224de6fb328903ce2dd7938b020060ecb3d806ca8394e6785df216a5b27fb057d893b7b92bbdcca87ad3228e59ac18aba0249db57d11a0f245fcfa92cee932d3c58b850e19175d7b773d5fea8ee7bca6bfff1b3e0ee37add692404eb706baf955f8aff5465cb58250b4bf288d10781ab97d23c205c80165a72fb12c6088ed3c55f77d2cd3bb6ed080402f695158d164d016e39beae786f662da7355269d1457e6018ae0f6340f1c6e1b38755db1888d5606b7a4f4"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x400, 0x2, 0x8, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xa}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9b, 0x8}]}}, {{0x9, 0x5, 0x5, 0xc, 0x8, 0x4, 0x8, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xc, 0x3ff}]}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x9, 0x7f, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0x3}]}}, {{0x9, 0x5, 0x8, 0x10ad0899733f15de, 0x8, 0x6, 0x7, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x9a7}, @generic={0x6d, 0x22, "1f0e075474b50c25b5db3c5294133fbc1aab4b7b7a6a214ffd9f95ffe011972aceaec8e504cf2f3d1002cead49aa80f4a8a4ca43b98d677e078ba9b58c02ffe8123cb667e94a60f3bc8c6c7c98fc034c9d4199675985c9097fd48ce6aa787d48d35ab40c736caf19fde91a"}]}}]}}, {{0x9, 0x4, 0xce, 0xb7, 0x4, 0xd2, 0x3e, 0x1d, 0x5, [@uac_control={{0xa, 0x24, 0x1, 0x5, 0x9}, [@extension_unit={0x7, 0x24, 0x8, 0x3, 0x3, 0x3}, @extension_unit={0x8, 0x24, 0x8, 0x4, 0x2, 0x2, "84"}, @feature_unit={0x9, 0x24, 0x6, 0x2, 0x1, 0x1, [0x6], 0xa}, @feature_unit={0xf, 0x24, 0x6, 0x5, 0x2, 0x4, [0x3, 0x0, 0x7, 0x9], 0xfe}, @mixer_unit={0x8, 0x24, 0x4, 0x5, 0xc, "3165cc"}, @feature_unit={0xf, 0x24, 0x6, 0x3, 0x3, 0x4, [0x8, 0xa, 0x5, 0x6], 0x95}]}, @uac_control={{0xa, 0x24, 0x1, 0xff34, 0x8}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x300, 0x5, 0x5, 0x5}]}], [{{0x9, 0x5, 0x4, 0x0, 0x200, 0x2, 0x4, 0x61, [@generic={0x2, 0x2}]}}, {{0x9, 0x5, 0x9, 0xc, 0x20, 0x7, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x35, 0x3ff}]}}, {{0x9, 0x5, 0x8, 0x0, 0x400, 0x7, 0x7f, 0xff, [@generic={0x25, 0x22, "d6d2935c84b8a436854e31b0c04be4e55a3a22f7e445b3bd83a37c790f398e1397aceb"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0xef, 0x5, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x81}]}}]}}]}}]}}, &(0x7f0000001140)={0xa, &(0x7f0000000d00)={0xa, 0x6, 0x250, 0x6, 0x0, 0x0, 0x40, 0x6}, 0xd6, &(0x7f0000000d40)={0x5, 0xf, 0xd6, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0xb, 0x9, 0xfffc}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x3, 0x7, 0x9}, @generic={0xbd, 0x10, 0x3, "35a6bffa8540f039411207b855de2ac60bc6e4240f9fd014aa753f844da8c8556f373170667e24ef078ab4eaa7d5852c82585ad35bd26d911b820695e52daaa0e01cd325e9042bbee3b655086a3c3339eefe969b8962f23acfac24ee91c23ea29812c1175b34e839b357d8248e0174746fe135d886118f9320b9130e23703d756b9a6f541c38691b8a37271a2af9d1f2ebab160f38cc018af0cbac2d5f12039b34a83b546cc21f8a3cd0731bddfda59128975ad2ca34df4454ca"}]}, 0x5, [{0x86, &(0x7f0000001340)=ANY=[@ANYBLOB="8603329e1dfc1ed525a27be164d94434f3c60c26a07e688b61b18c8d0d3f3daf2ea0f99a4fbdfab2d6bc9243e4ae31ef0e459991a8e3bd1a07cf1eb81ca0f68ce8050be425099f263a0bb80fe5958959fda9b897dc4ca82ae2a157617633eb90a64687e981dc5bc4d55c80e0004b0bae4598ed3e582c6c1ab3f463d8bdfab67e9e5ff05bce20de55ebb5d5929ddd"]}, {0x4, &(0x7f0000000f40)=@lang_id={0x4, 0x3, 0x140a}}, {0xa1, &(0x7f0000000f80)=@string={0xa1, 0x3, "f8b62ad9332b416c02b0a0f00e51108558caea45b5d845e538071d11b448746f29a66e4c92aecb55277e1d2ea5c1d68a348668bb12f714b3d4acee08701250e60daaf30e5fe2c9e7de19b472842b17562dd319713b1572ada79caa6241d18881ab1ea40c2f30c666bb208f1d6852a8f4fd90d7af9a4911c61ea22d134a7a2e9c78885246f0cdbf9580d10f63a10a2456a6429104b21734db4bd9b861b6b919"}}, {0x4, &(0x7f0000001040)=@lang_id={0x4, 0x3, 0x41d}}, {0x9b, &(0x7f0000001080)=@string={0x9b, 0x3, "c0f851e513394e60463cf4f6ae9eec5cc9ff81f5e0deca4cd9a92ad5b5dca9029a2cdf7ed3c019c4f86aed32ee3e9c462e6ad2da98747eec416ed00c92af65006a63a6702b563fcf58561848d210ef6b1cfcc24ef7e5830a862b70e258ebf7b1cb847efc3f322b50c42560caba50ff665606dc5fd4c4a718f095fe2434b46fe16e9af957e1616c6201ece411e4a470e2b15b6756e1fd9afb19"}}]}) syz_usb_connect$printer(0x4, 0x36, &(0x7f00000011c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0xc0, 0x1, [{{0x9, 0x4, 0x0, 0x3b, 0x1, 0x7, 0x1, 0x3, 0xff, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x5, 0x2, 0x8}}, [{{0x9, 0x5, 0x82, 0x2, 0x1bf, 0x0, 0x2e, 0x2}}]}}}]}}]}}, &(0x7f0000001300)={0xa, &(0x7f0000001200)={0xa, 0x6, 0x110, 0x8e, 0x5e, 0xd, 0x20, 0x4}, 0x8, &(0x7f0000001240)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f0000001280)=@lang_id={0x4, 0x3, 0x861}}, {0x4, &(0x7f00000012c0)=@lang_id={0x4, 0x3, 0x41a}}]}) r5 = syz_open_dev$hidraw(&(0x7f0000000440), 0x243c2917, 0x14a042) write$hidraw(r5, &(0x7f0000000040)='F', 0xfffffe41) read$hidraw(r5, 0x0, 0x0) ioctl$HIDIOCGRDESC(r5, 0x90044802, 0x0) write$hidraw(r5, 0x0, 0x0) r6 = syz_usb_connect(0x3, 0x0, 0x0, 0x0) syz_usb_disconnect(r6) syz_usb_connect(0x2, 0x36, 0x0, 0x0) r7 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) 5.747701132s ago: executing program 4 (id=3391): r0 = syz_open_dev$hiddev(&(0x7f0000000040), 0x7, 0x6c0080) ioctl$HIDIOCSFLAG(r0, 0x4004480f, &(0x7f0000000080)=0x3) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a800800904000001030000000905", @ANYRES32], 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) 5.636349792s ago: executing program 0 (id=3392): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000020000402505a1"], 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0) 4.850477432s ago: executing program 3 (id=3397): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', 0x0}) 4.667504197s ago: executing program 3 (id=3398): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f00000001c0)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) setsockopt$ax25_int(r1, 0x101, 0xa, &(0x7f0000000040)=0x801, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x2c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0x2c}}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000180)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in=@multicast2, @in6=@initdev}}, {{@in6=@mcast2}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8) chdir(&(0x7f0000000140)='./bus\x00') r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f0000002700)=ANY=[@ANYRESOCT=r3], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, 0x0, 0x0) 4.258812063s ago: executing program 4 (id=3399): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x1}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x250, 0xc2, 0xad, 0x10, 0x40, 0x5c6, 0x9212, 0xd12a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0x4, 0x0, 0xa7, [{{0x9, 0x4, 0x0, 0x40, 0x0, 0xff, 0xe0, 0xbf, 0x5}}]}}]}}, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r2) syz_usb_connect$uac1(0x5, 0x90, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7e, 0x3, 0x1, 0x3, 0x80, 0xaf, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x2}, [@selector_unit={0x5, 0x24, 0x5, 0x1, 0xf2}, @feature_unit={0x9, 0x24, 0x6, 0x3, 0x4, 0x1, [0x5], 0x9}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x303, 0x4, 0x2, 0xcb}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x7af, 0x8, 0x0, 0xe, {0x7, 0x25, 0x1, 0x0, 0x80, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0xe, 0x4, 0x6, 0x81}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x6, 0x1, 0x9, {0x7, 0x25, 0x1, 0x82, 0x7d, 0x9}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x5, &(0x7f0000000200)={0x5, 0xf, 0x5}, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) syz_usb_disconnect(r0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000040)={0x16}) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x458, 0x153, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000280)={0x2c, &(0x7f00000022c0)=ANY=[@ANYRES64, @ANYRESDEC=r3, @ANYBLOB="0b91a9c44349fd92679d5d7f2c7d4192", @ANYRESDEC=r0, @ANYBLOB="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", @ANYRESHEX=r3, @ANYRES64=r3, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0}, 0x0) 4.258521433s ago: executing program 3 (id=3400): r0 = socket$inet6(0xa, 0x3, 0x5) socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f00000002c0)=[{{&(0x7f0000000340)=@l2tp6={0xa, 0x500, 0x80000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x80, 0x0}, 0x5b4}], 0x1, 0x0) 4.159519908s ago: executing program 3 (id=3401): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x45, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x57, {0x57, 0x0, "a7ea3163fd3bc518194b120c1e73d54cfc4ad2841ef4f6a3fd7c59ccb785025f2e7b3504ff87cbfd10f3c080b73385a7015d3a32ed6b5217cdbb6fadb2ea7a288982d5337c364daf03bd400d66293b0a2b103dd93f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_connect$uac1(0x6, 0x71, 0x0, 0x0) syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x56a, 0xdd, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xfe, 0x90, 0x6, [{{0x9, 0x4, 0x0, 0x80, 0x2, 0x3, 0x1, 0x2, 0x2, {0x9, 0x21, 0x8, 0x8b, 0x1, {0x22, 0x613}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x8, 0x7, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0xe2, 0x5, 0x5}}]}}}]}}]}}, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x59, 0x77, 0xc, 0x40, 0x9c0, 0x203, 0xd332, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xfa, 0x10, 0xc9}}]}}]}}, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) r4 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_ep_write(r4, 0x81, 0xe0, &(0x7f0000000240)="b9425b446512d23236973599b76c4705397f00466e5b7462c24a16941ff5f4b4f1f0add7fc8280adbfa66d5b5ebe1adf42b8f59f90604e07d2388862672dfbf3e0c9d3969890524f3323746bde8946c7ec160f9e688f6b86781684ed273a5bd5531d459dc627ec0af211ebbf909987f5d2e8dcb3351da332165081af7d0814c57f5d65e4b436aa9f50bc0f19b7df372ff9ebcede1ff0cc752cf246a5d2da34a5a297dc14a469c3dd3e26b41c356484e06fd66e3f2c7807e8773ecd7b94fad89ab84feadec2ea95f65bba452eaef4b0cf962e05000000000000001107e2815e47") r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904002c11018b7500090583"], 0x0) r6 = syz_open_dev$evdev(0x0, 0x9468, 0x0) ioctl$EVIOCGMTSLOTS(r6, 0x8040450a, 0x0) syz_usb_disconnect(r5) syz_usb_connect$hid(0x3, 0x36, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) r7 = syz_open_dev$evdev(&(0x7f0000000140), 0x22, 0x0) ioctl$EVIOCSKEYCODE(r7, 0x40084504, &(0x7f0000000040)) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r8 = syz_open_dev$hidraw(&(0x7f0000000b40), 0x9, 0x4b042) write$hidraw(r8, &(0x7f0000000bc0), 0xffffffae) syz_usb_ep_write(r3, 0x0, 0xf8, &(0x7f0000000440)="98cbc4fcb65be4981354b8dea45d86e7528c85438ce339ea4fd7f5a825e53b494a5577af649412c78637a3497011299f34cb45f1bebc2253f966921977ec4cc6044b693d91879cfdc095a24698107e236587dce2fc7539dd41a70c904c6b4da582d3494fcd099065379e79c8db8b9aa1f6e063907e29ba9ddd7b2810ba022cca05238cb5f45e98806aa668a80133ac4deddce1600cffadc332a6f90bb95d294481324800d7ee8013168d63eaa02da8f2dbe0a317fc281206985544fdeb0a7b9c940da402261abddaf5ca2190831f2aa70a66fb3c8f2091bf735e853e1dc35108a746cbf87f69c2b117d4ad54ff6fcc209200ad4e0a372689") r9 = syz_open_dev$evdev(&(0x7f0000000040), 0x5, 0x200) ioctl$EVIOCSKEYCODE_V2(r9, 0x40284504, &(0x7f0000007380)={0xc, 0x8, 0x1000, 0x1, "b6184bc10108519999fa8bce3f9838ab22a2635ef497cf15383a2b6a247977fa"}) ioctl$EVIOCGPROP(r9, 0x80404509, &(0x7f0000000000)=""/141) syz_usb_connect(0x0, 0x24, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0x6e, 0x40, 0xb7, 0x40, 0x9e1, 0x5121, 0x40c1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3c, 0xac, 0x24}}]}}]}}, 0x0) ioctl$EVIOCSFF(r9, 0x40304580, &(0x7f00000000c0)={0x55, 0x1, 0xeb8, {0x2, 0x6}, {0x2, 0x4ee}, @rumble={0x7, 0x5}}) 3.906880708s ago: executing program 0 (id=3402): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010600000000000000", @ANYRES32=r1, @ANYBLOB="07005300010000000800050004"], 0x2c}, 0x1, 0x0, 0x0, 0x20004041}, 0x0) 3.819850939s ago: executing program 0 (id=3403): socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x101202, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000100)=ANY=[], 0x4) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'unlock', ' ', 'io+mem'}, 0xe) connect$netrom(r0, &(0x7f0000000480)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040), 0x4, r3}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000380)={0x201, 0x1, &(0x7f0000000440)=[r3], &(0x7f0000000400)=[0x9], &(0x7f00000000c0)=[r4], &(0x7f0000000340)}) r5 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) socket(0x10, 0x3, 0x0) setregid(0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) r6 = dup3(r2, r5, 0x0) preadv(r6, 0x0, 0x0, 0x0, 0x0) 3.45349285s ago: executing program 1 (id=3404): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000000)=0x200, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a00000004a0003000002", @ANYBLOB="0000000014"], 0xa0}, 0x1, 0x0, 0x0, 0x4}, 0x4) 3.06108741s ago: executing program 2 (id=3405): r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022d0001000000000904000005030002000921000033012205000905810300000c00070905020300ec00"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x40, 0xe, 0xa, {0xa, 0x10, "60d4115e4a6b0869"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.06034269s ago: executing program 0 (id=3406): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380)) r1 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 3.016814836s ago: executing program 1 (id=3407): ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40449426, &(0x7f00000003c0)={{}, 0x1, &(0x7f0000000340)=[0x9dab], 0xffffffff, 0x2, 0x1}) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000300)=[0x0], &(0x7f0000000040), 0x1, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x201, 0x0, 0x0, &(0x7f0000000200), &(0x7f00000000c0)=[r3], &(0x7f0000000340)}) 2.958991886s ago: executing program 1 (id=3408): getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@ipv4={""/10, ""/2, @initdev}}}, &(0x7f0000000200)=0xe8) quotactl_fd$Q_QUOTAOFF(0xffffffffffffffff, 0xffffffff80000300, r0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x10000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) close(0xffffffffffffffff) r3 = fcntl$dupfd(r2, 0x0, r2) syz_io_uring_setup(0x238, 0x0, 0x0, &(0x7f00000002c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) ioctl$TCFLSH(r3, 0x400455c8, 0x20000000009) 2.549535322s ago: executing program 1 (id=3409): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000401e04012800000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="20000800000091"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x9b, 0xde, 0x52, 0x10, 0x3923, 0x718a, 0xd8d7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x9, 0x40, 0x19, [{{0x9, 0x4, 0x7b, 0x7, 0x0, 0x2d, 0x51, 0xd5, 0x98}}]}}]}}, 0x0) 2.138801458s ago: executing program 0 (id=3410): syz_usb_connect(0x3, 0x2d, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x5a, 0xe4, 0xc4, 0x10, 0x596, 0x1, 0x5f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd6, 0x0, 0x1, 0xb5, 0xe1, 0x45, 0x0, [], [{{0x9, 0x5, 0x83, 0x0, 0x3ff, 0x3, 0x7, 0x4}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 1.294792859s ago: executing program 3 (id=3411): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f00000001c0)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) setsockopt$ax25_int(r3, 0x101, 0xa, &(0x7f0000000040)=0x801, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x2c, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0x2c}}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000180)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in=@multicast2, @in6=@initdev}}, {{@in6=@mcast2}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8) chdir(&(0x7f0000000140)='./bus\x00') r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r9, 0x29, 0x36, &(0x7f0000002700)=ANY=[@ANYRESOCT=r5], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r9, 0x29, 0x36, 0x0, 0x0) 1.157486068s ago: executing program 2 (id=3412): r0 = socket$inet6(0xa, 0x3, 0x5) dup2(0xffffffffffffffff, r0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f00000002c0)=[{{&(0x7f0000000340)=@l2tp6={0xa, 0x500, 0x80000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x80, 0x0}, 0x5b4}], 0x1, 0x0) 1.059067733s ago: executing program 4 (id=3413): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010600000000000000", @ANYRES32=r1, @ANYBLOB="07005300010000000800050004"], 0x2c}, 0x1, 0x0, 0x0, 0x20004041}, 0x0) 987.677378ms ago: executing program 2 (id=3414): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f00000005c0)={0x14, &(0x7f00000001c0)={0x0, 0x0, 0xe, {0xe, 0x0, "6c46936e41c5838bf3d423ab"}}, 0x0}, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000002300), 0x1, 0x14a042) syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x0) 867.179461ms ago: executing program 4 (id=3415): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x8a082, 0x0) write$vga_arbiter(r0, 0x0, 0x0) 749.372323ms ago: executing program 3 (id=3416): syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0xa4, 0x8, 0xc, 0x20, 0x864, 0x4100, 0x245e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x4, 0xe0, 0x9, [{{0x9, 0x4, 0xe9, 0x9, 0x0, 0xc6, 0xe5, 0x6d, 0x1}}]}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) 749.115593ms ago: executing program 1 (id=3417): socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x101202, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000100)=ANY=[], 0x4) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'unlock', ' ', 'io+mem'}, 0xe) connect$netrom(r0, &(0x7f0000000480)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040), 0x4, r3}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000380)={0x201, 0x1, &(0x7f0000000440)=[r3], &(0x7f0000000400)=[0x9], &(0x7f00000000c0)=[r4], &(0x7f0000000340)}) r5 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) socket(0x10, 0x3, 0x0) setregid(0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) r6 = dup3(r2, r5, 0x0) preadv(r6, 0x0, 0x0, 0x0, 0x0) 661.570935ms ago: executing program 4 (id=3418): ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40449426, &(0x7f00000003c0)={{}, 0x1, &(0x7f0000000340)=[0x9dab], 0xffffffff, 0x2, 0x1}) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000300)=[0x0], &(0x7f0000000040), 0x1, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x201, 0x0, &(0x7f0000000440), &(0x7f0000000200), &(0x7f00000000c0)=[r3], &(0x7f0000000340)}) 116.148859ms ago: executing program 0 (id=3419): getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@ipv4={""/10, ""/2, @initdev}}}, &(0x7f0000000200)=0xe8) quotactl_fd$Q_QUOTAOFF(0xffffffffffffffff, 0xffffffff80000300, r0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x10000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) close(0xffffffffffffffff) r3 = fcntl$dupfd(r2, 0x0, r2) syz_io_uring_setup(0x238, 0x0, 0x0, &(0x7f00000002c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) ioctl$TCFLSH(r3, 0x400455c8, 0x20000000009) 97.403765ms ago: executing program 4 (id=3420): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380)) r1 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 0s ago: executing program 1 (id=3421): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000040)={0x40, 0x17, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): using dummy_hcd [ 1133.015256][ T5116] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1133.373120][ T5116] usb 4-1: USB disconnect, device number 17 [ 1133.519058][ T4292] usb usb38-port1: attempt power cycle [ 1133.583742][ T7970] usb 5-1: device descriptor read/64, error -71 [ 1133.893751][ T7970] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1134.163704][ T7970] usb 5-1: device descriptor read/64, error -71 [ 1134.284677][ T7970] usb usb5-port1: attempt power cycle [ 