last executing test programs: 9.812613135s ago: executing program 3 (id=4122): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x4c000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r1, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'tunl0\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000040)={@loopback, r4}, 0x14) 9.523928575s ago: executing program 3 (id=4125): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x30, 0x0, 0x0) 9.137637652s ago: executing program 4 (id=4131): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x3c}}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 8.739148198s ago: executing program 1 (id=4135): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x4c000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r1, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'tunl0\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000040)={@loopback, r4}, 0x14) 8.11162155s ago: executing program 4 (id=4139): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="58000000020601010000000000000000000000000c00078005001500010000000500010006000000050005000200000005000400010000000900020073797a320000000011000300686173683a6970"], 0x58}, 0x1, 0x0, 0x0, 0x48004}, 0x0) 7.996529597s ago: executing program 3 (id=4140): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000014000000000000000000000000a78000000060a0b040000000000000000020000004c000480240001800b000100736f636b657400001400028008000240000000030800014000000003240001800a0001007175657565000000140002800800044000000010060003401b0300000900010073797a30000000000900020073797a32"], 0xa0}}, 0x0) 7.76577358s ago: executing program 4 (id=4141): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$peek(0x2, r3, &(0x7f0000000180)) 7.184180013s ago: executing program 3 (id=4142): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "2e2b5aa4"}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0x8}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) readv(r1, &(0x7f0000000200)=[{&(0x7f0000001580)=""/4091, 0xffb}], 0x1) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) timer_create(0x1, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) 5.399417821s ago: executing program 1 (id=4148): creat(&(0x7f0000000400)='./bus\x00', 0x0) socket$kcm(0x2d, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000280)={0x0, 0xec25, 0x400, 0x3, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000019c0)=""/4097, 0x1001) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1}) io_uring_enter(r0, 0x47ba, 0x0, 0x28, 0x0, 0x0) 4.834192018s ago: executing program 3 (id=4151): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r3, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) 4.783607844s ago: executing program 0 (id=4152): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r1, &(0x7f0000003a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 4.309300657s ago: executing program 0 (id=4153): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x114}], 0x1, 0x0, 0x0, 0x41}, 0x0) readv(r1, &(0x7f00000001c0), 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 4.2576862s ago: executing program 4 (id=4154): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="f78d9ca38fdc00f3be52163448412ba8d5d72c63e8de51f666efc53ce67f4f", 0x1f}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800"], 0x18}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000280)=""/38, 0x26}], 0x1}, 0x3ff}], 0x1, 0x50, 0x0) 3.771233733s ago: executing program 1 (id=4155): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) 3.651726789s ago: executing program 1 (id=4156): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode']) 3.460527254s ago: executing program 1 (id=4157): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="cb05000050000000cf4ebfa646353e6f06000000000000009500000000000000f85a5ae149bd185bbd9f1b4fcac22abad755ea65ddaaaec4c72e40d8b18c853db39a60fef5407e1c6d"], 0x0, 0x5}, 0x94) r3 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x0, 0x0}]}) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 3.117937992s ago: executing program 4 (id=4158): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) close_range(r0, r2, 0x2) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec401addce263df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r3, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) add_key$keyring(&(0x7f0000000280), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0x0) 2.78728163s ago: executing program 4 (id=4159): bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0x2ffffffff}, 0xffffffffffffffb0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, 0x0, 0x5, 0x4002) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x33}, 0xe70bdd3d34fcba6) r2 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x44) r3 = syz_io_uring_setup(0xbdf, &(0x7f0000000000)={0x0, 0x6d0a, 0x80, 0xfffffffd, 0x40000331, 0x0, r2}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0x847ba, 0x2000, 0xe, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0) sched_setattr(0x0, 0x0, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, &(0x7f0000000040)) r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000440)={0x1, @pix_mp={0x62, 0x1, 0x3031334d, 0x3, 0xa, [{0x3, 0x6}, {0x2, 0x2}, {0x3, 0x411}, {0x10001, 0x8}, {0x6, 0x8}, {0x4, 0xd}, {0x8, 0xfffffff8}, {0x5, 0x1}], 0xc, 0x2, 0x1, 0x0, 0x2}}) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) close(0xffffffffffffffff) syz_usb_connect(0x0, 0x34, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000011008b88040f80cb59acbc0413a1f8480f0000005e2900421803001825e60a001402000002800000121f", 0x2e}], 0x1}, 0x0) socket$netlink(0x10, 0x3, 0x0) 2.41945669s ago: executing program 0 (id=4160): rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01"], 0x30}, 0x1, 0x0, 0x0, 0x4004840}, 0x44000) 2.085748739s ago: executing program 0 (id=4161): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "2e2b5aa4"}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0x8}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) readv(r1, &(0x7f0000000200)=[{&(0x7f0000001580)=""/4091, 0xffb}], 0x1) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) timer_create(0x1, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) 1.699570365s ago: executing program 2 (id=4163): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xe26, 0x101400) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0xc0045520, &(0x7f00000000c0)=""/92) 1.350061957s ago: executing program 2 (id=4164): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r1, &(0x7f0000003a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.261466489s ago: executing program 2 (id=4165): pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) fremovexattr(r0, &(0x7f0000000200)=@known='trusted.overlay.opaque\x00') 1.151639776s ago: executing program 3 (id=4166): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r2, &(0x7f0000000000)=ANY=[], 0xc) 1.010355171s ago: executing program 2 (id=4167): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x800) r0 = syz_io_uring_setup(0x3a65, &(0x7f0000000700)={0x0, 0xa011, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000100), &(0x7f0000000140)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB=';'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) io_uring_enter(r0, 0x5d62, 0x0, 0x0, 0x0, 0x0) 704.13885ms ago: executing program 2 (id=4168): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) writev(r3, &(0x7f0000000b80)=[{0x0}, {&(0x7f0000000700)="b87703fcf01a3e7bb667b404b97c7cc284a90404a5a96ff4559329d80d037b08d8810e457b955102a0e93e966b04be1aafc2067dbc6c99566ce636740265f60f3467c311c5bab39f814b6b46458e362728f8f0b6156075616f87842f97f9061c2e676278f96044c4db7785a62f601e32e57baed01ea1e7b49c6a395169e8bd72254557dd7959f8627e2274301d346beb9887e01583a5ab92ef23b6fb80be5edc6324845b1bc2443ffc0ab163daaceb89", 0xb0}, {&(0x7f00000007c0)="0b3c4fef437f956b626afd4d40ff19d50600b9d7685894a615d4cfc14f8aa828f0f9e21991906806421f38317973338885fc13112b46ec2f4a9efc8697f50fcc51b719c7d9516b708dab574174ba512f16c93772d676234ff465b761be7dc6811c889b9673101b91666e02f2bd878349b4b9a50ca7a17dcd1a99", 0x7a}, {&(0x7f0000000880)="1dfda5b80cb90832bf7cb077130ab731fe0fa5969adc03b465c883b86969debbfc1deaa4273a7d1e116dbd7c04c0afba5ca62c61e1fa758cd705e53263d421f77ac5c2366628a6ad455b841bc8afc9ce1d48e3b9667be8cfe56c18476d47a154315281a9ffb2a81f18be39b5100c12b9710bd151ef51d66f02fe3bf916b5cad2de879e26300f58fa039539e196354f5978969a2902c8cd292813a304382afbaba583e9", 0xa3}], 0x4) 413.475783ms ago: executing program 0 (id=4169): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r5, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mount_setattr(0xffffffffffffffff, 0x0, 0x9000, &(0x7f0000000000)={0x100002, 0x1000f7, 0x40000}, 0x21) 401.103184ms ago: executing program 2 (id=4170): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x114}], 0x1, 0x0, 0x0, 0x41}, 0x0) readv(r1, &(0x7f00000001c0)=[{0x0}], 0x1) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 72.674546ms ago: executing program 1 (id=4171): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) sendmsg$tipc(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820) 0s ago: executing program 0 (id=4172): r0 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000001080)={'filter\x00', 0x0, 0x4, 0x1000, [0x8, 0x800, 0x100000001, 0x5, 0x6], 0x6, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000080)=""/4096}, &(0x7f0000001100)=0x78) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x80) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}}}}}, 0x0) socket(0x10, 0x80002, 0x4) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) capset(&(0x7f0000000080)={0x20080522}, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="400063bc560289b3d15d8c96cd9c0004000000", @ANYRES32=0x0, @ANYBLOB="0003000001800000200012800800010067726500140002800500080003000000050009"], 0x40}, 0x1, 0x0, 0x0, 0x4044090}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000040)=0x5) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000005c0), 0x88400) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r5, 0x40485404, &(0x7f0000000600)={{0x1, 0x1, 0x7, 0x3}, 0x1, 0x405}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): 02 compat=0 ip=0x7f8fd063f6c9 code=0x50000 [ 563.622917][ T38] audit: type=1326 audit(1763253245.720:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11688 comm="syz.2.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fd063f6c9 code=0x50000 [ 563.623216][ T38] audit: type=1326 audit(1763253245.720:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11688 comm="syz.2.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fd063f6c9 code=0x50000 [ 563.623500][ T38] audit: type=1326 audit(1763253245.720:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11688 comm="syz.2.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fd063f6c9 code=0x50000 [ 563.623801][ T38] audit: type=1326 audit(1763253245.720:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11688 comm="syz.2.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fd063f6c9 code=0x50000 [ 563.684401][ T5892] usb 1-1: Using ep0 maxpacket: 16 [ 563.704544][ T5892] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 563.704577][ T5892] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 563.704602][ T5892] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 563.704625][ T5892] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 563.704649][ T5892] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 563.704672][ T5892] usb 1-1: config 0 has no interface number 0 [ 563.704729][ T5892] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 563.704762][ T5892] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 563.704789][ T5892] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 563.704831][ T5892] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 563.704874][ T5892] usb 1-1: config 0 interface 125 has no altsetting 0 [ 563.704976][ T5892] usb 1-1: config 0 interface 125 has no altsetting 2 [ 563.723307][ T5892] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 563.723345][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.723370][ T5892] usb 1-1: Product: syz [ 563.723386][ T5892] usb 1-1: Manufacturer: syz [ 563.723403][ T5892] usb 1-1: SerialNumber: syz [ 563.755739][ T5892] usb 1-1: config 0 descriptor?? [ 563.759020][ T38] audit: type=1326 audit(1763253245.720:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11688 comm="syz.2.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fd063f6c9 code=0x50000 [ 563.759088][ T38] audit: type=1326 audit(1763253245.760:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11688 comm="syz.2.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fd063f6c9 code=0x50000 [ 563.759222][ T38] audit: type=1326 audit(1763253245.760:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11688 comm="syz.2.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fd063f6c9 code=0x50000 [ 563.759279][ T38] audit: type=1326 audit(1763253245.760:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11688 comm="syz.2.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fd063f6c9 code=0x50000 [ 563.805192][ T5892] usb 1-1: selecting invalid altsetting 2 [ 564.896212][ T5892] get_1284_register timeout [ 564.896282][ T5892] uss720 1-1:0.125: probe with driver uss720 failed with error -5 [ 564.896384][ C1] usb 1-1: async_complete: urb error -104 [ 564.896495][ C1] usb 1-1: async_complete: urb error -104 [ 567.705630][ T5893] usb 1-1: USB disconnect, device number 20 [ 568.263394][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.263471][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 570.431055][T11736] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 570.431319][T11736] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 570.431527][T11736] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 570.431743][T11736] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 570.431958][T11736] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 571.776352][ T61] Bluetooth: hci0: command 0x0406 tx timeout [ 572.658153][T11757] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2497'. [ 572.818656][ T5124] Bluetooth: hci3: command 0x0406 tx timeout [ 572.820877][ T5124] Bluetooth: hci2: command 0x0406 tx timeout [ 572.823205][ T5124] Bluetooth: hci1: command 0x0406 tx timeout [ 572.825161][ T61] Bluetooth: hci4: command 0x0406 tx timeout [ 574.666992][T11779] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2499'. [ 576.934189][ T5893] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 577.086882][ T5893] usb 1-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 577.086916][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.098323][ T5893] usb 1-1: config 0 descriptor?? [ 577.384210][ T31] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 577.520819][ T5893] hackrf 1-1:0.0: Board ID: 00 [ 577.520843][ T5893] hackrf 1-1:0.0: Firmware version: [ 577.534253][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 577.536930][ T31] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 577.536955][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 577.536975][ T31] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 577.570202][ T31] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 577.570233][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.570252][ T31] usb 2-1: Product: syz [ 577.570267][ T31] usb 2-1: Manufacturer: syz [ 577.570282][ T31] usb 2-1: SerialNumber: syz [ 577.608566][ T5893] hackrf 1-1:0.0: Registered as swradio24 [ 577.608593][ T5893] videodev: could not get a free minor [ 577.608622][ T5893] hackrf 1-1:0.0: Failed to register as video device (-23) [ 577.637236][ T5893] hackrf 1-1:0.0: probe with driver hackrf failed with error -23 [ 577.744916][ T5893] usb 1-1: USB disconnect, device number 21 [ 578.030949][ T31] usb 2-1: 0:2 : does not exist [ 578.221743][T11815] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2517'. [ 580.338121][T10274] usb 2-1: USB disconnect, device number 16 [ 580.488059][T11852] syzkaller0: entered promiscuous mode [ 580.488088][T11852] syzkaller0: