last executing test programs: 10.594568358s ago: executing program 1 (id=9478): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r3, &(0x7f0000000180)=ANY=[@ANYBLOB='RECLEV\nPHONEOUT\nSPEAKER \'CD\' 000000'], 0xb8) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r4, r3, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) 7.893574054s ago: executing program 1 (id=9489): ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000003680)=0xfff) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x9, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_emit_ethernet(0x46, &(0x7f0000000780)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @private2, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xf8, 0xfffffffc}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001380)={r5, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x80000005}, 0x50) 6.702984567s ago: executing program 1 (id=9499): socket$alg(0x26, 0x5, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x60000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000002080)=0x64, 0x1) 5.470164522s ago: executing program 2 (id=9502): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)="12", 0x1}], 0x1}}], 0x1, 0x48800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f000000bc80)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000440)="6c10aa374d2f2510a44e858a3039f76be97085711695eeee0f421a8179bceada9b2473877b901257df936383787636623cd5bba201b8b6e5ab6e945550fb42020ad5ee44d613656c137e66a8b941375b4b6c36e3f148199b5ad7542875687b1e8ebea1b2de8b96bdd023261e94da219ba2a95d47723c1cb2aa9245bfb5e853d00034f8f9daf00bd9e5d3eebb9754d0420ee962d84310e81198ccc4dc2cbdb25d38444bf1bda3baf5ef06a936645ba76b6b3228", 0xb3}, {&(0x7f0000001940)="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", 0x750}], 0x2}}], 0x1, 0x40088d0) 5.355427092s ago: executing program 1 (id=9503): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x1e5842, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x145542, 0x40) ftruncate(r4, 0x2007ffd) sendfile(r2, r3, 0x0, 0x1000a3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 4.948152199s ago: executing program 1 (id=9504): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) mkdir(&(0x7f00000003c0)='./file0\x00', 0x83) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, r3}) ioctl$DMA_BUF_SET_NAME_A(r5, 0x40046201, &(0x7f00000001c0)='-{-#}$\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000006140)={0x2020}, 0xffffffbf) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0xa0042, 0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r6, &(0x7f0000000200)='m', 0x1) r7 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000240)=""/202) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, &(0x7f0000000100)) r8 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r8, &(0x7f0000000200)="a3", 0x1) ioctl$SNDRV_PCM_IOCTL_RESET(r8, 0x4141, 0x0) 3.596332677s ago: executing program 2 (id=9505): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x80082102, 0x0) 3.207988285s ago: executing program 4 (id=9506): r0 = dup(0xffffffffffffffff) write$FUSE_BMAP(r0, &(0x7f0000000100)={0x18}, 0x18) open(0x0, 0x10b942, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) accept(r1, 0x0, 0x0) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 3.188599525s ago: executing program 2 (id=9508): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r0, 0x1, 0x80, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, 0x0, 0x0) 3.045719859s ago: executing program 0 (id=9509): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x1, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x10) 2.834715636s ago: executing program 2 (id=9511): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="120000001a00010001000000000000000a"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.759779769s ago: executing program 0 (id=9512): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) sendfile(0xffffffffffffffff, r2, &(0x7f0000000340)=0x8000, 0x7fffffffffffffff) 2.67094217s ago: executing program 1 (id=9513): getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) 2.55507775s ago: executing program 0 (id=9514): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r5, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) 2.499961104s ago: executing program 2 (id=9515): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(&(0x7f00000002c0)='affs\x00', 0x1) r3 = socket$isdn(0x22, 0x2, 0x10) r4 = socket$isdn(0x22, 0x2, 0x2) dup3(r4, r3, 0x0) 2.402005512s ago: executing program 0 (id=9516): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r0, 0x110, 0x5, 0x0, 0x4) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) bpf$ITER_CREATE(0xb, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff0100000001", 0x15}], 0x1) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f00000004c0)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r4, 0x3ba0, &(0x7f0000000280)={0x48, 0x12, r6, 0x0, r5}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x6}, &(0x7f0000000180)=0x8) 2.128147749s ago: executing program 4 (id=9517): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f000000a300)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="7801000000000000f96bf6814206e2dfccffffffffffffff05000000000000000200000000000000060000000000000002000000000000000500000008000000030000000000000009000000000000000000000000000000ff0000000000000003000000000000000000000000000000ff7f00005700000003", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="040000000400000000000000000000000000200037050000000000002b00000009"], 0x0, 0x0, 0x0}) getdents64(r3, 0x0, 0x0) 1.808064382s ago: executing program 3 (id=9518): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000200)=0x427f, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}]}, 0x10) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010024bd7000e8dbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="08009e00"], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x0) 1.684698747s ago: executing program 4 (id=9519): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @empty}], 0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8) sendmsg$inet_sctp(r0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0x6, 0x102}, 0x8) 1.68356221s ago: executing program 3 (id=9520): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x404c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)='+', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000c40)="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", 0x10f}], 0x1, &(0x7f0000000fc0)=ANY=[], 0x40}}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000040)="91b1cf3c16064357872b61e253ab32b1d7627070a6cde711569ec015d3c178f77f5cc7860daf6fc069fe1dfad594d7fbc2f1f900601446b7a7689929fa87919f87c7386067b94d9dab68e34850a350ab21881f961235ad26d5077eb9cf419fcf8265652a454e5ba2bffd2b636b8b09", 0x6f}, {&(0x7f0000000940)="d7973a0d67423fdf177b91302d442a754f63705a196f3b79edf6c0315f5107a59fd4119519cdde468c057f13f5d6ab19f065fd8dc0540fd88147f611239cf91d1aed4cfba4b2ebec30daf232cfd110f07e04e032fff9d3f53e3ebf35a6aff0582ab86e6f7af8adf0e89e662d3c8610a448da38b37fab69a76b2285773e84aa614595b701467aa640622254cbc65a4f978c6b2343c485515810878f5c230fd3cc4a86389f9ac7b7582b3bcb1d9b3e7be30a1f073d626427076c38f8594e34a0ce05ef405d862504", 0xc7}, {&(0x7f00000001c0)="7e471ebb1bcc4912b3379ae76b2fc3eebb95323c73af6b63a812b8f4e4eaa818da05278711b5650c863950f09f802f5dcda16875816e89013087ed23d386fe43b23cc166285da3aa5baf10d2a7a7dd4454ec328157217bdb510a28767ad042dbddd814ff98d249ed64c754b8ee162a5aae7da40ea955371070227d02157c86407c9fbda9a9f039ba4ea9640596995c8f6d9663dcc4cc4ccf088fedf82e75915a242a93", 0xa3}, {&(0x7f00000003c0)="d5f348b5d0353ae5fc84d0eba48d8d34bb1e46c5cbe01b840b811e445a4ceb7d13ebacf07de1c371c579e72716ee5e96b31c07af7f2e650116eeb797bbf68f5d3f60e35d55c94ddefb", 0x49}, {&(0x7f0000000ac0)="7985ddd8808c4495e3d0cf4fa2611710d6f3ea398722f16aecde66c5ccd86294778ea76962fdf7aaea3aaf853435aba304c3ed42ec826aec6a402045ccfbc40cb7fee982260bd96d4aa68f6095031f4699e8d249f596b1a0485621f181d4d789378357225d03bfa267b73b41d1d8cbed8cb949", 0x73}, {&(0x7f0000001100)="949ea7d4de5e19927e2d833587b8685b2211ed29c06dd0fa9b4d4c27730e7f7d5fccc43dff40e0f1cc85fdfb71818873c8b5eca3e4ad14eebf9ada8d52142fbd2921fe28711b6c528c847c9b80e81ee6886283af7cc7eb7c98c6c150a77e99b8ab0619dbb89dcb019242e0546a066a60e751a268cef44bb7abb7f927dedc9b944e07a95223a440d6235d47ab4eb916aed05e5502b9357d61349ef9892926b3b840c4404d783b7227d8559480552fcf3f2338e5921fc8e720a428efc62634d48641bc2f3b93bf0dc491cfb2d89037c9252104b321984b8197195f4a33e1f4a12d493cd2", 0xe3}, {&(0x7f0000000580)="988e5c6e7a3ab7d73935f437c64cf91c95ff1bf5455350a134103b5989d3e7ff308c6dfe21ff69b4f32af54d938cbe8776f398a5b595eaedc4ef9473028daaefcb9e9b04c2ce96fc0fb0044def98c4fe83922d8eec2658152be323d888944ac1f269daf11c32aecef080c7529779f9b3f64a2aa083156dcad683aedd1a72c5a62199f93dd46ba5df8e09db29092e573fdd48a050eb8a45a4c0b9094b5639012a83b94e0f94bef32aaca3233c00d7c8b5ff6501b63990f523ad5f64a09490e8b6ba4d4cd92b87bee544f97d0ba55bd183bc916c", 0xd3}], 0x7}}], 0x3, 0x4008444) sendto$inet6(r0, &(0x7f0000000780)="07cf68a40a56372c9ce4b3f38a4ff5e50e6c", 0x12, 0x840, 0x0, 0x0) 1.085461392s ago: executing program 0 (id=9521): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r0, 0x1, 0x80, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, 0x0, 0x0) 1.01823494s ago: executing program 4 (id=9522): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1ff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x67) 983.372056ms ago: executing program 3 (id=9523): r0 = syz_open_procfs(0x0, &(0x7f00000023c0)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r0, &(0x7f0000002400)={0x2020}, 0x2020) 859.974253ms ago: executing program 0 (id=9524): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000240)={0x0, 0x45888, 0x800, 0x0, 0x36c}, &(0x7f0000000040)=0x0, &(0x7f00000007c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x221f, 0x0, 0x23, 0x0, 0x0) 753.596286ms ago: executing program 4 (id=9525): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000340)=0x8000, 0x7fffffffffffffff) 641.898666ms ago: executing program 3 (id=9526): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r5, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) 503.844531ms ago: executing program 4 (id=9527): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c6572"], 0x38}}, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) openat$tun(0xffffffffffffff9c, 0x0, 0x305200, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0xfff3}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) 425.922393ms ago: executing program 2 (id=9528): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6(0xa, 0x6, 0x8) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{0x3, 0x3, {0x2, 0x0, 0x4}, {0x0, 0x1, 0x2}, 0xff, 0xfe}, {0x3, 0x1, {0x2, 0xf1, 0x5}, {0x1}, 0x2, 0x1}], 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r3, {0xfffd, 0x10}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x840) 350.961686ms ago: executing program 3 (id=9529): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@local, 0x4e22, 0x0, 0x4e64, 0x0, 0xa, 0x0, 0xe4be9237fea32612}, {0x0, 0x1000000000000401, 0xfffffffffffffffe, 0x40000000, 0x0, 0x1a, 0x8000001, 0xfffffffffffffffe}, {0x7a, 0x5, 0x0, 0x7fff}, 0x8, 0x0, 0x1, 0x1, 0x3}}, 0xb8}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x9) syz_emit_ethernet(0x0, 0x0, 0x0) 0s ago: executing program 3 (id=9530): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=@newtfilter={0x30, 0x2c, 0xd2b, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x7}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x893}, 0x24040084) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002480)=@newtfilter={0x24, 0x2c, 0xd2b, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x1, 0x6}, {}, {0xe, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x893}, 0x24040084) kernel console output (not intermixed with test programs): 0 [ 1627.635957][ T5915] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1627.787055][T17249] usbhid 1-1:0.0: can't add hid device: -71 [ 1627.808814][T17249] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1627.868508][T17249] usb 1-1: USB disconnect, device number 102 [ 1628.175399][T32469] Set syz1 is full, maxelem 65536 reached [ 1628.668306][ T5915] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1628.834597][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1628.858457][ T5915] usb 3-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.00 [ 1628.888638][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1628.915566][ T5915] usb 3-1: config 0 descriptor?? [ 1628.915642][T32646] fuse: Bad value for 'fd' [ 1629.269031][T32653] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8340'. [ 1630.225430][T32667] syz_tun: entered allmulticast mode [ 1630.240076][T32667] netlink: 'syz.1.8345': attribute type 4 has an invalid length. [ 1630.279752][T32665] syz_tun: left allmulticast mode [ 1630.362361][T17249] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 1630.402425][T17249] hid-generic 0000:0000:0000.0064: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1630.717850][T32678] fuse: Bad value for 'fd' [ 1631.481914][ T5915] usbhid 3-1:0.0: can't add hid device: -71 [ 1631.491980][ T5915] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1631.517265][ T5915] usb 3-1: USB disconnect, device number 118 [ 