1134.317729][ T4292] usb usb38-port1: unable to enumerate USB device [ 1134.693866][ T7970] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1134.804397][ T7970] usb 5-1: device descriptor read/8, error -71 [ 1135.087786][ T7970] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1135.194173][ T7970] usb 5-1: device descriptor read/8, error -71 [ 1135.377876][ T7970] usb usb5-port1: unable to enumerate USB device [ 1135.839637][T14315] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2730'. [ 1138.783979][ T4324] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 1138.980211][ T4324] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1138.999964][ T4324] usb 5-1: not running at top speed; connect to a high speed hub [ 1139.109887][ T4324] usb 5-1: config 2 has an invalid interface number: 212 but max is 1 [ 1139.118289][ T4324] usb 5-1: config 2 has an invalid interface number: 226 but max is 1 [ 1139.132081][ T4324] usb 5-1: config 2 has no interface number 0 [ 1139.138293][ T4324] usb 5-1: config 2 has no interface number 1 [ 1139.150369][ T4324] usb 5-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1139.189060][ T4324] usb 5-1: config 2 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 1139.274076][ T4324] usb 5-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 37745, setting to 64 [ 1139.479858][ T4324] usb 5-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1139.491842][ T4324] usb 5-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1139.508753][ T4324] usb 5-1: config 2 interface 212 has no altsetting 0 [ 1140.650860][ T4324] usb 5-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 1140.661084][ T4324] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1140.671010][ T4324] usb 5-1: Product: syz [ 1140.675696][ T4324] usb 5-1: Manufacturer: syz [ 1140.681321][ T4324] usb 5-1: SerialNumber: syz [ 1142.546644][ T4324] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:2.226/input/input10 [ 1142.811583][ T4324] usb 5-1: USB disconnect, device number 33 [ 1142.811639][ C1] xpad 5-1:2.226: xpad_irq_in - usb_submit_urb failed with result -19 [ 1143.034079][ T4292] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1144.043746][ T4292] usb 4-1: Using ep0 maxpacket: 8 [ 1144.056216][ T4292] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1144.080817][ T4292] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1144.110934][ T4292] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1144.148066][ T4292] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1144.175361][ T4292] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1144.185060][ T4292] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1144.250995][ T4292] hub 4-1:1.0: bad descriptor, ignoring hub [ 1144.273278][ T4292] hub: probe of 4-1:1.0 failed with error -5 [ 1144.296555][ T4292] cdc_wdm 4-1:1.0: skipping garbage [ 1144.319719][ T4292] cdc_wdm 4-1:1.0: skipping garbage [ 1144.348003][ T4292] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1144.362103][ T4292] cdc_wdm 4-1:1.0: Unknown control protocol [ 1144.602407][T14389] device syz_tun entered promiscuous mode [ 1144.645676][T14389] device syz_tun left promiscuous mode [ 1144.974860][ T7970] usb 4-1: USB disconnect, device number 18 [ 1145.898800][T14401] 9pnet_fd: Insufficient options for proto=fd [ 1147.031189][ T27] audit: type=1326 audit(1741252889.186:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14407 comm="syz.1.2757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd41f98d169 code=0x7ffc0000 [ 1147.453328][ T27] audit: type=1326 audit(1741252889.536:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14407 comm="syz.1.2757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd41f98d169 code=0x7ffc0000 [ 1147.475624][ C1] vkms_vblank_simulate: vblank timer overrun [ 1147.532053][ T27] audit: type=1326 audit(1741252889.536:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14407 comm="syz.1.2757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd41f98d169 code=0x7ffc0000 [ 1147.742282][T14420] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2758'. [ 1148.453816][ T27] audit: type=1326 audit(1741252889.536:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14407 comm="syz.1.2757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd41f98d169 code=0x7ffc0000 [ 1148.522554][ T27] audit: type=1326 audit(1741252889.536:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14407 comm="syz.1.2757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd41f929359 code=0x7ffc0000 [ 1148.724083][ T27] audit: type=1326 audit(1741252889.536:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14407 comm="syz.1.2757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd41f98d169 code=0x7ffc0000 [ 1148.808978][ T27] audit: type=1326 audit(1741252889.536:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14407 comm="syz.1.2757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd41f929359 code=0x7ffc0000 [ 1149.525897][ T27] audit: type=1326 audit(1741252889.536:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14407 comm="syz.1.2757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd41f98d169 code=0x7ffc0000 [ 1149.706974][ T27] audit: type=1326 audit(1741252889.536:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14407 comm="syz.1.2757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd41f929359 code=0x7ffc0000 [ 1149.831789][ T27] audit: type=1326 audit(1741252889.536:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14407 comm="syz.1.2757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd41f98d169 code=0x7ffc0000 [ 1150.840068][T14450] 9pnet_fd: Insufficient options for proto=fd [ 1152.445517][T14469] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2775'. [ 1154.415037][T12477] Bluetooth: hci2: unexpected event 0x2f length: 1017 > 260 [ 1154.415088][T12477] Bluetooth: hci2: Malformed Event: 0x2f [ 1154.831859][T14498] 9pnet_fd: Insufficient options for proto=fd [ 1155.653753][ T4324] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1155.843730][ T4324] usb 5-1: Using ep0 maxpacket: 32 [ 1155.857032][ T4324] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1155.888038][ T4324] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1155.918077][ T4324] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1155.942400][ T4324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1155.991755][ T4324] hub 5-1:4.0: USB hub found [ 1156.603496][T14519] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2789'. [ 1157.070636][ T4324] hub 5-1:4.0: 30 ports detected [ 1157.075760][ T4324] usb 5-1: selecting invalid altsetting 1 [ 1157.081512][ T4324] hub 5-1:4.0: Using single TT (err -22) [ 1157.087881][ T4324] hub 5-1:4.0: insufficient power available to use all downstream ports [ 1158.164620][ T4324] hub 5-1:4.0: hub_hub_status failed (err = -32) [ 1158.171453][ T4324] hub 5-1:4.0: config failed, can't get hub status (err -32) [ 1160.813878][ T4292] usb 5-1: USB disconnect, device number 34 [ 1163.003928][T14588] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1163.946908][T14600] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2809'. [ 1165.701914][T14610] fuse: Bad value for 'fd' [ 1167.332073][T14625] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2815'. [ 1170.643053][T14653] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2821'. [ 1170.692956][T14655] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2824'. [ 1172.830241][T14675] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2829'. [ 1175.325168][T14702] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2837'. [ 1176.706331][T14714] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2841'. [ 1177.537940][T14719] netlink: 'syz.3.2842': attribute type 83 has an invalid length. [ 1178.603752][ T5116] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1178.904660][ T5116] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1178.919131][ T5116] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1178.933719][ T5116] usb 4-1: config 1 has no interface number 0 [ 1178.939923][ T5116] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1179.023467][T14739] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2849'. [ 1179.706683][ T5116] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1179.735637][ T5116] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1179.854294][ T5116] usb 4-1: Product: syz [ 1179.858516][ T5116] usb 4-1: Manufacturer: syz [ 1179.880173][ T5116] usb 4-1: SerialNumber: syz [ 1182.273816][T14747] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2852'. [ 1182.561388][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.567750][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 1182.770888][ T5116] usb 4-1: can't set config #1, error -71 [ 1182.783857][ T5116] usb 4-1: USB disconnect, device number 19 [ 1182.985198][T14764] netlink: 'syz.1.2856': attribute type 83 has an invalid length. [ 1184.044785][T14779] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2861'. [ 1185.748349][ T4324] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1188.003809][T14796] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2865'. [ 1188.373937][ T4324] usb 5-1: Using ep0 maxpacket: 8 [ 1188.432045][ T4324] usb 5-1: device descriptor read/all, error -71 [ 1188.599576][T14802] 9pnet_fd: Insufficient options for proto=fd [ 1190.557988][T14822] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2874'. [ 1195.492110][T14857] 9pnet_fd: Insufficient options for proto=fd [ 1196.131739][T14864] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2886'. [ 1196.790708][T14870] sctp: [Deprecated]: syz.4.2888 (pid 14870) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1196.790708][T14870] Use struct sctp_sack_info instead [ 1198.979543][ T4244] syz-executor (4244) used greatest stack depth: 19768 bytes left [ 1200.776949][ T6658] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1200.854759][T14896] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2898'. [ 1200.964965][ T6658] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1201.294615][ T6658] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1201.329706][ T48] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1201.347407][ T48] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1201.360733][ T48] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1201.374077][ T48] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1201.393826][ T48] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1201.401623][ T48] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1201.579483][ T6658] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1201.748881][T14925] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2904'. [ 1202.196724][T14913] chnl_net:caif_netlink_parms(): no params data found [ 1203.485474][T12477] Bluetooth: hci2: command 0x0409 tx timeout [ 1203.875978][T14913] bridge0: port 1(bridge_slave_0) entered blocking state [ 1203.893465][T14913] bridge0: port 1(bridge_slave_0) entered disabled state [ 1203.910844][T14913] device bridge_slave_0 entered promiscuous mode [ 1203.953449][T14913] bridge0: port 2(bridge_slave_1) entered blocking state [ 1203.971500][T14913] bridge0: port 2(bridge_slave_1) entered disabled state [ 1204.026967][T14913] device bridge_slave_1 entered promiscuous mode [ 1204.114185][T14953] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=16777216 (33554432 ns) > initial count (12 ns). Using initial count to start timer. [ 1204.146999][T14913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1204.231108][T14913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1204.422420][T14913] team0: Port device team_slave_0 added [ 1204.499876][T14913] team0: Port device team_slave_1 added [ 1204.797816][T14913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1204.822799][T14913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1205.256217][T14913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1205.347374][T14913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1205.419112][T14913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1205.537890][T14913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1205.563982][T12477] Bluetooth: hci2: command 0x041b tx timeout [ 1205.643763][ T4294] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1205.839470][ T4294] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1205.870244][ T4294] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1206.042697][ T4294] usb 3-1: Product: syz [ 1206.047910][ T4294] usb 3-1: Manufacturer: syz [ 1206.052553][ T4294] usb 3-1: SerialNumber: syz [ 1206.074769][ T4294] usb 3-1: config 0 descriptor?? [ 1206.201680][T14913] device hsr_slave_0 entered promiscuous mode [ 1206.238584][T14913] device hsr_slave_1 entered promiscuous mode [ 1206.259388][T14913] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1206.288794][T14913] Cannot create hsr debugfs directory [ 1206.290621][ T4294] usb 3-1: USB disconnect, device number 31 [ 1206.399473][ T6658] device hsr_slave_0 left promiscuous mode [ 1206.412299][ T6658] device hsr_slave_1 left promiscuous mode [ 1206.439763][ T6658] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1206.470627][ T6658] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1206.502999][ T6658] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1206.522130][ T6658] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1206.536973][ T6658] device bridge_slave_0 left promiscuous mode [ 1206.555807][ T6658] bridge0: port 1(bridge_slave_0) entered disabled state [ 1206.607567][ T6658] device veth1_macvtap left promiscuous mode [ 1206.614767][ T6658] device veth0_macvtap left promiscuous mode [ 1206.827988][ T6658] device veth1_vlan left promiscuous mode [ 1206.958025][ T6658] device veth0_vlan left promiscuous mode [ 1207.343924][ T4381] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1207.573774][ T4324] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1207.646929][T12477] Bluetooth: hci2: command 0x040f tx timeout [ 1207.673787][ T4381] usb 1-1: Using ep0 maxpacket: 8 [ 1207.696614][ T4381] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1207.742482][ T4381] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1207.780625][ T4381] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1207.809813][ T4381] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1207.846060][ T4381] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1207.882853][ T4381] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1207.991931][ T4381] hub 1-1:1.0: bad descriptor, ignoring hub [ 1208.018843][ T4381] hub: probe of 1-1:1.0 failed with error -5 [ 1208.063161][ T4381] cdc_wdm 1-1:1.0: skipping garbage [ 1208.099816][ T4381] cdc_wdm 1-1:1.0: skipping garbage [ 1208.195609][ T4381] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1208.219940][ T4381] cdc_wdm 1-1:1.0: Unknown control protocol [ 1208.305347][ T4381] usb 1-1: USB disconnect, device number 24 [ 1208.365647][ T4324] usb 5-1: New USB device found, idVendor=0c45, idProduct=62a0, bcdDevice=a8.22 [ 1208.377180][ T4324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1208.388642][ T4324] usb 5-1: config 0 descriptor?? [ 1208.406637][ T4324] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:62a0 [ 1208.448245][ T6658] bond1 (unregistering): Released all slaves [ 1208.968127][T15014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1209.055619][T15014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1209.393105][ T4324] gspca_sn9c20x: Write register 1000 failed -110 [ 1209.399823][ T4324] gspca_sn9c20x: Device initialization failed [ 1209.406126][ T4324] gspca_sn9c20x: probe of 5-1:0.0 failed with error -110 [ 1209.679188][ T6658] team0 (unregistering): Port device team_slave_1 removed [ 1209.726100][T12477] Bluetooth: hci2: command 0x0419 tx timeout [ 1209.736554][ T6658] team0 (unregistering): Port device team_slave_0 removed [ 1209.782391][ T6658] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1209.829134][ T6658] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1210.265005][ T6658] bond0 (unregistering): Released all slaves [ 1210.472005][T15001] device syz_tun entered promiscuous mode [ 1210.488102][T15001] device syz_tun left promiscuous mode [ 1210.564344][ T4381] usb 5-1: USB disconnect, device number 37 [ 1210.773751][ T4292] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1210.963663][ T4292] usb 4-1: Using ep0 maxpacket: 8 [ 1210.971462][ T4292] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1210.991762][ T4292] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1211.024728][ T4292] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1211.045726][ T4292] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1211.074485][ T4292] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1211.203389][ T4292] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1211.263040][ T4292] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1211.625811][ T4292] usb 4-1: usb_control_msg returned -32 [ 1211.631655][ T4292] usbtmc 4-1:16.0: can't read capabilities [ 1211.987604][T15065] usb 4-1: usbtmc_ioctl_clear_in_halt returned -32 [ 1212.392711][T14913] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1212.405996][ T4324] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1212.464482][T14913] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1212.484612][T14913] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1212.495635][T14913] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1213.287616][ T4324] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1213.304056][ T4324] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1213.312236][ T4324] usb 3-1: Product: syz [ 1213.329779][T14913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1213.336565][ T4324] usb 3-1: Manufacturer: syz [ 1213.341195][ T4324] usb 3-1: SerialNumber: syz [ 1213.358353][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1213.382707][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1213.391248][ T4324] usb 3-1: config 0 descriptor?? [ 1213.416307][T14913] 8021q: adding VLAN 0 to HW filter on device team0 [ 1213.466335][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1213.482336][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1213.571341][ T7970] usb 4-1: USB disconnect, device number 20 [ 1213.578365][ T4497] bridge0: port 1(bridge_slave_0) entered blocking state [ 1213.586812][ T4497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1213.618046][ T8216] usb 3-1: USB disconnect, device number 32 [ 1213.626607][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1213.680384][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1213.701187][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1213.715181][ T4497] bridge0: port 2(bridge_slave_1) entered blocking state [ 1213.722375][ T4497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1214.064992][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1214.112075][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1214.143765][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1214.184397][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1214.193267][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1214.202332][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1214.211609][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1214.220317][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1214.240666][T14913] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1214.252181][T14913] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1214.260408][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1214.270332][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1214.299626][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1214.327681][T15093] netlink: 