last executing test programs: 1m54.001064439s ago: executing program 3 (id=2449): unshare(0x66000080) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x106}}, 0x20) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7f7c}]}) exit(0x6) close_range(r1, 0xffffffffffffffff, 0x0) 1m50.8724461s ago: executing program 3 (id=2461): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket(0x3, 0x800, 0x6) unshare(0x22020400) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0xffff1a28, 0x1, 0x2000004, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x501, 0x1000, 0x9, 0x3, 0x3, 0x1, 0x1, 0x0, 0x6, 0x9, 0x4, 0x5, 0x4, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x20000005, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x80002af, 0xf7, 0x4, 0x2, 0x6, 0x9, 0x4, 0x200, 0x4009, 0x0, 0x4, 0x7, 0x8, 0x2, 0x0, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0x5b84, 0x2, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x3, 0xc5c, 0xffffffff]}}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='netlink_extack\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="343d65be5ec46bade359afd8a02cd995ea05b1e517aea9", @ANYRES16=r2, @ANYRES32], 0x18}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) socket$kcm(0xa, 0x922000000004, 0x11) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) splice(r7, 0x0, r8, 0x0, 0xf3a, 0x0) write(r5, &(0x7f0000000240)="94", 0x1) tee(r4, r8, 0x8f5, 0x100000000000000) write$cgroup_subtree(r8, &(0x7f0000000140)={[{0x2b, 'hugetlb'}]}, 0x9) write$cgroup_type(r8, &(0x7f0000000180), 0x9) write(r6, 0x0, 0x0) r9 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r0) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r9, 0x20, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x1) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) socket(0x28, 0x5, 0x0) 1m49.816263491s ago: executing program 3 (id=2464): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x2a5}, &(0x7f0000000100), &(0x7f0000000380)=0x0) syz_io_uring_setup(0x5e2, &(0x7f00000003c0)={0x0, 0x0, 0x800}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r2, 0xa3d, 0x0, 0x0, 0x0, 0x0) r5 = mq_open(&(0x7f000084dff0)='!sali\x1cqxte&\xac\xe87x\x00', 0x6e93ebbbcc0884f2, 0x12e, &(0x7f0000000300)={0x0, 0x1, 0x7}) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) 1m48.827777769s ago: executing program 3 (id=2465): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m48.586462364s ago: executing program 3 (id=2466): rename(&(0x7f0000000280)='./file0/../file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00') 1m48.391928838s ago: executing program 3 (id=2467): openat$iommufd(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x200}}, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r0}, 0x10) getpid() sync() sync() 1m33.263782763s ago: executing program 32 (id=2467): openat$iommufd(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x200}}, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r0}, 0x10) getpid() sync() sync() 8.948795476s ago: executing program 0 (id=3414): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8fb, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa0f, 0xffffffff}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) writev(r3, &(0x7f0000000980), 0x0) 7.327916737s ago: executing program 0 (id=3426): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x701203, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x1, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 6.917960486s ago: executing program 0 (id=3427): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0', [], 0xa, "049cdb6a6b6cc03e0038d09d173dd74352e09f5fd367731749201039806623cce47810845783aa4ce6e100a450fa66303a73f59814d38a33394707d7233c5e186fba73d482189d385681a940856ce75b39c97014068a0a2134e2f0184dbd868680eb3119f6cbf564d0ce82d38b47f7d62e39e71dd68a4a267b"}, 0x84) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = syz_io_uring_setup(0x10c, &(0x7f0000000380)={0x0, 0xd06d, 0x10, 0x2, 0x2c1}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4804}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x40, 0x0, r1, 0x0, 0x0, 0x5c, 0x10}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) io_uring_setup(0x203c, &(0x7f0000000040)={0x0, 0xd4b5, 0x80, 0x3}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket(0x2, 0x80805, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e0000000400028008000a00", @ANYRES64=r6], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) 6.658816371s ago: executing program 0 (id=3428): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x3, 0x800, 0x6) unshare(0x22020400) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0xffff1a28, 0x1, 0x2000004, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x501, 0x1000, 0x9, 0x3, 0x3, 0x1, 0x1, 0x0, 0x6, 0x9, 0x4, 0x5, 0x4, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x20000005, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x80002af, 0xf7, 0x4, 0x2, 0x6, 0x9, 0x4, 0x200, 0x4009, 0x0, 0x4, 0x7, 0x8, 0x2, 0x0, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0x5b84, 0x2, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x3, 0xc5c, 0xffffffff]}}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='netlink_extack\x00', r0}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) socket$kcm(0xa, 0x922000000004, 0x11) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write(r2, &(0x7f0000000240)="94", 0x1) tee(r1, r4, 0x8f5, 0x100000000000000) 6.309099797s ago: executing program 4 (id=3433): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$igmp(0x2, 0x3, 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = add_key$user(0x0, 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r5}, &(0x7f00000000c0)=""/80, 0x50, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x4000000000000b49, 0x9, 0x8, 0x1, 0x4}, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5218) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), 0x0, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x262) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000680)={0x0, @in6={{0xa, 0x4e22, 0xfffffc00, @local, 0x4}}}, &(0x7f0000000280)=0x84) timer_create(0x3, 0x0, &(0x7f0000bbdffc)) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') preadv(r6, &(0x7f0000000580)=[{&(0x7f0000000200)=""/122, 0x7a}], 0x1, 0x4, 0x0) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000180)=0x4, 0x4) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='\x00', @ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB], 0x54}}, 0x4040) mq_unlink(&(0x7f0000000040)='/dev/rfkill\x00') sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x480, 0x30, 0x0, 0x1, 0x4db, 0x18, 0x0, {0x1, 0x40}, {0x0, 0x20000004}, {}, {0x3, 0x0, 0x1}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffc00, 0x0, 0x400, 0x0, 0x0, 0x21, 0xc, 0x3, 0x7}) 5.197294429s ago: executing program 2 (id=3442): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 5.158343549s ago: executing program 2 (id=3443): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r0, 0x400, 0x1) fremovexattr(r0, &(0x7f0000001600)=ANY=[@ANYBLOB="21af6494"]) 4.692055199s ago: executing program 4 (id=3444): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan1\x00', 0x0}) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r4}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00') read$FUSE(r5, &(0x7f0000002480)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_open_procfs(r6, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) mremap(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000000000/0x3000)=nil) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$CEC_RECEIVE(r7, 0xc0386106, &(0x7f00000001c0)={0x4, 0x3c6, 0x4, 0x5, 0xc1, 0x4, "1130fd852869ab7e3763d015948ae7f8", 0x1, 0x1, 0x2, 0x0, 0x1, 0x8, 0x4}) r8 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r8, 0x40045532, &(0x7f00000000c0)=0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r7, 0x0, 0x0}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, &(0x7f0000000040)) 4.689969039s ago: executing program 2 (id=3452): syz_open_dev$evdev(&(0x7f0000000000), 0xb87e, 0x480) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xf, 0x0, &(0x7f0000000180)="c1dfb080cd21d308098ee68886dd96", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.586938381s ago: executing program 2 (id=3446): socket$can_bcm(0x1d, 0x2, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 4.293004707s ago: executing program 2 (id=3449): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(r0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)={{0x14}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}}, 0x20050800) 4.255580068s ago: executing program 1 (id=3450): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x701203, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, 0x0, {}, {0x1, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.961289003s ago: executing program 1 (id=3451): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = socket(0x840000000002, 0x3, 0xfa) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) close_range(r0, 0xffffffffffffffff, 0x0) 3.725347338s ago: executing program 1 (id=3453): openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$igmp(0x2, 0x3, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = add_key$user(0x0, 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r4}, &(0x7f00000000c0)=""/80, 0x50, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x4000000000000b49, 0x9, 0x8, 0x1, 0x4}, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5218) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), 0x0, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x262) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000680)={0x0, @in6={{0xa, 0x4e22, 0xfffffc00, @local, 0x4}}}, &(0x7f0000000280)=0x84) timer_create(0x3, 0x0, &(0x7f0000bbdffc)) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') preadv(r5, &(0x7f0000000580)=[{&(0x7f0000000200)=""/122, 0x7a}], 0x1, 0x4, 0x0) 3.462744163s ago: executing program 0 (id=3454): r0 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f0000001240)="80349c0d9e8fcc9f44658138dc4a3c4ad42f918348474a5bc38ff0e0571fc22c8eb5cb22fdf30ced1a4c1ccb5e5b35fed7db48c1a8a7132adc5623d146ddfe2254dd2579b4284b53d1cea6206864473d31bdb00c9d1462458b678827e80c94d88099e7471a58b1463086f9cdd1ccc19fa2fc4a9dd5a56fe782d15e66648c7630f1aaa7e9820460c46e292dbb8fa6f6701048ff17f46097b1ee0750ed038f18b81b2ba014bf866062c9a6f88b5d07e13b7eddd968ba9c7a53609c7b61471a51fd85bceebc0a92b2cd7c45a7f4571e693abebc3c5ff16c8128d92476", 0xdb}, {&(0x7f0000000280)="5b4ea50f20d7212327afde5e7a457cde2dff791c69fbc3", 0x17}, {&(0x7f00000002c0)="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", 0xeb}, {&(0x7f0000001440)="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", 0xb47}, {&(0x7f0000002440)="253c10cd0a56ebbb9e8b465670109c340c95f1d27d36cbeb7fa948545e9b18da346b70b5dc6ea12ad1a30e4f7038336f1af1d61b04de988f1755e9b3ba9919b2a4952ceda920a7f0e22dd239d4a74f2d1c854bc64f09f979aa3e9f5c25ff8ec189e5d809483583f648cd8870291200e428", 0x71}, {&(0x7f00000024c0)="2ba671ae8107530b978dd82841597ed8f4275ed9e6b9f7b73ee6324ddf688ad9d88125b82afd2e28aef7183086ce0dd4ee880fc56a2ca8b52ef8f5b5f3e475f49b0bcd201fe612703d680fdd1151dd32535b04d4697d472c7750d6c4c197162e9f872253b611b1ca20e79dcf40d1faf58a453f8db9a03fdd351b54ad4e77fa0fda7990bb281079ae7ba3994aef7380e1d6342305e2d12c57379fd12e784f48e4e832171df4576c8724e3bfd70ebc92fc11914cd4", 0xb4}, {&(0x7f00000025c0)="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", 0xa9b}], 0x7}}], 0x300, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000cc0), &(0x7f0000000d00)=0x4) 3.235799168s ago: executing program 4 (id=3455): syz_open_dev$evdev(&(0x7f0000000000), 0xb87e, 0x480) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xf, 0x0, &(0x7f0000000180)="c1dfb080cd21d308098ee68886dd96", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.132569409s ago: executing program 4 (id=3456): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000001c0)={0x1, 0x0, [{0x1, 0x2, 0x80, 0xfffffff9, 0xeaa}]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, 0x0) 2.57327437s ago: executing program 0 (id=3457): syz_open_procfs(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000140)) r4 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x7079, 0x0, 0x3, 0x1e5}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r8, 0x0, 0x0}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r9 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) readv(r9, &(0x7f0000000140)=[{&(0x7f0000000400)=""/242, 0xf2}, {0x0}], 0x2) socket$unix(0x1, 0x1, 0x0) r10 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r10, 0x40000000af01, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100153a42908f00a71729188010203010902240001060000000904020002ffffff0009050b00000000000009"], 0x0) 2.57312235s ago: executing program 4 (id=3458): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x3, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) 2.033958381s ago: executing program 1 (id=3459): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) getsockopt$bt_hci(r0, 0x84, 0x0, 0x0, &(0x7f0000000040)) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x7, 0x2, 0x20}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) r2 = openat$ppp(0xffffffffffffff9c, 0x0, 0x84a200, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x1) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1.851597745s ago: executing program 1 (id=3460): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0xfffffffd, 0x0}, 0x6400c810) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4d, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000040)={@multicast2, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a"}, 0x3c) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r3 = syz_clone(0x4038000, &(0x7f00000001c0)="ce6c21ee23995e760cf0ea262d7a25d4bf336e15dd8906a93c2aacad74a32323c3b52bd251a39ddd44219b2111783adf475deaa4ff9ae8", 0x37, &(0x7f0000000280), &(0x7f0000000480), &(0x7f00000004c0)="c8c77f1ace667fe683a69198e1549d4194db2998300c7e8986222ad49540c09ab6c348af75ad1eb8c8c44bddbf12ba4f13ce7832cce300007fe95dba702ce8efc57db904410194acff7440578062d4a426b366f10393b4d671f82003cf6b081267fd7206a9069208deca7231e884ea66bd846f1db6248b9c8c2b54b59ca41fbe9b6c0a470300000000000000a8ad0f1b3ca4162feb6d7553c4ed82c4148ba4faf6982cf92777db") prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x4010, 0xffffffffffffffff, 0x0) unshare(0x22020600) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000080)=@ethtool_coalesce={0xf, 0x6, 0x16d20415, 0x8, 0xfffffffb, 0x1000, 0xb2e2, 0x6, 0xffff, 0x0, 0x9, 0x5b7d, 0xd8, 0x6, 0x3ff, 0x7, 0x0, 0x4ad, 0x101, 0x55e2, 0xffff, 0x3ff, 0x5}}) syz_io_uring_setup(0x7b1d, &(0x7f0000000280)={0x0, 0x0, 0x8000, 0x0, 0x3}, &(0x7f0000000100), &(0x7f0000000240)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000002000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000"], 0x18c) syz_open_procfs(0x0, &(0x7f0000000100)='gid_map\x00') 1.173713147s ago: executing program 2 (id=3461): openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f0000000100)={"2b25146b", 0x3, 0x8, 0x0, 0x5, 0xd, "bdb5dab31589d9ad462595809830e1", "891cd913", "e7761b1a", "4b4a826a", ["1abe7e7096f523394309cb97", "471332420bfb268ec1bb440f", "24af1abcfb7a7f98a967f4a1", "e3036e54dde867d7a320afbc"]}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653", 0x5d}], 0x3}], 0x1, 0x40800) recvmsg(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/177, 0xb1}], 0x1}, 0x2) r9 = openat$cgroup_freezer_state(r6, &(0x7f0000000140), 0x2, 0x0) ptrace$ARCH_GET_GS(0x1e, 0x0, &(0x7f0000000040), 0x1004) sendfile(r9, r9, 0x0, 0x9) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) dup3(r4, 0xffffffffffffffff, 0x80000) r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, 0x0) 1.173509997s ago: executing program 4 (id=3462): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x3, 0x800, 0x6) unshare(0x22020400) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0xffff1a28, 0x1, 0x2000004, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x501, 0x1000, 0x9, 0x3, 0x3, 0x1, 0x1, 0x0, 0x6, 0x9, 0x4, 0x5, 0x4, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x20000005, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x80002af, 0xf7, 0x4, 0x2, 0x6, 0x9, 0x4, 0x200, 0x4009, 0x0, 0x4, 0x7, 0x8, 0x2, 0x0, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0x5b84, 0x2, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x3, 0xc5c, 0xffffffff]}}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='netlink_extack\x00', r0}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) socket$kcm(0xa, 0x922000000004, 0x11) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write(r2, &(0x7f0000000240)="94", 0x1) tee(r1, r4, 0x8f5, 0x100000000000000) 0s ago: executing program 1 (id=3463): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) syz_clone3(&(0x7f0000001380)={0x101800800, &(0x7f00000001c0), &(0x7f0000000240)=0x0, &(0x7f0000000280), {0x1d}, &(0x7f00000002c0)=""/29, 0x1d, &(0x7f0000000340)=""/4083, &(0x7f0000001400)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0], 0xa}, 0x58) sched_setattr(r2, 