1632.130651][T32701] trusted_key: encrypted_key: insufficient parameters specified [ 1632.416588][T32711] syz_tun: entered allmulticast mode [ 1632.427500][T32706] netlink: 'syz.1.8358': attribute type 4 has an invalid length. [ 1632.606752][T32716] fuse: Bad value for 'fd' [ 1632.625277][T32714] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8361'. [ 1632.886807][ T5915] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 1632.906859][ T5915] hid-generic 0000:0000:0000.0065: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1633.088572][ T5915] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1633.262524][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1633.279224][ T5915] usb 1-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.00 [ 1633.310584][ T5915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1633.349485][ T5915] usb 1-1: config 0 descriptor?? [ 1634.244310][T32748] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8375'. [ 1635.555315][ T45] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 1635.570954][ T45] hid-generic 0000:0000:0000.0066: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1635.669879][T17015] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1635.860228][T17015] usb 2-1: Using ep0 maxpacket: 8 [ 1635.910991][T17015] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1635.928043][ T5915] usbhid 1-1:0.0: can't add hid device: -71 [ 1635.955184][T17015] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1635.975456][ T311] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8388'. [ 1635.997884][ T5915] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1636.016633][T17015] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1636.041780][ T5915] usb 1-1: USB disconnect, device number 103 [ 1636.079675][T17015] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1636.128792][T17015] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1636.186149][T17015] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1636.228287][T17015] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1636.260356][T17015] usb 2-1: config 0 descriptor?? [ 1636.483753][T17015] usb 2-1: USB disconnect, device number 122 [ 1637.113824][ T340] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8400'. [ 1638.702638][ T45] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 1638.734877][ T45] hid-generic 0000:0000:0000.0067: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1639.288430][T16771] Bluetooth: hci0: unexpected event for opcode 0x0406 [ 1641.048498][T17015] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1641.095936][ T401] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8413'. [ 1641.106919][ T5915] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 1641.125528][ T5915] hid-generic 0000:0000:0000.0068: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1641.200438][T17015] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1641.218259][T17015] usb 4-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.00 [ 1641.268467][T17015] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1641.294911][T17015] usb 4-1: config 0 descriptor?? [ 1641.637724][T17015] usbhid 4-1:0.0: can't add hid device: -71 [ 1641.649365][T17015] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1641.758701][T17015] usb 4-1: USB disconnect, device number 66 [ 1643.148477][T17249] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1643.417449][T17249] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1643.447241][T17249] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1643.469896][T17249] usb 3-1: config 0 descriptor?? [ 1643.706508][T17249] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1643.723252][T17249] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 1643.765274][T17249] [drm] Initialized udl on minor 2 [ 1644.358754][ T45] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1644.536241][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1644.553973][ T45] usb 5-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.00 [ 1644.571796][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1644.633836][ T436] syz_tun: entered allmulticast mode [ 1644.636623][ T45] usb 5-1: config 0 descriptor?? [ 1644.651829][ T436] netlink: 'syz.0.8435': attribute type 4 has an invalid length. [ 1644.662757][ T435] syz_tun: left allmulticast mode [ 1644.867414][ T45] usbhid 5-1:0.0: can't add hid device: -71 [ 1644.877220][ T45] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1644.909871][ T45] usb 5-1: USB disconnect, device number 100 [ 1644.979856][ T344] Set syz1 is full, maxelem 65536 reached [ 1645.018908][ T5915] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1645.188698][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1645.203481][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1645.221191][ T5915] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1645.235537][ T5915] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1645.250482][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1645.267687][ T5915] usb 4-1: config 0 descriptor?? [ 1645.740896][ T5915] plantronics 0003:047F:FFFF.0069: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1645.913153][T17249] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1645.923904][T17249] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1645.933331][ T45] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1645.986292][ T45] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1646.006946][T17249] usb 3-1: USB disconnect, device number 119 [ 1646.035277][ T45] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1646.087148][ C1] plantronics 0003:047F:FFFF.0069: hid_field_extract() called with n (132) > 32! (kworker/1:6) [ 1646.291783][ T5915] usb 4-1: USB disconnect, device number 67 [ 1647.026228][ T481] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8452'. [ 1647.068289][ T45] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1647.173376][T16771] Bluetooth: hci3: unexpected event for opcode 0x2029 [ 1647.244854][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1647.278961][ T45] usb 3-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.00 [ 1647.313352][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1647.346130][ T45] usb 3-1: config 0 descriptor?? [ 1647.422620][ T495] tipc: Started in network mode [ 1647.427712][ T495] tipc: Node identity 4, cluster identity 4711 [ 1647.435014][ T495] tipc: Node number set to 4 [ 1647.516238][ T30] audit: type=1326 audit(1755225027.889:3006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=497 comm="syz.3.8463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9082d8ebe9 code=0x7ffc0000 [ 1647.574847][T16771] Bluetooth: hci1: unexpected event 0x3e length: 262 > 260 [ 1647.574886][T16771] Bluetooth: hci1: unexpected subevent 0x02 length: 261 > 260 [ 1647.581525][ T45] usbhid 3-1:0.0: can't add hid device: -71 [ 1647.582442][T16771] Bluetooth: hci1: Dropping invalid advertising data [ 1647.605664][T16771] Bluetooth: hci1: Malformed LE Event: 0x02 [ 1647.613169][ T45] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1647.613908][ T30] audit: type=1326 audit(1755225027.929:3007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=497 comm="syz.3.8463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9082d8ebe9 code=0x7ffc0000 [ 1647.643324][ C0] vkms_vblank_simulate: vblank timer overrun [ 1647.650133][ T30] audit: type=1326 audit(1755225027.929:3008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=497 comm="syz.3.8463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f9082d8ebe9 code=0x7ffc0000 [ 1647.672391][ C0] vkms_vblank_simulate: vblank timer overrun [ 1647.679750][ T30] audit: type=1326 audit(1755225027.929:3009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=497 comm="syz.3.8463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9082d8ebe9 code=0x7ffc0000 [ 1647.702586][ T30] audit: type=1326 audit(1755225027.929:3010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=497 comm="syz.3.8463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=301 compat=0 ip=0x7f9082d8ebe9 code=0x7ffc0000 [ 1647.714060][ T45] usb 3-1: USB disconnect, device number 120 [ 1647.724848][ C0] vkms_vblank_simulate: vblank timer overrun [ 1647.725280][ T30] audit: type=1326 audit(1755225027.929:3011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=497 comm="syz.3.8463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9082d8ebe9 code=0x7ffc0000 [ 1647.725330][ T30] audit: type=1326 audit(1755225027.929:3012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=497 comm="syz.3.8463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9082d8ebe9 code=0x7ffc0000 [ 1648.188301][T17249] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1648.253069][ T5985] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1648.338469][T17249] usb 2-1: Using ep0 maxpacket: 32 [ 1648.347192][T17249] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 1648.366123][T17249] usb 2-1: config 0 has no interface number 0 [ 1648.373056][T17249] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 1648.385474][T17249] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1648.400763][T17249] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1648.411928][T17249] usb 2-1: config 0 interface 85 has no altsetting 0 [ 1648.449910][ T5985] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1648.449987][T17249] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1648.461520][ T5985] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1648.485150][ T5985] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1648.499771][ T5985] usb 1-1: config 0 descriptor?? [ 1648.976026][ T5985] keytouch 0003:0926:3333.006A: fixing up Keytouch IEC report descriptor [ 1648.985410][T17249] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1648.994263][T17249] usb 2-1: Product: syz [ 1648.999199][T17249] usb 2-1: Manufacturer: syz [ 1649.003863][T17249] usb 2-1: SerialNumber: syz [ 1649.015776][T17249] usb 2-1: config 0 descriptor?? [ 1649.123093][ T5985] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.006A/input/input103 [ 1649.236601][T17249] appletouch 2-1:0.85: Failed to read mode from device. [ 1649.244469][T17249] appletouch 2-1:0.85: probe with driver appletouch failed with error -5 [ 1649.268711][T17249] usb 2-1: USB disconnect, device number 123 [ 1649.326933][ T536] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8479'. [ 1649.388568][ T5985] keytouch 0003:0926:3333.006A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 1649.463779][ T5985] usb 1-1: USB disconnect, device number 104 [ 1649.508678][T17015] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1649.599870][ T538] fido_id[538]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1649.671124][T17015] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1649.698754][T17015] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1649.722313][T17015] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1649.743857][T17015] usb 5-1: config 0 descriptor?? [ 1650.247248][T17015] keytouch 0003:0926:3333.006B: fixing up Keytouch IEC report descriptor [ 1650.310379][T17015] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.006B/input/input104 [ 1650.489548][T17015] keytouch 0003:0926:3333.006B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 1650.648376][ T5915] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 1650.666003][T17015] usb 5-1: USB disconnect, device number 101 [ 1650.828535][ T5915] usb 1-1: Using ep0 maxpacket: 16 [ 1650.840941][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1650.861073][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1650.872068][ T5915] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1650.881813][ T5915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1650.894677][ T5915] usb 1-1: config 0 descriptor?? [ 1651.168901][T16771] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1651.179662][T16771] Bluetooth: hci3: Injecting HCI hardware error event [ 1651.189341][T26850] Bluetooth: hci3: hardware error 0x00 [ 1651.399472][ T45] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 1651.412836][ T45] hid-generic 0000:0000:0000.006C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1651.564074][ T5915] usbhid 1-1:0.0: can't add hid device: -71 [ 1651.588458][ T5915] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1651.617005][ T5915] usb 1-1: USB disconnect, device number 105 [ 1651.868590][ T45] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1652.038467][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 1652.059240][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1652.082110][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1652.108291][ T45] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 1652.117777][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1652.165580][ T45] usb 4-1: config 0 descriptor?? [ 1652.233438][ T595] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8500'. [ 1652.469136][ T582] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8494'. [ 1652.531091][ T598] netlink: 'syz.2.8495': attribute type 2 has an invalid length. [ 1653.248630][T26850] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1653.625962][ T597] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1653.650401][ T610] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8501'. [ 