'syz.3.2937': attribute type 83 has an invalid length. [ 1214.444546][ T8216] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1214.633826][ T8216] usb 1-1: Using ep0 maxpacket: 8 [ 1214.654086][ T8216] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1214.688421][ T8216] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1214.716927][ T8216] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1214.739645][ T8216] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1214.753344][ T8216] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1214.768068][ T8216] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1214.792978][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1214.802086][ T8216] hub 1-1:1.0: bad descriptor, ignoring hub [ 1214.814926][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1214.829368][ T8216] hub: probe of 1-1:1.0 failed with error -5 [ 1214.837360][ T8216] cdc_wdm 1-1:1.0: skipping garbage [ 1214.842593][ T8216] cdc_wdm 1-1:1.0: skipping garbage [ 1214.856378][ T8216] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1214.862320][ T8216] cdc_wdm 1-1:1.0: Unknown control protocol [ 1214.892835][T14913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1214.981158][ T4800] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1215.013366][ T6018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1215.039692][ T6018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1215.245205][ T4800] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1215.408351][ T4800] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1215.632504][ T8216] usb 1-1: USB disconnect, device number 25 [ 1215.640911][ T4800] usb 3-1: config 1 has no interface number 0 [ 1215.665565][ T4800] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1215.689837][ T4800] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1215.701076][ T4800] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1215.712890][ T4800] usb 3-1: Product: syz [ 1215.718071][ T4800] usb 3-1: Manufacturer: syz [ 1215.722996][ T4800] usb 3-1: SerialNumber: syz [ 1215.737073][ T4800] cdc_ncm 3-1:1.1: NCM or ECM functional descriptors missing [ 1215.749891][ T6018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1215.780552][ T4800] cdc_ncm 3-1:1.1: bind() failure [ 1215.784622][ T6018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1215.809224][ T6018] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1215.823244][ T6018] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1215.842325][T14913] device veth0_vlan entered promiscuous mode [ 1215.869325][T14913] device veth1_vlan entered promiscuous mode [ 1215.970844][T14913] device veth0_macvtap entered promiscuous mode [ 1216.013734][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1216.030910][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1216.558632][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1216.781181][T14913] device veth1_macvtap entered promiscuous mode [ 1216.821793][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1216.880742][T14913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1216.911207][T14913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1216.927371][T14913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1216.984936][T14913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1216.996047][T14913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1217.013147][T14913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1217.023771][T14913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1217.034797][T14913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1217.046745][T14913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1217.065016][ T6018] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1217.091053][ T6018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1217.227616][T14913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1217.246538][T14913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1217.256499][T14913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1217.267051][T14913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1217.472397][T14913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1217.483459][T14913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1217.494408][T14913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1217.507035][T14913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1217.741854][T14913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1218.029370][ T7970] usb 3-1: USB disconnect, device number 33 [ 1218.057367][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1218.070115][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1218.099963][T14913] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1218.133846][T14913] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1218.148313][T14913] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1218.167199][T14913] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1219.395190][ T4364] Bluetooth: hci5: Frame reassembly failed (-84) [ 1219.420029][ T4364] Bluetooth: hci5: Frame reassembly failed (-84) [ 1219.821107][ T4438] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1220.912706][ T4438] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1221.053890][ T4720] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1221.076313][ T4720] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1221.404920][ T4251] Bluetooth: hci5: command 0xfc11 tx timeout [ 1221.411240][T12477] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 1221.493253][ T4720] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1221.573251][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1224.604130][ T4294] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1224.870562][T15217] IPv6: NLM_F_CREATE should be specified when creating new route [ 1224.878660][T15217] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2963'. [ 1224.989126][ T4294] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1225.041679][ T4294] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1225.122712][ T4294] usb 5-1: config 1 has no interface number 0 [ 1225.207306][ T4294] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1225.518811][ T4294] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1225.574255][ T4294] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1225.582304][ T4294] usb 5-1: Product: syz [ 1225.626007][ T4294] usb 5-1: Manufacturer: syz [ 1225.656914][ T4294] usb 5-1: SerialNumber: syz [ 1225.751714][ T4294] cdc_ncm 5-1:1.1: NCM or ECM functional descriptors missing [ 1225.768625][ T4294] cdc_ncm 5-1:1.1: bind() failure [ 1226.966362][ T4381] usb 5-1: USB disconnect, device number 38 [ 1228.325933][T11788] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1228.518190][ T48] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1228.529517][ T4251] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1228.538472][ T48] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1228.587134][ T48] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1228.597924][ T48] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1228.605470][ T48] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1228.684925][T11788] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1228.809662][T11788] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1228.931452][T11788] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1229.773180][ T4292] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1229.830116][T15247] chnl_net:caif_netlink_parms(): no params data found [ 1229.852798][T15272] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 1229.859358][T15272] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1229.869710][T15272] vhci_hcd vhci_hcd.0: Device attached [ 1229.932405][T15272] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 1229.938989][T15272] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1229.980190][T15281] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(8) [ 1229.986749][T15281] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1229.988028][ T4292] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1230.004516][ T4292] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1230.013405][ T4292] usb 1-1: Product: syz [ 1230.017720][ T4292] usb 1-1: Manufacturer: syz [ 1230.022342][ T4292] usb 1-1: SerialNumber: syz [ 1230.036438][T15281] vhci_hcd vhci_hcd.0: Device attached [ 1230.042927][ T4292] usb 1-1: config 0 descriptor?? [ 1230.054380][T15272] vhci_hcd vhci_hcd.0: Device attached [ 1230.076844][T11788] tipc: Left network mode [ 1230.077457][T15247] bridge0: port 1(bridge_slave_0) entered blocking state [ 1230.083982][ T4381] vhci_hcd: vhci_device speed not set [ 1230.088816][T15247] bridge0: port 1(bridge_slave_0) entered disabled state [ 1230.102386][T15247] device bridge_slave_0 entered promiscuous mode [ 1230.111417][T15247] bridge0: port 2(bridge_slave_1) entered blocking state [ 1230.118676][T15247] bridge0: port 2(bridge_slave_1) entered disabled state [ 1230.128371][T15247] device bridge_slave_1 entered promiscuous mode [ 1230.135092][T15272] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(7) [ 1230.141627][T15272] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1230.153885][T15272] vhci_hcd vhci_hcd.0: Device attached [ 1230.194399][T15281] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(12) [ 1230.201045][T15281] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1230.239819][T15281] vhci_hcd vhci_hcd.0: Device attached [ 1230.265806][T15290] vhci_hcd: connection closed [ 1230.268509][ T7694] vhci_hcd: stop threads [ 1230.289547][ T4292] usb 1-1: USB disconnect, device number 26 [ 1230.302597][T15288] vhci_hcd: connection closed [ 1230.302850][T15283] vhci_hcd: connection closed [ 1230.307799][T15277] vhci_hcd: connection closed [ 1230.313078][T15273] vhci_hcd: connection closed [ 1230.325270][ T7694] vhci_hcd: release socket [ 1230.335053][ T7694] vhci_hcd: disconnect device [ 1230.377653][T15247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1230.410156][ T4381] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 1230.516047][T15274] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 1230.695293][ T48] Bluetooth: hci4: command 0x0409 tx timeout [ 1230.775598][ T48] Bluetooth: hci5: command 0xfc11 tx timeout [ 1230.782031][T12477] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 1231.044892][ T7694] vhci_hcd: stop threads [ 1231.055478][T15247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1231.097266][ T7694] vhci_hcd: release socket [ 1231.113747][ T7694] vhci_hcd: disconnect device [ 1231.157654][ T7694] vhci_hcd: stop threads [ 1231.161965][ T7694] vhci_hcd: release socket [ 1231.186140][ T7694] vhci_hcd: disconnect device [ 1231.191010][ T7694] vhci_hcd: stop threads [ 1231.219924][ T7694] vhci_hcd: release socket [ 1231.230115][ T7694] vhci_hcd: disconnect device [ 1231.240326][ T7694] vhci_hcd: stop threads [ 1231.247751][ T7694] vhci_hcd: release socket [ 1231.252645][ T7694] vhci_hcd: disconnect device [ 1231.473842][ T4800] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1231.691559][ T4800] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1231.703738][ T4800] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1231.719583][ T4800] usb 3-1: config 1 has no interface number 0 [ 1231.736203][ T4800] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1231.771558][ T4800] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1231.798900][ T4800] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1231.817367][ T4800] usb 3-1: Product: syz [ 1231.822230][ T4800] usb 3-1: Manufacturer: syz [ 1231.829896][ T4800] usb 3-1: SerialNumber: syz [ 1231.839414][ T4800] cdc_ncm 3-1:1.1: NCM or ECM functional descriptors missing [ 1231.847662][ T4800] cdc_ncm 3-1:1.1: bind() failure [ 1231.898447][T15247] team0: Port device team_slave_0 added [ 1231.922789][T15247] team0: Port device team_slave_1 added [ 1232.285098][T15247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1232.297103][T15314] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2981'. [ 1232.305534][T15247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1232.360633][T15247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1232.757556][T15247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1232.773780][T12477] Bluetooth: hci4: command 0x041b tx timeout [ 1232.775455][T15247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1233.162651][T15247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1233.471369][T15247] device hsr_slave_0 entered promiscuous mode [ 1233.485722][T15247] device hsr_slave_1 entered promiscuous mode [ 1234.754272][ T4800] usb 3-1: USB disconnect, device number 34 [ 1234.852365][T12477] Bluetooth: hci4: command 0x040f tx timeout [ 1234.984528][T15355] 9pnet_fd: Insufficient options for proto=fd [ 1235.733493][ T4324] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1235.873933][ T4381] vhci_hcd: vhci_device speed not set [ 1235.888085][T15373] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(12) [ 1235.894719][T15373] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1235.927644][T15367] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 1235.934204][T15367] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1235.989371][T15373] vhci_hcd vhci_hcd.0: Device attached [ 1236.027336][T15370] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(6) [ 1236.033893][T15370] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1236.041294][T15366] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(9) [ 1236.047816][T15366] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1236.056382][T15370] vhci_hcd vhci_hcd.0: Device attached [ 1236.069043][T11788] device hsr_slave_0 left promiscuous mode [ 1236.076934][T11788] device hsr_slave_1 left promiscuous mode [ 1236.082411][T15367] vhci_hcd vhci_hcd.0: Device attached [ 1236.119425][T15374] vhci_hcd: connection closed [ 1236.196932][ T4324] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1236.215625][ T4324] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1236.226794][ T4324] usb 1-1: Product: syz [ 1236.235096][ T4324] usb 1-1: Manufacturer: syz [ 1236.239944][ T9669] vhci_hcd: stop threads [ 1236.240000][ T4324] usb 1-1: SerialNumber: syz [ 1236.254350][T15371] vhci_hcd: connection closed [ 1236.256873][T15368] vhci_hcd: connection closed [ 1236.260552][ T9669] vhci_hcd: release socket [ 1236.264600][T15366] vhci_hcd vhci_hcd.0: Device attached [ 1236.278801][T15372] vhci_hcd: connection closed [ 1236.279945][T15384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2992'. [ 1236.294411][ T26] usb 37-4: new low-speed USB device number 4 using vhci_hcd [ 1236.355828][ T9669] vhci_hcd: disconnect device [ 1236.437809][T11788] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1236.447674][ T9669] vhci_hcd: stop threads [ 1236.449574][ T4324] usb 1-1: config 0 descriptor?? [ 1236.477162][ T9669] vhci_hcd: release socket [ 1236.479474][T11788] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1236.490397][ T9669] vhci_hcd: disconnect device [ 1236.530083][ T9669] vhci_hcd: stop threads [ 1236.534873][ T9669] vhci_hcd: release socket [ 1236.541978][ T9669] vhci_hcd: disconnect device [ 1236.548877][ T9669] vhci_hcd: stop threads [ 1236.553246][ T9669] vhci_hcd: release socket [ 1236.561557][ T9669] vhci_hcd: disconnect device [ 1236.659741][T11788] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1236.670817][T11788] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1236.698959][T11788] device bridge_slave_1 left promiscuous mode [ 1236.741859][T11788] bridge0: port 2(bridge_slave_1) entered disabled state [ 1236.781378][ T4292] usb 1-1: USB disconnect, device number 27 [ 1236.829469][T11788] device bridge_slave_0 left promiscuous mode [ 1236.840261][T11788] bridge0: port 1(bridge_slave_0) entered disabled state [ 1236.848470][T15384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2992'. [ 1236.924052][T12477] Bluetooth: hci4: command 0x0419 tx timeout [ 1237.321395][T11788] device veth1_macvtap left promiscuous mode [ 1237.337830][T11788] device veth0_macvtap left promiscuous mode [ 1237.354431][T11788] device veth1_vlan left promiscuous mode [ 1237.371174][T11788] device veth0_vlan left promiscuous mode [ 1238.912473][T15432] 9pnet_fd: Insufficient options for proto=fd [ 1239.122083][T11788] bond3 (unregistering): Released all slaves [ 1240.699206][T11788] bond2 (unregistering): Released all slaves [ 1240.952776][T15447] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3004'. [ 1241.060307][T15447] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3004'. [ 1241.128270][T11788] bond1 (unregistering): Released all slaves [ 1241.292956][T15447] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3004'. [ 1241.313718][ T4294] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1241.413744][ T26] vhci_hcd: vhci_device speed not set [ 1241.527036][ T4294] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1241.547386][ T4294] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1241.560687][ T4294] usb 2-1: Product: syz [ 1241.580999][ T4294] usb 2-1: Manufacturer: syz [ 1241.586252][ T4294] usb 2-1: SerialNumber: syz [ 1241.678920][ T4294] usb 2-1: config 0 descriptor?? [ 1241.904697][ T4381] usb 2-1: USB disconnect, device number 29 [ 1243.377009][T11788] team0 (unregistering): Port device team_slave_1 removed [ 1243.647734][T11788] team0 (unregistering): Port device team_slave_0 removed [ 1243.694443][T11788] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1244.083834][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 1244.091868][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 1244.507555][T11788] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1246.796574][T15497] 9pnet_fd: Insufficient options for proto=fd [ 1246.979863][T11788] bond0 (unregistering): Released all slaves [ 1247.119171][T15441] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3003'. [ 1247.206297][T15486] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3013'. [ 1249.355213][T15247] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1249.386884][T15247] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1249.436188][T15247] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1249.459453][T15247] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1249.773271][T15247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1250.570835][T15247] 8021q: adding VLAN 0 to HW filter on device team0 [ 1250.682661][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1250.698240][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1250.920065][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1252.715254][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1252.729435][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 1252.736594][ T4273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1252.744710][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1252.754128][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1252.764815][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 1252.771901][ T4273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1252.796747][T15556] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3027'. [ 