0x0, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x60a, 0x80001) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r3, 0x0, 0x0, 0x800) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) rseq(&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x4, 0x1000000000000, 0x800, 0x7}, 0x6}, 0x20, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000080)="c3b9fa79d427aa8b51d42c0b50dc14fd", 0x10) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r6, &(0x7f0000002080)={0xfc, {"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", 0xa75}}, 0x1006) setsockopt$inet6_buf(r5, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000020000210d0000aaa8fa017242ba9380d440fe0000", 0x24) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = dup(r7) execveat(r8, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b0d, &(0x7f0000000000)={'wlan1\x00'}) r9 = syz_clone3(&(0x7f0000000600)={0xc0084100, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0), {0x1000032}, &(0x7f0000001440)=""/71, 0x47, &(0x7f0000000280)=""/16, 0x0}, 0x58) syz_open_procfs$namespace(r9, &(0x7f0000000680)='ns/ipc\x00') add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) kernel console output (not intermixed with test programs): ialized): Failed to read reg index 0x0000: -71 [ 666.731959][ T5912] asix: probe of 4-1:0.0 failed with error -71 [ 666.761487][ T1186] usb 1-1: New USB device found, idVendor=0c45, idProduct=628f, bcdDevice=1f.44 [ 666.777647][ T5912] usb 4-1: USB disconnect, device number 9 [ 666.793821][ T1186] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.816355][ T1186] usb 1-1: config 0 descriptor?? [ 666.870473][ T1186] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:628f [ 667.076625][ T1186] gspca_sn9c20x: Write register 1000 failed -71 [ 667.101258][ T1186] gspca_sn9c20x: Device initialization failed [ 667.117710][ T1186] gspca_sn9c20x: probe of 1-1:0.0 failed with error -71 [ 667.137869][ T1186] usb 1-1: USB disconnect, device number 11 [ 667.191534][T13369] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 667.206438][T13369] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 667.218151][T13369] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 667.229267][T13369] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 667.239529][T13369] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 667.249139][T13369] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 667.305934][ T3491] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.429913][ T3491] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.531745][ T3491] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.676395][ T3491] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.185945][T13399] netlink: 'syz.3.2314': attribute type 1 has an invalid length. [ 668.196304][T13399] netlink: 'syz.3.2314': attribute type 3 has an invalid length. [ 668.212017][T13367] chnl_net:caif_netlink_parms(): no params data found [ 668.224225][T13399] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2314'. [ 668.257566][T13399] NCSI netlink: No device for ifindex 0 [ 668.582300][T13367] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.589983][T13367] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.599318][T13367] bridge_slave_0: entered allmulticast mode [ 668.616966][T13367] bridge_slave_0: entered promiscuous mode [ 668.640263][T13367] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.661913][T13367] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.683756][T13367] bridge_slave_1: entered allmulticast mode [ 668.719222][T13367] bridge_slave_1: entered promiscuous mode [ 668.777569][ T1186] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 668.803243][ T5877] libceph: connect (1)[c::]:6789 error -101 [ 668.828370][ T5877] libceph: mon0 (1)[c::]:6789 connect error [ 668.856160][ T9] libceph: connect (1)[c::]:6789 error -101 [ 668.856310][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 668.921957][T13367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 668.937504][T13367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 668.994758][ T1186] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 669.012572][ T1186] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 669.029945][T13367] team0: Port device team_slave_0 added [ 669.036776][ T1186] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 669.050846][T13367] team0: Port device team_slave_1 added [ 669.063364][ T1186] usb 1-1: config 0 interface 0 has no altsetting 0 [ 669.079965][ T1186] usb 1-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 669.089638][ T1186] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.109156][ T8] libceph: connect (1)[c::]:6789 error -101 [ 669.115660][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 669.117703][ T1186] usb 1-1: config 0 descriptor?? [ 669.202811][T13367] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 669.223043][T13367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 669.256770][T13367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 669.295415][T13369] Bluetooth: hci0: command tx timeout [ 669.313926][T13367] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 669.322102][T13367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 669.350557][T13367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 669.547522][T13367] hsr_slave_0: entered promiscuous mode [ 669.556204][T13367] hsr_slave_1: entered promiscuous mode [ 669.581623][T13419] ceph: No mds server is up or the cluster is laggy [ 669.590260][T13367] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 669.607221][T13367] Cannot create hsr debugfs directory [ 669.655669][ T5877] libceph: connect (1)[c::]:6789 error -101 [ 669.676984][ T5877] libceph: mon0 (1)[c::]:6789 connect error [ 670.442883][ T3491] hsr_slave_0: left promiscuous mode [ 670.463519][ T3491] hsr_slave_1: left promiscuous mode [ 670.520489][ T3491] veth1_macvtap: left promiscuous mode [ 670.538227][ T3491] veth0_macvtap: left promiscuous mode [ 670.551653][ T3491] veth1_vlan: left promiscuous mode [ 670.563912][ T3491] veth0_vlan: left promiscuous mode [ 670.572193][T13468] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2330'. [ 670.970128][T13475] block device autoloading is deprecated and will be removed. [ 671.366029][T13369] Bluetooth: hci0: command tx timeout [ 671.372124][ T6296] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 671.559144][ T1186] usbhid 1-1:0.0: can't add hid device: -71 [ 671.565335][ T1186] usbhid: probe of 1-1:0.0 failed with error -71 [ 671.583520][ T6296] usb 4-1: config 0 has no interfaces? [ 671.596407][ T6296] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 671.621672][ T1186] usb 1-1: USB disconnect, device number 12 [ 671.628211][ T6296] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.653449][ T6296] usb 4-1: Product: syz [ 671.658089][ T6296] usb 4-1: Manufacturer: syz [ 671.669672][ T6296] usb 4-1: SerialNumber: syz [ 671.684226][ T6296] usb 4-1: config 0 descriptor?? [ 671.934927][ T5912] usb 4-1: USB disconnect, device number 10 [ 672.076432][ T1186] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 672.268965][ T1186] usb 1-1: Using ep0 maxpacket: 8 [ 672.285827][ T1186] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 672.295040][ T1186] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.303439][ T1186] usb 1-1: Product: syz [ 672.307823][ T1186] usb 1-1: Manufacturer: syz [ 672.312454][ T1186] usb 1-1: SerialNumber: syz [ 672.320846][ T1186] usb 1-1: config 0 descriptor?? [ 672.343658][ T3491] bond0 (unregistering): Released all slaves [ 672.347956][ T1186] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 672.359978][ T1186] dvb-usb: bulk message failed: -22 (2/0) [ 672.381892][ T1186] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 672.393850][ T1186] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 672.407740][ T1186] usb 1-1: media controller created [ 672.429803][ T1186] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 672.602404][T13479] cxusb: i2c rd: len=120 is too big! [ 672.602404][T13479] [ 672.641419][ T1186] cxusb: set interface failed [ 672.676617][ T1186] dvb-usb: bulk message failed: -22 (1/0) [ 672.825385][ T1186] DVB: Unable to find symbol mt352_attach() [ 672.831394][ T1186] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 673.025022][ T1186] rc_core: IR keymap rc-dvico-portable not found [ 673.031514][ T1186] Registered IR keymap rc-empty [ 673.064733][ T1186] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 673.088242][ T1186] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input11 [ 673.156669][ T1186] dvb-usb: schedule remote query interval to 100 msecs. [ 673.164532][ T1186] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 673.272548][ T5173] dvb-usb: bulk message failed: -22 (1/0) [ 673.283463][ T1186] usb 1-1: USB disconnect, device number 13 [ 673.444993][T13369] Bluetooth: hci0: command tx timeout [ 673.507475][ T1186] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 673.733538][ T3491] IPVS: stop unused estimator thread 0... [ 673.873907][T13367] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 673.902993][T13367] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 673.930686][T13367] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 673.948624][T13367] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 674.151830][T13367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 674.216487][T13367] 8021q: adding VLAN 0 to HW filter on device team0 [ 674.251113][ T3518] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.258413][ T3518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 674.318225][ T3518] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.325457][ T3518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 674.993186][T13367] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 675.000697][T13567] input: syz1 as /devices/virtual/input/input12 [ 675.145959][T13367] veth0_vlan: entered promiscuous mode [ 675.186570][T13367] veth1_vlan: entered promiscuous mode [ 675.305261][T13367] veth0_macvtap: entered promiscuous mode [ 675.324637][T13367] veth1_macvtap: entered promiscuous mode [ 675.383076][T13367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 675.413806][T13367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.440396][T13367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 675.494258][T13367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.523842][T13369] Bluetooth: hci0: command tx timeout [ 675.533913][T13367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 675.550677][T13367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.576682][T13367] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 675.601180][T13367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 675.685078][T13367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.705990][T13596] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2367'. [ 675.803807][T13367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 675.930675][T13367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 676.049488][T13367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 676.167649][T13367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 676.298602][T13367] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 676.396693][T13367] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.530326][T13367] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.650846][T13367] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.761352][T13367] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.351588][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 679.384795][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 679.423944][T13615] sctp: [Deprecated]: syz.3.2371 (pid 13615) Use of int in max_burst socket option deprecated. [ 679.423944][T13615] Use struct sctp_assoc_value instead [ 679.468751][T13614] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2372'. [ 679.496904][ T6277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 679.511920][T13614] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2372'. [ 679.522346][ T6277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 680.351530][ T5912] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 680.551496][ T5912] usb 3-1: Using ep0 maxpacket: 8 [ 680.573778][ T5912] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 680.596472][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.630314][ T5912] usb 3-1: Product: syz [ 680.643185][ T5912] usb 3-1: Manufacturer: syz [ 680.647923][ T5912] usb 3-1: SerialNumber: syz [ 680.694737][ T5912] usb 3-1: config 0 descriptor?? [ 680.702182][ T5103] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 680.713208][ T5103] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 680.722881][ T5103] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 680.741842][ T5103] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 680.743600][ T5912] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 680.766680][ T5103] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 680.782433][ T5103] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 680.794017][ T5912] dvb-usb: bulk message failed: -22 (2/0) [ 680.832400][ T5912] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 680.852281][ T5912] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 680.868082][ T5912] usb 3-1: media controller created [ 680.895015][ T5912] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 680.944095][ T5912] cxusb: set interface failed [ 680.952019][ T5912] dvb-usb: bulk message failed: -22 (1/0) [ 681.008349][ T5912] DVB: Unable to find symbol mt352_attach() [ 681.025815][ T5912] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 681.162990][ T5912] rc_core: IR keymap rc-dvico-portable not found [ 681.169393][ T5912] Registered IR keymap rc-empty [ 681.224374][ T5912] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 681.246832][ T5912] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input14 [ 681.281395][ T5912] dvb-usb: schedule remote query interval to 100 msecs. [ 681.298987][ T5912] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 681.335056][ T5912] usb 3-1: USB disconnect, device number 15 [ 681.339096][T13654] chnl_net:caif_netlink_parms(): no params data found [ 681.407913][ T5912] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 681.670453][T13654] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.711829][T13654] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.719192][T13654] bridge_slave_0: entered allmulticast mode [ 681.742526][T13654] bridge_slave_0: entered promiscuous mode [ 681.767149][T13654] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.779050][T13654] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.787735][T13654] bridge_slave_1: entered allmulticast mode [ 681.802923][T13654] bridge_slave_1: entered promiscuous mode [ 681.889782][T13654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 681.931304][T13654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 682.029665][T13654] team0: Port device team_slave_0 added [ 682.049167][T13654] team0: Port device team_slave_1 added [ 682.139382][T13654] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 682.162232][T13654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 682.232275][T13654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 682.591566][T13654] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 682.598938][T13654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 682.637589][T13654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 682.724709][T13654] hsr_slave_0: entered promiscuous mode [ 682.732048][T13654] hsr_slave_1: entered promiscuous mode [ 682.880381][ T5103] Bluetooth: hci1: command tx timeout [ 682.938125][T13654] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.980202][ T1186] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 683.038263][T13654] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.103041][T13654] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.174639][ T1186] usb 2-1: Using ep0 maxpacket: 8 [ 683.184976][ T1186] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 683.198732][ T1186] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.201181][T13654] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.210795][ T1186] usb 2-1: Product: syz [ 683.221894][ T1186] usb 2-1: Manufacturer: syz [ 683.226598][ T1186] usb 2-1: SerialNumber: syz [ 683.254225][ T1186] usb 2-1: config 0 descriptor?? [ 683.261887][ T1186] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 683.280549][ T1186] dvb-usb: bulk message failed: -22 (2/0) [ 683.303915][ T1186] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 683.318820][ T1186] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 683.347903][ T1186] usb 2-1: media controller created [ 683.426946][ T1186] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 683.469261][ T1186] cxusb: set interface failed [ 683.479497][ T1186] dvb-usb: bulk message failed: -22 (1/0) [ 