1654.158709][ T45] usbhid 4-1:0.0: can't add hid device: -71 [ 1654.167851][ T45] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1654.214793][ T45] usb 4-1: USB disconnect, device number 68 [ 1654.878245][ T30] audit: type=1800 audit(1755225035.189:3013): pid=616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.8503" name="bus" dev="ramfs" ino=159562 res=0 errno=0 [ 1655.478283][ T623] input: syz1 as /devices/virtual/input/input105 [ 1655.866137][ T629] IPVS: length: 214 != 24 [ 1656.037705][ T45] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 1656.077625][ T45] hid-generic 0000:0000:0000.006D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1656.718476][T17015] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1656.887517][T17015] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1656.908415][T17015] usb 3-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.00 [ 1656.938049][T17015] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1656.976216][T17015] usb 3-1: config 0 descriptor?? [ 1657.211807][T17015] usbhid 3-1:0.0: can't add hid device: -71 [ 1657.217884][T17015] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1657.257973][T17015] usb 3-1: USB disconnect, device number 121 [ 1657.408463][ T5915] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1657.579809][ T5915] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1657.591447][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1657.602306][ T5915] usb 4-1: Product: syz [ 1657.606693][ T5915] usb 4-1: Manufacturer: syz [ 1657.616288][ T5915] usb 4-1: SerialNumber: syz [ 1657.663486][ T5915] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1657.685542][T17015] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1658.134165][ T5915] usb 4-1: USB disconnect, device number 69 [ 1658.325759][ T5985] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 1658.352357][ T5985] hid-generic 0000:0000:0000.006E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1658.483689][ T683] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8530'. [ 1658.850932][T17015] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1658.880150][T17015] ath9k_htc: Failed to initialize the device [ 1658.897336][ T5915] usb 4-1: ath9k_htc: USB layer deinitialized [ 1659.779489][ T713] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8542'. [ 1659.780799][ T714] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8541'. [ 1659.808443][ T713] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8542'. [ 1659.859828][ T713] team0: entered promiscuous mode [ 1659.865059][ T713] team_slave_0: entered promiscuous mode [ 1659.878758][ T713] team_slave_1: entered promiscuous mode [ 1659.900623][ T713] dummy0: entered promiscuous mode [ 1659.926887][ T713] batadv_slave_1: entered promiscuous mode [ 1659.947656][ T713] debugfs: 'hsr1' already exists in 'hsr' [ 1659.964528][ T713] Cannot create hsr debugfs directory [ 1659.980442][ T713] hsr1: Slave A (team0) is not up; please bring it up to get a fully working HSR network [ 1659.990640][ T713] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network [ 1660.752896][ T5915] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 1660.788746][ T5915] hid-generic 0000:0000:0000.006F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1661.568732][ T5915] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1661.730330][ T5915] usb 3-1: Using ep0 maxpacket: 32 [ 1661.744373][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1661.770454][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1661.804473][ T5915] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 1661.832822][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1661.867008][ T5915] usb 3-1: config 0 descriptor?? [ 1662.107370][ T745] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8552'. [ 1662.511881][ T766] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8557'. [ 1662.773924][ T5915] usbhid 3-1:0.0: can't add hid device: -71 [ 1662.790693][ T5915] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1662.823414][ T5915] usb 3-1: USB disconnect, device number 122 [ 1663.063388][ T772] tipc: Started in network mode [ 1663.095980][ T772] tipc: Node identity 4, cluster identity 4711 [ 1663.108294][ T772] tipc: Node number set to 4 [ 1663.407742][T16771] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1663.452211][T16771] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1663.466131][T16771] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1663.477934][T16771] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1663.488896][T16771] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1663.799116][ T5915] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 1663.841470][ T5915] hid-generic 0000:0000:0000.0070: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1663.920477][T16771] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 1664.270110][ T792] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8569'. [ 1664.405706][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1664.530380][ T794] geneve2: entered promiscuous mode [ 1664.631303][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1664.834300][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1665.097278][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1665.339876][ T803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8572'. [ 1665.649865][T16771] Bluetooth: hci4: command tx timeout [ 1665.740182][ T776] chnl_net:caif_netlink_parms(): no params data found [ 1666.422091][T17249] usb 3-1: new full-speed USB device number 123 using dummy_hcd [ 1666.746882][T17249] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 1666.758288][T17249] usb 3-1: config 0 has no interface number 0 [ 1666.825859][T17249] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1666.835466][T17249] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1666.853870][T17249] usb 3-1: Product: syz [ 1666.864269][T17249] usb 3-1: Manufacturer: syz [ 1666.889905][T17249] usb 3-1: SerialNumber: syz [ 1666.932630][T17249] usb 3-1: config 0 descriptor?? [ 1666.962285][ T13] dvmrp1 (unregistering): left allmulticast mode [ 1667.368538][T17249] usb 3-1: Firmware: major: 236, minor: 221, hardware type: UNKNOWN (48) [ 1667.579164][T17249] usb 3-1: Firmware: build [ 1667.733757][T16771] Bluetooth: hci4: command tx timeout [ 1667.764911][T17249] usb 3-1: failed to fetch extended address, random address set [ 1667.808876][T17249] usb 3-1: atusb_probe: initialization failed, error = -524 [ 1667.836769][T17249] atusb 3-1:0.128: probe with driver atusb failed with error -524 [ 1667.860492][T17249] usb 3-1: USB disconnect, device number 123 [ 1667.972471][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1668.030762][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1668.045409][ T13] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1668.064947][ T13] bond0 (unregistering): Released all slaves [ 1668.360309][T17249] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1668.396045][ T13] bond1 (unregistering): Released all slaves [ 1668.566047][T17249] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1668.623580][T17249] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1668.638274][T17249] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1668.656897][T17249] usb 4-1: Product: syz [ 1668.661481][T17249] usb 4-1: Manufacturer: syz [ 1668.666194][T17249] usb 4-1: SerialNumber: syz [ 1668.735416][ T13] bond2 (unregistering): Released all slaves [ 1669.051965][ T13] bond3 (unregistering): Released all slaves [ 1669.096098][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.102696][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.129890][ T5915] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 1669.180713][ T5915] hid-generic 0000:0000:0000.0071: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1669.329564][T17249] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 1669.343979][T17249] cdc_ncm 4-1:1.0: bind() failure [ 1669.408761][ T13] tipc: Left network mode [ 1669.416063][T17249] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1669.470398][T17249] cdc_ncm 4-1:1.1: bind() failure [ 1669.500662][T17249] usb 4-1: USB disconnect, device number 70 [ 1669.519239][ T5915] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 1669.720589][ T5915] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1669.731270][ T5915] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1669.741123][ T5915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1669.775294][ T5915] usb 1-1: config 0 descriptor?? [ 1669.792592][ T5915] pwc: Askey VC010 type 2 USB webcam detected. [ 1669.810338][T16771] Bluetooth: hci4: command tx timeout [ 1669.855608][ T776] bridge0: port 1(bridge_slave_0) entered blocking state [ 1669.898398][ T776] bridge0: port 1(bridge_slave_0) entered disabled state [ 1669.925313][ T776] bridge_slave_0: entered allmulticast mode [ 1669.956999][ T776] bridge_slave_0: entered promiscuous mode [ 1669.994690][ T5915] pwc: send_video_command error -71 [ 1670.021742][ T5915] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1670.035431][ T5915] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 1670.057768][ T5915] usb 1-1: USB disconnect, device number 106 [ 1670.183667][ T776] bridge0: port 2(bridge_slave_1) entered blocking state [ 1670.200760][ T776] bridge0: port 2(bridge_slave_1) entered disabled state [ 1670.218551][ T776] bridge_slave_1: entered allmulticast mode [ 1670.249698][ T776] bridge_slave_1: entered promiscuous mode [ 1670.514294][ T776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1670.528919][ T5915] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 1670.712021][ T5915] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1670.738505][ T5915] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1670.753872][ T5915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1670.766303][ T5915] usb 1-1: config 0 descriptor?? [ 1670.783879][ T776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1670.799829][ T5915] pwc: Askey VC010 type 2 USB webcam detected. [ 1671.200440][ T5915] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1671.208664][ T13] veth1_macvtap: left promiscuous mode [ 1671.209236][ T5915] pwc: recv_control_msg error -32 req 02 val 2700 [ 1671.235198][ T13] veth0_macvtap: left promiscuous mode [ 1671.256424][ T13] veth1_vlan: left promiscuous mode [ 1671.303758][ T13] veth0_vlan: left promiscuous mode [ 1671.506013][ T5915] pwc: recv_control_msg error -32 req 04 val 1000 [ 1671.537451][ T5915] pwc: recv_control_msg error -71 req 04 val 1300 [ 1671.586540][ T5915] pwc: recv_control_msg error -71 req 04 val 1400 [ 1671.611347][ T5915] pwc: recv_control_msg error -71 req 02 val 2000 [ 1671.630527][ T5915] pwc: recv_control_msg error -71 req 02 val 2100 [ 1671.645030][ T5915] pwc: recv_control_msg error -71 req 04 val 1500 [ 1671.663372][ T5915] pwc: recv_control_msg error -71 req 02 val 2500 [ 1671.682339][ T5915] pwc: recv_control_msg error -71 req 02 val 2400 [ 1671.706559][ T5915] pwc: recv_control_msg error -71 req 02 val 2600 [ 1671.720322][ T5915] pwc: recv_control_msg error -71 req 02 val 2900 [ 1671.737229][ T5915] pwc: recv_control_msg error -71 req 02 val 2800 [ 1671.764053][ T5915] pwc: recv_control_msg error -71 req 04 val 1100 [ 1671.785822][ T5915] pwc: recv_control_msg error -71 req 04 val 1200 [ 1671.812136][ T5915] pwc: Registered as video103. [ 1671.888397][T16771] Bluetooth: hci4: command tx timeout [ 1671.899730][ T5915] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input106 [ 1671.980874][ T5915] usb 1-1: USB disconnect, device number 107 [ 1672.459761][ T5915] hid-generic 0000:0000:0000.0072: unknown main item tag 0x0 [ 1672.491169][ T5915] hid-generic 0000:0000:0000.0072: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1673.924610][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1674.127471][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1675.818672][ T960] input: syz0 as /devices/virtual/input/input107 [ 1675.906951][ T962] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8608'. [ 1676.598539][ T776] team0: Port device team_slave_0 added [ 1676.664544][ T776] team0: Port device team_slave_1 added [ 1676.893471][ T776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1676.918543][ T776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1677.038420][ T776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1677.038647][T17249] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1677.062176][ T776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1677.072675][ T776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1677.104685][ T776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1677.291337][T17249] usb 3-1: Using ep0 maxpacket: 8 [ 1677.309464][T17249] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1677.343318][T17249] usb 3-1: config 0 has no interface number 0 [ 1677.367035][T17249] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1677.387403][ T776] hsr_slave_0: entered promiscuous mode [ 1677.401805][T17249] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1677.443189][ T776] hsr_slave_1: entered promiscuous mode [ 