1252.913751][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1252.944671][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1252.976219][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1253.063501][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1253.082678][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1253.091471][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1253.109196][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1253.130016][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1253.239947][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1253.271256][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1253.922588][T15247] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1254.003210][T15574] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3029'. [ 1254.078664][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1254.088089][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1255.253280][T15591] 9pnet_fd: Insufficient options for proto=fd [ 1255.590531][T15567] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1255.655555][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1255.696001][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1255.709699][T15247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1255.922722][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1255.955050][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1256.266585][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1256.327531][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1256.511483][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1256.838322][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1256.907424][T15247] device veth0_vlan entered promiscuous mode [ 1256.941027][T15247] device veth1_vlan entered promiscuous mode [ 1257.696999][T15247] device veth0_macvtap entered promiscuous mode [ 1257.715256][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1257.740224][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1257.770860][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1257.792392][T15247] device veth1_macvtap entered promiscuous mode [ 1257.925641][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1257.988930][T15247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1258.009809][T15247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1258.022207][T15247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1258.690750][T15247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1258.700855][T15247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1258.711444][T15247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1258.721416][T15247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1258.733713][T15247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1258.749631][T15247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1258.753874][ T4292] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1258.761750][T15247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1258.775439][T15247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1258.789260][T15247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1258.802613][T15247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1258.815643][T15247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1258.826966][T15247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1258.840405][T15247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1258.852943][T15247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1258.866050][T15247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1258.874402][T15637] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3042'. [ 1258.950689][ T4720] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1258.987914][ T4292] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1259.002579][ T4720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1259.012278][ T4292] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1259.029563][ T4292] usb 1-1: Product: syz [ 1259.036088][ T4292] usb 1-1: Manufacturer: syz [ 1259.040862][ T4292] usb 1-1: SerialNumber: syz [ 1259.049751][ T4720] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1259.069181][ T4292] usb 1-1: config 0 descriptor?? [ 1259.083121][ T4720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1259.138692][T15247] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1259.159083][T15247] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1259.168678][T15247] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1259.186302][T15247] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1259.467518][ T4292] usb 1-1: USB disconnect, device number 28 [ 1259.827151][ T4655] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1260.135369][ T4655] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1260.148904][T15649] 9pnet_fd: Insufficient options for proto=fd [ 1260.164400][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1260.273546][ T4273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1260.282227][ T4273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1260.355562][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1263.032033][T15663] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3051'. [ 1263.047852][T15663] device ipvlan2 entered promiscuous mode [ 1263.055436][T15663] bridge0: port 3(ipvlan2) entered blocking state [ 1263.062016][T15663] bridge0: port 3(ipvlan2) entered disabled state [ 1263.675580][T15679] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1264.427891][ T48] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1264.437506][ T48] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1264.446243][ T48] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1264.455603][ T48] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1264.464636][ T48] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1264.472095][ T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1264.785281][T15698] 9pnet_fd: Insufficient options for proto=fd [ 1264.831322][ T4273] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1265.457447][ T4273] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1265.733467][T15707] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3061'. [ 1265.987247][ T4273] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1266.982979][T12477] Bluetooth: hci1: command 0x0409 tx timeout [ 1267.091744][ T4273] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1267.994113][ T4273] tipc: Left network mode [ 1268.219957][T15739] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3069'. [ 1268.308854][T15735] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 1268.315413][T15735] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1268.816334][T15735] vhci_hcd vhci_hcd.0: Device attached [ 1268.822549][T15742] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(6) [ 1268.829089][T15742] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1268.836835][T15742] vhci_hcd vhci_hcd.0: Device attached [ 1268.870982][T15735] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(5) [ 1268.877540][T15735] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1268.958857][T15735] vhci_hcd vhci_hcd.0: Device attached [ 1269.003701][T12477] Bluetooth: hci1: command 0x041b tx timeout [ 1269.010391][T15738] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(10) [ 1269.017331][T15738] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1269.025612][ T4381] vhci_hcd: vhci_device speed not set [ 1269.053053][T15738] vhci_hcd vhci_hcd.0: Device attached [ 1269.113874][ T4381] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 1269.119255][T15692] chnl_net:caif_netlink_parms(): no params data found [ 1269.155980][T15748] vhci_hcd: connection closed [ 1269.175287][T15747] vhci_hcd: connection closed [ 1269.182308][T15743] vhci_hcd: connection closed [ 1269.192905][T15736] vhci_hcd: connection reset by peer [ 1269.212749][T11788] vhci_hcd: stop threads [ 1269.217990][T11788] vhci_hcd: release socket [ 1269.244387][T11788] vhci_hcd: disconnect device [ 1269.439652][T11788] vhci_hcd: stop threads [ 1269.548752][T11788] vhci_hcd: release socket [ 1269.563124][T11788] vhci_hcd: disconnect device [ 1269.577813][T11788] vhci_hcd: stop threads [ 1269.587724][T11788] vhci_hcd: release socket [ 1269.602516][T11788] vhci_hcd: disconnect device [ 1269.612689][T11788] vhci_hcd: stop threads [ 1269.617183][T11788] vhci_hcd: release socket [ 1269.638812][T11788] vhci_hcd: disconnect device [ 1271.123686][T12477] Bluetooth: hci1: command 0x040f tx timeout [ 1271.637897][T15692] bridge0: port 1(bridge_slave_0) entered blocking state [ 1271.646737][T15692] bridge0: port 1(bridge_slave_0) entered disabled state [ 1271.656043][T15692] device bridge_slave_0 entered promiscuous mode [ 1271.801874][T15692] bridge0: port 2(bridge_slave_1) entered blocking state [ 1272.175355][T15692] bridge0: port 2(bridge_slave_1) entered disabled state [ 1272.224354][T15692] device bridge_slave_1 entered promiscuous mode [ 1272.441888][T15692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1272.464356][T15082] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1272.466579][T15692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1272.597718][T15692] team0: Port device team_slave_0 added [ 1272.639742][T15692] team0: Port device team_slave_1 added [ 1272.665877][T15082] usb 3-1: New USB device found, idVendor=0c45, idProduct=62a0, bcdDevice=a8.22 [ 1272.687570][T15082] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1272.691686][ T26] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1272.707286][T15692] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1272.720834][T15082] usb 3-1: config 0 descriptor?? [ 1272.741745][T15692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1272.769000][T15692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1272.770606][T15082] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:62a0 [ 1272.848654][T15692] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1272.855918][T15692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1272.882369][T15692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1272.913770][ T26] usb 2-1: Using ep0 maxpacket: 16 [ 1272.925631][ T26] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1272.946200][ T26] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1272.958626][ T26] usb 2-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 1272.968473][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1272.987295][ T26] usb 2-1: config 0 descriptor?? [ 1273.035121][T15082] gspca_sn9c20x: Write register 1000 failed -71 [ 1273.041416][T15082] gspca_sn9c20x: Device initialization failed [ 1273.057853][T15082] gspca_sn9c20x: probe of 3-1:0.0 failed with error -71 [ 1273.093103][T15082] usb 3-1: USB disconnect, device number 35 [ 1273.164709][ T48] Bluetooth: hci1: command 0x0419 tx timeout [ 1273.483681][ T26] usbhid 2-1:0.0: can't add hid device: -71 [ 1273.516725][ T26] usbhid: probe of 2-1:0.0 failed with error -71 [ 1273.554344][ T26] usb 2-1: USB disconnect, device number 30 [ 1273.743015][T15692] device hsr_slave_0 entered promiscuous mode [ 1273.765398][T15692] device hsr_slave_1 entered promiscuous mode [ 1273.779598][T15692] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1273.807639][T15692] Cannot create hsr debugfs directory [ 1273.920310][ T4273] device hsr_slave_0 left promiscuous mode [ 1273.984853][ T4273] device hsr_slave_1 left promiscuous mode [ 1274.007575][ T4273] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1274.023089][ T4273] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1274.048014][ T4273] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1274.071311][ T4273] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1274.125554][ T4273] device bridge_slave_1 left promiscuous mode [ 1274.233911][ T4381] vhci_hcd: vhci_device speed not set [ 1274.366367][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 1274.555279][ T4273] device bridge_slave_0 left promiscuous mode [ 1274.672589][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 1276.092473][ T4273] device veth1_macvtap left promiscuous mode [ 1276.099900][ T4273] device veth0_macvtap left promiscuous mode [ 1276.107390][ T4273] device veth1_vlan left promiscuous mode [ 1276.113356][ T4273] device veth0_vlan left promiscuous mode [ 1277.039904][ T4273] bond6 (unregistering): Released all slaves [ 1277.306960][ T4273] bond5 (unregistering): Released all slaves [ 1277.472916][ T4273] bond4 (unregistering): Released all slaves [ 1277.642788][ T4273] bond3 (unregistering): Released all slaves [ 1277.826900][ T4273] bond2 (unregistering): Released all slaves [ 1277.984051][ T4273] bond1 (unregistering): Released all slaves [ 1278.486001][ T4273] team0 (unregistering): Port device team_slave_1 removed [ 1278.528654][ T4273] team0 (unregistering): Port device team_slave_0 removed [ 1278.570345][ T4273] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1278.573744][ T4381] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1278.621470][ T4273] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1278.780609][ T4381] usb 3-1: config 0 has an invalid interface number: 101 but max is 0 [ 1278.789057][ T4381] usb 3-1: config 0 has no interface number 0 [ 1278.795552][ T4381] usb 3-1: config 0 interface 101 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 1278.807581][ T4381] usb 3-1: config 0 interface 101 altsetting 0 endpoint 0x9 has invalid maxpacket 2007, setting to 1024 [ 1278.821810][ T4381] usb 3-1: New USB device found, idVendor=093a, idProduct=2623, bcdDevice=b2.14 [ 1278.831170][ T4381] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1278.839479][ T4381] usb 3-1: Product: syz [ 1278.844296][ T4381] usb 3-1: Manufacturer: syz [ 1278.848909][ T4381] usb 3-1: SerialNumber: syz [ 1278.859670][ T4381] usb 3-1: config 0 descriptor?? [ 1278.868223][ T4381] gspca_main: gspca_pac7302-2.14.0 probing 093a:2623 [ 1279.151623][ T4273] bond0 (unregistering): Released all slaves [ 1279.849807][ T4381] input: gspca_pac7302 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input11 [ 1280.282354][ T4381] usb 3-1: USB disconnect, device number 36 [ 1283.703301][ T4293] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1283.915587][ T4293] usb 4-1: New USB device found, idVendor=0c45, idProduct=62a0, bcdDevice=a8.22 [ 1283.963945][ T4293] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1284.001293][ T4293] usb 4-1: config 0 descriptor?? [ 1284.029035][ T4293] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:62a0 [ 1284.059933][T15692] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1284.070816][T15692] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1284.079791][T15933] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 1284.086334][T15933] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1284.099705][T15692] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1284.109932][T15933] vhci_hcd vhci_hcd.0: Device attached [ 1284.128607][T15937] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(6) [ 1284.135167][T15937] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1284.136513][T15692] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1284.230765][T15937] vhci_hcd vhci_hcd.0: Device attached [ 1284.237932][ T4293] gspca_sn9c20x: Write register 1000 failed -71 [ 1284.245932][ T4293] gspca_sn9c20x: Device initialization failed [ 1284.283805][ T4293] gspca_sn9c20x: probe of 4-1:0.0 failed with error -71 [ 1284.311004][ T4293] usb 4-1: USB disconnect, device number 21 [ 1284.317149][ T26] vhci_hcd: vhci_device speed not set [ 1284.330869][T15937] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(8) [ 1284.337421][T15937] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1284.353881][T15937] vhci_hcd vhci_hcd.0: Device attached [ 1284.393862][ T26] usb 35-1: new full-speed USB device number 3 using vhci_hcd [ 1284.401514][T15933] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(5) [ 1284.408093][T15933] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1284.456380][T15933] vhci_hcd vhci_hcd.0: Device attached [ 1284.474059][T15692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1284.485512][T15939] vhci_hcd: connection closed [ 1284.485674][T15945] vhci_hcd: connection closed [ 1284.485701][T15934] vhci_hcd: connection reset by peer [ 1284.490532][T15943] vhci_hcd: connection closed [ 1284.500810][ T7694] vhci_hcd: stop threads [ 1284.515577][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1284.536472][ T7694] vhci_hcd: release socket [ 1284.542234][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1284.568630][ T7694] vhci_hcd: disconnect device [ 1284.576920][ T7694] vhci_hcd: stop threads [ 1284.581196][ T7694] vhci_hcd: release socket [ 1284.595315][T15692] 8021q: adding VLAN 0 to HW filter on device team0 [ 1284.602165][ T7694] vhci_hcd: disconnect device [ 1284.610373][ T7694] vhci_hcd: stop threads [ 1284.617213][ T7694] vhci_hcd: release socket [ 1284.632350][ T7694] vhci_hcd: disconnect device [ 1284.637409][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1284.649828][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1284.660524][ T7694] vhci_hcd: stop threads [ 1284.667127][ T7694] vhci_hcd: release socket [ 1284.676137][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 1284.683247][ T4273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1284.694001][ T7694] vhci_hcd: disconnect device [ 1284.714008][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1284.722813][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1284.744193][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 1284.751311][ T4273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1284.764339][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1284.796710][ T6018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1284.839115][ T6018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1284.859057][ T6018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1284.892419][ T6018] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1284.920541][T15692] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1284.941682][T15692] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1284.983480][ T6018] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1284.993101][ T6018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1285.015221][ T6018] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1285.064103][ T6018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1285.104192][ T6018] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1285.502480][ T6018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1285.691294][ T6018] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1285.825264][ T6018] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1287.837170][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1287.897387][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1287.960615][T15692] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1288.067618][ T7694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1288.091653][ T7694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1288.157780][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1288.184576][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1288.207255][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1288.223434][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1288.383242][T11955] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1289.163956][T11955] usb 4-1: Using ep0 