683.500781][T13738] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2400'. [ 683.512044][T13654] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 683.523563][T13738] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2400'. [ 683.535111][T13654] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 683.542663][T13738] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2400'. [ 683.557000][T13654] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 683.568075][T13654] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 683.579926][ T1186] DVB: Unable to find symbol mt352_attach() [ 683.586091][ T1186] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 683.700528][ T1186] rc_core: IR keymap rc-dvico-portable not found [ 683.709267][ T1186] Registered IR keymap rc-empty [ 683.723020][ T1186] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 683.747128][T13654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 683.754094][ T1186] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input15 [ 683.764909][ T1186] dvb-usb: schedule remote query interval to 100 msecs. [ 683.780193][ T1186] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 683.800961][T13654] 8021q: adding VLAN 0 to HW filter on device team0 [ 683.806129][ T1186] usb 2-1: USB disconnect, device number 17 [ 683.858951][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.866357][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 683.954914][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.960702][ T1186] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 683.962214][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 684.437149][T13654] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 684.470315][ T5173] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 684.537434][T13654] veth0_vlan: entered promiscuous mode [ 684.571126][T13654] veth1_vlan: entered promiscuous mode [ 684.636847][T13654] veth0_macvtap: entered promiscuous mode [ 684.642933][ T1186] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 684.662681][ T5173] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 684.687528][T13654] veth1_macvtap: entered promiscuous mode [ 684.694386][ T5173] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.729433][ T5173] usb 3-1: config 0 descriptor?? [ 684.760577][ T5173] cp210x 3-1:0.0: cp210x converter detected [ 684.774955][T13654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.793573][T13654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.805638][T13654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.816494][T13654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.828323][T13654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.841212][T13654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.851433][T13654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.862149][T13654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.872168][ T1186] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 684.873968][T13654] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 684.907544][ T1186] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 684.911776][T13654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 684.928111][T13654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.938263][T13654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 684.945224][ T1186] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 684.950019][T13654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.964249][ T1186] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 684.976391][ T5103] Bluetooth: hci1: command tx timeout [ 684.978976][ T1186] usb 1-1: Manufacturer: syz [ 684.982858][T13654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 685.004153][ T1186] usb 1-1: config 0 descriptor?? [ 685.010982][T13654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.022023][T13654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 685.033110][T13654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.047078][T13654] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 685.068626][T13654] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.077746][T13654] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.091875][T13654] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.100863][T13654] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.162184][ T5173] usb 3-1: cp210x converter now attached to ttyUSB0 [ 685.274307][ T6277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 685.289696][ T6277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 685.326688][ T6277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 685.336112][ T6277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 685.356794][ T5896] usb 3-1: USB disconnect, device number 16 [ 685.380435][ T5896] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 685.422116][ T5896] cp210x 3-1:0.0: device disconnected [ 685.923311][ T1186] uclogic 0003:256C:006D.0019: failed retrieving string descriptor #100: -71 [ 685.958764][ T1186] uclogic 0003:256C:006D.0019: failed retrieving pen parameters: -71 [ 686.001901][ T1186] uclogic 0003:256C:006D.0019: failed probing pen v1 parameters: -71 [ 686.062394][ T1186] uclogic 0003:256C:006D.0019: failed probing parameters: -71 [ 686.084485][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.086109][ T5920] block nbd0: Possible stuck request ffff888021a1b600: control (read@0,4096B). Runtime 210 seconds [ 686.094347][ T1186] uclogic: probe of 0003:256C:006D.0019 failed with error -71 [ 686.207349][ T1186] usb 1-1: USB disconnect, device number 14 [ 686.425802][T13604] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.484414][T13369] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 686.496866][T13369] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 686.510549][T13369] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 686.531076][T13369] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 686.539072][T13369] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 686.547784][T13369] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 686.615531][T13604] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.722007][ T28] audit: type=1326 audit(1758776440.725:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13799 comm="syz.2.2422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68cf8eec9 code=0x7ffc0000 [ 686.744408][ C0] vkms_vblank_simulate: vblank timer overrun [ 686.752003][ T28] audit: type=1326 audit(1758776440.745:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13799 comm="syz.2.2422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68cf8eec9 code=0x7ffc0000 [ 686.774254][ C0] vkms_vblank_simulate: vblank timer overrun [ 686.786915][ T28] audit: type=1326 audit(1758776440.785:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13799 comm="syz.2.2422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7fe68cf8eec9 code=0x7ffc0000 [ 686.809199][ C0] vkms_vblank_simulate: vblank timer overrun [ 686.816752][ T28] audit: type=1326 audit(1758776440.785:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13799 comm="syz.2.2422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68cf8eec9 code=0x7ffc0000 [ 686.847487][ T28] audit: type=1326 audit(1758776440.785:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13799 comm="syz.2.2422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68cf8eec9 code=0x7ffc0000 [ 686.850201][T13604] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.871342][ T28] audit: type=1326 audit(1758776440.785:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13799 comm="syz.2.2422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe68cf8eec9 code=0x7ffc0000 [ 686.935928][ T28] audit: type=1326 audit(1758776440.785:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13799 comm="syz.2.2422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68cf8eec9 code=0x7ffc0000 [ 686.958581][ C0] vkms_vblank_simulate: vblank timer overrun [ 686.969293][ T28] audit: type=1326 audit(1758776440.785:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13799 comm="syz.2.2422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe68cf8eec9 code=0x7ffc0000 [ 686.991470][ C0] vkms_vblank_simulate: vblank timer overrun [ 686.998045][ T786] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 687.011782][T13604] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.013448][ T28] audit: type=1326 audit(1758776440.785:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13799 comm="syz.2.2422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68cf8eec9 code=0x7ffc0000 [ 687.044437][ C0] vkms_vblank_simulate: vblank timer overrun [ 687.058216][ T5103] Bluetooth: hci1: command tx timeout [ 687.064965][ T28] audit: type=1326 audit(1758776440.785:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13799 comm="syz.2.2422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe68cf8eec9 code=0x7ffc0000 [ 687.188536][ T786] usb 4-1: Using ep0 maxpacket: 32 [ 687.202202][ T786] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 687.222474][ T786] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 687.247522][T13789] chnl_net:caif_netlink_parms(): no params data found [ 687.255007][ T786] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 687.274810][ T786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.285358][T13809] netlink: 292 bytes leftover after parsing attributes in process `syz.2.2424'. [ 687.313719][ T786] usb 4-1: config 0 descriptor?? [ 687.385738][T13604] tipc: Left network mode [ 687.662580][T13789] bridge0: port 1(bridge_slave_0) entered blocking state [ 687.689308][T13789] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.716901][T13789] bridge_slave_0: entered allmulticast mode [ 687.737284][ T786] kone 0003:1E7D:2CED.001A: unbalanced collection at end of report description [ 687.744777][T13789] bridge_slave_0: entered promiscuous mode [ 687.776374][ T786] kone 0003:1E7D:2CED.001A: parse failed [ 687.787961][ T786] kone: probe of 0003:1E7D:2CED.001A failed with error -22 [ 687.833768][T13789] bridge0: port 2(bridge_slave_1) entered blocking state [ 687.857851][T13789] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.865098][T13789] bridge_slave_1: entered allmulticast mode [ 687.895885][T13789] bridge_slave_1: entered promiscuous mode [ 687.943557][ T786] usb 4-1: USB disconnect, device number 11 [ 688.239906][T13789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 688.272705][T13789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 688.488823][T13789] team0: Port device team_slave_0 added [ 688.536737][T13789] team0: Port device team_slave_1 added [ 688.574567][T13849] netlink: 'syz.2.2434': attribute type 3 has an invalid length. [ 688.638296][ T5103] Bluetooth: hci3: command tx timeout [ 688.677672][T13789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 688.703186][T13789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 688.764723][T13789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 688.870507][T13789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 688.879793][T13789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 688.935700][T13789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 689.117446][ T5103] Bluetooth: hci1: command tx timeout [ 689.200361][T13789] hsr_slave_0: entered promiscuous mode [ 689.221311][T13789] hsr_slave_1: entered promiscuous mode [ 689.243714][T13789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 689.266582][T13789] Cannot create hsr debugfs directory [ 689.428345][T13604] hsr_slave_0: left promiscuous mode [ 689.440998][T13604] hsr_slave_1: left promiscuous mode [ 689.454624][T13604] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 689.479215][T13604] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 689.513789][T13604] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 689.539321][T13604] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 689.554861][T13604] bridge_slave_1: left allmulticast mode [ 689.572003][T13604] bridge_slave_1: left promiscuous mode [ 689.587974][T13604] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.615735][T13604] bridge_slave_0: left allmulticast mode [ 689.637139][T13604] bridge_slave_0: left promiscuous mode [ 689.654202][T13604] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.754882][T13604] veth1_macvtap: left promiscuous mode [ 689.760683][T13604] veth0_macvtap: left promiscuous mode [ 689.766427][T13604] veth1_vlan: left promiscuous mode [ 689.786803][T13604] veth0_vlan: left promiscuous mode [ 690.603095][T13604] team0 (unregistering): Port device team_slave_1 removed [ 690.660256][T13604] team0 (unregistering): Port device team_slave_0 removed [ 690.715071][T13604] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 690.724727][ T5103] Bluetooth: hci3: command tx timeout [ 690.774637][T13604] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 691.324171][T13604] bond0 (unregistering): Released all slaves [ 691.478461][T13890] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2446'. [ 692.303073][T13604] IPVS: stop unused estimator thread 0... [ 692.536612][ T5877] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 692.751673][T13789] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 692.755963][ T5877] usb 3-1: Using ep0 maxpacket: 8 [ 692.770977][T13789] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 692.779228][ T5877] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 692.788918][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.798185][ T5103] Bluetooth: hci3: command tx timeout [ 692.805324][ T5877] usb 3-1: Product: syz [ 692.809626][ T5877] usb 3-1: Manufacturer: syz [ 692.814330][ T5877] usb 3-1: SerialNumber: syz [ 692.816746][T13789] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 692.830196][ T5877] usb 3-1: config 0 descriptor?? [ 692.841838][ T5877] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 692.842085][T13789] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 692.850413][ T5877] dvb-usb: bulk message failed: -22 (2/0) [ 692.858416][ T5877] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 692.880770][ T5877] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 692.896355][ T5877] usb 3-1: media controller created [ 692.960265][ T5877] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 693.042736][T13933] cxusb: i2c rd: len=120 is too big! [ 693.042736][T13933] [ 693.069413][ T5877] cxusb: set interface failed [ 693.084290][ T5877] dvb-usb: bulk message failed: -22 (1/0) [ 693.113561][T13789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 693.169864][T13789] 8021q: adding VLAN 0 to HW filter on device team0 [ 693.210622][ T3491] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.222361][ T3491] bridge0: port 1(bridge_slave_0) entered forwarding state [ 693.254762][ T5877] DVB: Unable to find symbol mt352_attach() [ 693.275194][ T1318] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.282412][ T1318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 693.293976][ T5877] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 693.447154][ T5877] rc_core: IR keymap rc-dvico-portable not found [ 693.464041][ T5877] Registered IR keymap rc-empty [ 693.486929][ T5877] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 693.533086][ T5877] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input16 [ 693.555120][ T5877] dvb-usb: schedule remote query interval to 100 msecs. [ 693.573192][ T5877] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 693.614766][ T5877] usb 3-1: USB disconnect, device number 17 [ 693.801147][ T5877] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 693.971988][T13789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 694.096965][T13789] veth0_vlan: entered promiscuous mode [ 694.133282][T13789] veth1_vlan: entered promiscuous mode [ 694.208363][T13789] veth0_macvtap: entered promiscuous mode [ 694.229057][T13789] veth1_macvtap: entered promiscuous mode [ 694.249230][T13789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 694.260116][T13789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.271048][T13789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 694.281711][T13789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.319627][T13789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 694.334513][T13789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.344479][T13789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 694.355161][T13789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.366905][T13789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 694.376219][ T5877] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 694.419715][T13789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 694.438915][T13789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.455172][T13789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 694.473062][T13789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.483256][T13789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 694.493849][T13789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.504793][T13789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 