entered allmulticast mode [ 580.691618][ T38] kauditd_printk_skb: 65 callbacks suppressed [ 580.691640][ T38] audit: type=1326 audit(1763253262.790:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11847 comm="syz.2.2522" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8fd063f6c9 code=0x0 [ 581.099254][T11867] netlink: 'syz.1.2536': attribute type 4 has an invalid length. [ 581.171618][T11869] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2537'. [ 582.259386][ T31] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 582.404307][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 582.409943][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 582.411469][ T31] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 582.411504][ T31] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 582.411524][ T31] usb 2-1: config 4 has no interface number 0 [ 582.467180][ T31] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 582.467213][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.467234][ T31] usb 2-1: Product: syz [ 582.467257][ T31] usb 2-1: Manufacturer: syz [ 582.467272][ T31] usb 2-1: SerialNumber: syz [ 582.802236][ T31] uvcvideo 2-1:4.147: probe with driver uvcvideo failed with error -22 [ 582.861990][ T31] usb 2-1: USB disconnect, device number 17 [ 582.974224][T11900] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2548'. [ 588.027107][T11926] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2561'. [ 589.301677][T11952] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2570'. [ 591.014236][T10274] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 591.174561][T10274] usb 1-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 591.174594][T10274] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.206675][T10274] usb 1-1: config 0 descriptor?? [ 591.630628][T10274] hackrf 1-1:0.0: usb_control_msg() failed -71 request 0f [ 591.630660][T10274] hackrf 1-1:0.0: Could not detect board [ 591.630729][T10274] hackrf 1-1:0.0: probe with driver hackrf failed with error -71 [ 591.675197][T10274] usb 1-1: USB disconnect, device number 22 [ 592.299084][T11978] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2583'. [ 593.441795][T11992] binder: 11990:11992 unknown command 0 [ 593.441819][T11992] binder: 11990:11992 ioctl c0306201 200000000080 returned -22 [ 595.011194][T12017] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2598'. [ 597.167091][ T38] audit: type=1326 audit(1763253279.270:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12039 comm="syz.1.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b8307f6c9 code=0x50000 [ 597.167248][ T38] audit: type=1326 audit(1763253279.270:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12039 comm="syz.1.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b8307f6c9 code=0x50000 [ 597.167436][ T38] audit: type=1326 audit(1763253279.270:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12039 comm="syz.1.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b8307f6c9 code=0x50000 [ 597.167559][ T38] audit: type=1326 audit(1763253279.270:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12039 comm="syz.1.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b8307f6c9 code=0x50000 [ 597.167872][ T38] audit: type=1326 audit(1763253279.270:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12039 comm="syz.1.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b8307f6c9 code=0x50000 [ 597.168037][ T38] audit: type=1326 audit(1763253279.270:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12039 comm="syz.1.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b8307f6c9 code=0x50000 [ 597.169882][ T38] audit: type=1326 audit(1763253279.270:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12039 comm="syz.1.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b8307f6c9 code=0x50000 [ 597.169941][ T38] audit: type=1326 audit(1763253279.270:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12039 comm="syz.1.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b8307f6c9 code=0x50000 [ 597.170005][ T38] audit: type=1326 audit(1763253279.270:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12039 comm="syz.1.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b8307f6c9 code=0x50000 [ 597.170063][ T38] audit: type=1326 audit(1763253279.270:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12039 comm="syz.1.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b8307f6c9 code=0x50000 [ 597.295860][T12046] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2610'. [ 597.992819][ T31] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 598.688412][ T31] usb 4-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 598.688445][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.713671][ T31] usb 4-1: config 0 descriptor?? [ 599.114207][ T5987] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 599.143039][ T31] hackrf 4-1:0.0: usb_control_msg() failed -71 request 0f [ 599.143070][ T31] hackrf 4-1:0.0: Could not detect board [ 599.143132][ T31] hackrf 4-1:0.0: probe with driver hackrf failed with error -71 [ 599.181988][ T31] usb 4-1: USB disconnect, device number 13 [ 599.269407][ T5987] usb 2-1: Using ep0 maxpacket: 16 [ 599.280823][ T5987] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 599.280852][ T5987] usb 2-1: config 0 has no interfaces? [ 599.300241][ T5987] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 599.300274][ T5987] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.300294][ T5987] usb 2-1: Product: syz [ 599.300309][ T5987] usb 2-1: Manufacturer: syz [ 599.300323][ T5987] usb 2-1: SerialNumber: syz [ 599.337837][ T5987] usb 2-1: config 0 descriptor?? [ 599.501472][T12082] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2625'. [ 599.580199][ T5893] usb 2-1: USB disconnect, device number 18 [ 600.447928][T12123] binder: 12121:12123 ioctl 4018620d 0 returned -22 [ 600.504176][ T5893] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 600.654366][ T5893] usb 2-1: Using ep0 maxpacket: 16 [ 600.656957][ T5893] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 600.656988][ T5893] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 600.657010][ T5893] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 600.657030][ T5893] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 600.657052][ T5893] usb 2-1: config 0 has no interface number 0 [ 600.657106][ T5893] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 600.657135][ T5893] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 600.657160][ T5893] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 600.657182][ T5893] usb 2-1: config 0 interface 125 has no altsetting 0 [ 600.662084][ T5893] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 600.662115][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.662135][ T5893] usb 2-1: Product: syz [ 600.662150][ T5893] usb 2-1: Manufacturer: syz [ 600.662165][ T5893] usb 2-1: SerialNumber: syz [ 600.673342][ T5893] usb 2-1: config 0 descriptor?? [ 600.994278][ T5893] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 601.157601][ T5893] usb 3-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 601.157634][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.167563][ T5893] usb 3-1: config 0 descriptor?? [ 601.504360][T10274] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 601.601346][ T5893] hackrf 3-1:0.0: usb_control_msg() failed -71 request 0f [ 601.601375][ T5893] hackrf 3-1:0.0: Could not detect board [ 601.601439][ T5893] hackrf 3-1:0.0: probe with driver hackrf failed with error -71 [ 601.629666][ T5893] usb 3-1: USB disconnect, device number 10 [ 601.655751][T10274] usb 5-1: Using ep0 maxpacket: 16 [ 601.658738][T10274] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 601.658765][T10274] usb 5-1: config 0 has no interfaces? [ 601.682815][T10274] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 601.682852][T10274] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.682878][T10274] usb 5-1: Product: syz [ 601.682893][T10274] usb 5-1: Manufacturer: syz [ 601.682909][T10274] usb 5-1: SerialNumber: syz [ 601.759940][T10274] usb 5-1: config 0 descriptor?? [ 601.976136][ T5893] usb 5-1: USB disconnect, device number 8 [ 603.358196][T10274] usb 2-1: USB disconnect, device number 19 [ 605.036489][T12180] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2669'. [ 606.060654][T12205] fuse: Bad value for 'rootmode' [ 606.122128][ T38] kauditd_printk_skb: 75 callbacks suppressed [ 606.122149][ T38] audit: type=1326 audit(1763253288.220:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12206 comm="syz.1.2682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b8307f6c9 code=0x50000 [ 606.122267][ T38] audit: type=1326 audit(1763253288.220:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12206 comm="syz.1.2682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b8307f6c9 code=0x50000 [ 606.122450][ T38] audit: type=1326 audit(1763253288.220:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12206 comm="syz.1.2682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b8307f6c9 code=0x50000 [ 606.122604][ T38] audit: type=1326 audit(1763253288.220:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12206 comm="syz.1.2682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b8307f6c9 code=0x50000 [ 606.122790][ T38] audit: type=1326 audit(1763253288.220:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12206 comm="syz.1.2682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b8307f6c9 code=0x50000 [ 606.122936][ T38] audit: type=1326 audit(1763253288.220:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12206 comm="syz.1.2682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b8307f6c9 code=0x50000 [ 606.123117][ T38] audit: type=1326 audit(1763253288.220:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12206 comm="syz.1.2682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b8307f6c9 code=0x50000 [ 606.123270][ T38] audit: type=1326 audit(1763253288.220:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12206 comm="syz.1.2682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b8307f6c9 code=0x50000 [ 606.123461][ T38] audit: type=1326 audit(1763253288.220:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12206 comm="syz.1.2682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b8307f6c9 code=0x50000 [ 606.123612][ T38] audit: type=1326 audit(1763253288.220:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12206 comm="syz.1.2682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b8307f6c9 code=0x50000 [ 606.495834][T12211] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2676'. [ 607.241185][T12223] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2688'. [ 607.532630][T12232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2693'. [ 607.656899][T12237] netlink: 'syz.1.2695': attribute type 4 has an invalid length. [ 609.504675][T12253] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2703'. [ 610.524355][T12268] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2706'. [ 613.060765][T12299] bridge0: entered allmulticast mode [ 613.636164][T12309] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2723'. [ 617.343631][T12348] fuse: Bad value for 'fd' [ 618.100619][T12346] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 618.101068][T12346] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 618.104191][T12346] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 618.124167][T12346] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 618.124514][T12346] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 618.966747][T12384] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 619.387099][T12390] netlink: 'syz.4.2757': attribute type 4 has an invalid length. [ 619.458075][ T61] Bluetooth: hci0: command 0x0406 tx timeout [ 620.199673][ T61] Bluetooth: hci4: command 0x0406 tx timeout [ 620.199729][ T61] Bluetooth: hci3: command 0x0406 tx timeout [ 620.199762][ T61] Bluetooth: hci2: command 0x0406 tx timeout [ 620.199796][ T61] Bluetooth: hci1: command 0x0406 tx timeout [ 623.239872][T12433] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 623.242232][T12433] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 626.105779][T12484] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2795'. [ 629.328224][T12518] fuse: Bad value for 'fd' [ 629.700088][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.700166][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.304367][T10274] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 630.472281][T10274] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 630.472319][T10274] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.472343][T10274] usb 4-1: Product: syz [ 630.472360][T10274] usb 4-1: Manufacturer: syz [ 630.472377][T10274] usb 4-1: SerialNumber: syz [ 630.654104][ T5914] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 630.951500][ T5914] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 630.951534][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.951554][ T5914] usb 5-1: Product: syz [ 630.951568][ T5914] usb 5-1: Manufacturer: syz [ 630.951582][ T5914] usb 5-1: SerialNumber: syz [ 631.136291][T10274] rtl8150 4-1:1.0: couldn't reset the device [ 631.144707][T10274] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 631.209088][T10274] usb 4-1: USB disconnect, device number 14 [ 631.713293][ T5914] rtl8150 5-1:1.0: couldn't reset the device [ 631.713595][ T5914] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 631.740985][ T5914] usb 5-1: USB disconnect, device number 9 [ 632.268538][T12562] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2827'. [ 634.784174][ T5914] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 634.824206][ T31] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 634.999640][ T31] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 634.999674][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.999696][ T31] usb 1-1: Product: syz [ 634.999710][ T31] usb 1-1: Manufacturer: syz [ 634.999727][ T31] usb 1-1: SerialNumber: syz [ 635.073670][ T5914] usb 3-1: Using ep0 maxpacket: 16 [ 635.076707][ T5914] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 635.076735][ T5914] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 635.076757][ T5914] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 635.080454][ T5914] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 635.080486][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.080508][ T5914] usb 3-1: Product: syz [ 635.080524][ T5914] usb 3-1: Manufacturer: syz [ 635.080540][ T5914] usb 3-1: SerialNumber: syz [ 635.427664][ T31] rtl8150 1-1:1.0: couldn't reset the device [ 635.428054][ T31] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 635.554901][ T31] usb 1-1: USB disconnect, device number 23 [ 635.570376][ T5914] usb 3-1: 0:2 : does not exist [ 635.599458][ T5914] usb 3-1: 1:0: cannot get min/max values for control 4 (id 1) [ 635.664450][ T5914] usb 3-1: USB disconnect, device number 11 [ 638.765224][T12639] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 638.767586][T12639] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 640.782414][T12660] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2862'. [ 645.053768][T12706] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 645.056165][T12706] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 646.555599][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 646.575465][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 646.600005][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 646.610699][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 646.611662][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 648.761307][ T61] Bluetooth: hci5: command tx timeout [ 649.006374][T12741] binder: BINDER_SET_CONTEXT_MGR already set [ 649.006393][T12741] binder: 12740:12741 ioctl 4018620d 200000000040 returned -16 [ 649.387501][ T1291] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.787677][T12713] chnl_net:caif_netlink_parms(): no params data found [ 650.332878][ T1291] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.384161][ T5893] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 650.544258][ T5893] usb 3-1: Using ep0 maxpacket: 16 [ 650.546971][ T5893] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 650.547001][ T5893] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 650.547022][ T5893] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 650.547043][ T5893] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 650.547063][ T5893] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 650.547085][ T5893] usb 3-1: config 0 has no interface number 0 [ 650.547137][ T5893] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 650.547166][ T5893] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 650.547191][ T5893] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 650.547233][ T5893] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 650.547261][ T5893] usb 3-1: config 0 interface 125 has no altsetting 0 [ 650.547311][ T5893] usb 3-1: config 0 interface 125 has no altsetting 2 [ 650.550398][ T5893] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 650.550428][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.550450][ T5893] usb 3-1: Product: syz [ 650.550466][ T5893] usb 3-1: Manufacturer: syz [ 650.550480][ T5893] usb 3-1: SerialNumber: syz [ 650.715856][ T5893] usb 3-1: config 0 descriptor?? [ 650.764761][ T5893] usb 3-1: selecting invalid altsetting 2 [ 650.815253][ T61] Bluetooth: hci5: command tx timeout [ 650.920189][ T1291] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.632757][ T1291] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.788449][ T5893] get_1284_register timeout [ 651.788525][ T5893] uss720 3-1:0.125: probe with driver uss720 failed with error -5 [ 651.788623][ C0] usb 3-1: async_complete: urb error -104 [ 651.788732][ C0] usb 3-1: async_complete: urb error -104 [ 651.788832][ C0] usb 3-1: async_complete: urb error -104 [ 652.146497][T12713] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.146635][T12713] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.146903][T12713] bridge_slave_0: entered allmulticast mode [ 652.150492][T12713] bridge_slave_0: entered promiscuous mode [ 652.182962][T12713] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.183106][T12713] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.183288][T12713] bridge_slave_1: entered allmulticast mode [ 652.208965][T12713] bridge_slave_1: entered promiscuous mode [ 652.550286][T12713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 652.554591][T12713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 652.894246][ T61] Bluetooth: hci5: command tx timeout [ 653.245861][T12713] team0: Port device team_slave_0 added [ 653.354198][ T5893] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 653.453433][T12713] team0: Port device team_slave_1 added [ 653.529028][ T5893] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 653.529062][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 653.529088][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 653.529111][ T5893] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 653.529153][ T5893] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 653.529177][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.535263][ T5893] usb 2-1: config 0 descriptor?? [ 653.656818][T12787] fuse: Unknown parameter 'fd0x0000000000000004' [ 654.081496][ T5893] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 654.171642][T12713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 654.171661][T12713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 654.171692][T12713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 654.308098][T12713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 654.308118][T12713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 654.308149][T12713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 654.476182][ T5914] usb 2-1: USB disconnect, device number 20 [ 654.599119][T12792] fido_id[12792]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 654.975174][ T61] Bluetooth: hci5: command tx timeout [ 655.579682][ T5914] usb 3-1: USB disconnect, device number 12 [ 656.635301][T12825] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 656.635485][T12825] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 659.462210][T12843] netlink: 'syz.1.2921': attribute type 4 has an invalid length. [ 659.704201][ T5914] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 659.854249][ T5914] usb 4-1: Using ep0 maxpacket: 16 [ 659.856987][ T5914] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 659.857102][ T5914] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 659.857124][ T5914] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 659.857145][ T5914] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 659.857164][ T5914] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 659.857185][ T5914] usb 4-1: config 0 has no interface number 0 [ 659.857235][ T5914] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 659.857263][ T5914] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 659.857287][ T5914] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 659.857324][ T5914] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 659.857352][ T5914] usb 4-1: config 0 interface 125 has no altsetting 0 [ 659.857370][ T5914] usb 4-1: config 0 interface 125 has no altsetting 2 [ 659.862677][ T5914] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 659.862802][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.862823][ T5914] usb 4-1: Product: syz [ 659.862839][ T5914] usb 4-1: Manufacturer: syz [ 659.862855][ T5914] usb 4-1: SerialNumber: syz [ 659.874495][ T5914] usb 4-1: config 0 descriptor?? [ 659.899145][ T5914] usb 4-1: selecting invalid altsetting 2 [ 660.358610][ T1291] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 660.558035][ T1291] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 660.624420][ T1291] bond0 (unregistering): Released all slaves [ 660.706972][T12713] hsr_slave_0: entered promiscuous mode [ 660.720571][T12713] hsr_slave_1: entered promiscuous mode [ 660.727751][T12713] debugfs: 'hsr0' already exists in 'hsr' [ 660.727787][T12713] Cannot create hsr debugfs directory [ 661.033185][ T5914] get_1284_register timeout [ 661.033254][ T5914] uss720 4-1:0.125: probe with driver uss720 failed with error -5 [ 661.033352][ C0] usb 4-1: async_complete: urb error -104 [ 661.033471][ C0] usb 4-1: async_complete: urb error -104 [ 663.923562][T12883] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 663.923747][T12883] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 664.340601][ T5893] usb 4-1: USB disconnect, device number 15 [ 664.526946][ T1291] hsr_slave_0: left promiscuous mode [ 664.567242][ T1291] hsr_slave_1: left promiscuous mode [ 664.580043][ T1291] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 664.580193][ T1291] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 664.617833][ T1291] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 664.617864][ T1291] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 664.944634][ T1291] veth1_macvtap: left promiscuous mode [ 664.944985][ T1291] veth0_macvtap: left promiscuous mode [ 664.945304][ T1291] veth1_vlan: left promiscuous mode [ 664.945653][ T1291] veth0_vlan: left promiscuous mode [ 665.479212][T12913] netlink: 'syz.4.2952': attribute type 4 has an invalid length. [ 669.817163][ T1291] team0 (unregistering): Port device team_slave_1 removed [ 671.393634][T12959] binder: 12958:12959 unknown command 0 [ 671.393669][T12959] binder: 12958:12959 ioctl c0306201 200000000080 returned -22 [ 671.395812][ T1291] team0 (unregistering): Port device team_slave_0 removed [ 676.944162][ T31] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 677.312183][T12999] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 677.312375][T12999] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 677.407465][ T31] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 677.407502][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 677.407531][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 677.407555][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 677.407602][ T31] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 677.407627][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.431193][ T31] usb 4-1: config 0 descriptor?? [ 677.932674][ T31] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 678.534942][ T31] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 678.721147][ T31] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 678.721181][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.721202][ T31] usb 5-1: Product: syz [ 678.721217][ T31] usb 5-1: Manufacturer: syz [ 678.721232][ T31] usb 5-1: SerialNumber: syz [ 679.104375][ T31] rtl8150 5-1:1.0: couldn't reset the device [ 679.104902][ T31] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 679.240653][ T31] usb 5-1: USB disconnect, device number 10 [ 679.382152][T13030] netlink: 'syz.1.2987': attribute type 4 has an invalid length. [ 679.456292][ T5892] usb 4-1: reset high-speed USB device number 16 using dummy_hcd [ 680.177333][T12713] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 681.273729][ T5987] usb 4-1: USB disconnect, device number 16 [ 681.560400][T12713] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 681.816713][T13060] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 681.816895][T13060] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 682.010516][T12713] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 682.136055][T12713] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 682.832225][T12713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 682.980280][T12713] 8021q: adding VLAN 0 to HW filter on device team0 [ 683.020054][ T3505] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.020310][ T3505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 683.090241][ T1180] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.090474][ T1180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 684.016480][ T5893] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 684.205245][ T5893] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 684.205281][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 684.205309][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 684.205332][ T5893] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 684.205392][ T5893] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 684.205418][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.295416][ T5893] usb 2-1: config 0 descriptor?? [ 684.394513][T13116] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3005'. [ 684.792072][ T5893] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 685.181692][T13127] netlink: 'syz.3.3009': attribute type 4 has an invalid length. [ 685.741586][T13133] binder: 13132:13133 ioctl 4018620d 0 returned -22 [ 686.087928][T13116] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 686.124484][ T5893] usb 2-1: reset high-speed USB device number 21 using dummy_hcd [ 686.177086][T13116] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 686.247510][T13116] bond0 (unregistering): Released all slaves [ 686.639735][T12713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 686.774396][ T5892] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 686.925080][ T5892] usb 3-1: Using ep0 maxpacket: 16 [ 686.932625][ T5892] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 686.932655][ T5892] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 686.932676][ T5892] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 686.932697][ T5892] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 686.932717][ T5892] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 686.932739][ T5892] usb 3-1: config 0 has no interface number 0 [ 686.932789][ T5892] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 686.932818][ T5892] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 686.932842][ T5892] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 686.932880][ T5892] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 686.932909][ T5892] usb 3-1: config 0 interface 125 has no altsetting 0 [ 686.932928][ T5892] usb 3-1: config 0 interface 125 has no altsetting 2 [ 686.943609][ T5892] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 686.943645][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.943670][ T5892] usb 3-1: Product: syz [ 686.943686][ T5892] usb 3-1: Manufacturer: syz [ 686.943703][ T5892] usb 3-1: SerialNumber: syz [ 686.954204][ T5892] usb 3-1: config 0 descriptor?? [ 687.014908][ T5892] usb 3-1: selecting invalid altsetting 2 [ 687.573695][T12713] veth0_vlan: entered promiscuous mode [ 687.710882][T12713] veth1_vlan: entered promiscuous mode [ 687.794949][ T5914] usb 2-1: USB disconnect, device number 21 [ 688.188897][ T5892] get_1284_register timeout [ 688.188971][ T5892] uss720 3-1:0.125: probe with driver uss720 failed with error -5 [ 688.189065][ C1] usb 3-1: async_complete: urb error -104 [ 688.189158][ C1] usb 3-1: async_complete: urb error -104 [ 688.189220][ C1] usb 3-1: async_complete: urb error -104 [ 688.290964][T12713] veth0_macvtap: entered promiscuous mode [ 688.317957][T12713] veth1_macvtap: entered promiscuous mode [ 688.397648][T12713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 688.576410][T12713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 688.765456][ T1180] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.775875][T13163] binder: 13160:13163 ioctl 4018620d 0 returned -22 [ 688.782017][T13163] binder: 13160:13163 unknown command 0 [ 688.782052][T13163] binder: 13160:13163 ioctl c0306201 200000000080 returned -22 [ 688.805849][ T1180] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.828170][ T1180] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.828483][ T1180] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.571948][ T1291] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 689.571974][ T1291] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 689.782980][ T1291] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 689.783007][ T1291] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 691.105085][T11124] usb 3-1: USB disconnect, device number 13 [ 691.138738][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.138846][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.204268][T13190] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3031'. [ 691.731773][T13197] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3033'. [ 692.108064][ T5815] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 692.113457][ T5815] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 692.115713][ T5815] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 692.117595][ T5815] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 692.118642][ T5815] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 693.224659][T10274] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 693.279956][ T1102] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.377828][T10274] usb 2-1: Using ep0 maxpacket: 16 [ 693.390381][T10274] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 693.390408][T10274] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 693.390428][T10274] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 693.422402][T10274] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 693.422435][T10274] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.422456][T10274] usb 2-1: Product: syz [ 693.422471][T10274] usb 2-1: Manufacturer: syz [ 693.422486][T10274] usb 2-1: SerialNumber: syz [ 693.752687][ T1102] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.909089][T10274] usb 2-1: 0:2 : does not exist [ 694.189272][ T1102] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.257684][ T61] Bluetooth: hci2: command tx timeout [ 694.341890][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 694.344636][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 694.345249][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 