1677.453393][T17249] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1677.512065][T17249] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1677.573746][T17249] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1677.608264][T17249] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1677.680237][T17249] usb 3-1: config 0 descriptor?? [ 1677.716095][T17249] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1677.952892][ T13] IPVS: stop unused estimator thread 0... [ 1678.404700][ T1012] netlink: 'syz.3.8621': attribute type 30 has an invalid length. [ 1679.759443][ C0] ldusb 3-1:0.55: usb_submit_urb failed (-1) [ 1679.791960][T13084] usb 3-1: USB disconnect, device number 124 [ 1679.845336][T13084] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 1680.202288][ T776] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1680.246087][ T776] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1680.318484][T17015] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1680.395047][ T776] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1680.445106][ T776] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1680.518913][T17015] usb 3-1: Using ep0 maxpacket: 16 [ 1680.541575][T17015] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 1680.571377][T17015] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 1680.601202][T17015] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 1680.628271][T17015] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1680.681788][T17015] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 1680.717607][T17015] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1680.736380][T17015] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 1680.789860][T17015] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1680.898823][T17015] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 1680.932157][ T776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1681.032930][ T776] 8021q: adding VLAN 0 to HW filter on device team0 [ 1681.122804][T19246] bridge0: port 1(bridge_slave_0) entered blocking state [ 1681.131416][T19246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1681.184799][T17015] scsi host1: usb-storage 3-1:1.0 [ 1681.212956][T19246] bridge0: port 2(bridge_slave_1) entered blocking state [ 1681.220348][T19246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1681.344682][T17015] usb 3-1: USB disconnect, device number 125 [ 1681.878960][ T776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1682.139987][ T1082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1682.263862][ T776] veth0_vlan: entered promiscuous mode [ 1682.392469][ T776] veth1_vlan: entered promiscuous mode [ 1682.589655][ T776] veth0_macvtap: entered promiscuous mode [ 1682.694209][ T776] veth1_macvtap: entered promiscuous mode [ 1682.800771][ T776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1682.889669][ T776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1683.003071][T19246] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1683.040026][T19246] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1683.140804][T19246] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1683.177122][T19246] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1683.405555][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1683.422094][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1683.542215][T19246] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1683.556742][T19246] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1683.958281][T13084] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1684.168663][T13084] usb 5-1: Using ep0 maxpacket: 16 [ 1684.200529][T13084] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1684.236596][T13084] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1684.272186][T13084] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1684.288957][T13084] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1684.316032][T13084] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1684.609461][T13084] usb 5-1: config 0 descriptor?? [ 1685.050856][T13084] hid (null): invalid report_size 1354493550 [ 1685.057804][T13084] hid (null): unknown global tag 0xe [ 1685.234426][T13084] usb 5-1: USB disconnect, device number 102 [ 1685.456296][ T1151] random: crng reseeded on system resumption [ 1686.978782][ T45] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 1687.148333][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 1687.178302][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1687.217054][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1687.260072][ T45] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 1687.295087][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1687.345619][ T45] usb 1-1: config 0 descriptor?? [ 1687.591154][ T1169] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8649'. [ 1688.058534][T17249] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1688.251158][T17249] usb 4-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 1688.276519][T17249] usb 4-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 1688.311519][T17249] usb 4-1: config 4 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 77 [ 1688.322245][T17249] usb 4-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 1688.336339][T17249] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1688.347859][T17249] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1688.392350][ T1179] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1688.644390][T17249] ath6kl: Failed to submit usb control message: -71 [ 1688.687693][T17249] ath6kl: unable to send the bmi data to the device: -71 [ 1688.748470][T17249] ath6kl: Unable to send get target info: -71 [ 1688.788354][T17249] ath6kl: Failed to init ath6kl core: -71 [ 1688.810332][T17249] ath6kl_usb 4-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 1688.863947][T17249] usb 4-1: USB disconnect, device number 71 [ 1689.180799][ T45] usbhid 1-1:0.0: can't add hid device: -71 [ 1689.187886][ T45] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1689.245276][ T45] usb 1-1: USB disconnect, device number 108 [ 1689.469349][ T1211] loop6: detected capacity change from 0 to 2098 [ 1689.877179][T17015] hid-generic 0000:0000:0000.0074: unknown main item tag 0x0 [ 1689.933285][T17015] hid-generic 0000:0000:0000.0074: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1690.423196][ T1243] fuse: Unknown parameter 'group_id00000000000000000000' [ 1690.698345][T17015] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1690.865820][T17015] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1690.918730][T17015] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1690.949278][T17015] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1690.988443][T17015] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1691.049921][T17015] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1691.077198][T17015] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1691.115993][T17015] usb 2-1: Manufacturer: syz [ 1691.159869][T17015] usb 2-1: config 0 descriptor?? [ 1691.578618][T17015] usbhid 2-1:0.0: can't add hid device: -71 [ 1691.601132][T17015] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1691.648764][ T5985] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1691.659124][T17015] usb 2-1: USB disconnect, device number 124 [ 1691.839254][ T5985] usb 5-1: Using ep0 maxpacket: 16 [ 1691.850230][ T5985] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1691.868448][ T5985] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1691.908369][ T5985] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1691.925380][ T5985] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1691.958467][ T5985] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1691.980332][ T5985] usb 5-1: config 0 descriptor?? [ 1692.435962][ T5985] hid (null): report_id 0 is invalid [ 1692.449719][ T5985] hid (null): unknown global tag 0xd [ 1692.468446][ T5985] hid (null): invalid report_size 10717 [ 1692.474398][ T5985] hid (null): invalid report_count 64132 [ 1692.612712][ T5985] usb 5-1: USB disconnect, device number 103 [ 1692.913619][ T1279] bridge0: port 1(syz_tun) entered blocking state [ 1692.920582][ T1279] bridge0: port 1(syz_tun) entered disabled state [ 1692.927348][ T1279] syz_tun: entered allmulticast mode [ 1692.936871][ T1279] syz_tun: entered promiscuous mode [ 1693.267428][ T1285] fuse: Unknown parameter 'group_id00000000000000000000' [ 1693.682870][ T1292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8674'. [ 1693.698054][ T9] hid-generic 0000:0000:0000.0076: unknown main item tag 0x0 [ 1693.719582][ T9] hid-generic 0000:0000:0000.0076: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1694.838457][ T5985] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 1695.039761][ T5985] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1695.101141][ T5985] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1695.173843][ T5985] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1695.210959][ T5985] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1695.252455][ T5985] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1695.262201][ T5985] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1695.292304][ T5985] usb 1-1: Manufacturer: syz [ 1695.311843][ T5985] usb 1-1: config 0 descriptor?? [ 1695.745609][ T5985] usbhid 1-1:0.0: can't add hid device: -71 [ 1695.768091][ T5985] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1695.768524][ T45] usb 3-1: new full-speed USB device number 126 using dummy_hcd [ 1695.805069][ T5985] usb 1-1: USB disconnect, device number 109 [ 1696.071037][ T45] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1696.091265][ T45] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1696.141593][ T45] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1696.170772][ T1306] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1696.198242][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1696.218223][ T45] usb 3-1: Product: syz [ 1696.222461][ T45] usb 3-1: Manufacturer: syz [ 1696.237326][ T45] usb 3-1: SerialNumber: syz [ 1696.284768][ T1328] fuse: Unknown parameter 'group_id00000000000000000000' [ 1696.977839][ T45] usb 3-1: 0:2 : does not exist [ 1697.053323][ T45] usb 3-1: USB disconnect, device number 126 [ 1697.139986][ T537] udevd[537]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1698.249561][ T5985] hid-generic 0000:0000:0000.0077: unknown main item tag 0x0 [ 1698.291794][ T5985] hid-generic 0000:0000:0000.0077: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1698.810032][ T1363] fuse: Bad value for 'user_id' [ 1698.825544][ T1363] fuse: Bad value for 'user_id' [ 1698.858450][ T5985] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1699.037585][ T5985] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1699.054645][ T5985] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1699.083449][ T5985] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1699.118233][ T5985] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1699.138590][ T5985] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1699.149151][ T5985] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1699.157478][ T5985] usb 3-1: Manufacturer: syz [ 1699.207823][ T5985] usb 3-1: config 0 descriptor?? [ 1699.647380][ T5985] usbhid 3-1:0.0: can't add hid device: -71 [ 1699.682488][ T5985] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1699.708633][ T5985] usb 3-1: USB disconnect, device number 127 [ 1700.279159][ T5985] usb 2-1: new full-speed USB device number 125 using dummy_hcd [ 1700.469263][ T5985] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1700.492147][ T5985] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1700.525774][ T5985] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1700.547715][ T5985] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1700.578434][ T5985] usb 2-1: Product: syz [ 1700.587514][ T5985] usb 2-1: Manufacturer: syz [ 1700.598561][ T5985] usb 2-1: SerialNumber: syz [ 1701.181909][ T45] IPVS: starting estimator thread 0... [ 1701.182128][ T5985] usb 2-1: 0:2 : does not exist [ 1701.261271][ T5985] usb 2-1: USB disconnect, device number 125 [ 1701.337437][ T1398] IPVS: using max 30 ests per chain, 72000 per kthread [ 1701.482493][ T537] udevd[537]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1701.928698][ T1403] fuse: Bad value for 'user_id' [ 1701.933626][ T1403] fuse: Bad value for 'user_id' [ 1702.002642][ T5985] hid-generic 0000:0000:0000.0078: unknown main item tag 0x0 [ 1702.053476][ T5985] hid-generic 0000:0000:0000.0078: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1702.962808][ T1430] fuse: Bad value for 'user_id' [ 1702.988433][ T1430] fuse: Bad value for 'user_id' [ 1703.128394][T19054] usb 1-1: new full-speed USB device number 110 using dummy_hcd [ 1703.313262][T19054] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1703.326879][T19054] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1703.366241][T19054] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1703.376375][T19054] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1703.385026][T19054] usb 1-1: Product: syz [ 1703.394875][T19054] usb 1-1: Manufacturer: syz [ 1703.400707][T19054] usb 1-1: SerialNumber: syz [ 1704.612648][T19054] usb 1-1: 0:2 : does not exist [ 1704.688890][T19054] usb 1-1: USB disconnect, device number 110 [ 1704.760196][ T1465] fuse: Bad value for 'fd' [ 1704.784700][ T537] udevd[537]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1704.872667][ T5985] hid-generic 0000:0000:0000.0079: unknown main item tag 0x0 [ 1704.891610][ T5985] hid-generic 0000:0000:0000.0079: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1705.068298][ T45] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1705.223931][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1705.248409][ T45] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1705.271582][ T45] usb 5-1: New USB device found, idVendor=04f2, idProduct=affc, bcdDevice=88.61 [ 1705.291231][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1705.308700][ T45] usb 5-1: Product: syz [ 1705.318637][ T45] usb 5-1: Manufacturer: syz [ 1705.329287][ T45] usb 5-1: SerialNumber: syz [ 1705.346895][ T45] usb 5-1: config 0 descriptor?? [ 1705.584408][ T1468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1705.606134][ T1468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1705.943021][ T1494] fuse: Bad value for 'fd' [ 1705.969022][ T5985] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1706.141174][ T5985] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1706.167437][ T5985] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1706.182080][ T5985] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1706.220053][ T5985] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1706.299629][ T5985] usb 2-1: config 0 descriptor?? [ 1706.424397][ T1501] netlink: 76 bytes leftover after parsing attributes in process `syz.2.8752'. [ 1706.721695][ T1514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1706.738376][ T1514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1706.765937][ T5985] kovaplus 0003:1E7D:2D50.007A: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.1-1/input0 [ 1706.955276][ T1514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1706.998797][ T1514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1706.998921][ T1489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1707.029926][ T1489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1707.533190][ T5985] kovaplus 0003:1E7D:2D50.007A: couldn't init struct kovaplus_device [ 1707.543322][ T5985] kovaplus 0003:1E7D:2D50.007A: couldn't install mouse [ 1707.554656][ T5985] kovaplus 0003:1E7D:2D50.007A: probe with driver kovaplus failed with error -5 [ 1708.334404][T19054] usb 5-1: USB disconnect, device number 104 [ 1708.526828][ T1538] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8764'. [ 1708.804985][ T45] usb 2-1: USB disconnect, device number 126 [ 1708.986025][ T1553] vxcan0: tx drop: invalid da for name 0x0000000080000001 [ 1709.401842][ T1560] fuse: Bad value for 'fd' [ 1709.538707][T19054] usb 2-1: new full-speed USB device number 127 using dummy_hcd [ 1709.714008][T19054] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1709.729644][T19054] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1709.753604][T19054] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1709.763690][T19054] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1709.773575][T19054] usb 2-1: Product: syz [ 1709.784450][T19054] usb 2-1: Manufacturer: syz [ 1709.807417][T19054] usb 2-1: SerialNumber: syz [ 1710.036399][T19054] usb 2-1: 0:2 : does not exist [ 1710.075340][T19054] usb 2-1: USB disconnect, device number 127 [ 1710.187854][ T537] udevd[537]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1710.841399][ T1586] fuse: Bad value for 'fd' [ 1711.372002][ T1598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8789'. [ 1711.832208][T26850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1711.907189][T26850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1711.917498][T26850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1711.928978][T26850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1711.940775][T26850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1712.533827][T17015] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1712.721985][T17015] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1712.756823][T17015] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1712.768881][ T5985] usb 4-1: new full-speed USB device number 72 using dummy_hcd [ 1712.786767][T17015] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1712.821553][T17015] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1712.854732][T17015] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1712.857234][T18264] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1712.869113][T17015] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1712.931957][T17015] usb 2-1: Manufacturer: syz [ 1712.969285][T17015] usb 2-1: config 0 descriptor?? [ 1713.003059][ T5985] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1713.023186][ T5985] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1713.081482][ T5985] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1713.102315][ T5985] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1713.118290][ T5985] usb 4-1: Product: syz [ 1713.122573][ T5985] usb 4-1: Manufacturer: syz [ 1713.127251][ T5985] usb 4-1: SerialNumber: syz [ 1713.194132][T18264] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1713.345828][T18264] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1713.407812][ T1630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8800'. [ 1713.424908][ T1607] chnl_net:caif_netlink_parms(): no params data found [ 1713.425015][T17015] usbhid 2-1:0.0: can't add hid device: -71 [ 1713.441900][T17015] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1713.457844][T17015] usb 2-1: USB disconnect, device number 2 [ 1713.481331][ T5985] usb 4-1: 0:2 : does not exist [ 1713.558292][ T5985] usb 4-1: USB disconnect, device number 72 [ 1713.633199][ T537] udevd[537]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1713.649909][T18264] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1713.931749][ T1607] bridge0: port 1(bridge_slave_0) entered blocking state [ 1713.943585][ T1607] bridge0: port 1(bridge_slave_0) entered disabled state [ 1713.954644][ T1607] bridge_slave_0: entered allmulticast mode [ 1713.963658][ T1607] bridge_slave_0: entered promiscuous mode [ 1713.978646][T16771] Bluetooth: hci2: command tx timeout [ 1714.005782][ T1607] bridge0: port 2(bridge_slave_1) entered blocking state [ 1714.014201][ T1607] bridge0: port 2(bridge_slave_1) entered disabled state [ 1714.023395][ T1607] bridge_slave_1: entered allmulticast mode [ 1714.036091][ T1607] bridge_slave_1: entered promiscuous mode [ 1714.217847][ T1607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1714.252187][ T1607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1714.355695][ T1645] bridge0: entered promiscuous mode [ 1714.436640][T18264] bridge_slave_1: left allmulticast mode [ 1714.453395][T18264] bridge_slave_1: left promiscuous mode [ 1714.468486][T18264] bridge0: port 2(bridge_slave_1) entered disabled state [ 1714.487496][T18264] bridge_slave_0: left allmulticast mode [ 1714.509077][T18264] bridge_slave_0: left promiscuous mode [ 1714.515195][T18264] bridge0: port 1(bridge_slave_0) entered disabled state [ 1714.601593][T17249] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 1714.633762][T17249] hid-generic 0000:0000:0000.007B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1715.097267][ T5985] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 1715.196948][T18264] dvmrp1 (unregistering): left allmulticast mode [ 1715.292928][ T5985] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1715.321256][ T5985] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1715.339946][ T5985] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1715.357962][ T5985] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1715.374284][ T5985] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1715.388220][ T5985] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1715.402400][ T5985] usb 1-1: Manufacturer: syz [ 1715.419646][ T5985] usb 1-1: config 0 descriptor?? [ 1715.774223][T18264] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1715.793350][T18264] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1715.807980][T18264] bond0 (unregistering): (slave team0): Releasing backup interface [ 1715.826549][T18264] bond0 (unregistering): Released all slaves [ 1715.856021][ T5985] usbhid 1-1:0.0: can't add hid device: -71 [ 1715.862668][ T5985] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1715.886988][ T5985] usb 1-1: USB disconnect, device number 111 [ 1716.069264][T16771] Bluetooth: hci2: command tx timeout [ 1716.186022][T18264] bond1 (unregistering): Released all slaves [ 1716.464709][T18264] bond2 (unregistering): Released all slaves [ 1716.743397][T18264] bond3 (unregistering): Released all slaves [ 1716.760283][ T1644] bridge0: left promiscuous mode [ 1716.770235][ T1607] team0: Port device team_slave_0 added [ 1716.793818][ T1607] team0: Port device team_slave_1 added [ 1717.044847][T18264] tipc: Disabling bearer [ 1717.093738][T18264] tipc: Left network mode [ 1717.113577][ T1607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1717.130553][ T1607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1717.157939][ C1] vkms_vblank_simulate: vblank timer overrun [ 1717.176648][ T1607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1717.191786][ T1607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1717.202507][ T1607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1717.229780][ T1607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1717.282192][ T1686] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1717.426781][T17249] hid-generic 0000:0000:0000.007C: unknown main item tag 0x0 [ 1717.461442][T17249] hid-generic 0000:0000:0000.007C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1717.817695][ T1607] hsr_slave_0: entered promiscuous mode [ 1717.844654][ T1607] hsr_slave_1: entered promiscuous mode [ 1717.860143][ T1607] debugfs: 'hsr0' already exists in 'hsr' [ 1717.866101][ T1607] Cannot create hsr debugfs directory [ 1717.898278][T17249] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1718.052321][T18264] hsr_slave_0: left promiscuous mode [ 1718.079800][T17249] usb 5-1: Using ep0 maxpacket: 16 [ 1718.098526][T18264] hsr_slave_1: left promiscuous mode [ 1718.099963][T17249] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1718.128458][T16771] Bluetooth: hci2: command tx timeout [ 1718.141507][T17249] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1718.164021][T18264] veth1_macvtap: left promiscuous mode [ 1718.170658][T18264] veth0_macvtap: left promiscuous mode [ 1718.176698][T18264] veth1_vlan: left promiscuous mode [ 1718.188357][T18264] veth0_vlan: left promiscuous mode [ 1718.208060][T17249] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1718.236952][T17249] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1718.257813][T17249] usb 5-1: Product: syz [ 1718.274156][T17249] usb 5-1: Manufacturer: syz [ 1718.283244][T17249] usb 5-1: SerialNumber: syz [ 1718.746842][T17249] usb 5-1: cannot find UAC_HEADER [ 1718.790291][T17249] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1718.803239][T17249] usb 5-1: USB disconnect, device number 105 [ 1718.860578][ T537] udevd[537]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1719.412378][ T1730] input: syz0 as /devices/virtual/input/input108 [ 1719.614470][T18264] team0 (unregistering): Port device team_slave_1 removed [ 1719.689656][T18264] team0 (unregistering): Port device team_slave_0 removed [ 1720.208537][T16771] Bluetooth: hci2: command tx timeout [ 1720.550150][ T1736] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8834'. [ 1720.812681][T17249] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 1720.869224][T17249] hid-generic 0000:0000:0000.007D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1721.533449][T18264] IPVS: stop unused estimator thread 0... [ 1721.922142][ T1773] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8846'. [ 1722.375681][ T1607] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1722.435639][ T1607] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1722.477016][ T1607] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1722.532028][ T1607] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1722.794256][ T1808] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8856'. [ 1722.930739][ T1607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1723.000272][ T1607] 8021q: adding VLAN 0 to HW filter on device team0 [ 1723.051005][ T996] bridge0: port 1(bridge_slave_0) entered blocking state [ 1723.058894][ T996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1723.116143][ T996] bridge0: port 2(bridge_slave_1) entered blocking state [ 1723.123383][ T996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1723.427346][ T1607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1724.024408][ T1607] veth0_vlan: entered promiscuous mode [ 1724.132531][ T1607] veth1_vlan: entered promiscuous mode [ 1724.173410][ T1840] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8867'. [ 1724.204591][ T1840] netem: unknown loss type 13 [ 1724.246292][ T1840] netem: change failed [ 1724.516722][ T1607] veth0_macvtap: entered promiscuous mode [ 1724.566645][ T1607] veth1_macvtap: entered promiscuous mode [ 1724.658114][ T1607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1724.725416][ T1607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1724.811021][ T996] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1724.847300][ T996] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1724.889331][ T996] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1724.917531][ T996] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1725.194974][T11412] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1725.240867][T11412] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1725.357530][T18326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1725.388424][T18326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1727.124767][ T1920] fuse: Unknown parameter '0x0000000000000003' [ 1727.598723][ T1936] binder: 1935:1936 ioctl c0306201 200000000680 returned -14 [ 1729.818793][ T1992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8909'. [ 1730.541906][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.556661][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.568272][T17015] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1730.731839][T17015] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1730.750393][T17015] usb 2-1: New USB device found, idVendor=056a, idProduct=00b3, bcdDevice= 0.00 [ 1730.777184][T17015] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1730.829524][T17015] usb 2-1: config 0 descriptor?? [ 1731.465565][T17015] usb 2-1: USB disconnect, device number 3 [ 1733.099900][T17015] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1733.299605][T17015] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1733.341028][T17015] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1733.381394][T17015] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1733.411533][T17015] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1733.432524][T17015] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1733.456530][T17015] usb 4-1: Product: syz [ 1733.473422][T17015] usb 4-1: Manufacturer: syz [ 1733.482340][ T2091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8946'. [ 1733.492795][T17015] usb 4-1: SerialNumber: syz [ 1733.707113][ T2095] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8947'. [ 1733.784273][T17015] usb 4-1: USB disconnect, device number 73 [ 1733.847463][ T2009] udevd[2009]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1735.857007][ T2153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8969'. [ 1736.005278][ T30] audit: type=1326 audit(1755225116.379:3014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2155 comm="syz.3.8971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9082d8ebe9 code=0x7ffc0000 [ 1736.218248][ T30] audit: type=1326 audit(1755225116.449:3015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2155 comm="syz.3.8971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9082d8d550 code=0x7ffc0000 [ 1736.219510][ T5915] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1736.262264][ T30] audit: type=1326 audit(1755225116.449:3016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2155 comm="syz.3.8971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9082d8ebe9 code=0x7ffc0000 [ 1736.287957][ T30] audit: type=1326 audit(1755225116.449:3017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2155 comm="syz.3.8971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f9082d8ebe9 code=0x7ffc0000 [ 1736.313897][ T30] audit: type=1326 audit(1755225116.449:3018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2155 comm="syz.3.8971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9082d8ebe9 code=0x7ffc0000 [ 1736.406814][ T30] audit: type=1326 audit(1755225116.449:3019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2155 comm="syz.3.8971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9082d8ebe9 code=0x7ffc0000 [ 1736.437519][ T30] audit: type=1326 audit(1755225116.449:3020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2155 comm="syz.3.8971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9082d8ebe9 code=0x7ffc0000 [ 1736.469234][ T5915] usb 3-1: Using ep0 maxpacket: 32 [ 1736.479400][ T5915] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1736.494534][ T5915] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1736.513873][ T30] audit: type=1326 audit(1755225116.449:3021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2155 comm="syz.3.8971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9082d8ebe9 code=0x7ffc0000 [ 1736.541163][ T5915] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1736.551507][ T5915] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1736.562114][ T5915] usb 3-1: Product: syz [ 1736.572196][ T5915] usb 3-1: Manufacturer: syz [ 1736.605542][ T5915] hub 3-1:4.0: USB hub found [ 1736.747081][ T2172] netem: change failed [ 1736.801757][ T5915] hub 3-1:4.0: 2 ports detected [ 1737.008580][ T5915] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 1737.037904][ T5915] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 1737.094068][ T5915] usb 3-1: USB disconnect, device number 2 [ 1737.330991][ T2179] netlink: 96 bytes leftover after parsing attributes in process `syz.4.8981'. [ 1737.459972][ T2183] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1738.802987][ T2223] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8999'. [ 1738.832156][ T2227] binder: 2224:2227 ioctl c0306201 2000000003c0 returned -22 [ 1739.604463][ T2254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9012'. [ 1739.989457][T17015] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1740.150287][T17015] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1740.174452][T17015] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1740.203923][T17015] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1740.230507][T17015] usb 4-1: config 0 descriptor?? [ 1740.253609][T17015] pwc: Askey VC010 type 2 USB webcam detected. [ 1740.471424][T17015] pwc: send_video_command error -71 [ 1740.483884][T17015] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1740.513428][T17015] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 1740.548362][T17015] usb 4-1: USB disconnect, device number 74 [ 1740.858399][ T5915] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 1740.868347][ T5985] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1740.991282][ T2289] vlan2: entered promiscuous mode [ 1740.997042][ T2289] vlan2: entered allmulticast mode [ 1740.998596][T17015] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 1741.006426][ T2289] hsr_slave_1: entered allmulticast mode [ 1741.014966][ T5915] usb 1-1: Using ep0 maxpacket: 16 [ 1741.025113][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1741.037236][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1741.049827][ T5985] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1741.061506][ T5915] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1741.071101][ T5985] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1741.085083][ T5915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1741.098636][ T5915] usb 1-1: config 0 descriptor?? [ 1741.104603][ T5985] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1741.125103][ T5985] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1741.140576][ T5985] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1741.152242][ T5985] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1741.161169][ T5985] usb 3-1: Manufacturer: syz [ 1741.169962][ T5985] usb 3-1: config 0 descriptor?? [ 1741.178669][T17015] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1741.192174][T17015] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1741.202174][T17015] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1741.214830][T17015] usb 4-1: config 0 descriptor?? [ 1741.225975][T17015] pwc: Askey VC010 type 2 USB webcam detected. [ 1741.348416][ T45] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1741.498500][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 1741.507565][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1741.523525][ T45] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1741.540788][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1741.545388][ T5915] hid-multitouch 0003:1FD2:6007.007F: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.0-1/input0 [ 1741.549672][ T45] usb 2-1: Product: syz [ 1741.549696][ T45] usb 2-1: Manufacturer: syz [ 1741.549724][ T45] usb 2-1: SerialNumber: syz [ 1741.592934][ T5985] appleir 0003:05AC:8243.0080: unknown main item tag 0x0 [ 1741.606886][ T45] usb 2-1: config 0 descriptor?? [ 1741.614218][ T5985] appleir 0003:05AC:8243.0080: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 1741.633578][T17015] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1741.636974][ T45] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1741.658827][T17015] pwc: recv_control_msg error -32 req 02 val 2700 [ 1741.666046][ T45] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 1741.674874][T17015] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1741.694931][T17015] pwc: recv_control_msg error -32 req 04 val 1000 [ 1741.709315][T17015] pwc: recv_control_msg error -32 req 04 val 1300 [ 1741.737003][ T5985] usb 1-1: USB disconnect, device number 112 [ 1741.745881][T17015] pwc: recv_control_msg error -32 req 04 val 1400 [ 1741.764391][T17015] pwc: recv_control_msg error -32 req 02 val 2000 [ 1741.779266][T17015] pwc: recv_control_msg error -32 req 02 val 2100 [ 1741.793800][T17015] pwc: recv_control_msg error -32 req 04 val 1500 [ 1741.794958][ T2292] fido_id[2292]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1741.817773][T17015] pwc: recv_control_msg error -32 req 02 val 2500 [ 1742.033414][T17015] pwc: recv_control_msg error -71 req 02 val 2600 [ 1742.041603][T17015] pwc: recv_control_msg error -71 req 02 val 2900 [ 1742.052645][T17015] pwc: recv_control_msg error -71 req 02 val 2800 [ 1742.060416][T17015] pwc: recv_control_msg error -71 req 04 val 1100 [ 1742.069502][T17015] pwc: recv_control_msg error -71 req 04 val 1200 [ 1742.077441][T17015] pwc: Registered as video103. [ 1742.087098][T17015] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input109 [ 1742.111423][T17015] usb 4-1: USB disconnect, device number 75 [ 1742.247217][ T45] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1742.421920][ T2303] binder_alloc: 2301: binder_alloc_buf, no vma [ 1742.710735][ T2308] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9033'. [ 1742.738310][ T2308] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1743.055666][ T2321] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9038'. [ 1743.090036][ T45] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1743.099889][ T45] em28xx 2-1:0.0: board has no eeprom [ 1743.179141][ T45] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1743.187262][ T45] em28xx 2-1:0.0: dvb set to bulk mode. [ 1743.197748][ T2318] em28xx 2-1:0.0: Binding DVB extension [ 1743.239609][ T45] usb 2-1: USB disconnect, device number 4 [ 1743.255815][ T45] em28xx 2-1:0.0: Disconnecting em28xx [ 1743.305526][ T2318] em28xx 2-1:0.0: Registering input extension [ 1743.312285][ T45] em28xx 2-1:0.0: Closing input extension [ 1743.361361][ T45] em28xx 2-1:0.0: Freeing device [ 1743.690026][T19054] usb 3-1: USB disconnect, device number 3 [ 1743.755638][ T2350] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9049'. [ 1744.578605][T17015] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1744.760446][T17015] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1744.778976][T17015] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1744.831347][T17015] usb 3-1: config 0 descriptor?? [ 1744.863390][T17015] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1745.091006][T26850] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1745.103129][T26850] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1745.113397][T26850] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1745.128767][T26850] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1745.152096][T26850] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1745.253764][T28859] syz_tun (unregistering): left promiscuous mode [ 1745.496866][ T2408] sit0: entered promiscuous mode [ 1745.523655][ T2408] netlink: 'syz.1.9071': attribute type 1 has an invalid length. [ 1745.532014][ T2408] netlink: 1 bytes leftover after parsing attributes in process `syz.1.9071'. [ 1745.620332][ T5915] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 1745.667424][ T2420] netlink: 'syz.1.9076': attribute type 21 has an invalid length. [ 1745.676829][ T2420] netlink: 'syz.1.9076': attribute type 20 has an invalid length. [ 1745.801096][ T5915] usb 1-1: Using ep0 maxpacket: 32 [ 1745.837059][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1745.859109][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1745.871286][ T5915] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1745.918458][ T5915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1745.948927][ T5915] usb 1-1: config 0 descriptor?? [ 1746.393423][ T5915] ft260 0003:0403:6030.0081: unknown main item tag 0x7 [ 1746.515692][ T2404] chnl_net:caif_netlink_parms(): no params data found [ 1746.572169][ T5915] ft260 0003:0403:6030.0081: failed to retrieve chip version [ 1746.607528][ T996] bridge_slave_1: left allmulticast mode [ 1746.608901][ T5915] ft260 0003:0403:6030.0081: probe with driver ft260 failed with error -32 [ 1746.628809][ T996] bridge_slave_1: left promiscuous mode [ 