maxpacket: 8 [ 1289.197584][T16027] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3135'. [ 1289.306242][T15692] device veth0_vlan entered promiscuous mode [ 1289.377299][T15692] device veth1_vlan entered promiscuous mode [ 1289.477330][T11955] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1289.502390][T11955] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1289.513120][T11955] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1289.514369][T11788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1289.523087][T11955] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1289.553679][T11955] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1289.562763][T11955] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1289.571760][T11788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1289.583678][ T26] vhci_hcd: vhci_device speed not set [ 1289.627532][T15692] device veth0_macvtap entered promiscuous mode [ 1289.712787][T15692] device veth1_macvtap entered promiscuous mode [ 1289.869788][T15692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1289.873136][T11955] usb 4-1: usb_control_msg returned -32 [ 1289.880613][T15692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1289.901561][T15692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1289.905505][T11955] usbtmc 4-1:16.0: can't read capabilities [ 1289.917949][T15692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1289.917975][T15692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1289.918301][T15692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1289.957385][T15692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1289.975771][T15692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1290.000822][T15692] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1290.017338][ T6658] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1290.028675][ T6658] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1290.040725][ T6658] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1290.052450][ T6658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1290.069415][T15692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1290.080600][T15692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1290.090756][T15692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1290.101405][T15692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1290.112035][T15692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1290.129938][T15692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1290.140341][T15692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1290.153761][T15692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1290.165249][T15692] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1290.175081][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1290.192461][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1290.215644][T15692] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1290.229193][T15692] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1290.239091][T15692] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1290.252590][T15692] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1290.351546][T11788] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1290.362582][T11788] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1290.412855][ T6658] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1290.457746][ T7694] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1290.479280][ T7694] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1290.503105][ T6658] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1291.851418][ T4294] usb 4-1: USB disconnect, device number 22 [ 1293.129498][ T4364] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1293.326530][T12477] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1293.337283][T12477] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1293.347470][T12477] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1293.356297][T12477] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1293.365874][T12477] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1293.379190][T12477] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1293.434867][ T4364] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1293.536814][ T4364] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1293.768223][ T4364] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1294.053732][T15700] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1294.106845][T16107] chnl_net:caif_netlink_parms(): no params data found [ 1294.253692][T15700] usb 4-1: Using ep0 maxpacket: 16 [ 1294.260708][T15700] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1294.313691][T15700] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1294.320355][T15700] usb 4-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 1294.380724][T15700] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1294.410730][T15700] usb 4-1: config 0 descriptor?? [ 1294.487372][ T4364] tipc: Left network mode [ 1294.575906][T16107] bridge0: port 1(bridge_slave_0) entered blocking state [ 1294.616735][T16107] bridge0: port 1(bridge_slave_0) entered disabled state [ 1294.657372][T16107] device bridge_slave_0 entered promiscuous mode [ 1294.776785][T16107] bridge0: port 2(bridge_slave_1) entered blocking state [ 1294.784282][T16107] bridge0: port 2(bridge_slave_1) entered disabled state [ 1294.793326][T16107] device bridge_slave_1 entered promiscuous mode [ 1294.830373][T15700] usbhid 4-1:0.0: can't add hid device: -71 [ 1294.839709][T15700] usbhid: probe of 4-1:0.0 failed with error -71 [ 1294.853990][T15700] usb 4-1: USB disconnect, device number 23 [ 1294.935031][T16107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1295.120552][T16107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1295.313405][T16107] team0: Port device team_slave_0 added [ 1295.405964][T12477] Bluetooth: hci3: command 0x0409 tx timeout [ 1295.652887][T16107] team0: Port device team_slave_1 added [ 1295.934046][T15700] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1296.166496][T15700] usb 5-1: New USB device found, idVendor=0c45, idProduct=62a0, bcdDevice=a8.22 [ 1296.177103][T15700] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1296.200944][T15700] usb 5-1: config 0 descriptor?? [ 1296.216939][T15700] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:62a0 [ 1296.398778][T16107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1296.471838][T16172] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3162'. [ 1296.618170][T16107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1296.644273][ C1] vkms_vblank_simulate: vblank timer overrun [ 1297.060928][T15700] gspca_sn9c20x: Write register 1000 failed -71 [ 1297.067321][T15700] gspca_sn9c20x: Device initialization failed [ 1297.073456][T15700] gspca_sn9c20x: probe of 5-1:0.0 failed with error -71 [ 1297.103685][T15700] usb 5-1: USB disconnect, device number 39 [ 1297.173967][T16107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1297.266127][T16107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1297.273152][T16107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1297.299149][ C1] vkms_vblank_simulate: vblank timer overrun [ 1297.401019][T16107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1297.492223][ T48] Bluetooth: hci3: command 0x041b tx timeout [ 1297.712114][T16107] device hsr_slave_0 entered promiscuous mode [ 1297.728962][T16107] device hsr_slave_1 entered promiscuous mode [ 1297.751345][T16107] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1297.778687][T16107] Cannot create hsr debugfs directory [ 1297.894534][ T4364] IPVS: stopping backup sync thread 9643 ... [ 1299.213777][ T4294] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1299.419627][ T4294] usb 4-1: New USB device found, idVendor=0c45, idProduct=62a0, bcdDevice=a8.22 [ 1299.444491][ T4294] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1299.470436][ T4294] usb 4-1: config 0 descriptor?? [ 1299.486036][ T4364] device hsr_slave_0 left promiscuous mode [ 1299.505287][ T4294] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:62a0 [ 1299.518254][ T4364] device hsr_slave_1 left promiscuous mode [ 1299.527320][ T4364] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1299.548423][ T4364] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1299.564126][ T48] Bluetooth: hci3: command 0x040f tx timeout [ 1299.584480][ T4364] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1299.612083][ T4364] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1299.651027][ T4364] device bridge_slave_1 left promiscuous mode [ 1299.665497][ T4364] bridge0: port 2(bridge_slave_1) entered disabled state [ 1299.676812][ T4364] device bridge_slave_0 left promiscuous mode [ 1299.683310][ T4364] bridge0: port 1(bridge_slave_0) entered disabled state [ 1299.693219][ T4294] gspca_sn9c20x: Write register 1000 failed -71 [ 1299.704126][ T4294] gspca_sn9c20x: Device initialization failed [ 1299.710785][ T4294] gspca_sn9c20x: probe of 4-1:0.0 failed with error -71 [ 1299.726555][ T4294] usb 4-1: USB disconnect, device number 24 [ 1299.775506][ T4364] device veth1_macvtap left promiscuous mode [ 1299.781612][ T4364] device veth0_macvtap left promiscuous mode [ 1299.788712][ T4364] device veth1_vlan left promiscuous mode [ 1299.794719][ T4364] device veth0_vlan left promiscuous mode [ 1300.206743][ T4364] bond2 (unregistering): Released all slaves [ 1300.297581][ T26] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1300.444077][ T4364] bond1 (unregistering): Released all slaves [ 1300.503937][ T26] usb 1-1: Using ep0 maxpacket: 8 [ 1300.515956][ T26] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1300.551590][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1300.576770][ T26] usb 1-1: Product: syz [ 1300.581058][ T26] usb 1-1: Manufacturer: syz [ 1300.587574][ T26] usb 1-1: SerialNumber: syz [ 1300.613525][ T26] usb 1-1: config 0 descriptor?? [ 1300.821174][T16252] 9pnet_fd: Insufficient options for proto=fd [ 1301.030380][ T26] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1301.441833][T12477] Bluetooth: hci5: sending frame failed (-49) [ 1301.450089][ T48] Bluetooth: hci5: Entering manufacturer mode failed (-49) [ 1301.644282][ T48] Bluetooth: hci3: command 0x0419 tx timeout [ 1302.007151][ T26] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 1302.017132][ T26] usb 1-1: USB disconnect, device number 29 [ 1303.523027][ T4364] team0 (unregistering): Port device team_slave_1 removed [ 1303.553780][ T26] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1303.604436][ T4364] team0 (unregistering): Port device team_slave_0 removed [ 1303.694234][ T4364] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1303.761635][ T26] usb 1-1: Using ep0 maxpacket: 16 [ 1303.770038][ T26] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1303.780830][ T26] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1303.788134][ T26] usb 1-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 1303.797615][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1303.830229][ T26] usb 1-1: config 0 descriptor?? [ 1303.842116][ T4364] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1304.271364][ T26] usbhid 1-1:0.0: can't add hid device: -71 [ 1304.278357][ T26] usbhid: probe of 1-1:0.0 failed with error -71 [ 1304.306211][ T26] usb 1-1: USB disconnect, device number 30 [ 1304.588311][ T4364] bond0 (unregistering): Released all slaves [ 1305.047328][T16302] 9pnet_fd: Insufficient options for proto=fd [ 1305.330659][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.340462][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 1305.573931][ T46] Bluetooth: hci5: Frame reassembly failed (-84) [ 1305.580553][ T4720] Bluetooth: hci5: Frame reassembly failed (-84) [ 1307.306988][T16323] netlink: 'syz.3.3201': attribute type 10 has an invalid length. [ 1307.345815][T16323] bridge0: port 2(bridge_slave_1) entered disabled state [ 1307.353638][T16323] bridge0: port 1(bridge_slave_0) entered disabled state [ 1307.470057][T16323] bridge0: port 2(bridge_slave_1) entered blocking state [ 1307.478615][T16323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1307.487211][T16323] bridge0: port 1(bridge_slave_0) entered blocking state [ 1307.494450][T16323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1307.504171][T12477] Bluetooth: hci5: command 0xfc11 tx timeout [ 1307.511699][ T48] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 1307.653021][T16323] team0: Port device bridge0 added [ 1307.693743][T15700] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1307.900701][T16107] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1308.668213][T15700] usb 2-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 1308.677410][T15700] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1308.687209][T15700] usb 2-1: config 0 descriptor?? [ 1308.737586][T15700] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1308.753136][T16323] syz.3.3201 (16323) used greatest stack depth: 18616 bytes left [ 1308.764652][T15700] dvb_usb_af9015: probe of 2-1:0.0 failed with error -22 [ 1308.821591][T16107] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1308.871460][T16107] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1309.029673][T16107] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1309.257391][T16107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1309.297438][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1309.312302][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1309.339929][T16107] 8021q: adding VLAN 0 to HW filter on device team0 [ 1309.367638][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1309.386061][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1309.412464][ T4379] bridge0: port 1(bridge_slave_0) entered blocking state [ 1309.419701][ T4379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1309.470658][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1309.489754][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1309.510037][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1309.523492][ T4379] bridge0: port 2(bridge_slave_1) entered blocking state [ 1309.530735][ T4379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1309.569523][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1309.595844][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1309.628936][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1309.661198][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1309.690689][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1309.732872][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1309.770536][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1309.799192][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1309.829601][T16107] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1309.851159][T16107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1309.875145][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1309.887676][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1309.999068][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1310.072952][T16363] 9pnet_fd: Insufficient options for proto=fd [ 1311.867397][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1311.924207][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1311.939019][T16107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1312.022103][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1312.067738][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1312.132223][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1312.156729][T15700] usb 2-1: USB disconnect, device number 31 [ 1312.156855][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1312.212860][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1312.244509][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1312.274568][T16107] device veth0_vlan entered promiscuous mode [ 1312.313158][T16107] device veth1_vlan entered promiscuous mode [ 1312.413045][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1312.438328][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1312.503057][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1312.512142][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1313.241740][T16107] device veth0_macvtap entered promiscuous mode [ 1313.345210][T16107] device veth1_macvtap entered promiscuous mode [ 1313.378386][T16107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1313.393737][T16107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1313.433721][T16107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1313.463762][T16107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1313.485099][T16107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1313.507114][T16107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1313.527263][T16107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1313.555008][T16107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1313.591740][T16415] 9pnet_fd: Insufficient options for proto=fd [ 1313.628838][T16107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1313.730056][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1313.757641][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1313.763988][ T4294] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1313.811803][T16107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1313.842443][T16107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1313.856064][T16107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1313.928503][T16107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1313.953244][T16107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1313.973727][ T4294] usb 4-1: Using ep0 maxpacket: 32 [ 1313.989681][ T4294] usb 4-1: config 0 has an invalid interface number: 145 but max is 0 [ 1314.001633][T16107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1314.018342][T16107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1314.045995][T16107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1314.061751][ T4294] usb 4-1: config 0 has no interface number 0 [ 1314.098870][ T4294] usb 4-1: too many endpoints for config 0 interface 145 altsetting 86: 247, using maximum allowed: 30 [ 1314.111516][T16107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1314.119743][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1314.120313][ T4294] usb 4-1: config 0 interface 145 altsetting 86 has 0 endpoint descriptors, different from the interface descriptor's value: 247 [ 1314.146488][ T4294] usb 4-1: config 0 interface 145 has no altsetting 0 [ 1314.152515][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1314.172356][ T4294] usb 4-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=20.43 [ 1314.187419][T16107] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1314.202854][ T4294] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1314.213782][T16107] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1314.229013][ T4294] usb 4-1: Product: syz [ 1314.238177][ T4294] usb 4-1: Manufacturer: syz [ 1314.244426][T16107] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1314.244434][ T4294] usb 4-1: SerialNumber: syz [ 1314.300758][T16107] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1314.391826][ T4294] usb 4-1: config 0 descriptor?? [ 1314.582118][ T4379] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1314.623506][ T4294] ftdi_sio 4-1:0.145: FTDI USB Serial Device converter detected [ 1314.634554][ T4379] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1314.651265][ T4294] ftdi_sio ttyUSB0: unknown device type: 0x2043 [ 1314.682458][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1314.690835][ T4294] usb 4-1: USB disconnect, device number 25 [ 1314.710649][ T4294] ftdi_sio 4-1:0.145: device disconnected [ 1314.807022][ T4720] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1314.826223][ T4720] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1314.861646][ T6658] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1316.125571][T16451] device hsr0 entered promiscuous mode [ 1317.281980][T16462] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3235'. [ 1317.543220][T12477] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1317.566897][T12477] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1317.579636][T12477] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1317.588976][T12477] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1317.600621][T12477] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1317.609211][T12477] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1317.687266][ T4379] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1317.749377][T16473] 9pnet_fd: Insufficient options for proto=fd [ 1317.943254][ T4379] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1318.080761][ T4379] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1318.209849][ T4379] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1319.105653][T16467] chnl_net:caif_netlink_parms(): no params data found [ 1319.784410][T12477] Bluetooth: hci0: command 0x0409 tx timeout [ 1319.966148][T16499] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3246'. [ 1320.507708][T16467] bridge0: port 1(bridge_slave_0) entered blocking state [ 1320.532914][T16467] bridge0: port 1(bridge_slave_0) entered disabled state [ 1320.621903][T16467] device bridge_slave_0 entered promiscuous mode [ 1320.796407][T16467] bridge0: port 2(bridge_slave_1) entered blocking state [ 1320.823238][T16467] bridge0: port 2(bridge_slave_1) entered disabled state [ 1321.998693][T12477] Bluetooth: hci0: command 0x041b tx timeout [ 1322.371118][T16467] device bridge_slave_1 entered promiscuous mode [ 1322.639356][T16467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1322.690621][T16467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1322.905052][T16467] team0: Port device team_slave_0 added [ 1322.944992][T16467] team0: Port device team_slave_1 added [ 1323.116550][T11955] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1323.299454][T16467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1323.314574][T16467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1323.316396][T11955] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1323.340538][ C1] vkms_vblank_simulate: vblank timer overrun [ 1323.366588][T11955] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1323.419528][T16553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3258'. [ 1323.954228][T16467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1324.046693][T11955] usb 3-1: config 0 descriptor?? [ 1324.053768][T11955] cp210x 3-1:0.0: cp210x converter detected [ 1324.066076][T16559] netlink: 'syz.0.3260': attribute type 83 has an invalid length. [ 1324.210530][T16467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1324.222348][T16467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1324.269952][T16467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1324.334500][T16467] device hsr_slave_0 entered promiscuous mode [ 1324.366429][T12477] Bluetooth: hci0: command 0x040f tx timeout [ 1324.430695][T16467] device hsr_slave_1 entered promiscuous mode [ 1324.462052][T11955] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1324.484942][T16467] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1324.493192][T16467] Cannot create hsr debugfs directory [ 1325.552558][T11955] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1325.569918][T11955] usb 3-1: USB disconnect, device number 37 [ 1325.588351][T11955] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1325.615645][T11955] cp210x 3-1:0.0: device disconnected [ 1325.667654][T16583] 9pnet_fd: Insufficient options for proto=fd [ 1326.155016][ T4379] device hsr_slave_0 left promiscuous mode [ 1326.209858][ T4379] device hsr_slave_1 left promiscuous mode [ 1326.532679][T12477] Bluetooth: hci0: command 0x0419 tx timeout [ 1326.676139][ T4379] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1326.684138][ T4379] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1326.746542][ T4379] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1326.765735][ T4379] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1326.797271][ T4379] device bridge_slave_1 left promiscuous mode [ 1326.803468][ T4379] bridge0: port 2(bridge_slave_1) entered disabled state [ 1326.833334][T16600] input: syz0 as /devices/virtual/input/input12 [ 1326.865013][ T4379] device bridge_slave_0 left promiscuous mode [ 1326.872639][ T4379] bridge0: port 1(bridge_slave_0) entered disabled state [ 1327.010216][ T4379] device veth1_macvtap left promiscuous mode [ 1327.021060][ T4379] device veth0_macvtap left promiscuous mode [ 1327.032715][ T4379] device veth1_vlan left promiscuous mode [ 1327.047622][ T4379] device veth0_vlan left promiscuous mode [ 1328.219363][T12477] Bluetooth: hci2: command 0x0406 tx timeout [ 1329.169430][ T4379] bond3 (unregistering): Released all slaves [ 1330.314671][ T4379] bond2 (unregistering): Released all slaves [ 1330.897103][T16642] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 1330.925590][ T4379] bond1 (unregistering): Released all slaves [ 1332.955567][T16664] 9pnet_fd: Insufficient options for proto=fd [ 1333.289330][ T4379] team0 (unregistering): Port device team_slave_1 removed [ 1333.389252][ T4379] team0 (unregistering): Port device team_slave_0 removed [ 1333.458596][ T4379] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1333.530754][ T4379] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1334.213751][ T4379] bond0 (unregistering): Released all slaves [ 1335.615223][T16707] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3301'. [ 1335.674020][T16467] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1335.753085][T16467] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1335.789945][T16467] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1335.806695][T16467] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1335.909042][T16718] 9pnet_fd: Insufficient options for proto=fd [ 1336.090350][T16467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1336.133327][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1336.151802][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1336.169854][T16467] 8021q: adding VLAN 0 to HW filter on device team0 [ 1336.212465][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1336.233927][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1336.257046][ T4379] bridge0: port 1(bridge_slave_0) entered blocking state [ 1336.264288][ T4379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1336.293816][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1336.320572][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1336.365322][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1336.404494][ T4379] bridge0: port 2(bridge_slave_1) entered blocking state [ 1336.411740][ T4379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1336.420167][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1336.438983][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1336.494293][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1336.531145][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1336.546123][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1336.568193][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1336.593219][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1336.611267][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1336.633263][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1336.663984][T16467] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1336.704847][T16467] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1336.740461][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1336.762466][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1337.307349][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1337.336819][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1337.407005][T16467] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1338.209027][T16776] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3318'. [ 1339.442009][ T4720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1339.452371][ T4720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1339.501108][ T4720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1339.686293][ T4720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1340.526906][ T4497] Bluetooth: hci5: Frame reassembly failed (-84) [ 1340.534593][T16815] 9pnet_fd: Insufficient options for proto=fd [ 1340.549978][T16467] device veth0_vlan entered promiscuous mode [ 1340.566169][T16819] IPv6: NLM_F_CREATE should be specified when creating new route [ 1340.574098][T16819] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3328'. [ 1340.664532][ T4720] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1340.682627][ T4720] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1340.711622][T16467] device veth1_vlan entered promiscuous mode [ 1340.794107][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1340.809544][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1340.831667][T16467] device veth0_macvtap entered promiscuous mode [ 1340.862940][T16832] netlink: 136 bytes leftover after parsing attributes in process `syz.2.3333'. [ 1340.892932][T16832] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 1340.921394][T16467] device veth1_macvtap entered promiscuous mode [ 1340.961351][T16467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1340.980095][T16467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1340.991089][T16467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1341.015288][T16467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1341.032541][T16467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1341.053891][T16467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1341.076224][T16467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1341.101888][T16467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1341.133331][T16467] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1341.147666][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1341.169806][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1341.184768][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1341.195181][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1341.218539][T16467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1341.229621][T16467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1341.240633][T16467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1341.263064][T16467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1341.274640][T16467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1341.285737][T16467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1341.303686][T16467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1341.321603][T16467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1341.333121][T16467] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1341.343873][T16467] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1341.352683][T16467] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1341.361546][T16467] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1341.370437][ T4324] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1341.378142][T16467] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1341.399868][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1341.412530][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1341.567316][ T4324] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 1341.581962][ T4324] usb 3-1: config 0 has no interface number 0 [ 1341.603726][ T4324] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1341.605699][ T4379] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1341.632657][ T4379] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1341.633408][ T4324] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1341.673931][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1341.695429][ T4324] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1341.709328][ T4379] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1341.713781][ T4324] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1341.726368][ T4379] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1341.743899][ T4324] usb 3-1: Product: syz [ 1341.749651][ T4324] usb 3-1: Manufacturer: syz [ 1341.753720][ T4720] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1341.770565][ T4324] usb 3-1: SerialNumber: syz [ 1341.943105][ T4324] usb 3-1: config 0 descriptor?? [ 1341.958862][T16843] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1341.968442][ T4324] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1341.980040][ T4324] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1342.072348][T16868] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3341'. [ 1342.525869][ T48] Bluetooth: hci5: command 0xfc11 tx timeout [ 1342.532615][T12477] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 1342.698727][ C0] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 1342.902497][ T26] usb 3-1: USB disconnect, device number 38 [ 1342.925236][ T26] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1342.974106][ T26] cyberjack 3-1:0.69: device disconnected [ 1343.071245][T16882] input: syz0 as /devices/virtual/input/input13 [ 1344.559159][ T4293] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1344.698510][T16926] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3354'. [ 1344.759784][ T4293] usb 4-1: config 0 has an invalid interface number: 162 but max is 0 [ 1344.941867][ T4293] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1345.176041][ T4293] usb 4-1: config 0 has no interface number 0 [ 1345.311057][ T4293] usb 4-1: config 0 interface 162 altsetting 0 endpoint 0x7 has an invalid bInterval 32, changing to 9 [ 1345.359295][ T4293] usb 4-1: config 0 interface 162 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1345.393743][ T4293] usb 4-1: config 0 interface 162 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1345.446959][ T4293] usb 4-1: config 0 interface 162 altsetting 0 has 7 endpoint descriptors, different from the interface descriptor's value: 11 [ 1345.515448][ T4293] usb 4-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice=d4.45 [ 1345.546747][ T4293] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1345.566749][ T4293] usb 4-1: Product: syz [ 1345.570971][ T4293] usb 4-1: Manufacturer: syz [ 1345.583714][ T4293] usb 4-1: SerialNumber: syz [ 1345.598116][ T4293] usb 4-1: config 0 descriptor?? [ 1345.697828][ T4324] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1345.729085][ T4293] rtsx_usb: probe of 4-1:0.162 failed with error -8 [ 1345.822455][ T4293] usb 4-1: USB disconnect, device number 26 [ 1345.895394][ T4324] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 1345.929864][ T4324] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1345.961848][ T4324] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1345.988974][ T4324] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1346.001731][ T7970] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1346.026910][ T4324] usb 2-1: Manufacturer: syz [ 1346.048846][ T4324] usb 2-1: config 0 descriptor?? [ 1346.166120][ T4324] rc_core: IR keymap rc-hauppauge not found [ 1346.176701][ T4324] Registered IR keymap rc-empty [ 1346.190233][ T4324] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1346.203983][ T7970] usb 1-1: Using ep0 maxpacket: 8 [ 1346.217493][ T7970] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1346.233403][ T4324] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input14 [ 1346.250163][ T7970] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1346.258734][ T7970] usb 1-1: Product: syz [ 1346.262918][ T7970] usb 1-1: Manufacturer: syz [ 1346.281226][ T7970] usb 1-1: SerialNumber: syz [ 1346.316394][ T7970] usb 1-1: config 0 descriptor?? [ 1346.338581][ T7970] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1346.509890][ C0] igorplugusb 2-1:0.0: receive overflow, at least 33 lost [ 1346.748341][ T4324] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1346.767144][T11955] usb 2-1: USB disconnect, device number 32 [ 1347.111859][ T4324] usb 5-1: config 0 has no interfaces? [ 1347.127447][ T4324] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1347.155459][ T4324] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1347.183711][ T4324] usb 5-1: Product: syz [ 1347.198615][ T4324] usb 5-1: Manufacturer: syz [ 1347.212070][ T4324] usb 5-1: SerialNumber: syz [ 1347.239611][ T4324] usb 5-1: config 0 descriptor?? [ 1347.420347][T12699] usb 1-1: USB disconnect, device number 31 [ 1347.963814][T16994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3363'. [ 1350.563083][ T4293] usb 5-1: USB disconnect, device number 40 [ 1350.623997][T11955] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1350.815088][T11955] usb 3-1: Using ep0 maxpacket: 32 [ 1350.822462][T11955] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 1350.873318][T11955] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1350.910705][T11955] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1350.933894][T11955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1350.971562][T11955] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1351.003899][T11955] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1351.057738][T11955] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1351.094000][T11955] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1351.132294][T11955] usb 3-1: config 0 descriptor?? [ 1351.163820][ T4293] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1351.369712][ T4293] usb 2-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=30.20 [ 1351.381654][T11955] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 39 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1351.399214][ T4293] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1351.420217][ T4293] usb 2-1: Product: syz [ 1351.425021][ T4293] usb 2-1: Manufacturer: syz [ 1351.436103][ T4293] usb 2-1: SerialNumber: syz [ 1351.443796][T11955] usb 3-1: USB disconnect, device number 39 [ 1351.464476][ T4293] usb 2-1: config 0 descriptor?? [ 1351.474195][T11955] usblp0: removed [ 1351.888220][ T7970] usb 2-1: USB disconnect, device number 33 [ 1351.905053][ T7970] f81534a_ctrl 2-1:0.0: failed to set register 0x116: -19 [ 1351.944349][ T7970] f81534a_ctrl 2-1:0.0: failed to enable ports: -19 [ 1351.963781][T11955] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1352.183363][T11955] usb 3-1: Using ep0 maxpacket: 32 [ 1352.190791][T11955] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 1352.211998][T11955] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1352.222646][T11955] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1352.237833][T11955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1352.249104][T11955] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1352.263443][T11955] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1352.296935][T11955] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1352.312723][T11955] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1352.335403][T11955] usb 