694.352470][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 694.363283][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 694.366907][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 694.394571][T10274] usb 2-1: 1:0: cannot get min/max values for control 4 (id 1) [ 694.491730][T10274] usb 2-1: USB disconnect, device number 22 [ 694.631099][T12990] udevd[12990]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 694.695214][ T1102] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.132981][T13226] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3044'. [ 695.419070][T13232] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3041'. [ 695.765272][T13200] chnl_net:caif_netlink_parms(): no params data found [ 695.827603][ T1102] gretap0: left allmulticast mode [ 695.827633][ T1102] gretap0: left promiscuous mode [ 695.830891][ T1102] bridge0: port 3(gretap0) entered disabled state [ 696.026926][ T1102] bridge_slave_1: left allmulticast mode [ 696.026957][ T1102] bridge_slave_1: left promiscuous mode [ 696.027235][ T1102] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.165820][ T1102] bridge_slave_0: left allmulticast mode [ 696.165852][ T1102] bridge_slave_0: left promiscuous mode [ 696.166132][ T1102] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.334275][ T61] Bluetooth: hci2: command tx timeout [ 697.402047][T13271] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3055'. [ 697.718063][T13274] netlink: 'syz.0.3056': attribute type 4 has an invalid length. [ 698.414159][ T61] Bluetooth: hci2: command tx timeout [ 699.018470][ T1102] bridge0 (unregistering): left allmulticast mode [ 699.171204][T13295] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3065'. [ 700.496058][ T61] Bluetooth: hci2: command tx timeout [ 700.556152][ T1102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 700.622244][ T1102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 700.643320][ T1102] bond0 (unregistering): Released all slaves [ 702.800774][T13200] bridge0: port 1(bridge_slave_0) entered blocking state [ 702.800922][T13200] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.801223][T13200] bridge_slave_0: entered allmulticast mode [ 702.810130][T13200] bridge_slave_0: entered promiscuous mode [ 702.834333][T13200] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.834561][T13200] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.834837][T13200] bridge_slave_1: entered allmulticast mode [ 702.864351][T13200] bridge_slave_1: entered promiscuous mode [ 703.062466][T13349] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3087'. [ 703.380714][T13200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 703.823579][ T1102] hsr_slave_0: left promiscuous mode [ 703.844222][ T1102] hsr_slave_1: left promiscuous mode [ 703.845414][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 703.845442][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 703.871889][T13354] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 703.872082][T13354] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 703.909369][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 703.909400][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 704.071791][ T1102] veth1_macvtap: left promiscuous mode [ 704.071909][ T1102] veth0_macvtap: left promiscuous mode [ 704.072216][ T1102] veth1_vlan: left promiscuous mode [ 704.072420][ T1102] veth0_vlan: left promiscuous mode [ 705.948763][ T5892] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 706.129613][ T5892] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 706.129651][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 706.129679][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 706.129702][ T5892] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 706.129748][ T5892] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 706.129779][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.141383][ T5892] usb 3-1: config 0 descriptor?? [ 706.660313][ T5892] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 708.004130][ T5892] usb 3-1: reset high-speed USB device number 14 using dummy_hcd [ 708.213474][ T1102] team0 (unregistering): Port device team_slave_1 removed [ 708.679605][ T1102] team0 (unregistering): Port device team_slave_0 removed [ 709.545118][T11124] usb 3-1: USB disconnect, device number 14 [ 712.440829][T13200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 712.469999][T13391] bond_slave_1: entered promiscuous mode [ 712.549965][T13391] bond_slave_1: left promiscuous mode [ 712.560036][T13379] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 712.560340][T13379] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 712.560531][T13379] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 712.560729][T13379] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 712.560837][T13379] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 712.814812][T13379] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 712.912295][T13379] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 712.912445][T13379] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 713.041425][T13379] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 713.255731][T13200] team0: Port device team_slave_0 added [ 713.280777][T13200] team0: Port device team_slave_1 added [ 713.768842][T13200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 713.768861][T13200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 713.768890][T13200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 713.831837][T13200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 713.831857][T13200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 713.831885][T13200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 714.352369][T13200] hsr_slave_0: entered promiscuous mode [ 714.353822][T13200] hsr_slave_1: entered promiscuous mode [ 714.602929][ T5815] Bluetooth: hci4: command 0x0406 tx timeout [ 714.602959][ T61] Bluetooth: hci1: command 0x0406 tx timeout [ 714.602974][ T5815] Bluetooth: hci5: command 0x0c1a tx timeout [ 714.602994][ T61] Bluetooth: hci0: command 0x0406 tx timeout [ 714.707900][T13443] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3121'. [ 714.974180][ T5124] Bluetooth: hci2: command 0x0c1a tx timeout [ 715.111504][T13455] binder: 13454:13455 ioctl c0306201 0 returned -14 [ 716.654252][ T5124] Bluetooth: hci5: command 0x0c1a tx timeout [ 717.069164][ T5124] Bluetooth: hci2: command 0x0c1a tx timeout [ 718.304110][ T5893] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 718.469891][ T5893] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 718.469924][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.469944][ T5893] usb 3-1: Product: syz [ 718.469960][ T5893] usb 3-1: Manufacturer: syz [ 718.469974][ T5893] usb 3-1: SerialNumber: syz [ 718.518844][T13200] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 718.549257][T13200] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 718.601310][T13200] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 718.673134][T13200] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 718.734098][ T5124] Bluetooth: hci5: command 0x0c1a tx timeout [ 719.002324][ T5893] rtl8150 3-1:1.0: couldn't reset the device [ 719.002715][ T5893] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 719.072560][ T5893] usb 3-1: USB disconnect, device number 15 [ 719.134265][ T5124] Bluetooth: hci2: command 0x0c1a tx timeout [ 719.357331][T13200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 719.441841][T13200] 8021q: adding VLAN 0 to HW filter on device team0 [ 719.483099][ T1180] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.491512][ T1180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 719.561476][ T1180] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.561626][ T1180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 720.584779][T13200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 720.842093][T13200] veth0_vlan: entered promiscuous mode [ 720.908376][T13200] veth1_vlan: entered promiscuous mode [ 721.076397][T13200] veth0_macvtap: entered promiscuous mode [ 721.108696][T13200] veth1_macvtap: entered promiscuous mode [ 721.261247][T13200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 721.326375][T13200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 721.359107][ T3467] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.374438][ T3467] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.375205][ T3467] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.377702][ T3467] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.898489][ T1180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 721.898512][ T1180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 722.177555][ T1180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 722.177579][ T1180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 724.836013][ T5815] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 724.839150][ T5815] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 724.840370][ T5815] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 724.841861][ T5815] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 724.843052][ T5815] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 725.485537][ T5985] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 725.636643][ T5985] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 725.636679][ T5985] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 725.636706][ T5985] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 725.636730][ T5985] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 725.636783][ T5985] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 725.636807][ T5985] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.716419][ T5985] usb 3-1: config 0 descriptor?? [ 726.182987][ T5985] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 726.562683][T13643] pim6reg: entered allmulticast mode [ 726.977402][ T5124] Bluetooth: hci3: command tx timeout [ 727.079345][T12613] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.622182][ T5985] usb 3-1: reset high-speed USB device number 16 using dummy_hcd [ 727.737130][T12613] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.546469][T12613] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.946485][ C0] vkms_vblank_simulate: vblank timer overrun [ 729.020806][T12613] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.054128][ T5124] Bluetooth: hci3: command tx timeout [ 729.097270][ T5892] usb 3-1: USB disconnect, device number 16 [ 729.253658][T13699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3190'. [ 729.514268][ T5985] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 729.902139][ T5985] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 729.902226][ T5985] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 729.902254][ T5985] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 729.902278][ T5985] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 729.902325][ T5985] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 729.902350][ T5985] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.127884][ T5985] usb 4-1: config 0 descriptor?? [ 730.678399][ T5985] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 730.943452][T13620] chnl_net:caif_netlink_parms(): no params data found [ 731.134214][ T5124] Bluetooth: hci3: command tx timeout [ 732.024146][T10274] usb 4-1: reset high-speed USB device number 17 using dummy_hcd [ 732.364119][ C0] vkms_vblank_simulate: vblank timer overrun [ 732.864125][ C0] vkms_vblank_simulate: vblank timer overrun [ 733.150245][ T5914] usb 4-1: USB disconnect, device number 17 [ 733.214248][ T5124] Bluetooth: hci3: command tx timeout [ 733.777160][T13717] IPv6: sit1: Disabled Multicast RS [ 733.778831][T13717] sit1: entered allmulticast mode [ 734.064459][T12613] rxrpc: Call ffff88814e095780 still in use (1,Complete,1409,0)! [ 734.727463][T13620] bridge0: port 1(bridge_slave_0) entered blocking state [ 734.728076][T13620] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.728320][T13620] bridge_slave_0: entered allmulticast mode [ 734.731255][T13620] bridge_slave_0: entered promiscuous mode [ 734.777123][T13620] bridge0: port 2(bridge_slave_1) entered blocking state [ 734.777267][T13620] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.777519][T13620] bridge_slave_1: entered allmulticast mode [ 734.785194][T13620] bridge_slave_1: entered promiscuous mode [ 734.964101][ T5872] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 735.110900][T13780] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3218'. [ 735.161224][ T5872] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 735.161249][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 735.161268][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 735.161285][ T5872] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 735.161317][ T5872] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 735.161333][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.403702][ T5872] usb 4-1: config 0 descriptor?? [ 736.028694][ T5872] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 736.928158][T13780] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 737.095485][T13780] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 737.181509][T13780] bond0 (unregistering): Released all slaves [ 737.314246][ T5985] usb 4-1: reset high-speed USB device number 18 using dummy_hcd [ 737.376258][T13620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 737.427194][T13620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 738.210136][T13620] team0: Port device team_slave_0 added [ 738.235796][T13620] team0: Port device team_slave_1 added [ 738.434320][T13829] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3240'. [ 738.658087][ T5892] usb 4-1: USB disconnect, device number 18 [ 738.867220][T13620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 738.867240][T13620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 738.867270][T13620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 738.923776][T13620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 738.923796][T13620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 738.923827][T13620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 739.380493][T13620] hsr_slave_0: entered promiscuous mode [ 739.385150][T13620] hsr_slave_1: entered promiscuous mode [ 739.386363][T13620] debugfs: 'hsr0' already exists in 'hsr' [ 739.386393][T13620] Cannot create hsr debugfs directory [ 739.464191][ T5892] usb 3-1: new low-speed USB device number 17 using dummy_hcd [ 739.641849][ T5892] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 739.641879][ T5892] usb 3-1: config 0 has no interface number 0 [ 739.641930][ T5892] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 739.641959][ T5892] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 739.642000][ T5892] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 739.642023][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.715978][ T5892] usb 3-1: config 0 descriptor?? [ 739.736316][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 739.782079][ T5892] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 739.894389][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 739.894424][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 739.894451][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 739.894473][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 739.894518][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 739.894543][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.936964][ T9] usb 4-1: config 0 descriptor?? [ 740.031781][T13849] iowarrior 3-1:0.1: Error -90 while submitting URB [ 740.050719][ T5892] usb 3-1: USB disconnect, device number 17 [ 740.256695][T13866] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3252'. [ 740.440976][ T9] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 741.231298][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 741.408005][ T9] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 