1746.634882][ T996] bridge0: port 2(bridge_slave_1) entered disabled state [ 1746.675416][ T996] bridge_slave_0: left allmulticast mode [ 1746.688599][ T5915] usb 1-1: USB disconnect, device number 113 [ 1746.708290][ T996] bridge_slave_0: left promiscuous mode [ 1746.714562][T17015] usb 3-1: USB disconnect, device number 4 [ 1746.721645][ T996] bridge0: port 1(bridge_slave_0) entered disabled state [ 1747.248554][T26850] Bluetooth: hci5: command tx timeout [ 1747.394165][ T996] erspan0 (unregistering): left promiscuous mode [ 1747.453287][ T996] gretap0 (unregistering): left promiscuous mode [ 1747.588850][ T2473] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9090'. [ 1747.629104][ T996] dvmrp1 (unregistering): left allmulticast mode [ 1748.088766][ T996] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 1748.098069][ T996] bond_slave_0: left promiscuous mode [ 1748.106180][ T996] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 1748.116585][ T996] bond_slave_1: left promiscuous mode [ 1748.125240][ T996] $Hÿ (unregistering): (slave dummy0): Releasing backup interface [ 1748.136027][ T996] dummy0: left promiscuous mode [ 1748.152487][ T996] $Hÿ (unregistering): Released all slaves [ 1748.432843][ T996] bond1 (unregistering): Released all slaves [ 1748.701099][ T996] tipc: Left network mode [ 1748.944226][ T2503] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1748.964746][ T2404] bridge0: port 1(bridge_slave_0) entered blocking state [ 1748.993763][ T2404] bridge0: port 1(bridge_slave_0) entered disabled state [ 1749.009984][ T2404] bridge_slave_0: entered allmulticast mode [ 1749.028618][ T2404] bridge_slave_0: entered promiscuous mode [ 1749.166430][ T2404] bridge0: port 2(bridge_slave_1) entered blocking state [ 1749.190711][ T2404] bridge0: port 2(bridge_slave_1) entered disabled state [ 1749.219238][ T2404] bridge_slave_1: entered allmulticast mode [ 1749.237792][ T2404] bridge_slave_1: entered promiscuous mode [ 1749.330203][T26850] Bluetooth: hci5: command tx timeout [ 1749.348239][ T5915] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1749.518205][ T5915] usb 5-1: Using ep0 maxpacket: 16 [ 1749.527256][ T2404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1749.550227][ T5915] usb 5-1: config 2 has an invalid interface number: 14 but max is 0 [ 1749.578482][ T5915] usb 5-1: config 2 has no interface number 0 [ 1749.583451][ T2404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1749.584719][ T5915] usb 5-1: config 2 interface 14 has no altsetting 0 [ 1749.675709][ T5915] usb 5-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=77.73 [ 1749.697638][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1749.719026][ T5915] usb 5-1: Product: syz [ 1749.724130][ T5915] usb 5-1: Manufacturer: syz [ 1749.737799][ T5915] usb 5-1: SerialNumber: syz [ 1749.773220][ T996] batadv_slave_0: left promiscuous mode [ 1749.806357][ T996] hsr_slave_0: left promiscuous mode [ 1749.814554][ T996] hsr_slave_1: left promiscuous mode [ 1749.821504][ T996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1749.846846][ T996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1750.093103][ T5915] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1750.243662][ T5915] snd-usb-audio 5-1:2.14: probe with driver snd-usb-audio failed with error -2 [ 1750.289053][ T5915] usb 5-1: USB disconnect, device number 106 [ 1750.341543][ T2175] udevd[2175]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:2.14/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1751.393596][ T996] team0 (unregistering): Port device team_slave_1 removed [ 1751.417006][T26850] Bluetooth: hci5: command tx timeout [ 1751.472636][ T996] team0 (unregistering): Port device team_slave_0 removed [ 1752.088574][ T5915] usb 5-1: new full-speed USB device number 107 using dummy_hcd [ 1752.279947][ T5915] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1752.292250][ T5915] usb 5-1: not running at top speed; connect to a high speed hub [ 1752.302585][ T5915] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1752.327472][ T5915] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 1752.346784][ T5915] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1752.357438][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1752.366626][ T5915] usb 5-1: Product: syz [ 1752.376710][ T2404] team0: Port device team_slave_0 added [ 1752.380415][ T5915] usb 5-1: Manufacturer: syz [ 1752.394366][ T5915] usb 5-1: SerialNumber: syz [ 1752.483227][ T2404] team0: Port device team_slave_1 added [ 1752.628965][ T2582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9119'. [ 1752.646670][ T5915] cdc_ncm 5-1:1.0: bind() failure [ 1752.677421][ T5915] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1752.689222][ T2404] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1752.696382][ T2404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1752.724484][ T5915] cdc_ncm 5-1:1.1: bind() failure [ 1752.724580][ T2404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1752.742603][ T5915] usb 5-1: USB disconnect, device number 107 [ 1752.864368][ T2404] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1752.881904][ T2404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1752.937261][ T2404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1753.006139][ T2591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1753.190242][ T2404] hsr_slave_0: entered promiscuous mode [ 1753.197480][ T2404] hsr_slave_1: entered promiscuous mode [ 1753.220183][ T2404] debugfs: 'hsr0' already exists in 'hsr' [ 1753.238713][ T2404] Cannot create hsr debugfs directory [ 1753.267268][ T996] IPVS: stop unused estimator thread 0... [ 1753.491533][T26850] Bluetooth: hci5: command tx timeout [ 1753.830596][ T2619] netlink: 'syz.2.9130': attribute type 1 has an invalid length. [ 1754.181485][ T2639] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9134'. [ 1754.310113][ T2647] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9134'. [ 1754.585300][ T2657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9140'. [ 1754.866829][ T2665] binder_alloc: 2663: pid 2663 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1755.283174][ T30] audit: type=1326 audit(1755225135.659:3022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2675 comm="syz.2.9147" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbd1358ebe9 code=0x0 [ 1755.321740][ T5985] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1755.471326][ T2693] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9152'. [ 1755.498257][ T5985] usb 5-1: Using ep0 maxpacket: 8 [ 1755.537284][ T5985] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1755.564549][ T5985] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1755.608341][ T5985] usb 5-1: Product: syz [ 1755.612843][ T5985] usb 5-1: Manufacturer: syz [ 1755.645007][ T5985] usb 5-1: SerialNumber: syz [ 1755.661018][ T5985] usb 5-1: config 0 descriptor?? [ 1755.807285][ T2404] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1755.837586][ T2404] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1755.883941][ T2404] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1755.888466][ T5985] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1755.941445][ T2404] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1756.445094][ T2404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1756.546236][ T2404] 8021q: adding VLAN 0 to HW filter on device team0 [ 1756.589132][T18264] bridge0: port 1(bridge_slave_0) entered blocking state [ 1756.596696][T18264] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1756.636681][T17249] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 1756.700897][T18264] bridge0: port 2(bridge_slave_1) entered blocking state [ 1756.709478][T18264] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1756.820128][T17249] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1756.848834][T17249] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1756.899724][T17249] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1756.925057][T17249] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1756.970714][T17249] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1757.003714][T17249] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1757.016564][ T2404] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1757.028524][T17249] usb 1-1: Product: syz [ 1757.034261][T17249] usb 1-1: Manufacturer: syz [ 1757.071922][T17249] cdc_wdm 1-1:1.0: skipping garbage [ 1757.087593][T17249] cdc_wdm 1-1:1.0: skipping garbage [ 1757.112313][T17249] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1757.246599][ T2404] veth0_vlan: entered promiscuous mode [ 1757.280978][T17249] usb 1-1: USB disconnect, device number 114 [ 1757.302480][ T2404] veth1_vlan: entered promiscuous mode [ 1757.324423][ T5985] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1757.372510][ T5985] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 1757.395167][ T5985] usb 5-1: media controller created [ 1757.501373][ T5985] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1757.627841][ T2744] bridge0: port 2(bridge_slave_1) entered disabled state [ 1757.639970][ T2744] bridge0: port 1(bridge_slave_0) entered disabled state [ 1757.696950][ T5985] i2c i2c-2: Added multiplexed i2c bus 3 [ 1757.717155][ T5985] rtl2832 2-0010: Realtek RTL2832 successfully attached [ 1757.747942][ T5985] usb 5-1: DVB: registering adapter 2 frontend 0 (Realtek RTL2832 (DVB-T))... [ 1757.791123][ T5985] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered. [ 1758.023420][ T5985] DVB: Unable to find symbol r820t_attach() [ 1758.070134][ T2744] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1758.153237][ T2744] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1758.256925][ T5985] usb 5-1: USB disconnect, device number 108 [ 1758.381514][ T2772] kvm: pic: single mode not supported [ 1758.381541][ T2772] kvm: pic: level sensitive irq not supported [ 1758.406843][ T2772] kvm: pic: level sensitive irq not supported [ 1758.426153][ T2772] kvm: pic: single mode not supported [ 1758.432843][ T2772] kvm: pic: level sensitive irq not supported [ 1758.479196][ T2772] kvm: pic: level sensitive irq not supported [ 1758.497590][ T2772] kvm: pic: single mode not supported [ 1758.515632][ T2772] kvm: pic: single mode not supported [ 1758.524713][ T2772] kvm: pic: single mode not supported [ 1758.531013][ T2772] kvm: pic: level sensitive irq not supported [ 1758.545712][ T2772] kvm: pic: level sensitive irq not supported [ 1758.556086][ T2772] kvm: pic: single mode not supported [ 1758.563534][ T2772] kvm: pic: level sensitive irq not supported [ 1758.577569][ T2772] kvm: pic: level sensitive irq not supported [ 1758.584361][ T2772] kvm: pic: single mode not supported [ 1758.597635][ T2772] kvm: pic: single mode not supported [ 1758.605472][ T2772] kvm: pic: single mode not supported [ 1758.612373][ T2772] kvm: pic: level sensitive irq not supported [ 1758.629357][ T2772] kvm: pic: level sensitive irq not supported [ 1758.636792][ T2772] kvm: pic: single mode not supported [ 1758.683038][ T2772] kvm: pic: non byte write [ 1758.716411][ T2772] kvm: pic: non byte write [ 1758.765543][ T2772] kvm: pic: non byte write [ 1758.774358][T15737] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1758.794558][ T2772] kvm: pic: non byte write [ 1758.802962][T15737] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1758.904310][T15737] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1758.946137][T15737] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1759.042237][ T2404] veth0_macvtap: entered promiscuous mode [ 1759.055399][ T30] audit: type=1326 audit(1755225139.429:3023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2796 comm="syz.4.9172" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd1f2d8ebe9 code=0x0 [ 1759.078925][ T2404] veth1_macvtap: entered promiscuous mode [ 1759.189688][ T2404] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1759.256246][ T2404] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1759.289925][T19054] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1759.345505][ T996] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1759.375415][ T996] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1759.470867][T19054] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1759.471771][ T996] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1759.539036][T19054] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1759.588298][T19054] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1759.593468][ T996] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1759.678260][T19054] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1759.714092][T19054] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1759.739613][T17015] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1759.772397][T19054] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1759.815115][T18326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1759.829365][T19054] usb 2-1: invalid MIDI out EP 0 [ 1759.865705][T18326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1759.901535][T17015] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1759.934282][T17015] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1759.957171][T17015] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1760.005422][T17015] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1760.070365][T17015] usb 