3-1: config 0 descriptor?? [ 1352.486201][ T4293] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 1352.553975][T11955] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 40 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1352.643758][ T7970] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1352.688756][ T4293] usb 5-1: config 36 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1352.703405][ T4293] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1352.717830][ T4293] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1352.727063][ T4293] usb 5-1: Manufacturer: syz [ 1352.731703][ T4293] usb 5-1: SerialNumber: syz [ 1352.744811][T17102] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1352.856578][ T7970] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1352.866018][ T7970] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1352.883553][ T7970] usb 1-1: config 0 descriptor?? [ 1352.980447][ T4293] usbhid 5-1:36.0: couldn't find an input interrupt endpoint [ 1353.005785][ T4293] usb 5-1: USB disconnect, device number 41 [ 1353.025788][T17041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1353.050335][T17041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1353.073798][T17041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1353.093802][ T26] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1353.112929][T17108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1353.123995][T17041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1353.134161][T17108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1353.158252][T17041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1353.172278][ T7970] [drm] vendor descriptor length:6 data:06 5f 01 05 a1 00 00 00 00 00 00 [ 1353.189602][ T7970] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1353.199529][T17041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1353.313654][ T26] usb 2-1: Using ep0 maxpacket: 32 [ 1353.334275][ T26] usb 2-1: config 0 has an invalid interface number: 20 but max is 0 [ 1353.342462][ T26] usb 2-1: config 0 has no interface number 0 [ 1353.348791][ T26] usb 2-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1353.358925][ T26] usb 2-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 1353.371882][ T26] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 1353.384027][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1353.392643][ T26] usb 2-1: Product: syz [ 1353.398737][ T26] usb 2-1: Manufacturer: syz [ 1353.410993][ T26] usb 2-1: SerialNumber: syz [ 1353.428992][ T26] usb 2-1: config 0 descriptor?? [ 1353.437718][T17129] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 1353.445866][T17129] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 1353.454570][ T26] ums-sddr09 2-1:0.20: USB Mass Storage device detected [ 1353.466736][T17041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1353.492301][T17041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1353.499986][ T7970] [drm:udl_init] *ERROR* Selecting channel failed [ 1353.626494][ T7970] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 1353.647784][ T7970] [drm] Initialized udl on minor 2 [ 1353.654253][ T26] ums-sddr09: probe of 2-1:0.20 failed with error -22 [ 1353.657287][ T7970] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1353.691010][ T7970] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1353.699031][ T26] usb 2-1: USB disconnect, device number 34 [ 1353.760985][ T7970] usb 1-1: USB disconnect, device number 32 [ 1354.043964][ T4293] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1354.047677][T11955] usb 3-1: USB disconnect, device number 40 [ 1354.074152][T11955] usblp0: removed [ 1354.113818][ T4381] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1354.233003][ T4293] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1354.243751][ T4293] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1354.271059][ T4293] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1354.313813][ T4381] usb 4-1: Using ep0 maxpacket: 32 [ 1354.337050][ T4381] usb 4-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 1354.353404][ T4293] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1354.363880][ T4381] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1354.383973][ T4381] usb 4-1: config 0 descriptor?? [ 1354.389470][ T4293] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1354.434903][ T4293] usb 5-1: Product: syz [ 1354.456201][ T4293] usb 5-1: Manufacturer: syz [ 1354.461097][ T4293] usb 5-1: SerialNumber: syz [ 1354.767750][ T4293] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 42 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1354.888982][ T4381] wacom 0003:056A:0045.001B: Unknown device_type for 'HID 056a:0045'. Assuming pen. [ 1354.918191][ T4381] wacom 0003:056A:0045.001B: hidraw0: USB HID v0.00 Device [HID 056a:0045] on usb-dummy_hcd.3-1/input0 [ 1354.939782][ T4381] input: Wacom Intuos2 12x18 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0045.001B/input/input15 [ 1354.990554][T17150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1355.001182][T17150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1355.015429][T17150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1355.039435][T17150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1355.120994][T17153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1355.141969][ T48] Bluetooth: hci5: sending frame failed (-49) [ 1355.150993][T12477] Bluetooth: hci5: Entering manufacturer mode failed (-49) [ 1355.173891][T17153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1355.203691][T11955] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1355.263395][T17150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1355.286286][T17150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1355.302338][T15700] usb 5-1: USB disconnect, device number 42 [ 1355.403916][T17153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1355.413566][T17153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1355.427286][T11955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1355.439438][T11955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1355.450353][T11955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 58368, setting to 1024 [ 1355.461557][T11955] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1355.474518][T17153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1355.474754][T17153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1355.484378][T11955] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 1355.505404][T11955] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1355.514940][T11955] usb 3-1: config 0 descriptor?? [ 1355.683771][ T7970] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1355.814428][T17153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1355.833849][T17153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1355.875844][ T7970] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1355.887464][ T7970] usb 2-1: config 0 has no interface number 0 [ 1355.893777][ T7970] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1355.905341][ T7970] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1355.915749][ T7970] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1355.925436][ T7970] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1355.935334][T11955] keytouch 0003:0926:3333.001C: fixing up Keytouch IEC report descriptor [ 1355.945075][T15700] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1355.962461][T11955] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.001C/input/input18 [ 1355.974699][ T7970] usb 2-1: config 0 descriptor?? [ 1356.060810][ T4381] usb 4-1: USB disconnect, device number 27 [ 1356.087153][T11955] keytouch 0003:0926:3333.001C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 1356.114152][T15700] usb 5-1: device descriptor read/64, error -71 [ 1356.143818][ T4324] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1356.158359][T11955] usb 3-1: USB disconnect, device number 41 [ 1356.363878][ T4324] usb 1-1: Using ep0 maxpacket: 16 [ 1356.371073][ T4324] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 1356.379562][ T4324] usb 1-1: config 0 has no interface number 0 [ 1356.385835][ T4324] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 1356.397182][T15700] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1356.406763][ T7970] prodikeys 0003:041E:2801.001D: unknown main item tag 0x0 [ 1356.414289][ T7970] prodikeys 0003:041E:2801.001D: unknown main item tag 0x0 [ 1356.422459][ T7970] prodikeys 0003:041E:2801.001D: unknown main item tag 0x0 [ 1356.431766][ T4324] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1356.442090][ T7970] prodikeys 0003:041E:2801.001D: unknown main item tag 0x0 [ 1356.449571][ T4324] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1356.460453][ T7970] prodikeys 0003:041E:2801.001D: unknown main item tag 0x0 [ 1356.468337][ T4324] usb 1-1: Product: syz [ 1356.472549][ T4324] usb 1-1: Manufacturer: syz [ 1356.480942][ T7970] prodikeys 0003:041E:2801.001D: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.1-1/input1 [ 1356.492623][ T4324] usb 1-1: SerialNumber: syz [ 1356.498976][ T4324] usb 1-1: config 0 descriptor?? [ 1356.506457][ T7970] hid_prodikeys: hid-prodikeys: failed to find output report [ 1356.506457][ T7970] [ 1356.563746][T15700] usb 5-1: device descriptor read/64, error -71 [ 1356.602296][T17172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1356.612653][T17172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1356.646104][ T4293] usb 2-1: USB disconnect, device number 35 [ 1356.735153][T15700] usb usb5-port1: attempt power cycle [ 1356.820659][T17150] usblp0: removed [ 1357.083874][ T4324] usbtouchscreen 1-1:0.214: Failed to read FW rev: -71 [ 1357.090927][ T4324] usbtouchscreen: probe of 1-1:0.214 failed with error -71 [ 1357.137224][ T4324] usb 1-1: USB disconnect, device number 33 [ 1357.293908][ T4293] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 1357.531811][ T4293] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1357.546448][ T4293] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1357.563762][ T4293] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1357.571446][ T4293] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 1357.584471][ T4293] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1357.584550][ T4324] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 1357.595239][ T4293] usb 3-1: config 0 descriptor?? [ 1357.939572][ T4324] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1357.952190][ T4324] usb 4-1: not running at top speed; connect to a high speed hub [ 1357.980072][ T48] Bluetooth: hci5: sending frame failed (-49) [ 1357.988171][T12477] Bluetooth: hci5: Entering manufacturer mode failed (-49) [ 1358.021778][ T4293] hid-steam 0003:28DE:1102.001E: unknown main item tag 0x0 [ 1358.030863][ T4293] hid-steam 0003:28DE:1102.001E: unknown main item tag 0x0 [ 1358.030867][ T4324] usb 4-1: config 2 has an invalid interface number: 233 but max is 0 [ 1358.047846][ T4293] hid-steam 0003:28DE:1102.001E: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0 [ 1358.076688][ T4293] hid-steam 0003:28DE:1102.001F: unknown main item tag 0x0 [ 1358.084493][ T4324] usb 4-1: config 2 has no interface number 0 [ 1358.084646][ T4293] hid-steam 0003:28DE:1102.001F: unknown main item tag 0x0 [ 1358.107519][ T4324] usb 4-1: config 2 interface 233 has no altsetting 0 [ 1358.114181][ T4293] hid-steam 0003:28DE:1102.001F: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0 [ 1358.143361][ T4324] usb 4-1: New USB device found, idVendor=0864, idProduct=4100, bcdDevice=24.5e [ 1358.152795][ T4324] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1358.170165][ T4324] usb 4-1: Product: syz [ 1358.177008][ T4324] usb 4-1: Manufacturer: syz [ 1358.181696][ T4324] usb 4-1: SerialNumber: syz [ 1358.207888][ T4293] hid-steam 0003:28DE:1102.001E: Steam Controller 'XXXXXXXXXX' connected [ 1358.226517][T17185] input: Steam Controller as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28DE:1102.001E/input/input21 [ 1358.242214][ T4293] input: Steam Controller as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28DE:1102.001E/input/input20 [ 1358.255420][T17185] [ 1358.257760][T17185] ====================================================== [ 1358.264862][T17185] WARNING: possible circular locking dependency detected [ 1358.271875][T17185] 6.1.129-syzkaller #0 Not tainted [ 1358.276969][T17185] ------------------------------------------------------ [ 1358.283974][T17185] syz.2.3414/17185 is trying to acquire lock: [ 1358.290025][T17185] ffffffff8e03ce88 (input_mutex){+.+.}-{3:3}, at: input_register_device+0xb54/0x1250 [ 1358.299621][T17185] [ 1358.299621][T17185] but task is already holding lock: [ 1358.307089][T17185] ffff88804afc9e18 (&hdev->ll_open_lock){+.+.}-{3:3}, at: hid_hw_close+0x2c/0xd0 [ 1358.316410][T17185] [ 1358.316410][T17185] which lock already depends on the new lock. [ 1358.316410][T17185] [ 1358.326816][T17185] [ 1358.326816][T17185] the existing dependency chain (in reverse order) is: [ 1358.335819][T17185] [ 1358.335819][T17185] -> #2 (&hdev->ll_open_lock){+.+.}-{3:3}: [ 1358.344081][T17185] lock_acquire+0x1f8/0x5a0 [ 1358.349130][T17185] __mutex_lock+0x132/0xd80 [ 1358.354144][T17185] hid_hw_open+0x24/0x160 [ 1358.358985][T17185] input_open_device+0x188/0x2d0 [ 1358.364434][T17185] kbd_connect+0xe5/0x120 [ 1358.369278][T17185] input_register_device+0xd65/0x1250 [ 1358.375258][T17185] hidinput_connect+0x2375/0x2be0 [ 1358.380796][T17185] hid_connect+0x47e/0x1a90 [ 1358.385823][T17185] hid_hw_start+0x99/0x100 [ 1358.390776][T17185] hid_device_probe+0x335/0x3a0 [ 1358.396175][T17185] really_probe+0x2ab/0xcb0 [ 1358.401190][T17185] __driver_probe_device+0x1a2/0x3d0 [ 1358.406984][T17185] driver_probe_device+0x50/0x420 [ 1358.412549][T17185] __device_attach_driver+0x2cf/0x510 [ 1358.418429][T17185] bus_for_each_drv+0x183/0x200 [ 1358.423798][T17185] __device_attach+0x359/0x570 [ 1358.429087][T17185] bus_probe_device+0xba/0x1e0 [ 1358.434365][T17185] device_add+0xb48/0xfd0 [ 1358.439223][T17185] hid_add_device+0x3a5/0x510 [ 1358.444421][T17185] usbhid_probe+0xc09/0xfc0 [ 1358.449436][T17185] usb_probe_interface+0x5c0/0xaf0 [ 1358.455066][T17185] really_probe+0x2ab/0xcb0 [ 1358.460162][T17185] __driver_probe_device+0x1a2/0x3d0 [ 1358.465952][T17185] driver_probe_device+0x50/0x420 [ 1358.471491][T17185] __device_attach_driver+0x2cf/0x510 [ 1358.477455][T17185] bus_for_each_drv+0x183/0x200 [ 1358.482821][T17185] __device_attach+0x359/0x570 [ 1358.488175][T17185] bus_probe_device+0xba/0x1e0 [ 1358.493448][T17185] device_add+0xb48/0xfd0 [ 1358.498289][T17185] usb_set_configuration+0x19dd/0x2020 [ 1358.504260][T17185] usb_generic_driver_probe+0x84/0x140 [ 1358.510225][T17185] usb_probe_device+0x130/0x260 [ 1358.515586][T17185] really_probe+0x2ab/0xcb0 [ 1358.520595][T17185] __driver_probe_device+0x1a2/0x3d0 [ 1358.526382][T17185] driver_probe_device+0x50/0x420 [ 1358.531908][T17185] __device_attach_driver+0x2cf/0x510 [ 1358.537786][T17185] bus_for_each_drv+0x183/0x200 [ 1358.543146][T17185] __device_attach+0x359/0x570 [ 1358.548412][T17185] bus_probe_device+0xba/0x1e0 [ 1358.553684][T17185] device_add+0xb48/0xfd0 [ 1358.558522][T17185] usb_new_device+0xbdd/0x1900 [ 1358.563792][T17185] hub_event+0x2efe/0x5730 [ 1358.568713][T17185] process_one_work+0x917/0x1260 [ 1358.574161][T17185] worker_thread+0xa47/0x1200 [ 1358.579379][T17185] kthread+0x28d/0x320 [ 1358.583973][T17185] ret_from_fork+0x1f/0x30 [ 1358.588912][T17185] [ 1358.588912][T17185] -> #1 (&dev->mutex#2){+.+.}-{3:3}: [ 1358.596385][T17185] lock_acquire+0x1f8/0x5a0 [ 1358.601426][T17185] __mutex_lock+0x132/0xd80 [ 1358.606439][T17185] input_register_handle+0x69/0x3a0 [ 1358.612137][T17185] kbd_connect+0xbb/0x120 [ 1358.617195][T17185] input_register_device+0xd65/0x1250 [ 1358.623077][T17185] acpi_button_add+0x62a/0x9f0 [ 1358.628350][T17185] acpi_device_probe+0xa0/0x2f0 [ 1358.633734][T17185] really_probe+0x2ab/0xcb0 [ 1358.638757][T17185] __driver_probe_device+0x1a2/0x3d0 [ 1358.644565][T17185] driver_probe_device+0x50/0x420 [ 1358.650105][T17185] __driver_attach+0x458/0x6f0 [ 1358.655380][T17185] bus_for_each_dev+0x17c/0x1f0 [ 1358.660750][T17185] bus_add_driver+0x334/0x600 [ 1358.665941][T17185] driver_register+0x2bf/0x3a0 [ 1358.671214][T17185] do_one_initcall+0x265/0x8f0 [ 1358.676492][T17185] do_initcall_level+0x157/0x207 [ 1358.681963][T17185] do_initcalls+0x49/0x86 [ 1358.686798][T17185] kernel_init_freeable+0x45c/0x60f [ 1358.692507][T17185] kernel_init+0x19/0x290 [ 1358.697433][T17185] ret_from_fork+0x1f/0x30 [ 1358.702363][T17185] [ 1358.702363][T17185] -> #0 (input_mutex){+.+.}-{3:3}: [ 1358.709753][T17185] validate_chain+0x1661/0x5950 [ 1358.715114][T17185] __lock_acquire+0x125b/0x1f80 [ 1358.720478][T17185] lock_acquire+0x1f8/0x5a0 [ 1358.725493][T17185] __mutex_lock+0x132/0xd80 [ 1358.730603][T17185] input_register_device+0xb54/0x1250 [ 1358.736495][T17185] steam_input_register+0x96b/0xbf0 [ 1358.742206][T17185] hid_hw_close+0xa4/0xd0 [ 1358.747048][T17185] hidraw_release+0x46d/0x6c0 [ 1358.752244][T17185] __fput+0x3f6/0x8d0 [ 1358.756745][T17185] task_work_run+0x246/0x300 [ 1358.761844][T17185] exit_to_user_mode_loop+0xde/0x100 [ 1358.767643][T17185] exit_to_user_mode_prepare+0xb1/0x140 [ 1358.773693][T17185] syscall_exit_to_user_mode+0x60/0x270 [ 1358.779749][T17185] do_syscall_64+0x47/0xb0 [ 1358.784675][T17185] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1358.791080][T17185] [ 1358.791080][T17185] other info that might help us debug this: [ 1358.791080][T17185] [ 1358.801293][T17185] Chain exists of: [ 1358.801293][T17185] input_mutex --> &dev->mutex#2 --> &hdev->ll_open_lock [ 1358.801293][T17185] [ 1358.814158][T17185] Possible unsafe locking scenario: [ 1358.814158][T17185] [ 1358.821591][T17185] CPU0 CPU1 [ 1358.826939][T17185] ---- ---- [ 1358.832286][T17185] lock(&hdev->ll_open_lock); [ 1358.837037][T17185] lock(&dev->mutex#2); [ 1358.843793][T17185] lock(&hdev->ll_open_lock); [ 1358.851061][T17185] lock(input_mutex); [ 1358.855131][T17185] [ 1358.855131][T17185] *** DEADLOCK *** [ 1358.855131][T17185] [ 1358.863268][T17185] 2 locks held by syz.2.3414/17185: [ 1358.868444][T17185] #0: ffffffff8e3bccd0 (minors_rwsem){++++}-{3:3}, at: hidraw_release+0x70/0x6c0 [ 1358.877658][T17185] #1: ffff88804afc9e18 (&hdev->ll_open_lock){+.+.