741.408036][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.408056][ T9] usb 3-1: Product: syz [ 741.408071][ T9] usb 3-1: Manufacturer: syz [ 741.408086][ T9] usb 3-1: SerialNumber: syz [ 741.845105][ T5872] usb 4-1: reset high-speed USB device number 19 using dummy_hcd [ 742.163591][ T9] rtl8150 3-1:1.0: couldn't reset the device [ 742.166253][ T9] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 742.379620][ T9] usb 3-1: USB disconnect, device number 18 [ 743.420245][ T5914] usb 4-1: USB disconnect, device number 19 [ 743.750545][T13620] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 743.752141][T13939] fuse: Bad value for 'rootmode' [ 743.895879][T13620] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 744.043737][T13620] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 744.133872][T13620] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 744.264285][ T5985] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 744.507612][ T5985] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 744.507649][ T5985] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.507673][ T5985] usb 2-1: Product: syz [ 744.507688][ T5985] usb 2-1: Manufacturer: syz [ 744.507702][ T5985] usb 2-1: SerialNumber: syz [ 744.742316][T13620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 744.967504][T13620] 8021q: adding VLAN 0 to HW filter on device team0 [ 745.056692][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.056838][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 745.081882][ T5985] rtl8150 2-1:1.0: couldn't reset the device [ 745.082272][ T5985] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 745.107678][ T5985] usb 2-1: USB disconnect, device number 23 [ 745.330185][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.330364][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 745.876221][ T5985] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 746.072221][ T5985] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 746.072254][ T5985] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.072277][ T5985] usb 4-1: Product: syz [ 746.072292][ T5985] usb 4-1: Manufacturer: syz [ 746.072308][ T5985] usb 4-1: SerialNumber: syz [ 746.487363][ T5985] rtl8150 4-1:1.0: couldn't reset the device [ 746.487746][ T5985] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 746.531539][T13620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 746.548223][ T5985] usb 4-1: USB disconnect, device number 20 [ 747.936038][T13620] veth0_vlan: entered promiscuous mode [ 748.003005][T13620] veth1_vlan: entered promiscuous mode [ 748.291809][T13620] veth0_macvtap: entered promiscuous mode [ 748.315840][T14028] fuse: Unknown parameter 'rootmode™ÅÁ cß' [ 748.342636][T13620] veth1_macvtap: entered promiscuous mode [ 748.392748][T13620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 748.459633][T13620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 748.599860][ T3505] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.665351][ T3505] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.720050][ T1291] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.742413][ T1291] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.104895][ T5985] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 749.291761][ T5985] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 749.291801][ T5985] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.291823][ T5985] usb 4-1: Product: syz [ 749.291837][ T5985] usb 4-1: Manufacturer: syz [ 749.291852][ T5985] usb 4-1: SerialNumber: syz [ 749.780196][ T3622] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 749.780284][ T3622] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 749.870535][ T5985] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 749.870601][ T5985] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 750.304348][ T3505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 750.304827][ T3505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 750.470812][T14049] binder: 14047:14049 ioctl c0306201 0 returned -14 [ 751.300904][ T5985] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPIPE [ 751.514233][ T5985] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -EPROTO [ 751.516347][ T5985] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 751.516409][ T5985] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 751.518128][ T5985] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 751.583599][ T5985] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 751.602346][ T5985] usb 4-1: USB disconnect, device number 21 [ 752.581432][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.581510][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.873787][ T5815] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 752.891939][ T5815] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 752.904638][ T5815] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 752.924216][ T5815] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 752.937629][ T5815] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 754.572943][T14104] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3324'. [ 755.054618][ T5124] Bluetooth: hci4: command tx timeout [ 755.963648][T14087] chnl_net:caif_netlink_parms(): no params data found [ 756.455665][T14137] fuse: Bad value for 'rootmode' [ 757.037312][T14087] bridge0: port 1(bridge_slave_0) entered blocking state [ 757.041253][T14087] bridge0: port 1(bridge_slave_0) entered disabled state [ 757.041547][T14087] bridge_slave_0: entered allmulticast mode [ 757.075550][T14087] bridge_slave_0: entered promiscuous mode [ 757.092221][T14087] bridge0: port 2(bridge_slave_1) entered blocking state [ 757.092479][T14087] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.092729][T14087] bridge_slave_1: entered allmulticast mode [ 757.115722][T14087] bridge_slave_1: entered promiscuous mode [ 757.134234][ T5124] Bluetooth: hci4: command tx timeout [ 757.466227][T14087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 757.513082][T14087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 758.261785][T14087] team0: Port device team_slave_0 added [ 758.296163][T14087] team0: Port device team_slave_1 added [ 758.650904][T14170] fuse: Bad value for 'rootmode' [ 758.796828][T14087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 758.796849][T14087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 758.796888][T14087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 758.859832][T14087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 758.859850][T14087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 758.859889][T14087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 759.084456][ T5985] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 759.214087][ T5124] Bluetooth: hci4: command tx timeout [ 759.223611][T14087] hsr_slave_0: entered promiscuous mode [ 759.234165][ T5985] usb 2-1: Using ep0 maxpacket: 16 [ 759.237094][ T5985] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 759.237125][ T5985] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 759.237149][ T5985] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 759.240509][ T5985] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 759.240543][ T5985] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.240567][ T5985] usb 2-1: Product: syz [ 759.240582][ T5985] usb 2-1: Manufacturer: syz [ 759.240599][ T5985] usb 2-1: SerialNumber: syz [ 759.308047][T14087] hsr_slave_1: entered promiscuous mode [ 759.309075][T14087] debugfs: 'hsr0' already exists in 'hsr' [ 759.309104][T14087] Cannot create hsr debugfs directory [ 759.772851][ T5985] usb 2-1: 0:2 : does not exist [ 760.429197][ T5985] usb 2-1: 1:0: failed to get current value for ch 0 (-22) [ 760.531069][ T5985] usb 2-1: USB disconnect, device number 24 [ 760.676450][T12990] udevd[12990]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 761.181010][T14087] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.294079][ T5124] Bluetooth: hci4: command tx timeout [ 761.415307][T14192] fuse: Bad value for 'rootmode' [ 761.784394][T14087] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.173647][T14087] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.774133][ T5872] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 762.795698][T14087] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.906992][ T5872] usb 5-1: device descriptor read/64, error -71 [ 763.144161][ T5872] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 763.254131][ T5893] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 763.304171][ T5872] usb 5-1: device descriptor read/64, error -71 [ 763.404158][ T5893] usb 2-1: Using ep0 maxpacket: 16 [ 763.408709][ T5893] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 763.408739][ T5893] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 763.408760][ T5893] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 763.408790][ T5893] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 763.408810][ T5893] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 763.408832][ T5893] usb 2-1: config 0 has no interface number 0 [ 763.408882][ T5893] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 763.408910][ T5893] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 763.408934][ T5893] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 763.408972][ T5893] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 763.409000][ T5893] usb 2-1: config 0 interface 125 has no altsetting 0 [ 763.409019][ T5893] usb 2-1: config 0 interface 125 has no altsetting 2 [ 763.412514][ T5893] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 763.412544][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.412563][ T5893] usb 2-1: Product: syz [ 763.412576][ T5893] usb 2-1: Manufacturer: syz [ 763.412590][ T5893] usb 2-1: SerialNumber: syz [ 763.419704][ T5872] usb usb5-port1: attempt power cycle [ 763.602371][ T5893] usb 2-1: config 0 descriptor?? [ 763.628639][T14087] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 763.643835][ T5893] usb 2-1: selecting invalid altsetting 2 [ 763.707632][T14087] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 763.761436][T14087] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 763.774239][ T5872] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 763.795300][ T5872] usb 5-1: device descriptor read/8, error -71 [ 763.900019][T14087] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 764.034229][ T5872] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 764.065223][ T5872] usb 5-1: device descriptor read/8, error -71 [ 764.167558][ C0] usb 2-1: async_complete: urb error -71 [ 764.167671][ C0] usb 2-1: async_complete: urb error -71 [ 764.167798][ C0] usb 2-1: async_complete: urb error -71 [ 764.191770][ T5893] get_1284_register: usb error -71 [ 764.191913][ T5893] uss720 2-1:0.125: probe with driver uss720 failed with error -71 [ 764.199295][ T5872] usb usb5-port1: unable to enumerate USB device [ 764.255149][ T5893] usb 2-1: USB disconnect, device number 25 [ 764.398354][T14087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 764.450572][T14087] 8021q: adding VLAN 0 to HW filter on device team0 [ 764.467043][ T3622] bridge0: port 1(bridge_slave_0) entered blocking state [ 764.467304][ T3622] bridge0: port 1(bridge_slave_0) entered forwarding state [ 764.504177][ T3467] bridge0: port 2(bridge_slave_1) entered blocking state [ 764.504425][ T3467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 765.185761][T14087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 765.297431][T14087] veth0_vlan: entered promiscuous mode [ 765.347909][T14087] veth1_vlan: entered promiscuous mode [ 765.458218][T14087] veth0_macvtap: entered promiscuous mode [ 765.487420][T14087] veth1_macvtap: entered promiscuous mode [ 765.619392][T14087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 765.660810][T14087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 765.686774][ T3467] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.687020][ T3505] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.687227][ T3467] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.710921][ T3505] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.769444][T14255] fuse: Bad value for 'rootmode' [ 766.525795][ T1180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 766.525821][ T1180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 766.634126][T11124] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 766.764630][ T1102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 766.764654][ T1102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 766.794169][T11124] usb 4-1: Using ep0 maxpacket: 8 [ 766.809759][T11124] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 766.809790][T11124] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 766.809815][T11124] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 766.809839][T11124] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 766.809884][T11124] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 766.809908][T11124] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.074358][T14288] fuse: Bad value for 'rootmode' [ 767.086083][T14286] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3395'. [ 767.111433][T11124] usb 4-1: GET_CAPABILITIES returned 0 [ 767.111485][T11124] usbtmc 4-1:16.0: can't read capabilities [ 767.213811][T14290] binder: 14289:14290 unknown command 0 [ 767.213836][T14290] binder: 14289:14290 ioctl c0306201 200000000080 returned -22 [ 767.344202][ T5893] usb 4-1: USB disconnect, device number 22 [ 768.435792][ T5815] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 768.441715][ T5815] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 768.463806][ T5815] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 768.478619][ T5815] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 768.480081][ T5815] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 769.903185][T14321] chnl_net:caif_netlink_parms(): no params data found [ 770.235782][T14382] binder: 14379:14382 ioctl c0306201 0 returned -14 [ 770.363879][T14386] fuse: Bad value for 'rootmode' [ 770.574629][ T5124] Bluetooth: hci1: command tx timeout [ 770.835466][T14321] bridge0: port 1(bridge_slave_0) entered blocking state [ 770.835710][T14321] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.835974][T14321] bridge_slave_0: entered allmulticast mode [ 770.903102][T14321] bridge_slave_0: entered promiscuous mode [ 770.944305][T14321] bridge0: port 2(bridge_slave_1) entered blocking state [ 770.944446][T14321] bridge0: port 2(bridge_slave_1) entered disabled state [ 770.944724][T14321] bridge_slave_1: entered allmulticast mode [ 770.964500][T14321] bridge_slave_1: entered promiscuous mode [ 771.600934][T14321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 771.628589][T14321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 772.307980][T14321] team0: Port device team_slave_0 added [ 772.324131][T11124] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 772.358095][T14321] team0: Port device team_slave_1 added [ 772.375773][T14415] binder: 14414:14415 ioctl c0306201 0 returned -14 [ 772.530160][T11124] usb 5-1: config index 0 descriptor too short (expected 60690, got 18) [ 772.530192][T11124] usb 5-1: config 15 has too many interfaces: 102, using maximum allowed: 32 [ 772.530213][T11124] usb 5-1: config 15 has an invalid descriptor of length 224, skipping remainder of the config [ 772.530233][T11124] usb 5-1: config 15 has 0 interfaces, different from the descriptor's value: 102 [ 772.530275][T11124] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 772.530299][T11124] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.654981][ T5124] Bluetooth: hci1: command tx timeout [ 773.075167][T14321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 773.075188][T14321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 773.075217][T14321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 773.095456][T14321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 773.095477][T14321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 