694.515300][T13789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.526764][T13789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 694.557001][T13789] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.573718][T13789] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.590333][T13789] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.607339][T13789] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.636413][ T5877] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 694.671495][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.710278][ T5877] usb 3-1: Product: syz [ 694.766936][ T5877] usb 3-1: Manufacturer: syz [ 694.797776][ T5877] usb 3-1: SerialNumber: syz [ 694.841316][ T5877] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 694.874288][ T5103] Bluetooth: hci3: command tx timeout [ 694.914153][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 694.940572][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 694.989312][T13604] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 694.991168][ T786] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 695.002832][T13604] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 695.298407][T13991] random: crng reseeded on system resumption [ 696.074805][ T8] usb 3-1: USB disconnect, device number 18 [ 696.097267][ T786] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 696.124524][ T786] ath9k_htc: Failed to initialize the device [ 696.134798][ T8] usb 3-1: ath9k_htc: USB layer deinitialized [ 697.443115][ T5912] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 697.455093][T14080] sp0: Synchronizing with TNC [ 697.657595][ T5912] usb 3-1: config 0 has no interfaces? [ 697.666770][ T5912] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 697.681210][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.695468][ T5912] usb 3-1: config 0 descriptor?? [ 697.898178][ T1186] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 698.003507][ T786] usb 3-1: USB disconnect, device number 19 [ 698.113148][ T1186] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 698.127142][ T1186] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 698.138429][ T1186] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 698.149910][ T1186] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.179066][ T1186] usb 2-1: config 0 descriptor?? [ 698.566099][T14088] sp0: Synchronizing with TNC [ 698.569268][ T5173] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 698.606460][ T1186] usbhid 2-1:0.0: can't add hid device: -71 [ 698.612733][ T1186] usbhid: probe of 2-1:0.0 failed with error -71 [ 698.621395][ T1186] usb 2-1: USB disconnect, device number 18 [ 698.766089][ T5173] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 698.775399][ T5173] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.783622][ T5173] usb 1-1: Product: syz [ 698.787814][ T5173] usb 1-1: Manufacturer: syz [ 698.793171][ T5173] usb 1-1: SerialNumber: syz [ 698.804939][ T5173] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 698.821512][ T5896] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 699.058053][T14086] random: crng reseeded on system resumption [ 699.350226][ T786] usb 1-1: USB disconnect, device number 15 [ 699.920680][ T5896] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 699.933206][ T5896] ath9k_htc: Failed to initialize the device [ 699.939760][ T786] usb 1-1: ath9k_htc: USB layer deinitialized [ 700.059746][T14120] lo: entered allmulticast mode [ 700.067486][T14120] lo: left allmulticast mode [ 700.378705][T14136] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 700.389930][T14136] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 700.402264][T14136] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 700.766435][T14148] program syz.2.2512 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 700.896523][T14148] kvm: kvm [14147]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x8b63ffe8c69a232 [ 701.066945][T13369] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 701.097190][T13369] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 701.107598][T13369] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 701.126734][T14074] syz_tun (unregistering): left allmulticast mode [ 701.137124][T13369] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 701.152349][T13369] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 701.159855][T13369] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 701.429409][T13604] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.545610][T13604] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.639555][T13604] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.666335][T14152] chnl_net:caif_netlink_parms(): no params data found [ 701.713212][T13604] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.861521][T14152] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.876001][T14152] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.883507][T14152] bridge_slave_0: entered allmulticast mode [ 701.890425][T14152] bridge_slave_0: entered promiscuous mode [ 701.926775][T14152] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.934561][T14152] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.942303][T14152] bridge_slave_1: entered allmulticast mode [ 701.949264][T14152] bridge_slave_1: entered promiscuous mode [ 702.035751][T14152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 702.059076][T14152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 702.164561][T14152] team0: Port device team_slave_0 added [ 702.193036][T13604] tipc: Left network mode [ 702.196626][T14152] team0: Port device team_slave_1 added [ 702.223205][ T5103] Bluetooth: hci3: hcon ffff888079e1a000 sent 1 < count 54380 [ 702.232200][ T5103] Bluetooth: hci3: hcon ffff888079e1a000 sent 0 < count 4095 [ 702.355684][T14152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 702.368988][T14152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 702.395260][ C0] vkms_vblank_simulate: vblank timer overrun [ 702.412683][T14152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 702.491602][T14152] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 702.498704][T14152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 702.528010][T14152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 702.612667][T14152] hsr_slave_0: entered promiscuous mode [ 702.631263][T14152] hsr_slave_1: entered promiscuous mode [ 702.638006][T14152] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 702.646713][T14152] Cannot create hsr debugfs directory [ 703.191769][ T5103] Bluetooth: hci2: command tx timeout [ 703.390715][T14228] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2540'. [ 703.409188][T14228] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2540'. [ 703.559129][T14228] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2540'. [ 703.583361][T14228] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2540'. [ 703.737640][T14228] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2540'. [ 703.746743][T13604] hsr_slave_0: left promiscuous mode [ 703.747984][T14228] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2540'. [ 703.762234][T13604] hsr_slave_1: left promiscuous mode [ 703.768467][T13604] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 703.777990][T13604] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 703.786750][T13604] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 703.794497][T13604] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 703.802613][T13604] bridge_slave_1: left allmulticast mode [ 703.808632][T13604] bridge_slave_1: left promiscuous mode [ 703.815111][T13604] bridge0: port 2(bridge_slave_1) entered disabled state [ 703.826581][T13604] bridge_slave_0: left allmulticast mode [ 703.837163][T13604] bridge_slave_0: left promiscuous mode [ 703.844332][T13604] bridge0: port 1(bridge_slave_0) entered disabled state [ 703.875978][T13604] veth1_macvtap: left promiscuous mode [ 703.883070][T13604] veth0_macvtap: left promiscuous mode [ 703.888850][T13604] veth0_vlan: left promiscuous mode [ 704.450392][ T6296] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 704.611622][ T6296] usb 2-1: device descriptor read/64, error -71 [ 704.627827][T13604] team0 (unregistering): Port device team_slave_1 removed [ 704.682183][T13604] team0 (unregistering): Port device team_slave_0 removed [ 704.734723][T13604] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 704.787275][T13604] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 704.880303][ T6296] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 705.039106][ T6296] usb 2-1: device descriptor read/64, error -71 [ 705.162284][ T6296] usb usb2-port1: attempt power cycle [ 705.182129][ T5896] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 705.269662][ T5103] Bluetooth: hci2: command tx timeout [ 705.390868][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 705.402195][ T5896] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 705.411879][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.431508][ T5896] usb 3-1: config 0 descriptor?? [ 705.433596][T13604] bond0 (unregistering): Released all slaves [ 705.533135][T14152] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 705.546445][T14152] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 705.560308][T14152] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 705.579102][ T6296] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 705.591118][T14152] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 705.632477][ T6296] usb 2-1: device descriptor read/8, error -71 [ 705.844292][T14152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 705.863080][ T5896] keytouch 0003:0926:3333.001B: fixing up Keytouch IEC report descriptor [ 705.886886][T13604] IPVS: stop unused estimator thread 0... [ 705.905483][T14152] 8021q: adding VLAN 0 to HW filter on device team0 [ 705.928378][ T991] bridge0: port 1(bridge_slave_0) entered blocking state [ 705.928823][ T6296] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 705.935626][ T991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 705.945310][ T5896] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.001B/input/input17 [ 705.991778][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 705.999001][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 706.008586][ T6296] usb 2-1: device descriptor read/8, error -71 [ 706.132442][ T6296] usb usb2-port1: unable to enumerate USB device [ 706.169070][ T5896] keytouch 0003:0926:3333.001B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 706.301599][ T5877] usb 3-1: USB disconnect, device number 20 [ 706.468042][T14152] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 706.539815][T14152] veth0_vlan: entered promiscuous mode [ 706.586424][T14152] veth1_vlan: entered promiscuous mode [ 706.641152][T14152] veth0_macvtap: entered promiscuous mode [ 706.654211][T14152] veth1_macvtap: entered promiscuous mode [ 706.669653][T14152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 706.681571][T14152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 706.691528][T14152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 706.702388][T14152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 706.712644][T14152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 706.723148][T14152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 706.733023][T14152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 706.743570][T14152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 706.754875][T14152] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 706.771806][T14152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 706.784113][T14152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 706.794392][T14152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 706.805504][T14152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 706.815484][T14152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 706.826014][T14152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 706.835911][T14152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 706.846957][T14152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 706.859045][T14152] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 706.893654][T14152] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.903491][T14152] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.912451][T14152] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.921217][T14152] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.931833][T14275] @: renamed from vlan0 (while UP) [ 707.041140][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 707.052609][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 707.085973][T13604] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 707.095483][T13604] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 707.348509][ T5103] Bluetooth: hci2: command tx timeout [ 707.667983][ T5896] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 707.858266][ T5896] usb 2-1: Using ep0 maxpacket: 8 [ 707.864950][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 202, changing to 11 [ 707.876644][ T5896] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 707.889683][ T5896] usb 2-1: New USB device found, idVendor=056a, idProduct=0301, bcdDevice= 0.00 [ 707.898840][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.912714][ T5896] usb 2-1: config 0 descriptor?? [ 708.332930][ T5896] wacom 0003:056A:0301.001C: Unknown device_type for 'HID 056a:0301'. Assuming pen. [ 708.344888][ T5896] wacom 0003:056A:0301.001C: hidraw0: USB HID vff.ea Device [HID 056a:0301] on usb-dummy_hcd.1-1/input0 [ 708.359639][ T5896] input: Wacom Bamboo One M Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0301.001C/input/input18 [ 708.535685][ T9] usb 2-1: USB disconnect, device number 23 [ 708.722037][T14309] Bluetooth: MGMT ver 1.22 [ 709.119558][T14328] netlink: 'syz.1.2568': attribute type 12 has an invalid length. [ 709.172835][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 709.172848][ T28] audit: type=1326 audit(1758776463.186:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14329 comm="syz.1.2569" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f27e958eec9 code=0x0 [ 709.427699][T13369] Bluetooth: hci2: command tx timeout [ 709.535575][T14337] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2572'. [ 709.545695][T14337] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2572'. [ 709.559389][T14337] dummy0: entered promiscuous mode [ 709.565500][T14337] team0: entered promiscuous mode [ 709.571002][T14337] team_slave_0: entered promiscuous mode [ 709.577507][T14337] team_slave_1: entered promiscuous mode [ 710.111960][T14352] syz.1.2578 (14352): drop_caches: 2 [ 710.787063][ T5103] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 710.787220][T13369] Bluetooth: hci0: command 0x0c1a tx timeout [ 711.119791][ T5103] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 711.130737][ T5103] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 711.140189][ T5103] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 711.148613][ T5103] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 711.157323][ T5103] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 711.164980][ T5103] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 711.480571][T14375] chnl_net:caif_netlink_parms(): no params data found [ 711.597049][T14375] bridge0: port 1(bridge_slave_0) entered blocking state [ 711.604283][T14375] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.618903][T14375] bridge_slave_0: entered allmulticast mode [ 711.632279][T14375] bridge_slave_0: entered promiscuous mode [ 711.645546][T14375] bridge0: port 2(bridge_slave_1) entered blocking state [ 711.653623][T14375] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.661755][T14375] bridge_slave_1: entered allmulticast mode [ 711.672071][T14375] bridge_slave_1: entered promiscuous mode [ 711.705965][T14375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 711.718636][T14375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 711.748560][ T6296] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 711.765421][T14375] team0: Port device team_slave_0 added [ 711.774290][T14375] team0: Port device team_slave_1 added [ 711.803992][T14375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 711.811215][T14375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 711.838716][T14375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 711.851338][T14375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 711.858521][T14375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 711.884702][T14375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 711.929547][T14375] hsr_slave_0: entered promiscuous mode [ 711.936800][T14375] hsr_slave_1: entered promiscuous mode [ 711.942148][ T6296] usb 1-1: config 0 interface 0 has no altsetting 0 [ 711.949259][T14375] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 711.950358][ T6296] usb 1-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00 [ 