}-{3:3}, at: hid_hw_close+0x2c/0xd0 [ 1358.887221][T17185] [ 1358.887221][T17185] stack backtrace: [ 1358.893090][T17185] CPU: 1 PID: 17185 Comm: syz.2.3414 Not tainted 6.1.129-syzkaller #0 [ 1358.901226][T17185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1358.911272][T17185] Call Trace: [ 1358.914537][T17185] [ 1358.917458][T17185] dump_stack_lvl+0x1e3/0x2cb [ 1358.922144][T17185] ? nf_tcp_handle_invalid+0x647/0x647 [ 1358.927601][T17185] ? print_circular_bug+0x12b/0x1a0 [ 1358.932803][T17185] check_noncircular+0x2fa/0x3b0 [ 1358.937728][T17185] ? mark_lock+0x9a/0x340 [ 1358.942043][T17185] ? add_chain_block+0x850/0x850 [ 1358.946991][T17185] ? lockdep_lock+0x11f/0x2a0 [ 1358.951662][T17185] ? _find_first_zero_bit+0xd0/0x100 [ 1358.956934][T17185] validate_chain+0x1661/0x5950 [ 1358.961864][T17185] ? reacquire_held_locks+0x660/0x660 [ 1358.967224][T17185] ? mark_lock+0x9a/0x340 [ 1358.971539][T17185] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1358.977514][T17185] ? print_irqtrace_events+0x210/0x210 [ 1358.982974][T17185] ? do_raw_spin_unlock+0x137/0x8a0 [ 1358.988162][T17185] ? mark_lock+0x9a/0x340 [ 1358.992480][T17185] __lock_acquire+0x125b/0x1f80 [ 1358.997330][T17185] lock_acquire+0x1f8/0x5a0 [ 1359.001838][T17185] ? input_register_device+0xb54/0x1250 [ 1359.007387][T17185] ? read_lock_is_recursive+0x10/0x10 [ 1359.012760][T17185] ? __might_sleep+0xb0/0xb0 [ 1359.017347][T17185] ? mark_lock+0x9a/0x340 [ 1359.021668][T17185] __mutex_lock+0x132/0xd80 [ 1359.026167][T17185] ? input_register_device+0xb54/0x1250 [ 1359.031722][T17185] ? print_irqtrace_events+0x210/0x210 [ 1359.037810][T17185] ? input_register_device+0xb54/0x1250 [ 1359.043402][T17185] ? mutex_lock_nested+0x10/0x10 [ 1359.048343][T17185] ? kasan_quarantine_put+0xd4/0x220 [ 1359.053633][T17185] ? __kmem_cache_free+0x25c/0x3c0 [ 1359.058742][T17185] ? input_register_device+0xb46/0x1250 [ 1359.064285][T17185] input_register_device+0xb54/0x1250 [ 1359.069827][T17185] steam_input_register+0x96b/0xbf0 [ 1359.075022][T17185] hid_hw_close+0xa4/0xd0 [ 1359.079343][T17185] hidraw_release+0x46d/0x6c0 [ 1359.084027][T17185] ? hidraw_open+0x8d0/0x8d0 [ 1359.088617][T17185] __fput+0x3f6/0x8d0 [ 1359.092599][T17185] task_work_run+0x246/0x300 [ 1359.097186][T17185] ? task_work_cancel+0x2e0/0x2e0 [ 1359.102212][T17185] ? exit_to_user_mode_loop+0x39/0x100 [ 1359.107834][T17185] exit_to_user_mode_loop+0xde/0x100 [ 1359.113108][T17185] exit_to_user_mode_prepare+0xb1/0x140 [ 1359.118640][T17185] syscall_exit_to_user_mode+0x60/0x270 [ 1359.124180][T17185] do_syscall_64+0x47/0xb0 [ 1359.128594][T17185] ? clear_bhb_loop+0x45/0xa0 [ 1359.133261][T17185] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1359.139233][T17185] RIP: 0033:0x7f7660b8d169 [ 1359.143649][T17185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1359.163336][T17185] RSP: 002b:00007ffd4d66b6a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1359.171835][T17185] RAX: 0000000000000000 RBX: 000000000014b4bb RCX: 00007f7660b8d169 [ 1359.179819][T17185] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1359.187803][T17185] RBP: 00007f7660da7ba0 R08: 0000000000000001 R09: 000000084d66b99f [ 1359.195763][T17185] R10: 00007f7660800000 R11: 0000000000000246 R12: 00007f7660da5fac [ 1359.203724][T17185] R13: 00007f7660da5fa0 R14: ffffffffffffffff R15: 00007ffd4d66b7c0 [ 1359.211687][T17185] [ 1359.214794][ C1] vkms_vblank_simulate: vblank timer overrun [ 1359.225678][T12699] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1359.231534][ T4324] usb 4-1: USB disconnect, device number 28 [ 1359.269819][ T4293] usb 3-1: USB disconnect, device number 42 [ 1359.339942][ T4293] hid-steam 0003:28DE:1102.001E: Steam Controller 'XXXXXXXXXX' disconnected [ 1359.433681][T12699] usb 2-1: Using ep0 maxpacket: 16 [ 1359.441864][T12699] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 1359.455780][T12699] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1359.464945][T12699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1359.473027][T12699] usb 2-1: Product: syz [ 1359.478505][T12699] usb 2-1: Manufacturer: syz [ 1359.483092][T12699] usb 2-1: SerialNumber: syz [ 1359.489011][T12699] usb 2-1: config 0 descriptor?? [ 1359.560525][ T3606] ================================================================== [ 1359.568734][ T3606] BUG: KASAN: use-after-free in __mutex_lock+0xfa/0xd80 [ 1359.575667][ T3606] Read of size 8 at addr ffff8880554be8e8 by task acpid/3606 [ 1359.583135][ T3606] [ 1359.585445][ T3606] CPU: 1 PID: 3606 Comm: acpid Not tainted 6.1.129-syzkaller #0 [ 1359.593161][ T3606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1359.603205][ T3606] Call Trace: [ 1359.606559][ T3606] [ 1359.609476][ T3606] dump_stack_lvl+0x1e3/0x2cb [ 1359.614154][ T3606] ? nf_tcp_handle_invalid+0x647/0x647 [ 1359.619623][ T3606] ? panic+0x764/0x764 [ 1359.623693][ T3606] ? _printk+0xd1/0x111 [ 1359.627831][ T3606] ? __virt_addr_valid+0x17f/0x530 [ 1359.632928][ T3606] ? __virt_addr_valid+0x17f/0x530 [ 1359.638130][ T3606] print_report+0x15f/0x4f0 [ 1359.642643][ T3606] ? __virt_addr_valid+0x17f/0x530 [ 1359.647829][ T3606] ? __virt_addr_valid+0x17f/0x530 [ 1359.652928][ T3606] ? __virt_addr_valid+0x45b/0x530 [ 1359.658036][ T3606] ? __phys_addr+0xb6/0x170 [ 1359.662525][ T3606] ? __mutex_lock+0xfa/0xd80 [ 1359.667103][ T3606] kasan_report+0x136/0x160 [ 1359.671617][ T3606] ? __mutex_lock+0xfa/0xd80 [ 1359.676215][ T3606] __mutex_lock+0xfa/0xd80 [ 1359.680647][ T3606] ? __mutex_trylock_common+0x17e/0x2e0 [ 1359.686294][ T3606] ? rcu_is_watching+0x11/0xb0 [ 1359.691072][ T3606] ? steam_input_open+0x93/0x1b0 [ 1359.696007][ T3606] ? trace_contention_end+0x61/0x170 [ 1359.701326][ T3606] ? mutex_lock_nested+0x10/0x10 [ 1359.706294][ T3606] ? __mutex_lock+0x2f7/0xd80 [ 1359.711008][ T3606] ? trace_contention_end+0x61/0x170 [ 1359.716300][ T3606] ? __mutex_lock+0x2f7/0xd80 [ 1359.720967][ T3606] ? input_open_device+0x4e/0x2d0 [ 1359.725983][ T3606] steam_input_open+0x93/0x1b0 [ 1359.730735][ T3606] ? steam_input_register+0xbf0/0xbf0 [ 1359.736108][ T3606] ? mutex_lock_nested+0x10/0x10 [ 1359.741059][ T3606] input_open_device+0x188/0x2d0 [ 1359.746019][ T3606] joydev_open+0x312/0x930 [ 1359.750430][ T3606] chrdev_open+0x54a/0x630 [ 1359.754834][ T3606] ? cd_forget+0x160/0x160 [ 1359.759256][ T3606] ? do_raw_spin_unlock+0x137/0x8a0 [ 1359.764466][ T3606] ? fsnotify_perm+0x472/0x590 [ 1359.769253][ T3606] ? cd_forget+0x160/0x160 [ 1359.773725][ T3606] do_dentry_open+0x7f9/0x10f0 [ 1359.778505][ T3606] path_openat+0x2644/0x2e60 [ 1359.783139][ T3606] ? __kasan_slab_alloc+0x65/0x70 [ 1359.788163][ T3606] ? slab_post_alloc_hook+0x52/0x3a0 [ 1359.793478][ T3606] ? do_syscall_64+0x3b/0xb0 [ 1359.798086][ T3606] ? do_filp_open+0x480/0x480 [ 1359.802784][ T3606] ? __virt_addr_valid+0x17f/0x530 [ 1359.807917][ T3606] ? rcu_is_watching+0x11/0xb0 [ 1359.812691][ T3606] ? __virt_addr_valid+0x17f/0x530 [ 1359.817808][ T3606] ? lock_release+0xd6/0xa20 [ 1359.822393][ T3606] do_filp_open+0x230/0x480 [ 1359.826885][ T3606] ? vfs_tmpfile+0x4a0/0x4a0 [ 1359.831478][ T3606] ? _raw_spin_unlock+0x24/0x40 [ 1359.836428][ T3606] ? alloc_fd+0x5a0/0x640 [ 1359.840743][ T3606] do_sys_openat2+0x13b/0x4f0 [ 1359.845437][ T3606] ? do_sys_open+0x220/0x220 [ 1359.850047][ T3606] ? __might_fault+0xbd/0x110 [ 1359.854712][ T3606] ? __fdget_pos+0x1db/0x360 [ 1359.859287][ T3606] __x64_sys_openat+0x243/0x290 [ 1359.864141][ T3606] ? __ia32_sys_open+0x270/0x270 [ 1359.869077][ T3606] ? rcu_is_watching+0x11/0xb0 [ 1359.874262][ T3606] ? syscall_enter_from_user_mode+0x2e/0x230 [ 1359.880230][ T3606] do_syscall_64+0x3b/0xb0 [ 1359.884633][ T3606] ? clear_bhb_loop+0x45/0xa0 [ 1359.889300][ T3606] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1359.895178][ T3606] RIP: 0033:0x7fb3887169a4 [ 1359.899574][ T3606] Code: 24 20 48 8d 44 24 30 48 89 44 24 28 64 8b 04 25 18 00 00 00 85 c0 75 2c 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 60 48 8b 15 55 a4 0d 00 f7 d8 64 89 02 48 83 [ 1359.919284][ T3606] RSP: 002b:00007ffd06b00d90 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1359.927704][ T3606] RAX: ffffffffffffffda RBX: 00007ffd06b01078 RCX: 00007fb3887169a4 [ 1359.935863][ T3606] RDX: 0000000000080800 RSI: 00007ffd06b00f78 RDI: 00000000ffffff9c [ 1359.943819][ T3606] RBP: 00007ffd06b00f78 R08: 00000000000000f4 R09: 00007ffd06b00f78 [ 1359.951964][ T3606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000080800 [ 1359.959932][ T3606] R13: 0000000000000020 R14: 00007ffd06b01078 R15: 00007ffd06b00f78 [ 1359.967913][ T3606] [ 1359.970918][ T3606] [ 1359.973222][ T3606] Allocated by task 4293: [ 1359.977545][ T3606] kasan_set_track+0x4b/0x70 [ 1359.982121][ T3606] __kasan_kmalloc+0x97/0xb0 [ 1359.986705][ T3606] __kmalloc_node_track_caller+0xb1/0x220 [ 1359.992407][ T3606] devm_kmalloc+0x7c/0x2b0 [ 1359.997253][ T3606] steam_probe+0x12e/0xc10 [ 1360.001654][ T3606] hid_device_probe+0x298/0x3a0 [ 1360.006492][ T3606] really_probe+0x2ab/0xcb0 [ 1360.010995][ T3606] __driver_probe_device+0x1a2/0x3d0 [ 1360.016287][ T3606] driver_probe_device+0x50/0x420 [ 1360.021298][ T3606] __device_attach_driver+0x2cf/0x510 [ 1360.026652][ T3606] bus_for_each_drv+0x183/0x200 [ 1360.031489][ T3606] __device_attach+0x359/0x570 [ 1360.036254][ T3606] bus_probe_device+0xba/0x1e0 [ 1360.041004][ T3606] device_add+0xb48/0xfd0 [ 1360.045319][ T3606] hid_add_device+0x3a5/0x510 [ 1360.050108][ T3606] usbhid_probe+0xc09/0xfc0 [ 1360.054618][ T3606] usb_probe_interface+0x5c0/0xaf0 [ 1360.059724][ T3606] really_probe+0x2ab/0xcb0 [ 1360.064239][ T3606] __driver_probe_device+0x1a2/0x3d0 [ 1360.069525][ T3606] driver_probe_device+0x50/0x420 [ 1360.074812][ T3606] __device_attach_driver+0x2cf/0x510 [ 1360.080175][ T3606] bus_for_each_drv+0x183/0x200 [ 1360.085030][ T3606] __device_attach+0x359/0x570 [ 1360.089776][ T3606] bus_probe_device+0xba/0x1e0 [ 1360.094528][ T3606] device_add+0xb48/0xfd0 [ 1360.098848][ T3606] usb_set_configuration+0x19dd/0x2020 [ 1360.104318][ T3606] usb_generic_driver_probe+0x84/0x140 [ 1360.109965][ T3606] usb_probe_device+0x130/0x260 [ 1360.114821][ T3606] really_probe+0x2ab/0xcb0 [ 1360.119335][ T3606] __driver_probe_device+0x1a2/0x3d0 [ 1360.124611][ T3606] driver_probe_device+0x50/0x420 [ 1360.129900][ T3606] __device_attach_driver+0x2cf/0x510 [ 1360.135268][ T3606] bus_for_each_drv+0x183/0x200 [ 1360.140209][ T3606] __device_attach+0x359/0x570 [ 1360.144966][ T3606] bus_probe_device+0xba/0x1e0 [ 1360.149723][ T3606] device_add+0xb48/0xfd0 [ 1360.154149][ T3606] usb_new_device+0xbdd/0x1900 [ 1360.158924][ T3606] hub_event+0x2efe/0x5730 [ 1360.163326][ T3606] process_one_work+0x917/0x1260 [ 1360.168276][ T3606] worker_thread+0xa47/0x1200 [ 1360.172952][ T3606] kthread+0x28d/0x320 [ 1360.177011][ T3606] ret_from_fork+0x1f/0x30 [ 1360.181590][ T3606] [ 1360.183922][ T3606] Freed by task 4293: [ 1360.187913][ T3606] kasan_set_track+0x4b/0x70 [ 1360.192485][ T3606] kasan_save_free_info+0x27/0x40 [ 1360.197622][ T3606] ____kasan_slab_free+0xd6/0x120 [ 1360.202633][ T3606] __kmem_cache_free+0x25c/0x3c0 [ 1360.207558][ T3606] devres_release_all+0x1c1/0x240 [ 1360.212567][ T3606] device_release_driver_internal+0x5bf/0x880 [ 1360.218623][ T3606] bus_remove_device+0x2e5/0x400 [ 1360.223676][ T3606] device_del+0x6e2/0xbd0 [ 1360.228020][ T3606] hid_destroy_device+0x64/0x100 [ 1360.232959][ T3606] usbhid_disconnect+0x9a/0xc0 [ 1360.237715][ T3606] usb_unbind_interface+0x1cd/0x840 [ 1360.242919][ T3606] device_release_driver_internal+0x59e/0x880 [ 1360.248996][ T3606] bus_remove_device+0x2e5/0x400 [ 1360.253930][ T3606] device_del+0x6e2/0xbd0 [ 1360.258262][ T3606] usb_disable_device+0x3b8/0x840 [ 1360.263283][ T3606] usb_disconnect+0x33c/0x8c0 [ 1360.267984][ T3606] hub_event+0x1f78/0x5730 [ 1360.272394][ T3606] process_one_work+0x917/0x1260 [ 1360.277320][ T3606] worker_thread+0xd04/0x1200 [ 1360.281985][ T3606] kthread+0x28d/0x320 [ 1360.286039][ T3606] ret_from_fork+0x1f/0x30 [ 1360.290454][ T3606] [ 1360.292777][ T3606] Last potentially related work creation: [ 1360.298474][ T3606] kasan_save_stack+0x3b/0x60 [ 1360.303149][ T3606] __kasan_record_aux_stack+0xb0/0xc0 [ 1360.308532][ T3606] insert_work+0x54/0x3d0 [ 1360.312866][ T3606] __queue_work+0xb4b/0xf90 [ 1360.317368][ T3606] call_timer_fn+0x1ad/0x6b0 [ 1360.321972][ T3606] __run_timers+0x6a8/0x890 [ 1360.326459][ T3606] run_timer_softirq+0x63/0xf0 [ 1360.331210][ T3606] handle_softirqs+0x2ee/0xa40 [ 1360.335958][ T3606] __irq_exit_rcu+0x157/0x240 [ 1360.340618][ T3606] irq_exit_rcu+0x5/0x20 [ 1360.344841][ T3606] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 1360.350456][ T3606] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1360.356430][ T3606] [ 1360.358762][ T3606] The buggy address belongs to the object at ffff8880554be800 [ 1360.358762][ T3606] which belongs to the cache kmalloc-512 of size 512 [ 1360.372803][ T3606] The buggy address is located 232 bytes inside of [ 1360.372803][ T3606] 512-byte region [ffff8880554be800, ffff8880554bea00) [ 1360.386061][ T3606] [ 1360.388364][ T3606] The buggy address belongs to the physical page: [ 1360.394765][ T3606] page:ffffea0001552f00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x554bc [ 1360.404984][ T3606] head:ffffea0001552f00 order:2 compound_mapcount:0 compound_pincount:0 [ 1360.413297][ T3606] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1360.421278][ T3606] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888017c41c80 [ 1360.429859][ T3606] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 1360.438456][ T3606] page dumped because: kasan: bad access detected [ 1360.444870][ T3606] page_owner tracks the page as allocated [ 1360.450568][ T3606] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4243, tgid 4243 (syz-executor), ts 64672692597, free_ts 64662653526 [ 1360.471924][ T3606] post_alloc_hook+0x18d/0x1b0 [ 1360.476675][ T3606] get_page_from_freelist+0x3731/0x38d0 [ 1360.482201][ T3606] __alloc_pages+0x28d/0x770 [ 1360.486775][ T3606] alloc_slab_page+0x6a/0x150 [ 1360.491435][ T3606] new_slab+0x84/0x2d0 [ 1360.495487][ T3606] ___slab_alloc+0xc20/0x1270 [ 1360.500145][ T3606] __kmem_cache_alloc_node+0x19f/0x260 [ 1360.505590][ T3606] __kmalloc_node_track_caller+0xa0/0x220 [ 1360.511295][ T3606] __alloc_skb+0x12a/0x2c0 [ 1360.515697][ T3606] netlink_ack+0x392/0x12a0 [ 1360.520182][ T3606] netlink_rcv_skb+0x24a/0x410 [ 1360.524937][ T3606] netlink_unicast+0x7e2/0x970 [ 1360.529712][ T3606] netlink_sendmsg+0xa26/0xd60 [ 1360.534460][ T3606] __sys_sendto+0x480/0x600 [ 1360.538940][ T3606] __x64_sys_sendto+0xda/0xf0 [ 1360.543598][ T3606] do_syscall_64+0x3b/0xb0 [ 1360.548031][ T3606] page last free stack trace: [ 1360.552678][ T3606] free_unref_page_prepare+0x12a6/0x15b0 [ 1360.558294][ T3606] free_unref_page+0x33/0x3e0 [ 1360.562962][ T3606] __stack_depot_save+0x409/0x470 [ 1360.567975][ T3606] kasan_set_track+0x60/0x70 [ 1360.572545][ T3606] __kasan_slab_alloc+0x65/0x70 [ 1360.577376][ T3606] slab_post_alloc_hook+0x52/0x3a0 [ 1360.582467][ T3606] kmem_cache_alloc+0x10c/0x2d0 [ 1360.587319][ T3606] debug_objects_fill_pool+0x511/0xa10 [ 1360.592757][ T3606] __debug_object_init+0x29/0x450 [ 1360.597761][ T3606] synchronize_rcu_expedited+0x59c/0x930 [ 1360.603376][ T3606] wg_socket_reinit+0x1d6/0x370 [ 1360.608214][ T3606] wg_socket_init+0xb60/0xe90 [ 1360.612874][ T3606] wg_open+0x251/0x410 [ 1360.616933][ T3606] __dev_open+0x2cb/0x440 [ 1360.621276][ T3606] __dev_change_flags+0x1db/0x6e0 [ 1360.626291][ T3606] dev_change_flags+0x87/0x190 [ 1360.631069][ T3606] [ 1360.633376][ T3606] Memory state around the buggy address: [ 1360.638985][ T3606] ffff8880554be780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1360.647042][ T3606] ffff8880554be800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1360.655101][ T3606] >ffff8880554be880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1360.663142][ T3606] ^ [ 1360.670581][ T3606] ffff8880554be900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1360.678623][ T3606] ffff8880554be980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1360.686678][ T3606] ================================================================== [ 1360.694804][ C1] vkms_vblank_simulate: vblank timer overrun [ 1360.705051][ T3606] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1360.712263][ T3606] CPU: 1 PID: 3606 Comm: acpid Not tainted 6.1.129-syzkaller #0 [ 1360.719887][ T3606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1360.729926][ T3606] Call Trace: [ 1360.733209][ T3606] [ 1360.736126][ T3606] dump_stack_lvl+0x1e3/0x2cb [ 1360.740800][ T3606] ? nf_tcp_handle_invalid+0x647/0x647 [ 1360.746247][ T3606] ? panic+0x764/0x764 [ 1360.750305][ T3606] ? preempt_schedule_common+0xa6/0xd0 [ 1360.755752][ T3606] ? vscnprintf+0x59/0x80 [ 1360.760068][ T3606] panic+0x318/0x764 [ 1360.763946][ T3606] ? check_panic_on_warn+0x1d/0xa0 [ 1360.769046][ T3606] ? memcpy_page_flushcache+0xfc/0xfc [ 1360.774406][ T3606] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 1360.780371][ T3606] ? _raw_spin_unlock+0x40/0x40 [ 1360.785203][ T3606] ? print_report+0x4a3/0x4f0 [ 1360.789867][ T3606] check_panic_on_warn+0x7e/0xa0 [ 1360.794789][ T3606] ? __mutex_lock+0xfa/0xd80 [ 1360.799363][ T3606] end_report+0x66/0x110 [ 1360.803590][ T3606] kasan_report+0x143/0x160 [ 1360.808081][ T3606] ? __mutex_lock+0xfa/0xd80 [ 1360.812659][ T3606] __mutex_lock+0xfa/0xd80 [ 1360.817063][ T3606] ? __mutex_trylock_common+0x17e/0x2e0 [ 1360.822597][ T3606] ? rcu_is_watching+0x11/0xb0 [ 1360.827345][ T3606] ? steam_input_open+0x93/0x1b0 [ 1360.832269][ T3606] ? trace_contention_end+0x61/0x170 [ 1360.837549][ T3606] ? mutex_lock_nested+0x10/0x10 [ 1360.842477][ T3606] ? __mutex_lock+0x2f7/0xd80 [ 1360.847146][ T3606] ? trace_contention_end+0x61/0x170 [ 1360.852419][ T3606] ? __mutex_lock+0x2f7/0xd80 [ 1360.857082][ T3606] ? input_open_device+0x4e/0x2d0 [ 1360.862099][ T3606] steam_input_open+0x93/0x1b0 [ 1360.866853][ T3606] ? steam_input_register+0xbf0/0xbf0 [ 1360.872212][ T3606] ? mutex_lock_nested+0x10/0x10 [ 1360.877834][ T3606] input_open_device+0x188/0x2d0 [ 1360.884362][ T3606] joydev_open+0x312/0x930 [ 1360.890605][ T3606] chrdev_open+0x54a/0x630 [ 1360.895728][ T3606] ? cd_forget+0x160/0x160 [ 1360.900493][ T3606] ? do_raw_spin_unlock+0x137/0x8a0 [ 1360.907524][ T3606] ? fsnotify_perm+0x472/0x590 [ 1360.912292][ T3606] ? cd_forget+0x160/0x160 [ 1360.916705][ T3606] do_dentry_open+0x7f9/0x10f0 [ 1360.921462][ T3606] path_openat+0x2644/0x2e60 [ 1360.926048][ T3606] ? __kasan_slab_alloc+0x65/0x70 [ 1360.931072][ T3606] ? slab_post_alloc_hook+0x52/0x3a0 [ 1360.936349][ T3606] ? do_syscall_64+0x3b/0xb0 [ 1360.940957][ T3606] ? do_filp_open+0x480/0x480 [ 1360.945735][ T3606] ? __virt_addr_valid+0x17f/0x530 [ 1360.950839][ T3606] ? rcu_is_watching+0x11/0xb0 [ 1360.955610][ T3606] ? __virt_addr_valid+0x17f/0x530 [ 1360.960717][ T3606] ? lock_release+0xd6/0xa20 [ 1360.965304][ T3606] do_filp_open+0x230/0x480 [ 1360.969822][ T3606] ? vfs_tmpfile+0x4a0/0x4a0 [ 1360.974422][ T3606] ? _raw_spin_unlock+0x24/0x40 [ 1360.979265][ T3606] ? alloc_fd+0x5a0/0x640 [ 1360.983692][ T3606] do_sys_openat2+0x13b/0x4f0 [ 1360.988359][ T3606] ? do_sys_open+0x220/0x220 [ 1360.992932][ T3606] ? __might_fault+0xbd/0x110 [ 1360.997773][ T3606] ? __fdget_pos+0x1db/0x360 [ 1361.002351][ T3606] __x64_sys_openat+0x243/0x290 [ 1361.007187][ T3606] ? __ia32_sys_open+0x270/0x270 [ 1361.012109][ T3606] ? rcu_is_watching+0x11/0xb0 [ 1361.016858][ T3606] ? syscall_enter_from_user_mode+0x2e/0x230 [ 1361.022827][ T3606] do_syscall_64+0x3b/0xb0 [ 1361.027256][ T3606] ? clear_bhb_loop+0x45/0xa0 [ 1361.031923][ T3606] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1361.037812][ T3606] RIP: 0033:0x7fb3887169a4 [ 1361.042212][ T3606] Code: 24 20 48 8d 44 24 30 48 89 44 24 28 64 8b 04 25 18 00 00 00 85 c0 75 2c 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 60 48 8b 15 55 a4 0d 00 f7 d8 64 89 02 48 83 [ 1361.061808][ T3606] RSP: 002b:00007ffd06b00d90 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1361.070214][ T3606] RAX: ffffffffffffffda RBX: 00007ffd06b01078 RCX: 00007fb3887169a4 [ 1361.078178][ T3606] RDX: 0000000000080800 RSI: 00007ffd06b00f78 RDI: 00000000ffffff9c [ 1361.086139][ T3606] RBP: 00007ffd06b00f78 R08: 00000000000000f4 R09: 00007ffd06b00f78 [ 1361.094097][ T3606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000080800 [ 1361.102057][ T3606] R13: 0000000000000020 R14: 00007ffd06b01078 R15: 00007ffd06b00f78 [ 1361.110193][ T3606] [ 1361.113503][ T3606] Kernel Offset: disabled [ 1361.117831][ T3606] Rebooting in 86400 seconds..