773.095507][T14321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 773.848508][T14321] hsr_slave_0: entered promiscuous mode [ 773.875637][T14321] hsr_slave_1: entered promiscuous mode [ 773.878490][T14321] debugfs: 'hsr0' already exists in 'hsr' [ 773.878524][T14321] Cannot create hsr debugfs directory [ 774.734398][ T5124] Bluetooth: hci1: command tx timeout [ 776.272159][T14321] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.554845][ T5985] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 776.714180][ T5985] usb 4-1: Using ep0 maxpacket: 16 [ 776.721533][ T5985] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 776.721557][ T5985] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 776.721572][ T5985] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 776.721587][ T5985] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 776.721602][ T5985] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 776.722115][ T5985] usb 4-1: config 0 has no interface number 0 [ 776.722153][ T5985] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 776.722173][ T5985] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 776.722189][ T5985] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 776.722215][ T5985] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 776.722752][ T5985] usb 4-1: config 0 interface 125 has no altsetting 0 [ 776.722768][ T5985] usb 4-1: config 0 interface 125 has no altsetting 2 [ 776.814374][ T5124] Bluetooth: hci1: command tx timeout [ 776.893514][ T5985] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 776.893537][ T5985] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.893551][ T5985] usb 4-1: Product: syz [ 776.893562][ T5985] usb 4-1: Manufacturer: syz [ 776.893573][ T5985] usb 4-1: SerialNumber: syz [ 776.982931][ T5985] usb 4-1: config 0 descriptor?? [ 777.051432][ T5985] usb 4-1: selecting invalid altsetting 2 [ 777.082351][T14321] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.380853][T14437] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3456'. [ 777.485743][ C1] usb 4-1: async_complete: urb error -71 [ 777.485856][ C1] usb 4-1: async_complete: urb error -71 [ 777.485950][ C1] usb 4-1: async_complete: urb error -71 [ 777.491590][ T5985] get_1284_register: usb error -71 [ 777.492436][ T5985] uss720 4-1:0.125: probe with driver uss720 failed with error -71 [ 777.729975][T11124] usb 5-1: string descriptor 0 read error: -32 [ 777.770223][ T5985] usb 4-1: USB disconnect, device number 23 [ 777.888193][T14321] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.466091][ T5893] usb 5-1: USB disconnect, device number 15 [ 778.688228][T14321] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.365111][T14461] fuse: Bad value for 'rootmode' [ 779.852638][T14321] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 779.985706][T14321] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 780.081318][T14321] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 780.294478][T14321] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 780.889515][T14321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 780.971030][T14321] 8021q: adding VLAN 0 to HW filter on device team0 [ 781.045871][ T3505] bridge0: port 1(bridge_slave_0) entered blocking state [ 781.045976][ T3505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 781.049489][ T3505] bridge0: port 2(bridge_slave_1) entered blocking state [ 781.060331][ T3505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 782.645148][T14321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 782.970365][T14321] veth0_vlan: entered promiscuous mode [ 783.009118][T14321] veth1_vlan: entered promiscuous mode [ 783.192682][T14321] veth0_macvtap: entered promiscuous mode [ 783.228319][T14321] veth1_macvtap: entered promiscuous mode [ 783.266164][T14321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 783.289665][T14321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 783.334111][ T3505] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.334172][ T3505] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.334212][ T3505] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.334250][ T3505] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.337653][T14499] binder: 14498:14499 unknown command 0 [ 783.337674][T14499] binder: 14498:14499 ioctl c0306201 200000000080 returned -22 [ 783.975827][T14511] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3480'. [ 786.813211][T14511] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 786.890989][T14511] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 786.939985][T14511] bond0 (unregistering): Released all slaves [ 787.177677][ T1180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 787.177700][ T1180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 787.434423][ T1180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 787.434449][ T1180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 788.064116][ T5872] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 788.252488][ T5872] usb 1-1: config index 0 descriptor too short (expected 60690, got 18) [ 788.252518][ T5872] usb 1-1: config 15 has too many interfaces: 102, using maximum allowed: 32 [ 788.252539][ T5872] usb 1-1: config 15 has an invalid descriptor of length 224, skipping remainder of the config [ 788.252558][ T5872] usb 1-1: config 15 has 0 interfaces, different from the descriptor's value: 102 [ 788.252605][ T5872] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 788.252628][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.407889][T14557] syz_tun: entered promiscuous mode [ 789.413198][T14557] macsec1: entered allmulticast mode [ 789.413222][T14557] syz_tun: entered allmulticast mode [ 789.466764][T14557] syz_tun: left allmulticast mode [ 789.466971][T14557] syz_tun: left promiscuous mode [ 793.377928][ T5872] usb 1-1: string descriptor 0 read error: -32 [ 793.913108][ T5892] usb 1-1: USB disconnect, device number 24 [ 794.682648][T14593] binder: 14592:14593 unknown command 0 [ 794.682665][T14593] binder: 14592:14593 ioctl c0306201 200000000080 returned -22 [ 794.794188][T10274] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 794.944219][T10274] usb 2-1: Using ep0 maxpacket: 16 [ 794.947295][T10274] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 794.947319][T10274] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 794.947334][T10274] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 794.947349][T10274] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 794.947363][T10274] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 794.947378][T10274] usb 2-1: config 0 has no interface number 0 [ 794.947415][T10274] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 794.947436][T10274] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 794.947452][T10274] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 794.947480][T10274] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 794.947500][T10274] usb 2-1: config 0 interface 125 has no altsetting 0 [ 794.947513][T10274] usb 2-1: config 0 interface 125 has no altsetting 2 [ 794.950599][T10274] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 794.950635][T10274] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.950659][T10274] usb 2-1: Product: syz [ 794.950675][T10274] usb 2-1: Manufacturer: syz [ 794.950691][T10274] usb 2-1: SerialNumber: syz [ 794.983721][T10274] usb 2-1: config 0 descriptor?? [ 795.177224][T10274] usb 2-1: selecting invalid altsetting 2 [ 796.259080][T10274] get_1284_register timeout [ 796.259124][T10274] uss720 2-1:0.125: probe with driver uss720 failed with error -5 [ 796.259245][ C0] usb 2-1: async_complete: urb error -104 [ 799.874310][ T5872] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 800.035801][ T5872] usb 5-1: config index 0 descriptor too short (expected 60690, got 18) [ 800.035831][ T5872] usb 5-1: config 15 has too many interfaces: 102, using maximum allowed: 32 [ 800.035852][ T5872] usb 5-1: config 15 has an invalid descriptor of length 224, skipping remainder of the config [ 800.035871][ T5872] usb 5-1: config 15 has 0 interfaces, different from the descriptor's value: 102 [ 800.035910][ T5872] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 800.035934][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.638396][ T9] usb 2-1: USB disconnect, device number 26 [ 802.679248][ T5872] usb 5-1: string descriptor 0 read error: -71 [ 802.790148][ T5872] usb 5-1: USB disconnect, device number 16 [ 804.074138][ T5892] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 804.253293][ T5892] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 804.253333][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 804.253359][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 804.253382][ T5892] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 804.253427][ T5892] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 804.253451][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.335917][ T5892] usb 4-1: config 0 descriptor?? [ 804.344193][ T5872] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 804.494186][ T5872] usb 1-1: Using ep0 maxpacket: 16 [ 804.497067][ T5872] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 804.497094][ T5872] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 804.497114][ T5872] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 804.522717][ T5872] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 804.522754][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.522777][ T5872] usb 1-1: Product: syz [ 804.522795][ T5872] usb 1-1: Manufacturer: syz [ 804.522812][ T5872] usb 1-1: SerialNumber: syz [ 805.034342][ T5892] usbhid 4-1:0.0: can't add hid device: -71 [ 805.034497][ T5892] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 805.040723][ T5872] usb 1-1: 0:2 : does not exist [ 805.079868][ T5892] usb 4-1: USB disconnect, device number 24 [ 806.146509][ T5872] usb 1-1: 1:0: failed to get current value for ch 0 (-22) [ 806.276293][ T5872] usb 1-1: USB disconnect, device number 25 [ 806.330000][T14577] udevd[14577]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 808.934303][T11124] usb 4-1: new low-speed USB device number 25 using dummy_hcd [ 809.097951][T11124] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 809.097980][T11124] usb 4-1: config 0 has no interface number 0 [ 809.098031][T11124] usb 4-1: config 0 interface 1 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 809.098069][T11124] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 809.098093][T11124] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.150487][T11124] usb 4-1: config 0 descriptor?? [ 809.168475][T11124] iowarrior 4-1:0.1: no interrupt-in endpoint found [ 809.216149][T14762] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3570'. [ 809.216178][T14762] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 809.373484][ T190] usb 4-1: USB disconnect, device number 25 [ 814.026093][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.026172][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 818.470206][T14863] sctp: [Deprecated]: syz.3.3612 (pid 14863) Use of int in maxseg socket option. [ 818.470206][T14863] Use struct sctp_assoc_value instead [ 821.034115][ T5872] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 821.065729][T14946] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3643'. [ 821.235000][ T5872] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 821.235032][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.235053][ T5872] usb 4-1: Product: syz [ 821.235074][ T5872] usb 4-1: Manufacturer: syz [ 821.235089][ T5872] usb 4-1: SerialNumber: syz [ 821.277591][ T5872] usb 4-1: config 0 descriptor?? [ 821.499618][ T5872] cx82310_eth 4-1:0.0: probe with driver cx82310_eth failed with error -22 [ 821.930294][ T5872] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 822.134075][ T9] usb 4-1: USB disconnect, device number 26 [ 822.278755][T14958] binder: 14957:14958 ioctl c0306201 0 returned -14 [ 822.586378][ T31] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 822.760856][ T31] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 822.760886][ T31] usb 5-1: config 0 has no interfaces? [ 822.760919][ T31] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 822.760944][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.784685][ T31] usb 5-1: config 0 descriptor?? [ 823.288610][T14971] netlink: 'syz.3.3656': attribute type 4 has an invalid length. [ 825.424175][ T5892] usb 2-1: new low-speed USB device number 27 using dummy_hcd [ 825.576609][ T5892] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 825.576639][ T5892] usb 2-1: config 0 has no interface number 0 [ 825.576694][ T5892] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 825.576734][ T5892] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 825.576758][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.582361][ T5892] usb 2-1: config 0 descriptor?? [ 825.664754][ T5892] iowarrior 2-1:0.1: no interrupt-in endpoint found [ 825.889698][ T190] usb 2-1: USB disconnect, device number 27 [ 825.958011][ T9] usb 5-1: USB disconnect, device number 17 [ 826.673735][T15029] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3680'. [ 827.124083][ T5892] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 827.304117][ T5892] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 827.304146][ T5892] usb 5-1: config 0 has no interfaces? [ 827.304179][ T5892] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 827.304202][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.316831][ T5892] usb 5-1: config 0 descriptor?? [ 827.678383][ T5892] usb 1-1: new low-speed USB device number 26 using dummy_hcd [ 827.937032][ T5892] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 827.937063][ T5892] usb 1-1: config 0 has no interface number 0 [ 827.937139][ T5892] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 827.937182][ T5892] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 827.937205][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.962108][ T5892] usb 1-1: config 0 descriptor?? [ 827.983159][ T5892] iowarrior 1-1:0.1: no interrupt-in endpoint found [ 828.193133][ T190] usb 1-1: USB disconnect, device number 26 [ 828.474101][ T5892] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 828.665536][ T5892] usb 2-1: Using ep0 maxpacket: 16 [ 828.667883][ T5892] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 828.667902][ T5892] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 828.672399][ T5892] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 828.672421][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.672436][ T5892] usb 2-1: Product: syz [ 828.672446][ T5892] usb 2-1: Manufacturer: syz [ 828.672457][ T5892] usb 2-1: SerialNumber: syz [ 829.090865][ T5892] usb 2-1: 0:2 : does not exist [ 829.090969][ T5892] usb 2-1: unit 6 not found! [ 829.175618][ T5892] usb 2-1: USB disconnect, device number 28 [ 829.645892][T14577] udevd[14577]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 830.294119][ T9] usb 5-1: USB disconnect, device number 18 [ 830.332294][T15091] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3706'. [ 830.679045][T15103] binder: 15102:15103 ioctl c0306201 0 returned -14 [ 831.326926][T15116] sctp: [Deprecated]: syz.3.3718 (pid 15116) Use of int in maxseg socket option. [ 831.326926][T15116] Use struct sctp_assoc_value instead [ 832.264562][T15139] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3727'. [ 833.413260][T15173] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3741'. [ 835.256071][ T5893] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 835.263710][T15252] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3776'. [ 835.424704][ T5893] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 835.424753][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.424774][ T5893] usb 1-1: Product: syz [ 835.424790][ T5893] usb 1-1: Manufacturer: syz [ 835.424804][ T5893] usb 1-1: SerialNumber: syz [ 835.833657][ T5893] rtl8150 1-1:1.0: couldn't reset the device [ 835.840629][ T5893] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 835.923847][T15263] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3780'. [ 835.986958][ T5893] usb 1-1: USB disconnect, device number 27 [ 836.217311][T15263] use of bytesused == 0 is deprecated and will be removed in the future, [ 836.217323][T15263] use the actual size instead. [ 837.179795][T15276] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3788'. [ 838.236709][T15290] netlink: 'syz.0.3794': attribute type 4 has an invalid length. [ 838.657191][T15300] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3799'. [ 839.306142][T15321] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3808'. [ 840.114432][ T31] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 840.345019][ T31] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 840.345042][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.345056][ T31] usb 4-1: Product: syz [ 840.345066][ T31] usb 4-1: Manufacturer: syz [ 840.345077][ T31] usb 4-1: SerialNumber: syz [ 840.547285][T15343] netlink: 'syz.1.3809': attribute type 4 has an invalid length. [ 840.684146][ T5892] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 840.703388][ T31] rtl8150 4-1:1.0: couldn't reset the device [ 840.703648][ T31] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 840.786299][ T31] usb 4-1: USB disconnect, device number 27 [ 840.840567][ T5892] usb 1-1: config index 0 descriptor too short (expected 60690, got 18) [ 840.840597][ T5892] usb 1-1: config 15 has too many interfaces: 102, using maximum allowed: 32 [ 840.840618][ T5892] usb 1-1: config 15 has an invalid descriptor of length 224, skipping remainder of the config [ 840.840639][ T5892] usb 1-1: config 15 has 0 interfaces, different from the descriptor's value: 102 [ 840.840678][ T5892] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 840.840703][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.944854][ T5892] usb 1-1: string descriptor 0 read error: -32 [ 846.397928][ T190] usb 1-1: USB disconnect, device number 28 [ 847.434079][ T5892] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 847.594143][ T5892] usb 1-1: Using ep0 maxpacket: 16 [ 847.600018][ T5892] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 847.600050][ T5892] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 847.600072][ T5892] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 847.600092][ T5892] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 847.600115][ T5892] usb 1-1: config 0 has no interface number 0 [ 847.600169][ T5892] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 847.600216][ T5892] usb 1-1: config 0 interface 125 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 847.600245][ T5892] usb 1-1: config 0 interface 125 has no altsetting 0 [ 847.684713][ T5892] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 847.684745][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.684766][ T5892] usb 1-1: Product: syz [ 847.684781][ T5892] usb 1-1: Manufacturer: syz [ 847.684796][ T5892] usb 1-1: SerialNumber: syz [ 847.735733][ T5892] usb 1-1: config 0 descriptor?? [ 850.593598][ T5892] usb 1-1: USB disconnect, device number 29 [ 850.696611][T15505] netlink: 884 bytes leftover after parsing attributes in process `syz.2.3888'. [ 851.497225][ T190] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 851.664326][ T190] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 851.664359][ T190] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.664380][ T190] usb 2-1: Product: syz [ 851.664395][ T190] usb 2-1: Manufacturer: syz [ 851.664410][ T190] usb 2-1: SerialNumber: syz [ 851.680830][ T190] usb 2-1: config 0 descriptor?? [ 851.915156][ T190] usb 2-1: ignoring: probably an ADSL modem [ 851.938757][ T5124] Bluetooth: hci3: command 0x0406 tx timeout [ 852.134927][ T190] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 852.152439][ T190] usb 2-1: USB disconnect, device number 29 [ 853.838855][ T190] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 854.011265][ T190] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 854.011299][ T190] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.011320][ T190] usb 3-1: Product: syz [ 854.011335][ T190] usb 3-1: Manufacturer: syz [ 854.011350][ T190] usb 3-1: SerialNumber: syz [ 854.022209][ T190] usb 3-1: config 0 descriptor?? [ 854.239637][ T190] usb 3-1: ignoring: probably an ADSL modem [ 854.443670][ T190] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 854.504715][ T190] usb 3-1: USB disconnect, device number 19 [ 855.957048][ T5893] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 856.095833][ T190] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 856.117586][ T5893] usb 1-1: Using ep0 maxpacket: 16 [ 856.122800][ T5893] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 856.122831][ T5893] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 856.155699][ T5893] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 856.155729][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.155743][ T5893] usb 1-1: Product: syz [ 856.155754][ T5893] usb 1-1: Manufacturer: syz [ 856.155765][ T5893] usb 1-1: SerialNumber: syz [ 856.264648][ T190] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 856.264715][ T190] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.264730][ T190] usb 2-1: Product: syz [ 856.264741][ T190] usb 2-1: Manufacturer: syz [ 856.264752][ T190] usb 2-1: SerialNumber: syz [ 856.372941][ T5893] usb 1-1: 0:2 : does not exist [ 856.373048][ T5893] usb 1-1: unit 6 not found! [ 856.586745][ T190] rtl8150 2-1:1.0: couldn't reset the device [ 856.587007][ T190] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 856.630899][ T5893] usb 1-1: USB disconnect, device number 30 [ 856.701018][ T190] usb 2-1: USB disconnect, device number 30 [ 857.080462][T15425] udevd[15425]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 857.784157][ T5892] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 857.939596][ T5892] usb 1-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 857.939638][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.939660][ T5892] usb 1-1: Product: syz [ 857.939676][ T5892] usb 1-1: Manufacturer: syz [ 857.939691][ T5892] usb 1-1: SerialNumber: syz [ 857.978138][ T5892] usb 1-1: config 0 descriptor?? [ 858.197699][ T5892] usb 1-1: ignoring: probably an ADSL modem [ 858.401567][ T5892] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 858.434646][ T5892] usb 1-1: USB disconnect, device number 31 [ 860.714184][ T190] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 860.866904][ T190] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 860.866933][ T190] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 860.866973][ T190] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 860.866998][ T190] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.918924][ T190] usb 3-1: config 0 descriptor?? [ 861.301179][ T190] usb 3-1: string descriptor 0 read error: -71 [ 861.335825][ T190] usb 3-1: USB disconnect, device number 20 [ 861.914057][ T5893] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 862.074229][ T5893] usb 4-1: Using ep0 maxpacket: 16 [ 862.076981][ T5893] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 862.077001][ T5893] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 862.079169][ T5893] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 862.079190][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.079204][ T5893] usb 4-1: Product: syz [ 862.079222][ T5893] usb 4-1: Manufacturer: syz [ 862.079232][ T5893] usb 4-1: SerialNumber: syz [ 862.295280][ T5893] usb 4-1: 0:2 : does not exist [ 862.295371][ T5893] usb 4-1: unit 6 not found! [ 862.351630][ T5893] usb 4-1: USB disconnect, device number 28 [ 862.476695][T15425] udevd[15425]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 863.894201][ T5985] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 864.078494][ T5985] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 864.078522][ T5985] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 864.078562][ T5985] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 864.078586][ T5985] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.087131][ T5985] usb 4-1: config 0 descriptor?? [ 864.686345][ T5985] usb 4-1: string descriptor 0 read error: -71 [ 864.691527][ T5985] usb 4-1: USB disconnect, device number 29 [ 866.464072][ T5985] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 866.632104][ T5985] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 866.632136][ T5985] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.632157][ T5985] usb 5-1: Product: syz [ 866.632172][ T5985] usb 5-1: Manufacturer: syz [ 866.632186][ T5985] usb 5-1: SerialNumber: syz [ 866.674097][ T5892] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 866.862817][ T5892] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 866.862845][ T5892] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 866.862941][ T5892] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 866.862973][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.011699][ T5892] usb 2-1: config 0 descriptor?? [ 867.237983][ T5985] rtl8150 5-1:1.0: couldn't reset the device [ 867.240061][ T5985] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 867.435452][ T5892] usb 2-1: string descriptor 0 read error: -71 [ 867.451272][ T5892] usb 2-1: USB disconnect, device number 31 [ 867.453534][ T5985] usb 5-1: USB disconnect, device number 19 [ 868.134116][ T190] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 868.289491][ T190] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 868.289523][ T190] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.289544][ T190] usb 5-1: Product: syz [ 868.289559][ T190] usb 5-1: Manufacturer: syz [ 868.289574][ T190] usb 5-1: SerialNumber: syz [ 868.794508][ T190] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 868.794572][ T190] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 869.084129][ T5985] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 869.240708][ T5985] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 869.240737][ T5985] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 869.240796][ T5985] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 869.240821][ T5985] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.251802][ T5985] usb 2-1: config 0 descriptor?? [ 869.289872][ T5985] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 869.290335][ T5985] dvb-usb: bulk message failed: -22 (3/0) [ 869.346960][ T5985] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 869.365999][ T5985] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 869.366103][ T5985] usb 2-1: media controller created [ 869.371556][ T5985] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 869.476450][ T5985] dvb-usb: bulk message failed: -22 (6/0) [ 869.476592][ T5985] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 869.498259][ T5985] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input15 [ 869.585838][ T5985] dvb-usb: schedule remote query interval to 150 msecs. [ 869.585864][ T5985] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 869.747584][ T5985] dvb-usb: bulk message failed: -22 (1/0) [ 869.747623][ T5985] dvb-usb: error while querying for an remote control event. [ 869.844795][ T190] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 869.844859][ T190] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 869.847779][ T190] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 869.905300][ T5985] dvb-usb: bulk message failed: -22 (1/0) [ 869.905344][ T5985] dvb-usb: error while querying for an remote control event. [ 869.917863][ T190] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 870.064085][T11124] dvb-usb: bulk message failed: -22 (1/0) [ 870.064120][T11124] dvb-usb: error while querying for an remote control event. [ 870.125522][T11124] usb 2-1: USB disconnect, device number 32 [ 870.293879][T11124] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 870.916015][T11124] usb 5-1: USB disconnect, device number 20 [ 871.764113][ T190] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 871.920333][ T190] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 871.920373][ T190] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.920395][ T190] usb 4-1: Product: syz [ 871.920410][ T190] usb 4-1: Manufacturer: syz [ 871.920424][ T190] usb 4-1: SerialNumber: syz [ 872.281953][ T190] rtl8150 4-1:1.0: couldn't reset the device [ 872.282355][ T190] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 872.322459][ T190] usb 4-1: USB disconnect, device number 30 [ 873.184074][ T190] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 873.348792][ T190] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 873.348826][ T190] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.348847][ T190] usb 4-1: Product: syz [ 873.348861][ T190] usb 4-1: Manufacturer: syz [ 873.348877][ T190] usb 4-1: SerialNumber: syz [ 873.854035][ T190] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 873.854098][ T190] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 874.834397][ T5872] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 874.876765][ T190] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 874.876827][ T190] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 874.877689][ T190] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 874.936232][ T190] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 874.994080][ T5872] usb 3-1: Using ep0 maxpacket: 16 [ 874.996953][ T5872] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 874.996980][ T5872] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 874.997000][ T5872] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 875.000130][ T5872] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 875.000161][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.000182][ T5872] usb 3-1: Product: syz [ 875.000197][ T5872] usb 3-1: Manufacturer: syz [ 875.000211][ T5872] usb 3-1: SerialNumber: syz [ 875.462561][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.463508][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.501294][ T5872] usb 3-1: 0:2 : does not exist [ 875.965836][ T31] usb 4-1: USB disconnect, device number 31 [ 876.564153][ T5872] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 876.645832][ T5872] usb 3-1: USB disconnect, device number 21 [ 876.712689][T15425] udevd[15425]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 877.537470][ T5815] Bluetooth: hci4: command 0x0406 tx timeout [ 879.994094][ T31] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 880.146662][ T31] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 880.146729][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 880.146773][ T31] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 880.146797][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.204754][ T31] usb 1-1: config 0 descriptor?? [ 880.218147][T15970] netlink: 'syz.1.4096': attribute type 11 has an invalid length. [ 880.228124][ T31] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 881.040032][T15989] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4105'. [ 881.168880][ T5893] usb 1-1: USB disconnect, device number 32 [ 881.305787][T15993] binder: 15992:15993 ioctl c0306201 0 returned -14 [ 881.437668][T15997] netlink: 'syz.0.4108': attribute type 11 has an invalid length. [ 882.306829][ T5892] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 882.456460][ T5892] usb 1-1: Using ep0 maxpacket: 16 [ 882.459089][ T5892] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 882.459117][ T5892] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 882.462192][ T5892] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 882.462230][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.462251][ T5892] usb 1-1: Product: syz [ 882.462266][ T5892] usb 1-1: Manufacturer: syz [ 882.462281][ T5892] usb 1-1: SerialNumber: syz [ 882.770570][ T5892] usb 1-1: 0:2 : does not exist [ 882.770699][ T5892] usb 1-1: unit 6 not found! [ 882.823842][ T5892] usb 1-1: USB disconnect, device number 