711.965409][T14375] Cannot create hsr debugfs directory [ 711.975529][ T6296] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.994299][ T6296] usb 1-1: config 0 descriptor?? [ 712.132703][T14401] syz.2.2597 (14401): drop_caches: 2 [ 712.343551][T14375] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 712.358017][T14375] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 712.371911][T14375] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 712.389930][T14375] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 712.456204][ T6296] kye 0003:0458:501B.001D: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 712.489230][ T6296] kye 0003:0458:501B.001D: hidraw0: USB HID v1.01 Device [HID 0458:501b] on usb-dummy_hcd.0-1/input0 [ 712.522363][ T6296] kye 0003:0458:501B.001D: tablet-enabling feature report not found [ 712.563132][ T6296] kye 0003:0458:501B.001D: tablet enabling failed [ 712.657123][ T5877] usb 1-1: USB disconnect, device number 16 [ 712.694857][T14375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 712.736624][T14375] 8021q: adding VLAN 0 to HW filter on device team0 [ 712.753070][ T991] bridge0: port 1(bridge_slave_0) entered blocking state [ 712.760319][ T991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 712.782650][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 712.790089][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 713.107537][T13369] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 713.117376][T13369] Bluetooth: hci3: Injecting HCI hardware error event [ 713.127946][ T5103] Bluetooth: hci3: hardware error 0x00 [ 713.150705][T14375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 713.265520][T13369] Bluetooth: hci4: command tx timeout [ 713.738972][T14375] veth0_vlan: entered promiscuous mode [ 713.763642][T14375] veth1_vlan: entered promiscuous mode [ 713.820976][T14375] veth0_macvtap: entered promiscuous mode [ 713.853428][T14375] veth1_macvtap: entered promiscuous mode [ 713.885556][T14375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 713.896296][T14375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 713.912797][T14375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 713.930787][T14375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 713.947846][T14375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 713.963308][T14375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 713.974795][T14375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 713.994621][T14375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 714.012946][T14375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 714.023906][T14375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 714.043870][T14375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 714.076494][T14375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 714.096712][T14375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 714.114845][T14375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 714.135676][T14375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 714.154159][T14375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 714.175608][T14375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 714.193852][T14375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 714.211939][T14375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 714.222362][T14375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 714.238410][T14375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 714.253206][T14375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 714.266541][T14375] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.276842][T14375] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.285894][T14375] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.295023][T14375] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.411863][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 714.432763][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 714.465563][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 714.482314][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 714.568359][T14485] program syz.0.2628 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 714.659704][T14489] kvm: kvm [14488]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0xf8075fc032fe01e7 [ 715.184808][ T5103] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 715.201438][T14499] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.220826][T14499] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.259135][T14498] netlink: 'syz.1.2633': attribute type 16 has an invalid length. [ 715.271128][T14498] netlink: 'syz.1.2633': attribute type 17 has an invalid length. [ 715.319354][T14498] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 715.346592][ T5103] Bluetooth: hci4: command tx timeout [ 715.708649][T14520] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2642'. [ 715.896114][T14529] program syz.0.2646 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 716.163801][ T5920] block nbd0: Possible stuck request ffff888021a1b600: control (read@0,4096B). Runtime 240 seconds [ 716.254843][T14547] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2652'. [ 716.368586][T14551] program syz.1.2656 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 716.509794][T14551] kvm: kvm [14550]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x8b63ffe8c69a232 [ 716.853196][ T5894] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 717.060704][T14583] Driver unsupported XDP return value 0 on prog (id 164) dev N/A, expect packet loss! [ 717.070837][ T5894] usb 3-1: Using ep0 maxpacket: 16 [ 717.079652][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 717.103297][ T5894] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 717.124607][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.141788][ T5894] usb 3-1: config 0 descriptor?? [ 717.232723][T14587] kvm: kvm [14586]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x8b63ffe8c69a232 [ 717.425800][ T5103] Bluetooth: hci4: command tx timeout [ 717.561034][ T5894] mcp2221 0003:04D8:00DD.001E: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 718.072751][ T6296] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 718.086696][ T5894] usb 3-1: USB disconnect, device number 21 [ 718.253325][T14615] kvm: kvm [14614]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x8b63ffe8c69a232 [ 718.317082][ T6296] usb 5-1: Using ep0 maxpacket: 32 [ 718.328936][ T6296] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 718.343053][ T6296] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 718.372375][ T6296] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 718.381530][ T6296] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.421415][ T6296] usb 5-1: config 0 descriptor?? [ 718.547357][T14618] netlink: 'syz.0.2682': attribute type 4 has an invalid length. [ 718.651469][T14606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 718.678522][T14606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 718.735964][ T6296] usbhid 5-1:0.0: can't add hid device: -71 [ 718.758805][ T6296] usbhid: probe of 5-1:0.0 failed with error -71 [ 718.785982][T14622] netlink: 'syz.2.2683': attribute type 1 has an invalid length. [ 718.794084][T14622] netlink: 'syz.2.2683': attribute type 4 has an invalid length. [ 718.802212][T14622] netlink: 15334 bytes leftover after parsing attributes in process `syz.2.2683'. [ 718.825379][ T6296] usb 5-1: USB disconnect, device number 2 [ 719.502099][ T5103] Bluetooth: hci4: command tx timeout [ 719.860478][T14668] pim6reg: entered allmulticast mode [ 719.884839][T14668] netlink: 'syz.1.2704': attribute type 10 has an invalid length. [ 719.921172][T14668] team0: Port device netdevsim0 added [ 720.281823][T14688] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2710'. [ 720.357526][T14675] bridge0: port 2(bridge_slave_1) entered disabled state [ 720.365280][T14675] bridge0: port 1(bridge_slave_0) entered disabled state [ 720.733822][T14675] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 720.787506][T14675] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 720.823311][T14675] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 720.887285][T14675] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 721.317654][T14675] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.327206][T14675] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.336766][T14675] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.346142][T14675] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.514993][T14685] lo speed is unknown, defaulting to 1000 [ 721.546852][T14685] lo speed is unknown, defaulting to 1000 [ 721.583896][T14685] lo speed is unknown, defaulting to 1000 [ 721.625900][T14685] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 721.659740][T14685] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 721.729406][T14685] lo speed is unknown, defaulting to 1000 [ 721.758060][T14685] lo speed is unknown, defaulting to 1000 [ 721.767273][T14685] lo speed is unknown, defaulting to 1000 [ 721.776000][T14685] lo speed is unknown, defaulting to 1000 [ 721.783305][T14685] lo speed is unknown, defaulting to 1000 [ 721.801249][T14685] lo speed is unknown, defaulting to 1000 [ 723.139523][T14785] kvm: kvm [14784]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x8b63ffe8c69a232 [ 723.391343][T14802] random: crng reseeded on system resumption [ 723.479870][ T6296] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 723.671790][ T6296] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 723.693708][ T6296] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.711694][ T6296] usb 3-1: config 0 descriptor?? [ 723.727290][ T6296] cp210x 3-1:0.0: cp210x converter detected [ 723.862230][T14817] kvm: kvm [14816]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x8b63ffe8c69a232 [ 724.029715][T14823] pim6reg: entered allmulticast mode [ 724.046313][T14823] netlink: 'syz.0.2767': attribute type 10 has an invalid length. [ 724.092145][T14823] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 724.103494][T14823] team0: Port device netdevsim0 added [ 724.161006][ T6296] usb 3-1: cp210x converter now attached to ttyUSB0 [ 724.349604][ T1186] usb 3-1: USB disconnect, device number 22 [ 724.368450][ T1186] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 724.396608][ T1186] cp210x 3-1:0.0: device disconnected [ 724.599253][ T6296] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 724.782693][ T6296] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 724.798941][ T6296] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 724.808220][ T6296] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.816361][ T6296] usb 5-1: Product: syz [ 724.820681][ T6296] usb 5-1: Manufacturer: syz [ 724.825286][ T6296] usb 5-1: SerialNumber: syz [ 725.046836][ T6296] cdc_ncm 5-1:1.0: bind() failure [ 725.057322][ T6296] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 725.064400][ T6296] cdc_ncm 5-1:1.1: bind() failure [ 725.075809][ T6296] usb 5-1: USB disconnect, device number 3 [ 725.214453][T14854] netlink: 216 bytes leftover after parsing attributes in process `syz.2.2778'. [ 725.225694][T14854] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2778'. [ 725.237884][T14854] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2778'. [ 727.866984][ T28] audit: type=1800 audit(1758776481.876:39): pid=14966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.1.2827" name="/video7" dev="devtmpfs" ino=949 res=0 errno=0 [ 728.278058][T14995] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2837'. [ 728.317403][T14700] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 728.331489][T14997] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2838'. [ 728.500220][T14700] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 728.510696][T14700] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 728.520701][T14700] usb 2-1: config 1 interface 0 has no altsetting 0 [ 728.530066][T14700] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 728.539230][T14700] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.547268][T14700] usb 2-1: Product: syz [ 728.551440][T14700] usb 2-1: Manufacturer: syz [ 728.556057][T14700] usb 2-1: SerialNumber: syz [ 728.564674][T14986] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 728.572333][T14986] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 728.986140][T14986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 729.009278][T14986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 729.102394][T14700] rtl8150 2-1:1.0: couldn't reset the device [ 729.114933][T14700] rtl8150: probe of 2-1:1.0 failed with error -5 [ 729.132048][T14700] usb 2-1: USB disconnect, device number 24 [ 729.866257][T15048] 9pnet_fd: Insufficient options for proto=fd [ 729.983492][ T28] audit: type=1326 audit(1758776484.007:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15052 comm="syz.0.2863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b31d8eec9 code=0x7ffc0000 [ 730.046666][ T28] audit: type=1326 audit(1758776484.007:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15052 comm="syz.0.2863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b31d8eec9 code=0x7ffc0000 [ 730.069048][ C0] vkms_vblank_simulate: vblank timer overrun [ 730.083405][ T28] audit: type=1326 audit(1758776484.007:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15052 comm="syz.0.2863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9b31d8eec9 code=0x7ffc0000 [ 730.105776][ C0] vkms_vblank_simulate: vblank timer overrun [ 730.114972][ T28] audit: type=1326 audit(1758776484.007:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15052 comm="syz.0.2863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b31d8eec9 code=0x7ffc0000 [ 730.137370][ C0] vkms_vblank_simulate: vblank timer overrun [ 730.188051][ T28] audit: type=1326 audit(1758776484.007:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15052 comm="syz.0.2863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b31d8eec9 code=0x7ffc0000 [ 730.220263][ T28] audit: type=1326 audit(1758776484.007:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15052 comm="syz.0.2863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7f9b31d8eec9 code=0x7ffc0000 [ 730.252407][ T28] audit: type=1326 audit(1758776484.007:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15052 comm="syz.0.2863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b31d8eec9 code=0x7ffc0000 [ 731.014072][T15080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2871'. [ 731.060850][T15080] syz_tun: entered promiscuous mode [ 731.656059][ T6296] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 731.865602][ T6296] usb 1-1: Using ep0 maxpacket: 8 [ 731.877633][ T6296] usb 1-1: no configurations [ 731.886619][ T6296] usb 1-1: can't read configurations, error -22 [ 732.045549][ T6296] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 732.245796][ T6296] usb 1-1: Using ep0 maxpacket: 8 [ 732.259076][ T6296] usb 1-1: no configurations [ 732.263728][ T6296] usb 1-1: can't read configurations, error -22 [ 732.288011][ T6296] usb usb1-port1: attempt power cycle [ 732.695400][T14700] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 732.715437][ T6296] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 732.746423][ T6296] usb 1-1: Using ep0 maxpacket: 8 [ 732.752153][ T6296] usb 1-1: no configurations [ 732.757000][ T6296] usb 1-1: can't read configurations, error -22 [ 732.876629][T14700] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 732.888526][T14700] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 732.898325][T14700] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 732.907363][ T6296] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 732.911370][T14700] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 732.928199][T14700] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.941523][T14700] usb 5-1: config 0 descriptor?? [ 732.949862][ T6296] usb 1-1: Using ep0 maxpacket: 8 [ 732.957685][ T6296] usb 1-1: no configurations [ 732.962435][ T6296] usb 1-1: can't read configurations, error -22 [ 732.969579][ T6296] usb usb1-port1: unable to enumerate USB device [ 733.355609][T14700] holtek_kbd 0003:04D9:A055.001F: bogus close delimiter [ 733.362728][T14700] holtek_kbd 0003:04D9:A055.001F: item 0 4 2 10 parsing failed [ 733.371163][T14700] holtek_kbd: probe of 0003:04D9:A055.001F failed with error -22 [ 733.627381][T15120] program syz.4.2887 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 734.770563][T15128] tipc: Started in network mode [ 734.776006][T15128] tipc: Node identity e25520b1536a, cluster identity 4711 [ 734.783327][T15128] tipc: Enabled bearer , priority 0 [ 734.791269][T15128] syzkaller0: entered promiscuous mode [ 734.796994][T15128] syzkaller0: entered allmulticast mode [ 734.822367][T15128] tipc: Resetting bearer [ 734.836174][T15127] tipc: Resetting bearer [ 734.858328][T15127] tipc: Disabling bearer [ 735.504186][T14701] usb 5-1: USB disconnect, device number 4 [ 736.584176][T15214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2921'. [ 736.632140][T15214] syz_tun: entered promiscuous mode [ 736.793424][ T1186] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 737.013121][ T1186] usb 5-1: Using ep0 maxpacket: 32 [ 737.039418][ T1186] usb 5-1: too many configurations: 24, using maximum allowed: 8 [ 737.065105][ T1186] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 737.078944][ T1186] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 737.100391][ T1186] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 737.115310][ T1186] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 737.131494][ T1186] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 737.155813][ T1186] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 737.174217][ T1186] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 737.200093][ T1186] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 737.226226][ T1186] usb 5-1: New USB device found, idVendor=1630, idProduct=0042, bcdDevice=5b.13 [ 737.242911][ T1186] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.250978][ T1186] usb 5-1: Product: syz [ 737.268982][ T1186] usb 5-1: Manufacturer: syz [ 737.277446][ T1186] usb 5-1: SerialNumber: syz [ 737.293671][ T1186] usb 5-1: config 0 descriptor?? [ 737.308035][ T1186] usb 5-1: bad CDC descriptors [ 737.340186][ T1186] usb 5-1: bad CDC descriptors [ 737.521872][ T1186] usb 5-1: USB disconnect, device number 5 [ 737.754890][T15258] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2939'. [ 737.808138][T15258] syz_tun: entered promiscuous mode [ 738.990309][T15289] fuse: Bad value for 'fd' [ 739.154453][T15310] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2958'. [ 739.211060][T15310] syz_tun: entered promiscuous mode [ 739.883770][T15341] 9pnet_fd: Insufficient options for proto=fd [ 740.116766][T15350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2972'. [ 740.235554][T14689] IPVS: starting estimator thread 0... [ 740.331574][T15354] IPVS: using max 19 ests per chain, 45600 per kthread [ 740.690842][T15367] 9pnet_fd: Insufficient options for proto=fd [ 742.050798][T13369] Bluetooth: hci0: command 0x0c1a tx timeout [ 742.355073][T15414] mkiss: ax0: crc mode is auto. [ 742.432111][T15414] Falling back ldisc for ttyS3. [ 744.113749][T15487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3031'. [ 744.848914][T15513] mkiss: ax0: crc mode is auto. [ 746.117374][T15551] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3054'. [ 746.143341][T15553] gretap0: entered promiscuous mode [ 746.149623][T15553] vlan0: entered promiscuous mode [ 746.227422][ T5920] block nbd0: Possible stuck request ffff888021a1b600: control (read@0,4096B). Runtime 270 seconds [ 747.492674][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.874114][ T28] audit: type=1326 audit(1758776501.906:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15598 comm="syz.2.3073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68cf8eec9 code=0x7ffc0000 [ 747.896382][ C0] vkms_vblank_simulate: vblank timer overrun [ 747.926918][T15606] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 747.934647][T15606] IPv6: NLM_F_CREATE should be set when creating new route [ 747.941971][T15606] IPv6: NLM_F_CREATE should be set when creating new route [ 747.967814][ T28] audit: type=1326 audit(1758776501.906:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15598 comm="syz.2.3073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68cf8eec9 code=0x7ffc0000 [ 748.006244][ T28] audit: type=1326 audit(1758776501.906:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15598 comm="syz.2.3073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fe68cf8eec9 code=0x7ffc0000 [ 748.028558][ C0] vkms_vblank_simulate: vblank timer overrun [ 748.097020][ T28] audit: type=1326 audit(1758776501.906:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15598 comm="syz.2.3073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68cf8eec9 code=0x7ffc0000 [ 748.189911][ T28] audit: type=1326 audit(1758776501.906:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15598 comm="syz.2.3073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe68cf8eec9 code=0x7ffc0000 [ 748.211984][ C0] vkms_vblank_simulate: vblank timer overrun [ 748.237586][ T28] audit: type=1326 audit(1758776501.906:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15598 comm="syz.2.3073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68cf8eec9 code=0x7ffc0000 [ 748.267143][ T28] audit: type=1326 audit(1758776501.906:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15598 comm="syz.2.3073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe68cf8eec9 code=0x7ffc0000 [ 748.323635][ T28] audit: type=1326 audit(1758776501.946:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15598 comm="syz.2.3073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68cf8eec9 code=0x7ffc0000 [ 748.372764][ T28] audit: type=1326 audit(1758776501.956:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15598 comm="syz.2.3073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe68cf8eec9 code=0x7ffc0000 [ 748.455740][ T28] audit: type=1326 audit(1758776501.956:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15598 comm="syz.2.3073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68cf8eec9 code=0x7ffc0000 [ 750.126812][T13369] Bluetooth: hci5: command 0x1003 tx timeout [ 750.126844][ T5103] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 750.847071][T15654] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 750.854324][T15654] IPv6: NLM_F_CREATE should be set when creating new route [ 750.861639][T15654] IPv6: NLM_F_CREATE should be set when creating new route [ 751.560809][T15682] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3105'. [ 753.835850][T15717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3117'. [ 755.344045][ T1186] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 755.533771][T14700] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 755.533959][ T1186] usb 5-1: Using ep0 maxpacket: 8 [ 755.559477][ T1186] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 755.573389][ T1186] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 755.587918][ T1186] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 755.616643][ T1186] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 755.637250][ T1186] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 755.663765][ T1186] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 755.682146][ T1186] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.737326][T14700] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 755.757692][T14700] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.792206][T14700] usb 3-1: config 0 descriptor?? [ 755.985040][ T1186] usb 5-1: GET_CAPABILITIES returned 0 [ 755.991006][ T1186] usbtmc 5-1:16.0: can't read capabilities [ 756.029906][T15745] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3130'. [ 756.264860][T14696] usb 5-1: USB disconnect, device number 6 [ 756.546239][T14701] usb 3-1: USB disconnect, device number 23 [ 756.569192][T15795] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3148'. [ 757.393147][T14700] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 757.594467][T14700] usb 5-1: config 0 has an invalid interface number: 9 but max is 0 [ 757.602511][T14700] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 757.613065][T14700] usb 5-1: config 0 has no interface number 0 [ 757.619204][T14700] usb 5-1: New USB device found, idVendor=0421, idProduct=0302, bcdDevice=45.e8 [ 757.629173][T14700] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.639139][T14700] usb 5-1: config 0 descriptor?? [ 757.653719][T14700] rndis_wlan 5-1:0.9: More than one union descriptor, skipping ... [ 757.661774][T14700] usb 5-1: bad CDC descriptors [ 757.669312][T14700] rndis_host 5-1:0.9: More than one union descriptor, skipping ... [ 757.677463][T14700] usb 5-1: bad CDC descriptors [ 757.682830][T14700] cdc_acm 5-1:0.9: More than one union descriptor, skipping ... [ 757.752756][T14696] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 757.772694][T14699] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 757.932618][T14696] usb 1-1: Using ep0 maxpacket: 16 [ 757.939965][T14696] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 757.952922][T14699] usb 3-1: Using ep0 maxpacket: 8 [ 757.960318][T14696] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 757.973677][T14699] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 757.985566][T14699] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 757.998280][T14696] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 758.011383][T14696] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.016207][T14699] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 758.039526][T14696] usb 1-1: Product: syz [ 758.045960][T14696] usb 1-1: Manufacturer: syz [ 758.052366][T14696] usb 1-1: SerialNumber: syz [ 758.067976][T14699] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 758.069828][T14696] usb 1-1: config 0 descriptor?? [ 758.089993][T14699] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 758.118862][T14699] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 758.139358][T14699] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.315324][T14700] usb 1-1: USB disconnect, device number 21 [ 758.366436][T14699] usb 3-1: GET_CAPABILITIES returned 0 [ 758.372013][T14699] usbtmc 3-1:16.0: can't read capabilities [ 758.603920][T14700] usb 3-1: USB disconnect, device number 24 [ 760.301387][ T1186] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 760.436302][T14700] usb 5-1: USB disconnect, device number 7 [ 760.631251][ T1186] usb 3-1: Using ep0 maxpacket: 8 [ 760.636842][T15872] netlink: 'syz.1.3180': attribute type 10 has an invalid length. [ 760.687010][T15872] 8021q: adding VLAN 0 to HW filter on device team0 [ 760.717358][T15872] bond0: (slave team0): Enslaving as an active interface with an up link [ 760.810239][T15872] 8021q: adding VLAN 0 to HW filter on device bond7 [ 760.852302][ T1186] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 760.933064][ T1186] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 760.977367][ T1186] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 761.064175][ T1186] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.079060][ T1186] usb 3-1: Product: syz [ 761.083852][ T1186] usb 3-1: Manufacturer: syz [ 761.088479][ T1186] usb 3-1: SerialNumber: syz [ 761.101213][T14700] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 761.351069][T14700] usb 5-1: Using ep0 maxpacket: 8 [ 761.419014][T14700] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 761.507727][T14700] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.605663][T14700] usb 5-1: Product: syz [ 761.643100][T14700] usb 5-1: Manufacturer: syz [ 761.663124][T14700] usb 5-1: SerialNumber: syz [ 761.700034][T14700] usb 5-1: config 0 descriptor?? [ 761.713592][T14700] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 761.744673][T14700] dvb-usb: bulk message failed: -22 (2/0) [ 761.798267][T14700] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 761.829148][T14700] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 761.870239][T14700] usb 5-1: media controller created [ 762.071078][T14700] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 762.211270][T14700] cxusb: set interface failed [ 762.234005][T14700] dvb-usb: bulk message failed: -22 (1/0) [ 762.368359][T14700] DVB: Unable to find symbol mt352_attach() [ 762.380198][T14700] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 762.611573][T14700] rc_core: IR keymap rc-dvico-portable not found [ 762.611590][T14700] Registered IR keymap rc-empty [ 762.615758][T14700] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 762.726183][T14700] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input23 [ 762.794714][T14700] dvb-usb: schedule remote query interval to 100 msecs. [ 762.806968][T14700] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 762.855297][T14700] usb 5-1: USB disconnect, device number 8 [ 763.051539][T14700] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 763.367561][ T1186] usb 3-1: 0:2 : does not exist [ 763.450910][ T1186] usb 3-1: USB disconnect, device number 25 [ 763.512637][T13483] udevd[13483]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 763.831468][T15914] netlink: 3884 bytes leftover after parsing attributes in process `syz.4.3189'. [ 764.182062][T15923] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3193'. [ 764.589233][T14689] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 764.769193][T14689] usb 3-1: Using ep0 maxpacket: 8 [ 764.818049][T14689] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 764.829468][T14689] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.848669][T14689] usb 3-1: Product: syz [ 764.853234][T14689] usb 3-1: Manufacturer: syz [ 764.857997][T14689] usb 3-1: SerialNumber: syz [ 764.886828][T14689] usb 3-1: config 0 descriptor?? [ 764.895949][T14689] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 764.912617][T14689] dvb-usb: bulk message failed: -22 (2/0) [ 764.936711][T14689] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 764.957903][T14689] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 764.967327][T14689] usb 3-1: media controller created [ 765.014484][T14689] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 765.103469][T14689] cxusb: set interface failed [ 765.108205][T14689] dvb-usb: bulk message failed: -22 (1/0) [ 765.244808][T14689] DVB: Unable to find symbol mt352_attach() [ 765.258916][T14689] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 765.465926][T14689] rc_core: IR keymap rc-dvico-portable not found [ 765.474394][T14689] Registered IR keymap rc-empty [ 765.525757][T14689] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 765.567913][T15951] fuse: Unknown parameter 'grou00000000000000000000' [ 765.588894][T14689] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input24 [ 765.650950][T14689] dvb-usb: schedule remote query interval to 100 msecs. [ 765.657957][T14689] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 765.752027][T14689] usb 3-1: USB disconnect, device number 26 [ 765.832411][T14689] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 766.173662][T15968] create_pit_timer: 3 callbacks suppressed [ 766.173672][T15968] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 766.210134][T15968] kvm: requested 138285 ns i8254 timer period limited to 200000 ns [ 766.222100][T15968] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 766.231855][T15968] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 766.240228][T15968] kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 766.249631][T15968] kvm: requested 103085 ns i8254 timer period limited to 200000 ns [ 766.262352][T15968] kvm: requested 16761 ns i8254 timer period limited to 200000 ns [ 766.998426][T15988] fuse: Unknown parameter 'grou00000000000000000000' [ 767.127975][T14689] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 767.221552][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 767.221567][ T28] audit: type=1326 audit(1758776521.265:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15992 comm="syz.4.3218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1a738eec9 code=0x7ffc0000 [ 767.251707][ T28] audit: type=1326 audit(1758776521.265:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15992 comm="syz.4.3218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1a738eec9 code=0x7ffc0000 [ 767.276797][ T28] audit: type=1326 audit(1758776521.295:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15992 comm="syz.4.3218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd1a738eec9 code=0x7ffc0000 [ 767.367878][T14689] usb 1-1: Using ep0 maxpacket: 8 [ 767.378747][T14689] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 767.388104][T14689] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.396119][T14689] usb 1-1: Product: syz [ 767.401413][T14689] usb 1-1: Manufacturer: syz [ 767.406042][T14689] usb 1-1: SerialNumber: syz [ 767.421877][T14689] usb 1-1: config 0 descriptor?? [ 767.433518][T14689] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 767.441139][ T28] audit: type=1326 audit(1758776521.485:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15992 comm="syz.4.3218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1a738eec9 code=0x7ffc0000 [ 767.467872][T14689] dvb-usb: bulk message failed: -22 (2/0) [ 767.485582][T14689] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 767.497081][ T28] audit: type=1326 audit(1758776521.485:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15992 comm="syz.4.3218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1a738eec9 code=0x7ffc0000 [ 767.520924][T14689] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 767.531490][T14689] usb 1-1: media controller created [ 767.561156][T14689] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 767.587512][ T28] audit: type=1326 audit(1758776521.625:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15992 