33 [ 882.966297][T15425] udevd[15425]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 883.910516][T16053] fuse: Bad value for 'fd' [ 886.114114][ T5893] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 886.458336][ T5893] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 886.458383][ T5893] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 886.458416][ T5893] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 886.458432][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.462966][ T5893] usb 4-1: config 0 descriptor?? [ 886.520009][ T5893] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 887.464080][ T31] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 887.632002][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 887.648429][ T31] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 887.648462][ T31] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 887.648483][ T31] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 887.648504][ T31] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 887.648523][ T31] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 887.648545][ T31] usb 3-1: config 0 has no interface number 0 [ 887.648596][ T31] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 887.648625][ T31] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 887.648648][ T31] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 887.648686][ T31] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 887.648714][ T31] usb 3-1: config 0 interface 125 has no altsetting 0 [ 887.648733][ T31] usb 3-1: config 0 interface 125 has no altsetting 2 [ 887.652704][ T31] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 887.652734][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.652756][ T31] usb 3-1: Product: syz [ 887.652772][ T31] usb 3-1: Manufacturer: syz [ 887.652788][ T31] usb 3-1: SerialNumber: syz [ 887.687262][ T31] usb 3-1: config 0 descriptor?? [ 887.812820][ T31] usb 3-1: selecting invalid altsetting 2 [ 887.820171][T11124] usb 4-1: USB disconnect, device number 32 [ 888.894334][ T31] get_1284_register timeout [ 888.894400][ T31] uss720 3-1:0.125: probe with driver uss720 failed with error -5 [ 888.894507][ C1] usb 3-1: async_complete: urb error -104 [ 888.894613][ C1] usb 3-1: async_complete: urb error -104 [ 889.147639][T16111] fuse: Bad value for 'fd' [ 890.477148][T16126] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4159'. [ 890.754307][ T5892] usb 3-1: USB disconnect, device number 22 [ 891.034062][ T31] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 891.216925][ T31] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 891.216980][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 891.217012][ T31] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 891.217028][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.288581][ T31] usb 1-1: config 0 descriptor?? [ 891.344556][ T31] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 892.244342][ T190] usb 1-1: USB disconnect, device number 34 [ 892.902504][ T5124] Bluetooth: hci1: command 0x0406 tx timeout [ 893.034116][ T5892] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 893.085887][T16126] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 893.155315][T16126] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 893.184146][ T5892] usb 1-1: Using ep0 maxpacket: 16 [ 893.186405][ T5892] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 893.186426][ T5892] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 893.186441][ T5892] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 893.186455][ T5892] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 893.186469][ T5892] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 893.186483][ T5892] usb 1-1: config 0 has no interface number 0 [ 893.186525][ T5892] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 893.186549][ T5892] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 893.186570][ T5892] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 893.186601][ T5892] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 893.186621][ T5892] usb 1-1: config 0 interface 125 has no altsetting 0 [ 893.186634][ T5892] usb 1-1: config 0 interface 125 has no altsetting 2 [ 893.189220][ T5892] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 893.189241][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.189258][ T5892] usb 1-1: Product: syz [ 893.189269][ T5892] usb 1-1: Manufacturer: syz [ 893.189279][ T5892] usb 1-1: SerialNumber: syz [ 893.199713][ T5892] usb 1-1: config 0 descriptor?? [ 893.223342][ T5892] usb 1-1: selecting invalid altsetting 2 [ 893.384250][ T39] INFO: task kworker/u8:2:12613 blocked for more than 143 seconds. [ 893.384290][ T39] Not tainted syzkaller #0 [ 893.384302][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 893.384313][ T39] task:kworker/u8:2 state:D stack:20168 pid:12613 tgid:12613 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 893.384397][ T39] Workqueue: netns cleanup_net [ 893.384435][ T39] Call Trace: [ 893.384446][ T39] [ 893.384461][ T39] __schedule+0x16f3/0x4c20 [ 893.384511][ T39] ? __lock_acquire+0xab9/0xd20 [ 893.384552][ T39] ? __lock_acquire+0xab9/0xd20 [ 893.384583][ T39] ? __pfx___schedule+0x10/0x10 [ 893.384628][ T39] ? schedule+0x91/0x360 [ 893.384663][ T39] schedule+0x165/0x360 [ 893.384697][ T39] rxrpc_destroy_all_calls+0x564/0x660 [ 893.384729][ T39] ? __pfx_rxrpc_destroy_all_calls+0x10/0x10 [ 893.384756][ T39] ? __pfx_var_wake_function+0x10/0x10 [ 893.384788][ T39] ? rxrpc_net+0x23/0x240 [ 893.384818][ T39] rxrpc_exit_net+0x6f/0xc0 [ 893.384843][ T39] ops_undo_list+0x49a/0x990 [ 893.384875][ T39] ? __pfx_ops_undo_list+0x10/0x10 [ 893.384898][ T39] ? rt_spin_unlock+0x150/0x200 [ 893.384930][ T39] ? rt_spin_unlock+0x161/0x200 [ 893.384960][ T39] cleanup_net+0x4de/0x820 [ 893.384987][ T39] ? __pfx_cleanup_net+0x10/0x10 [ 893.385014][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 893.385047][ T39] ? process_scheduled_works+0x9ef/0x17b0 [ 893.385074][ T39] ? process_scheduled_works+0x9ef/0x17b0 [ 893.385105][ T39] process_scheduled_works+0xae1/0x17b0 [ 893.385165][ T39] ? __pfx_process_scheduled_works+0x10/0x10 [ 893.385225][ T39] worker_thread+0x8a0/0xda0 [ 893.385258][ T39] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 893.385304][ T39] ? __kthread_parkme+0x7b/0x200 [ 893.385353][ T39] kthread+0x711/0x8a0 [ 893.385392][ T39] ? __pfx_worker_thread+0x10/0x10 [ 893.385421][ T39] ? __pfx_kthread+0x10/0x10 [ 893.385452][ T39] ? rt_spin_unlock+0x150/0x200 [ 893.385485][ T39] ? rt_spin_unlock+0x161/0x200 [ 893.385509][ T39] ? __pfx_kthread+0x10/0x10 [ 893.385544][ T39] ret_from_fork+0x4bc/0x870 [ 893.385574][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 893.385610][ T39] ? __switch_to_asm+0x39/0x70 [ 893.385634][ T39] ? __switch_to_asm+0x33/0x70 [ 893.385655][ T39] ? __pfx_kthread+0x10/0x10 [ 893.385692][ T39] ret_from_fork_asm+0x1a/0x30 [ 893.385734][ T39] [ 893.385794][ T39] [ 893.385794][ T39] Showing all locks held in the system: [ 893.385810][ T39] 3 locks held by kworker/u8:0/12: [ 893.385824][ T39] #0: ffff88813ff69938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 893.385891][ T39] #1: ffffc90000117ba0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 893.385948][ T39] #2: ffffffff8e863538 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 893.386009][ T39] 1 lock held by khungtaskd/39: [ 893.386021][ T39] #0: ffffffff8d5aa880 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 893.386084][ T39] 3 locks held by kworker/u8:6/1102: [ 893.386097][ T39] 3 locks held by kworker/u8:8/1132: [ 893.386110][ T39] #0: ffff88814ccfd138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 893.386169][ T39] #1: ffffc90004e67ba0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 893.386253][ T39] #2: ffffffff8e863538 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 893.386330][ T39] 4 locks held by kworker/u8:15/3505: [ 893.386345][ T39] 2 locks held by getty/5561: [ 893.386357][ T39] #0: ffff88823bf7c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 893.386412][ T39] #1: ffffc90003e832e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1400 [ 893.386482][ T39] 5 locks held by kworker/1:5/5892: [ 893.386495][ T39] #0: ffff8880197be938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 893.386551][ T39] #1: ffffc90004ec7ba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 893.386609][ T39] #2: ffff888145f58188 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 893.393993][ T39] #3: ffff888038286188 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 893.394069][ T39] #4: ffff88803849a150 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 893.394132][ T39] 3 locks held by kworker/u8:2/12613: [ 893.394147][ T39] #0: ffff888019ad4938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 893.394206][ T39] #1: ffffc9000d68fba0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 893.394265][ T39] #2: ffffffff8e856620 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820 [ 893.394333][ T39] 2 locks held by udevd/14577: [ 893.394348][ T39] 4 locks held by udevd/15425: [ 893.394361][ T39] #0: ffff888058c7a838 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb8/0xe20 [ 893.394415][ T39] #1: ffff888036802478 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 893.394475][ T39] #2: ffff88803c3403c8 (kn->active#20){.+.+}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 893.394541][ T39] #3: ffff888038286188 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 893.394596][ T39] 3 locks held by syz.4.4159/16124: [ 893.394608][ T39] 4 locks held by syz.4.4159/16126: [ 893.394621][ T39] 2 locks held by syz.3.4166/16148: [ 893.394634][ T39] 1 lock held by syz.2.4170/16150: [ 893.394645][ T39] #0: ffffffff8e863538 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x37d/0x1df0 [ 893.394707][ T39] 2 locks held by syz.2.4170/16152: [ 893.394721][ T39] #0: ffffffff8e847998 (vlan_ioctl_mutex){+.+.}-{4:4}, at: sock_ioctl+0x5f1/0x790 [ 893.394779][ T39] #1: ffffffff8e863538 (rtnl_mutex){+.+.}-{4:4}, at: vlan_ioctl_handler+0xd0/0x650 [ 893.394841][ T39] 1 lock held by syz.2.4170/16154: [ 893.394854][ T39] #0: ffffffff8e863538 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x323/0x1b50 [ 893.394914][ T39] [ 893.394920][ T39] ============================================= [ 893.394920][ T39] [ 893.394930][ T39] NMI backtrace for cpu 0 [ 893.394966][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 893.394989][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 893.395002][ T39] Call Trace: [ 893.395011][ T39] [ 893.395020][ T39] dump_stack_lvl+0x189/0x250 [ 893.395061][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 893.395098][ T39] ? __pfx__printk+0x10/0x10 [ 893.395138][ T39] nmi_cpu_backtrace+0x39e/0x3d0 [ 893.395168][ T39] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 893.395197][ T39] ? __pfx__printk+0x10/0x10 [ 893.395228][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 893.395256][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 893.395286][ T39] watchdog+0xf60/0xfa0 [ 893.395333][ T39] ? watchdog+0x1e2/0xfa0 [ 893.395374][ T39] kthread+0x711/0x8a0 [ 893.395411][ T39] ? __pfx_watchdog+0x10/0x10 [ 893.395443][ T39] ? __pfx_kthread+0x10/0x10 [ 893.395475][ T39] ? rt_spin_unlock+0x150/0x200 [ 893.395508][ T39] ? rt_spin_unlock+0x161/0x200 [ 893.395533][ T39] ? __pfx_kthread+0x10/0x10 [ 893.395568][ T39] ret_from_fork+0x4bc/0x870 [ 893.395598][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 893.395633][ T39] ? __switch_to_asm+0x39/0x70 [ 893.395655][ T39] ? __switch_to_asm+0x33/0x70 [ 893.395682][ T39] ? __pfx_kthread+0x10/0x10 [ 893.395718][ T39] ret_from_fork_asm+0x1a/0x30 [ 893.395760][ T39] [ 893.395769][ T39] Sending NMI from CPU 0 to CPUs 1: [ 893.395794][ C1] NMI backtrace for cpu 1 [ 893.395818][ C1] CPU: 1 UID: 0 PID: 5164 Comm: klogd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 893.395840][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 893.395851][ C1] RIP: 0010:__pick_eevdf+0x57/0x8d0 [ 893.395881][ C1] Code: 80 3c 18 00 74 05 e8 58 89 8c 00 48 8b 45 48 48 89 44 24 40 48 8d 7d 50 48 89 f8 48 c1 e8 03 80 3c 18 00 74 05 e8 39 89 8c 00 <4c> 8b 65 50 4d 8d 7c 24 f0 4d 85 e4 4d 0f 45 e7 48 8d 7d 58 48 89 [ 893.395898][ C1] RSP: 0018:ffffc90003d6f4d8 EFLAGS: 00000046 [ 893.395914][ C1] RAX: 1ffff110171275da RBX: dffffc0000000000 RCX: 1ca6780222df8100 [ 893.395929][ C1] RDX: ffffc90003d6f7b0 RSI: 0000000000000001 RDI: ffff8880b893aed0 [ 893.395943][ C1] RBP: ffff8880b893ae80 R08: ffffffff8ed63e77 R09: 1ffffffff1dac7ce [ 893.395957][ C1] R10: dffffc0000000000 R11: ffffffff819254c0 R12: ffff888035499ed0 [ 893.395971][ C1] R13: ffff8880b893ae90 R14: dffffc0000000000 R15: ffff8880b893ae80 [ 893.395987][ C1] FS: 00007f61b5be3c80(0000) GS:ffff888126ef7000(0000) knlGS:0000000000000000 [ 893.396011][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 893.396024][ C1] CR2: 00002000001b4030 CR3: 0000000034f26000 CR4: 00000000003526f0 [ 893.396041][ C1] Call Trace: [ 893.396047][ C1] [ 893.396056][ C1] ? update_curr+0x75/0x730 [ 893.396085][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 893.396109][ C1] pick_task_fair+0x2fe/0x5c0 [ 893.396137][ C1] __schedule+0x2d42/0x4c20 [ 893.396164][ C1] ? rcu_read_lock_sched_held+0x89/0x100 [ 893.396194][ C1] ? __pfx___schedule+0x10/0x10 [ 893.396221][ C1] ? rcu_is_watching+0x15/0xb0 [ 893.396245][ C1] ? preempt_schedule+0xae/0xc0 [ 893.396272][ C1] preempt_schedule_common+0x83/0xd0 [ 893.396300][ C1] preempt_schedule+0xae/0xc0 [ 893.396327][ C1] ? __pfx_preempt_schedule+0x10/0x10 [ 893.396354][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 893.396384][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 893.396415][ C1] preempt_schedule_thunk+0x16/0x30 [ 893.396443][ C1] try_to_wake_up+0x82b/0x12b0 [ 893.396472][ C1] ? __pfx_rt_spin_lock+0x10/0x10 [ 893.396497][ C1] autoremove_wake_function+0x17/0x100 [ 893.396520][ C1] ? receiver_wake_function+0x58/0x80 [ 893.396547][ C1] __wake_up_common_lock+0x136/0x1e0 [ 893.396585][ C1] sock_def_readable+0x1fe/0x560 [ 893.396612][ C1] ? sock_def_readable+0xbe/0x560 [ 893.396641][ C1] unix_dgram_sendmsg+0xe08/0x1850 [ 893.396660][ C1] ? kasan_quarantine_put+0xdd/0x220 [ 893.396697][ C1] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 893.396722][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 893.396749][ C1] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 893.396768][ C1] __sock_sendmsg+0x21c/0x270 [ 893.396798][ C1] __sys_sendto+0x3c7/0x520 [ 893.396819][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 893.396861][ C1] __x64_sys_sendto+0xde/0x100 [ 893.396883][ C1] do_syscall_64+0xfa/0xfa0 [ 893.396912][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 893.396929][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 893.396949][ C1] ? clear_bhb_loop+0x60/0xb0 [ 893.396970][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 893.396989][ C1] RIP: 0033:0x7f61b5d33407 [ 893.397012][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 893.397028][ C1] RSP: 002b:00007ffc781f5370 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 893.397047][ C1] RAX: ffffffffffffffda RBX: 00007f61b5be3c80 RCX: 00007f61b5d33407 [ 893.397060][ C1] RDX: 000000000000007b RSI: 00007ffc781f54b0 RDI: 0000000000000003 [ 893.397072][ C1] RBP: 00007ffc781f58e0 R08: 0000000000000000 R09: 0000000000000000 [ 893.397084][ C1] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffc781f58f8 [ 893.397096][ C1] R13: 00007ffc781f54b0 R14: 0000000000000060 R15: 00007ffc781f54b0 [ 893.397120][ C1] [ 894.047530][T16126] bond0 (unregistering): Released all slaves [ 894.254875][ T5892] get_1284_register timeout [ 894.255024][ C1] usb 1-1: async_complete: urb error -104 [ 894.260965][ C1] usb 1-1: async_complete: urb error -104 [ 894.261091][ C1] usb 1-1: async_complete: urb error -104 [ 894.261207][ C1] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 894.261273][ T5892] uss720 1-1:0.125: probe with driver uss720 failed with error -5 [ 896.628958][ T5985] usb 1-1: USB disconnect, device number 35