comm="syz.4.3218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fd1a738eec9 code=0x7ffc0000 [ 767.619891][ T28] audit: type=1326 audit(1758776521.625:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15992 comm="syz.4.3218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1a738eec9 code=0x7ffc0000 [ 767.649561][T15981] dvb-usb: bulk message failed: -22 (4/0) [ 767.656101][T15981] cxusb: i2c read failed [ 767.665615][T14689] cxusb: set interface failed [ 767.679659][T14689] dvb-usb: bulk message failed: -22 (1/0) [ 767.685785][ T28] audit: type=1326 audit(1758776521.635:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15992 comm="syz.4.3218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1a738eec9 code=0x7ffc0000 [ 767.708778][ T28] audit: type=1326 audit(1758776521.645:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15992 comm="syz.4.3218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1a738eec9 code=0x7ffc0000 [ 767.757611][ T28] audit: type=1326 audit(1758776521.645:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15992 comm="syz.4.3218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1a738eec9 code=0x7ffc0000 [ 767.795626][T14689] DVB: Unable to find symbol mt352_attach() [ 767.802850][T14689] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 767.898903][T14689] rc_core: IR keymap rc-dvico-portable not found [ 767.906314][T14689] Registered IR keymap rc-empty [ 767.958336][T14689] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 767.977358][T14689] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input26 [ 767.999781][T14689] dvb-usb: schedule remote query interval to 100 msecs. [ 768.006783][T14689] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 768.035356][T14689] usb 1-1: USB disconnect, device number 22 [ 768.126502][ T1186] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 768.167589][T14689] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 768.309536][ T1186] usb 2-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 768.323780][ T1186] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 768.341411][ T1186] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 768.357636][ T1186] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.389731][ T1186] usb 2-1: config 0 descriptor?? [ 768.409457][ T1186] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 768.431761][ T1186] dvb-usb: bulk message failed: -22 (3/0) [ 768.459756][ T1186] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 768.470524][ T1186] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 768.482620][ T1186] usb 2-1: media controller created [ 768.490483][ T1186] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 768.517480][ T1186] dvb-usb: bulk message failed: -22 (6/0) [ 768.535085][ T1186] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 768.565072][ T1186] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input27 [ 768.592260][ T1186] dvb-usb: schedule remote query interval to 150 msecs. [ 768.613500][ T1186] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 768.736046][T15999] dvb-usb: bulk message failed: -22 (2/0) [ 768.744883][T14700] usb 2-1: USB disconnect, device number 25 [ 768.770522][T14700] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 770.466447][ T6296] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 770.647090][ T6296] usb 2-1: Using ep0 maxpacket: 8 [ 770.665094][ T6296] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 770.698648][ T6296] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.730397][ T6296] usb 2-1: Product: syz [ 770.743679][ T6296] usb 2-1: Manufacturer: syz [ 770.755674][T16056] batman_adv: batadv0: Adding interface: vxlan0 [ 770.765873][ T6296] usb 2-1: SerialNumber: syz [ 770.767354][T16056] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 770.776876][ T6296] usb 2-1: config 0 descriptor?? [ 770.802320][T16056] batman_adv: batadv0: Not using interface vxlan0 (retrying later): interface not active [ 770.806150][ T6296] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 770.821076][ T6296] dvb-usb: bulk message failed: -22 (2/0) [ 770.829911][ T6296] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 770.846458][ T6296] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 770.863922][ T6296] usb 2-1: media controller created [ 770.944698][ T6296] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 771.002810][T16060] fuse: Unknown parameter 'group_i00000000000000000000' [ 771.016822][T16043] dvb-usb: bulk message failed: -22 (4/0) [ 771.036262][T16043] cxusb: i2c read failed [ 771.049205][ T6296] cxusb: set interface failed [ 771.064439][ T6296] dvb-usb: bulk message failed: -22 (1/0) [ 771.145153][ T6296] DVB: Unable to find symbol mt352_attach() [ 771.151750][ T6296] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 771.257685][ T6296] rc_core: IR keymap rc-dvico-portable not found [ 771.267966][ T6296] Registered IR keymap rc-empty [ 771.278494][ T6296] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 771.291920][ T6296] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input28 [ 771.304744][ T6296] dvb-usb: schedule remote query interval to 100 msecs. [ 771.322447][ T6296] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 771.397604][ T6296] usb 2-1: USB disconnect, device number 26 [ 771.471334][T16071] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3242'. [ 771.476965][ T6296] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 771.487114][T16071] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3242'. [ 772.265383][T14700] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 772.510396][T14700] usb 2-1: config 0 has no interfaces? [ 772.558794][T14700] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 772.578656][T14700] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.587376][T14700] usb 2-1: Product: syz [ 772.592592][T14700] usb 2-1: Manufacturer: syz [ 772.597855][T14700] usb 2-1: SerialNumber: syz [ 772.604939][T14700] usb 2-1: config 0 descriptor?? [ 772.802650][T16091] fuse: Unknown parameter 'group_id00000000000000000000' [ 773.159620][T14696] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 773.357237][T14696] usb 1-1: Using ep0 maxpacket: 8 [ 773.371471][T14696] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 773.392425][T14696] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.452540][T14696] usb 1-1: Product: syz [ 773.468165][T14696] usb 1-1: Manufacturer: syz [ 773.481884][T14696] usb 1-1: SerialNumber: syz [ 773.525290][T14696] usb 1-1: config 0 descriptor?? [ 773.553867][T14696] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 773.611642][T14696] dvb-usb: bulk message failed: -22 (2/0) [ 773.624133][T14696] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 773.639667][T16113] fuse: Unknown parameter 'group_id00000000000000000000' [ 773.651045][T14696] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 773.699383][T14696] usb 1-1: media controller created [ 773.759816][T16095] dvb-usb: bulk message failed: -22 (4/0) [ 773.778096][T16095] cxusb: i2c read failed [ 773.815195][T14696] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 773.872072][T16122] fuse: Bad value for 'fd' [ 773.931178][T14696] cxusb: set interface failed [ 773.942925][T14696] dvb-usb: bulk message failed: -22 (1/0) [ 774.045355][T14696] DVB: Unable to find symbol mt352_attach() [ 774.091872][T14696] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 774.327829][T14696] rc_core: IR keymap rc-dvico-portable not found [ 774.354356][T14696] Registered IR keymap rc-empty [ 774.364001][T14696] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 774.399540][T14696] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input29 [ 774.416991][T14696] dvb-usb: schedule remote query interval to 100 msecs. [ 774.431096][T14696] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 774.449966][T14696] usb 1-1: USB disconnect, device number 23 [ 774.571241][T16141] fuse: Unknown parameter 'group_id00000000000000000000' [ 774.582794][T14696] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 774.755279][T16149] fuse: Bad value for 'fd' [ 774.860124][T14689] usb 2-1: USB disconnect, device number 27 [ 775.481800][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 775.481817][ T28] audit: type=1800 audit(1758776529.509:117): pid=16163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3276" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 775.532657][T16175] fuse: Bad value for 'fd' [ 775.754549][T16180] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3283'. [ 776.313102][ T5920] block nbd0: Possible stuck request ffff888021a1b600: control (read@0,4096B). Runtime 300 seconds [ 776.856343][T16195] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3288'. [ 777.280668][T16210] fuse: Bad value for 'user_id' [ 777.380921][T16214] tipc: Started in network mode [ 777.392600][T16214] tipc: Node identity 3aa69a788b85, cluster identity 4711 [ 777.409355][T16214] tipc: Enabled bearer , priority 0 [ 777.441568][T16214] syzkaller0: entered promiscuous mode [ 777.454117][T16214] syzkaller0: entered allmulticast mode [ 777.663533][T16214] tipc: Resetting bearer [ 777.718849][T16228] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3297'. [ 777.749844][T16211] tipc: Resetting bearer [ 777.888626][T16211] tipc: Disabling bearer [ 778.232444][ T6296] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 778.490162][ T6296] usb 5-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 778.505342][ T6296] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 778.545004][ T6296] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 778.562317][T16243] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3304'. [ 778.587271][ T6296] usb 5-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 778.600764][ T6296] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 778.621973][T16243] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3304'. [ 778.634016][ T6296] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 778.655108][ T6296] usb 5-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 778.665661][ T6296] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 778.689064][ T6296] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 779.832489][T16248] fuse: Bad value for 'fd' [ 780.347770][T16262] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3312'. [ 780.733623][ T6296] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.83 [ 780.767483][ T6296] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.801360][ T6296] usb 5-1: can't set config #168, error -71 [ 780.822430][ T6296] usb 5-1: USB disconnect, device number 9 [ 780.892507][T16271] fuse: Bad value for 'fd' [ 781.057768][T16280] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3321'. [ 781.248783][T16290] fuse: Bad value for 'fd' [ 781.520778][ T5896] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 781.734904][ T5896] usb 2-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 781.763088][ T5896] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 781.777019][ T5896] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 781.787836][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.799287][ T5896] usb 2-1: config 0 descriptor?? [ 781.811703][ T5896] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 781.826412][ T5896] dvb-usb: bulk message failed: -22 (3/0) [ 781.835581][T16316] bridge_slave_0: left allmulticast mode [ 781.845761][ T5896] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 781.854882][T16316] bridge_slave_0: left promiscuous mode [ 781.859315][ T5896] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 781.876762][ T5896] usb 2-1: media controller created [ 781.885729][T16316] bridge0: port 1(bridge_slave_0) entered disabled state [ 781.892366][ T5896] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 781.917275][T16316] bridge_slave_1: left allmulticast mode [ 781.927390][T16316] bridge_slave_1: left promiscuous mode [ 781.934472][ T5896] dvb-usb: bulk message failed: -22 (6/0) [ 781.935938][T16316] bridge0: port 2(bridge_slave_1) entered disabled state [ 781.952409][ T5896] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 781.967086][T16316] bond0: (slave bond_slave_0): Releasing backup interface [ 781.967555][ T5896] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input30 [ 781.989191][ T5896] dvb-usb: schedule remote query interval to 150 msecs. [ 781.997259][ T5896] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 781.999025][T16316] bond0: (slave bond_slave_1): Releasing backup interface [ 782.017190][T16287] dvb-usb: bulk message failed: -22 (2/0) [ 782.054285][ T5896] usb 2-1: USB disconnect, device number 28 [ 782.056818][T16316] team_slave_0: left promiscuous mode [ 782.110723][ T5896] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 782.169118][T16316] team0: Port device team_slave_0 removed [ 782.179398][T16316] team_slave_1: left promiscuous mode [ 782.196011][T16316] team0: Port device team_slave_1 removed [ 782.209613][T16316] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 782.219007][T16316] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 782.228534][T16316] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 782.236996][T16316] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 782.252687][T16316] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 782.273911][T16316] team0: Port device netdevsim0 removed [ 782.298823][T16316] batman_adv: batadv0: Removing interface: vxlan0 [ 782.788540][T16348] usb usb8: usbfs: process 16348 (syz.0.3349) did not claim interface 0 before use [ 783.006406][ T28] audit: type=1800 audit(1758776537.053:118): pid=16349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3347" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 783.663942][T16368] fuse: Bad value for 'fd' [ 784.819119][ T5896] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 785.118976][ T5896] usb 5-1: Using ep0 maxpacket: 8 [ 785.126191][ T5896] usb 5-1: config 6 has an invalid interface number: 2 but max is 0 [ 785.135523][ T5896] usb 5-1: config 6 has no interface number 0 [ 785.144156][ T5896] usb 5-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 785.226293][ T5896] usb 5-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 785.347093][ T5896] usb 5-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 785.375235][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.392071][ T5896] usb 5-1: Product: syz [ 785.406641][ T5896] usb 5-1: Manufacturer: syz [ 785.412050][ T5896] usb 5-1: SerialNumber: syz [ 785.422989][T16400] fuse: Bad value for 'fd' [ 785.433011][ T5896] hso 5-1:6.2: Failed to find INT IN ep [ 786.649811][T16412] input: syz1 as /devices/virtual/input/input32 [ 787.354722][T16425] fuse: Bad value for 'fd' [ 787.492048][T14701] usb 5-1: USB disconnect, device number 10 [ 787.677961][T14689] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 787.905915][T14689] usb 2-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 787.921029][T14689] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 787.933118][T14689] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 787.965228][T14689] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.974461][T16440] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3377'. [ 787.991373][T14689] usb 2-1: config 0 descriptor?? [ 788.004147][T14689] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 788.015300][T14689] dvb-usb: bulk message failed: -22 (3/0) [ 788.019347][T16440] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3377'. [ 788.053740][T14689] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 788.085440][T14689] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 788.102610][T14689] usb 2-1: media controller created [ 788.122379][T14689] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 788.170054][T14689] dvb-usb: bulk message failed: -22 (6/0) [ 788.176424][T14689] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 788.196477][T14689] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input33 [ 788.212178][T14689] dvb-usb: schedule remote query interval to 150 msecs. [ 788.221481][T14689] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 788.232888][T14689] usb 2-1: USB disconnect, device number 29 [ 788.285257][T14689] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 788.526868][T16452] fuse: Bad value for 'fd' [ 788.819334][T16456] batman_adv: batadv0: Adding interface: vxlan0 [ 788.826305][T16456] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 788.851626][ C1] vkms_vblank_simulate: vblank timer overrun [ 788.880660][T16456] batman_adv: batadv0: Not using interface vxlan0 (retrying later): interface not active [ 790.106698][T14701] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 790.300596][T14701] usb 1-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 790.331697][T14701] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 790.362171][T14701] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 790.394156][T14701] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.418249][T14701] usb 1-1: config 0 descriptor?? [ 790.425302][T14701] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 790.445492][T14701] dvb-usb: bulk message failed: -22 (3/0) [ 790.469871][T14701] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 790.497123][T14701] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 790.514625][T14701] usb 1-1: media controller created [ 790.534610][T14701] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 790.568821][T14701] dvb-usb: bulk message failed: -22 (6/0) [ 790.575809][T14701] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 790.609412][T14701] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input34 [ 790.667802][T14701] dvb-usb: schedule remote query interval to 150 msecs. [ 790.692118][T14701] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 790.736825][T14701] usb 1-1: USB disconnect, device number 24 [ 790.849774][T14701] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 791.169501][T16494] lo speed is unknown, defaulting to 1000 [ 793.732949][T16538] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3404'. [ 794.424423][T14696] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 794.626484][T14696] usb 5-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 794.651233][T14696] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 794.684320][T14696] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 794.693408][T14696] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.726924][T14696] usb 5-1: config 0 descriptor?? [ 794.748323][T14696] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 794.757255][T14696] dvb-usb: bulk message failed: -22 (3/0) [ 794.786925][T14696] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 794.798579][T14696] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 794.812112][T14696] usb 5-1: media controller created [ 794.820538][T14696] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 794.863288][T14696] dvb-usb: bulk message failed: -22 (6/0) [ 794.870641][T14696] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 794.890712][T14696] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input35 [ 794.916838][T14696] dvb-usb: schedule remote query interval to 150 msecs. [ 794.946616][T14696] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 794.971978][T14696] usb 5-1: USB disconnect, device number 11 [ 795.015010][T14696] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 795.229901][ T28] audit: type=1326 audit(1758776549.269:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16560 comm="syz.0.3414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b31d8eec9 code=0x7ffc0000 [ 795.258125][ T28] audit: type=1326 audit(1758776549.279:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16560 comm="syz.0.3414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b31d8eec9 code=0x7ffc0000 [ 795.280463][ C1] vkms_vblank_simulate: vblank timer overrun [ 795.295549][ T28] audit: type=1326 audit(1758776549.279:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16560 comm="syz.0.3414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f9b31d8eec9 code=0x7ffc0000 [ 795.318169][ C1] vkms_vblank_simulate: vblank timer overrun [ 795.326580][ T28] audit: type=1326 audit(1758776549.279:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16560 comm="syz.0.3414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b31d8eec9 code=0x7ffc0000 [ 795.353622][ T28] audit: type=1326 audit(1758776549.279:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16560 comm="syz.0.3414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b31d8eec9 code=0x7ffc0000 [ 795.376927][ T28] audit: type=1326 audit(1758776549.279:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16560 comm="syz.0.3414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9b31d8eec9 code=0x7ffc0000 [ 795.399265][ C1] vkms_vblank_simulate: vblank timer overrun [ 795.411033][ T28] audit: type=1326 audit(1758776549.279:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16560 comm="syz.0.3414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b31d8eec9 code=0x7ffc0000 [ 795.433367][ C1] vkms_vblank_simulate: vblank timer overrun [ 795.444425][ T28] audit: type=1326 audit(1758776549.279:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16560 comm="syz.0.3414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b31d8eec9 code=0x7ffc0000 [ 795.466804][ C1] vkms_vblank_simulate: vblank timer overrun [ 795.473767][ T28] audit: type=1326 audit(1758776549.299:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16560 comm="syz.0.3414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f9b31d8eec9 code=0x7ffc0000 [ 795.496040][ C1] vkms_vblank_simulate: vblank timer overrun [ 795.502663][ T28] audit: type=1326 audit(1758776549.299:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16560 comm="syz.0.3414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b31d8eec9 code=0x7ffc0000 [ 795.574226][T16565] tipc: Started in network mode [ 795.579192][T16565] tipc: Node identity a23e9217a59a, cluster identity 4711 [ 795.587589][T16565] tipc: Enabled bearer , priority 0 [ 795.602356][T16565] syzkaller0: entered promiscuous mode [ 795.630835][T16565] syzkaller0: entered allmulticast mode [ 795.647571][T16565] tipc: Resetting bearer [ 795.656097][T16564] tipc: Resetting bearer [ 795.680515][T16564] tipc: Disabling bearer [ 796.869660][T16598] tipc: Enabled bearer , priority 0 [ 796.904545][T16598] syzkaller0: entered promiscuous mode [ 796.933145][T16598] syzkaller0: entered allmulticast mode [ 796.970939][T16598] tipc: Resetting bearer [ 796.991317][T16597] tipc: Resetting bearer [ 797.025810][T16597] tipc: Disabling bearer [ 799.880271][T16661] tipc: Enabled bearer , priority 0 [ 799.893162][T16661] syzkaller0: entered promiscuous mode [ 799.901116][T16661] syzkaller0: entered allmulticast mode [ 799.928969][T16661] tipc: Resetting bearer [ 799.940321][T16660] tipc: Resetting bearer [ 799.982198][T16660] tipc: Disabling bearer [ 802.370389][ T5896] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 802.591428][ T5896] usb 1-1: Using ep0 maxpacket: 8 [ 802.671275][ T5896] usb 1-1: config 6 has an invalid interface number: 2 but max is 0 [ 802.700681][ T5896] usb 1-1: config 6 has no interface number 0 [ 802.706847][ T5896] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 802.804074][ T5896] usb 1-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 802.912142][ T5896] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 802.943618][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.970929][ T5896] usb 1-1: Product: syz [ 802.983626][ T5896] usb 1-1: Manufacturer: syz [ 803.009753][ T5896] usb 1-1: SerialNumber: syz [ 803.061867][ T5896] hso 1-1:6.2: Failed to find INT IN ep [ 804.432550][ T29] INFO: task udevd:7872 blocked for more than 143 seconds. [ 804.440146][ T29] Not tainted syzkaller #0 [ 804.446355][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 804.456154][ T29] task:udevd state:D stack:23688 pid:7872 ppid:5157 flags:0x00004006 [ 804.471239][ T29] Call Trace: [ 804.474735][ T29] [ 804.507755][ T29] __schedule+0x14d2/0x44d0 [ 804.519241][ T29] ? asan.module_dtor+0x20/0x20 [ 804.539348][ T29] ? mark_lock+0x94/0x320 [ 804.548108][ T29] ? lock_chain_count+0x20/0x20 [ 804.569514][ T29] ? _raw_spin_lock_irq+0xaf/0xe0 [ 804.605231][ T29] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 804.630397][ T29] schedule+0xbd/0x170 [ 804.636986][ T29] io_schedule+0x80/0xd0 [ 804.637010][ T29] folio_wait_bit_common+0x6eb/0xf70 [ 804.637038][ T29] ? folio_wait_bit+0x30/0x30 [ 804.637071][ T29] ? _compound_head+0x120/0x120 [ 804.637097][ T29] ? filemap_add_folio+0x192/0x3c0 [ 804.643117][ T29] ? __filemap_get_folio+0x70a/0xbc0 [ 804.643139][ T29] ? blkdev_writepage+0x30/0x30 [ 804.643154][ T29] do_read_cache_folio+0x1c0/0x7e0 [ 804.643166][ T29] ? blkdev_writepage+0x30/0x30 [ 804.643179][ T29] read_part_sector+0xd2/0x350 [ 804.643196][ T29] adfspart_check_POWERTEC+0x8d/0xf00 [ 804.643212][ T29] ? adfspart_check_ADFS+0x660/0x660 [ 804.643227][ T29] ? put_partition+0x350/0x350 [ 804.643242][ T29] ? alloc_pages+0x4dc/0x740 [ 804.643260][ T29] bdev_disk_changed+0x73a/0x1410 [ 804.643285][ T29] ? bdev_resize_partition+0xf0/0xf0 [ 804.643301][ T29] ? iput+0x347/0x920 [ 804.643313][ T29] blkdev_get_whole+0x30d/0x390 [ 804.643326][ T29] blkdev_get_by_dev+0x279/0x600 [ 804.643340][ T29] blkdev_open+0x152/0x360 [ 804.643352][ T29] ? blkdev_mmap+0x1b0/0x1b0 [ 804.643363][ T29] do_dentry_open+0x8c6/0x1500 [ 804.643382][ T29] path_openat+0x274b/0x3190 [ 804.643405][ T29] ? __kasan_slab_alloc+0x6c/0x80 [ 804.643419][ T29] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 804.643437][ T29] ? verify_lock_unused+0x140/0x140 [ 804.643450][ T29] ? do_filp_open+0x3d0/0x3d0 [ 804.643467][ T29] ? __virt_addr_valid+0x18c/0x540 [ 804.643487][ T29] do_filp_open+0x1c5/0x3d0 [ 804.643503][ T29] ? vfs_tmpfile+0x490/0x490 [ 804.643530][ T29] ? _raw_spin_unlock+0x28/0x40 [ 804.643540][ T29] ? alloc_fd+0x58f/0x630 [ 804.643561][ T29] do_sys_openat2+0x12c/0x1c0 [ 804.643575][ T29] ? do_sys_open+0xe0/0xe0 [ 804.643587][ T29] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 804.643600][ T29] ? lock_chain_count+0x20/0x20 [ 804.643613][ T29] __x64_sys_openat+0x139/0x160 [ 804.643628][ T29] do_syscall_64+0x55/0xb0 [ 804.643641][ T29] ? clear_bhb_loop+0x40/0x90 [ 804.643652][ T29] ? clear_bhb_loop+0x40/0x90 [ 804.643662][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 804.643677][ T29] RIP: 0033:0x7f3ea9ea7407 [ 804.643699][ T29] RSP: 002b:00007ffec2cbcfb0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 804.643712][ T29] RAX: ffffffffffffffda RBX: 00007f3eaa584880 RCX: 00007f3ea9ea7407 [ 804.643720][ T29] RDX: 00000000000a0800 RSI: 000055bfa2b82c90 RDI: ffffffffffffff9c [ 804.643728][ T29] RBP: 000055bfa2b62910 R08: 0000000000000000 R09: 0000000000000000 [ 804.643735][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 000055bfa2b7ff10 [ 804.643742][ T29] R13: 000055bfa2b7a410 R14: 0000000000000000 R15: 000055bfa2b7ff10 [ 804.643757][ T29] [ 804.649684][ T29] [ 804.649684][ T29] Showing all locks held in the system: [ 804.649701][ T29] 1 lock held by khungtaskd/29: [ 804.649713][ T29] #0: ffffffff8cd2fe20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 804.651008][ T29] 2 locks held by kworker/u4:4/59: [ 804.651019][ T29] #0: ffff888017871538 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 804.651071][ T29] #1: ffffc900015a7d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 804.651127][ T29] 2 locks held by kworker/u4:5/991: [ 804.651167][ T29] 2 locks held by getty/5550: [ 804.651177][ T29] #0: ffff88802d3f50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 804.651231][ T29] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x425/0x1380 [ 804.651287][ T29] 1 lock held by udevd/7872: [ 804.651297][ T29] #0: ffff8880219244c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 804.651345][ T29] 3 locks held by kworker/u5:0/13369: [ 804.651356][ T29] #0: ffff88805f62dd38 ((wq_completion)hci1#2){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 804.651412][ T29] #1: ffffc90003237d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 804.651462][ T29] #2: ffff88807bc8ce70 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1d4/0x390 [ 804.651522][ T29] 1 lock held by syz.3.2467/14025: [ 804.651532][ T29] #0: ffff8880219244c8 (&disk->open_mutex){+.+.}-{3:3}, at: sync_bdevs+0x1af/0x330 [ 804.651579][ T29] 1 lock held by syz.3.2467/14026: [ 804.651588][ T29] #0: ffff8880219244c8 (&disk->open_mutex){+.+.}-{3:3}, at: sync_bdevs+0x1af/0x330 [ 804.651658][ T29] 1 lock held by syz.0.3457/16682: [ 804.651668][ T29] 2 locks held by syz.0.3457/16684: [ 804.651679][ T29] 1 lock held by syz.4.3462/16695: [ 804.651689][ T29] #0: ffff888067ddc068 (&pipe->mutex/1){+.+.}-{3:3}, at: pipe_release+0x51/0x330 [ 804.651747][ T29] 1 lock held by syz.4.3462/16699: [ 804.651757][ T29] #0: ffff888067ddc068 (&pipe->mutex/1){+.+.}-{3:3}, at: splice_file_to_pipe+0x2a/0x110 [ 804.651816][ T29] 1 lock held by syz.4.3462/16702: [ 804.651826][ T29] #0: ffff888067ddc068 (&pipe->mutex/1){+.+.}-{3:3}, at: pipe_double_lock+0xa8/0x1c0 [ 804.651887][ T29] 1 lock held by syz.2.3461/16698: [ 804.651896][ T29] #0: ffff8880250127a0 (&mm->mmap_lock){++++}-{3:3}, at: vm_mmap_pgoff+0x168/0x400 [ 804.651945][ T29] 1 lock held by syz.2.3461/16704: [ 804.651954][ T29] #0: ffff8880250127a0 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_lock_killable+0x1d/0x70 [ 804.652000][ T29] 1 lock held by syz.2.3461/16705: [ 804.665075][ T29] 1 lock held by syz.2.3461/16706: [ 804.665088][ T29] #0: ffff8880250127a0 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_mremap+0x362/0x1140 [ 804.665141][ T29] 2 locks held by syz.1.3463/16709: [ 804.665149][ T29] 6 locks held by syz.1.3463/16713: [ 804.665155][ T29] 2 locks held by modprobe/16714: [ 804.665178][ T29] [ 804.665183][ T29] ============================================= [ 804.665183][ T29] [ 804.665190][ T29] NMI backtrace for cpu 0 [ 804.665214][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 804.665229][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 804.665238][ T29] Call Trace: [ 804.665245][ T29] [ 804.665252][ T29] dump_stack_lvl+0x16c/0x230 [ 804.665273][ T29] ? preempt_count_add+0x91/0x1a0 [ 804.665289][ T29] ? show_regs_print_info+0x20/0x20 [ 804.665301][ T29] ? load_image+0x3b0/0x3b0 [ 804.665316][ T29] nmi_cpu_backtrace+0x39b/0x3d0 [ 804.665331][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 804.665343][ T29] ? _printk+0xd0/0x110 [ 804.665351][ T29] ? load_image+0x3b0/0x3b0 [ 804.665362][ T29] ? load_image+0x3b0/0x3b0 [ 804.665373][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 804.665388][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 804.665402][ T29] watchdog+0xf41/0xf80 [ 804.665416][ T29] ? watchdog+0x1e1/0xf80 [ 804.665430][ T29] kthread+0x2fa/0x390 [ 804.665440][ T29] ? hungtask_pm_notify+0x90/0x90 [ 804.665452][ T29] ? kthread_blkcg+0xd0/0xd0 [ 804.665461][ T29] ret_from_fork+0x48/0x80 [ 804.665472][ T29] ? kthread_blkcg+0xd0/0xd0 [ 804.665482][ T29] ret_from_fork_asm+0x11/0x20 [ 804.665501][ T29] [ 804.665506][ T29] Sending NMI from CPU 0 to CPUs 1: [ 804.665539][ C1] NMI backtrace for cpu 1 [ 804.665548][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 804.665563][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 804.665571][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 804.665595][ C1] Code: cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d a3 e8 39 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 66 0f 1f 00 55 41 57 41 56 [ 804.665609][ C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c2 [ 804.665622][ C1] RAX: 76ca60c26ff6d300 RBX: ffffffff8161925b RCX: 76ca60c26ff6d300 [ 804.665635][ C1] RDX: 0000000000000001 RSI: ffffffff8aaabca0 RDI: ffffffff8afc71c0 [ 804.665645][ C1] RBP: ffffc90000187f20 R08: ffff8880b8f36b2b R09: 1ffff110171e6d65 [ 804.665657][ C1] R10: dffffc0000000000 R11: ffffed10171e6d66 R12: ffffffff8e4a91a8 [ 804.665668][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff1100364e780 [ 804.665679][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 804.665693][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 804.665704][ C1] CR2: 000020000004c030 CR3: 000000002f931000 CR4: 00000000003526e0 [ 804.665718][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 804.665726][ C1] DR3: 3a810b1eb6134bdc DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 804.665737][ C1] Call Trace: [ 804.665742][ C1] [ 804.665747][ C1] default_idle+0x13/0x20 [ 804.665761][ C1] default_idle_call+0x6c/0xa0 [ 804.665776][ C1] do_idle+0x1eb/0x510 [ 804.665796][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 804.665812][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 804.665833][ C1] ? asm_sysvec_call_function_single+0x1a/0x20 [ 804.665857][ C1] cpu_startup_entry+0x43/0x60 [ 804.665872][ C1] start_secondary+0xee/0xf0 [ 804.665888][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 804.665915][ C1] [ 804.666532][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 804.666539][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 804.666548][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 804.666553][ T29] Call Trace: [ 804.666557][ T29] [ 804.666561][ T29] dump_stack_lvl+0x16c/0x230 [ 804.666575][ T29] ? show_regs_print_info+0x20/0x20 [ 804.666587][ T29] ? load_image+0x3b0/0x3b0 [ 804.666601][ T29] panic+0x2c0/0x710 [ 804.666618][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 804.666631][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 804.666642][ T29] ? irq_work_queue+0xbc/0x140 [ 804.666655][ T29] watchdog+0xf80/0xf80 [ 804.666667][ T29] ? watchdog+0x1e1/0xf80 [ 804.666681][ T29] kthread+0x2fa/0x390 [ 804.666689][ T29] ? hungtask_pm_notify+0x90/0x90 [ 804.666701][ T29] ? kthread_blkcg+0xd0/0xd0 [ 804.666710][ T29] ret_from_fork+0x48/0x80 [ 804.666720][ T29] ? kthread_blkcg+0xd0/0xd0 [ 804.666728][ T29] ret_from_fork_asm+0x11/0x20 [ 804.666747][ T29] [ 804.667034][ T29] Kernel Offset: disabled