3-1: config 0 descriptor?? [ 1760.075753][T18326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1760.098236][T18326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1760.141023][T19054] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1760.240070][T19054] usb 2-1: USB disconnect, device number 5 [ 1760.495927][T17015] cm6533_jd 0003:0D8C:0022.0082: unknown main item tag 0x0 [ 1760.569215][T17015] cm6533_jd 0003:0D8C:0022.0082: unknown main item tag 0x0 [ 1760.577838][T17015] cm6533_jd 0003:0D8C:0022.0082: unknown main item tag 0x0 [ 1760.638954][T17015] cm6533_jd 0003:0D8C:0022.0082: unknown main item tag 0x0 [ 1760.651750][T17015] cm6533_jd 0003:0D8C:0022.0082: unknown main item tag 0x0 [ 1760.716425][T17015] cm6533_jd 0003:0D8C:0022.0082: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 1760.806002][T17015] usb 3-1: USB disconnect, device number 5 [ 1760.997727][ T2860] fido_id[2860]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1762.612743][ T30] audit: type=1326 audit(1755225142.989:3024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2909 comm="syz.4.9201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f2d8ebe9 code=0x7ffc0000 [ 1762.766427][ T30] audit: type=1326 audit(1755225142.989:3025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2909 comm="syz.4.9201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f2d8ebe9 code=0x7ffc0000 [ 1762.893003][ T30] audit: type=1326 audit(1755225143.029:3026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2909 comm="syz.4.9201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7fd1f2d8ebe9 code=0x7ffc0000 [ 1762.919409][ T2920] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9204'. [ 1762.943816][T16771] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1762.959512][T16771] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1762.975045][ T2499] syz_tun (unregistering): left allmulticast mode [ 1762.981071][T16771] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1762.993380][T16771] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1762.996302][ T30] audit: type=1326 audit(1755225143.029:3027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2909 comm="syz.4.9201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f2d8ebe9 code=0x7ffc0000 [ 1763.026957][ T2499] syz_tun (unregistering): left promiscuous mode [ 1763.027078][ T2499] bridge0: port 1(syz_tun) entered disabled state [ 1763.068465][T16771] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1763.143382][ T30] audit: type=1326 audit(1755225143.029:3028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2909 comm="syz.4.9201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f2d8ebe9 code=0x7ffc0000 [ 1763.626020][ T2942] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9210'. [ 1763.739126][ T2947] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9210'. [ 1764.254173][ T2964] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1765.168569][T16771] Bluetooth: hci0: command tx timeout [ 1765.379623][ T2293] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1765.414282][ T2927] chnl_net:caif_netlink_parms(): no params data found [ 1765.555546][ T2293] usb 2-1: Using ep0 maxpacket: 16 [ 1765.579797][ T2293] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1765.601420][ T2293] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1765.635970][ T2293] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1765.656716][ T2293] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1765.674021][ T2293] usb 2-1: Product: syz [ 1765.679918][ T2293] usb 2-1: Manufacturer: syz [ 1765.684971][ T2293] usb 2-1: SerialNumber: syz [ 1765.865473][ T2999] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=640 (1280 ns) > initial count (34 ns). Using initial count to start timer. [ 1765.909494][ T2293] usb 2-1: 0:2 : does not exist [ 1765.943892][ T2293] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1766.024260][ T2293] usb 2-1: USB disconnect, device number 6 [ 1766.220943][ T2009] udevd[2009]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1766.515955][ T13] dvmrp1 (unregistering): left allmulticast mode [ 1766.874759][ T5985] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1767.028298][ T5985] usb 2-1: Using ep0 maxpacket: 16 [ 1767.036962][ T5985] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1767.055081][ T5985] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1767.065534][ T5985] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1767.077104][ T5985] usb 2-1: Product: syz [ 1767.082038][ T5985] usb 2-1: Manufacturer: syz [ 1767.087650][ T5985] usb 2-1: SerialNumber: syz [ 1767.101460][ T5985] usb 2-1: config 0 descriptor?? [ 1767.116003][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1767.124164][ T5985] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1767.140497][ T5985] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 1767.149704][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1767.163623][ T13] bond0 (unregistering): Released all slaves [ 1767.260945][T16771] Bluetooth: hci0: command tx timeout [ 1767.488524][ T13] bond1 (unregistering): (slave batadv1): Releasing active interface [ 1767.500579][ T13] bond1 (unregistering): Released all slaves [ 1767.552134][ T3002] netlink: 'syz.4.9233': attribute type 7 has an invalid length. [ 1767.734021][ T5985] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1768.125184][ T2927] bridge0: port 1(bridge_slave_0) entered blocking state [ 1768.179243][ T2927] bridge0: port 1(bridge_slave_0) entered disabled state [ 1768.198012][ T2927] bridge_slave_0: entered allmulticast mode [ 1768.203042][ T5985] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1768.214826][ T2927] bridge_slave_0: entered promiscuous mode [ 1768.252571][ T5985] em28xx 2-1:0.0: board has no eeprom [ 1768.260871][ T2927] bridge0: port 2(bridge_slave_1) entered blocking state [ 1768.315147][ T2927] bridge0: port 2(bridge_slave_1) entered disabled state [ 1768.348964][ T2927] bridge_slave_1: entered allmulticast mode [ 1768.376557][ T2927] bridge_slave_1: entered promiscuous mode [ 1768.754826][ T2927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1768.869103][ T3051] netlink: 'syz.4.9249': attribute type 1 has an invalid length. [ 1768.893536][ T2927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1769.086125][ T13] team0: left promiscuous mode [ 1769.100811][ T13] team_slave_0: left promiscuous mode [ 1769.134468][ T13] team_slave_1: left promiscuous mode [ 1769.157787][ T13] dummy0: left promiscuous mode [ 1769.184818][ T13] batadv_slave_1: left promiscuous mode [ 1769.252044][ T3009] em28xx 2-1:0.0: reading from i2c device at 0x0 failed (error=-5) [ 1769.263969][ T13] hsr_slave_0: left promiscuous mode [ 1769.294279][ T13] hsr_slave_1: left promiscuous mode [ 1769.316442][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1769.329126][T16771] Bluetooth: hci0: command tx timeout [ 1769.338447][ T5985] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1769.358887][ T5985] em28xx 2-1:0.0: dvb set to bulk mode. [ 1769.367260][ T2293] em28xx 2-1:0.0: Binding DVB extension [ 1769.376450][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1769.399476][ T5985] usb 2-1: USB disconnect, device number 7 [ 1769.417749][ T5985] em28xx 2-1:0.0: Disconnecting em28xx [ 1769.600459][ T2293] em28xx 2-1:0.0: Registering input extension [ 1769.617220][ T5985] em28xx 2-1:0.0: Closing input extension [ 1769.656029][ T5985] em28xx 2-1:0.0: Freeing device [ 1770.506537][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1770.595860][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1771.227336][ T13] team0 (unregistering): Port device dummy0 removed [ 1771.432150][T16771] Bluetooth: hci0: command tx timeout [ 1771.591310][ T2927] team0: Port device team_slave_0 added [ 1771.787891][ T2927] team0: Port device team_slave_1 added [ 1772.028030][ T2927] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1772.058434][ T2927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1772.110862][ T2927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1772.154935][ T2927] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1772.189171][ T2927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1772.264268][ T2927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1772.640575][ T3105] veth1_vlan: entered allmulticast mode [ 1772.708064][ T2927] hsr_slave_0: entered promiscuous mode [ 1772.739535][ T2927] hsr_slave_1: entered promiscuous mode [ 1772.751933][ T2927] debugfs: 'hsr0' already exists in 'hsr' [ 1772.785352][ T2927] Cannot create hsr debugfs directory [ 1772.895530][ T13] IPVS: stop unused estimator thread 0... [ 1773.058267][T17015] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 1773.257025][T17015] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 1773.299227][T17015] usb 2-1: config 0 has no interface number 0 [ 1773.348098][T17015] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1773.398287][T17015] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1773.440089][T17015] usb 2-1: Product: syz [ 1773.454887][T17015] usb 2-1: Manufacturer: syz [ 1773.479879][T17015] usb 2-1: SerialNumber: syz [ 1773.522367][T17015] usb 2-1: config 0 descriptor?? [ 1773.668345][ T2318] usb 5-1: new full-speed USB device number 109 using dummy_hcd [ 1773.854778][ T2318] usb 5-1: config 5 has no interfaces? [ 1773.879956][ T2318] usb 5-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 1773.914772][ T2318] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1773.925139][ T2318] usb 5-1: Product: syz [ 1773.935852][ T2318] usb 5-1: Manufacturer: syz [ 1773.954967][ T2318] usb 5-1: SerialNumber: syz [ 1774.178922][T17015] usb 2-1: Firmware version (0.0) predates our first public release. [ 1774.230798][T17015] usb 2-1: Please update to version 0.2 or newer [ 1774.381249][T17015] usb 2-1: USB disconnect, device number 8 [ 1774.574656][ T2927] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1774.646233][ T2927] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1774.694726][ T2927] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1774.739636][ T2927] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1774.897215][ T3172] veth1_vlan: entered allmulticast mode [ 1775.058517][T17015] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1775.125002][ T2927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1775.232742][T17015] usb 3-1: Using ep0 maxpacket: 16 [ 1775.245160][T17015] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1775.266448][ T2927] 8021q: adding VLAN 0 to HW filter on device team0 [ 1775.279197][T17015] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1775.306870][T17015] usb 3-1: Product: syz [ 1775.323903][T17015] usb 3-1: Manufacturer: syz [ 1775.336929][T11412] bridge0: port 1(bridge_slave_0) entered blocking state [ 1775.345322][T11412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1775.356301][T17015] usb 3-1: SerialNumber: syz [ 1775.366353][T17015] usb 3-1: config 0 descriptor?? [ 1775.375383][T11412] bridge0: port 2(bridge_slave_1) entered blocking state [ 1775.383972][T11412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1775.649345][T17015] usb 3-1: USB disconnect, device number 6 [ 1775.753783][ T2927] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1775.913922][ T2927] veth0_vlan: entered promiscuous mode [ 1775.944152][ T2927] veth1_vlan: entered promiscuous mode [ 1776.027096][ T2927] veth0_macvtap: entered promiscuous mode [ 1776.056283][ T2927] veth1_macvtap: entered promiscuous mode [ 1776.125183][ T2927] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1776.170602][ T2927] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1776.222755][ T996] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1776.272389][ T996] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1776.315351][ T996] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1776.354818][ T996] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1776.444366][ T2318] usb 5-1: USB disconnect, device number 109 [ 1776.742052][T19246] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1776.795355][T19246] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1776.944737][T18264] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1776.972332][T18264] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1777.437012][ T3232] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9192'. [ 1779.310256][T26850] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1779.326198][T26850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1779.337791][T26850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1779.392167][T26850] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1779.406099][T26850] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1779.417042][ T2395] syz_tun (unregistering): left allmulticast mode [ 1780.689455][ T3273] binder_alloc: 3272: binder_alloc_buf, no vma [ 1781.270374][ T3255] chnl_net:caif_netlink_parms(): no params data found [ 1781.492631][T16771] Bluetooth: hci3: command tx timeout [ 1781.560239][T11412] bridge_slave_1: left allmulticast mode [ 1781.604752][T11412] bridge_slave_1: left promiscuous mode [ 1781.641333][T11412] bridge0: port 2(bridge_slave_1) entered disabled state [ 1781.753930][T11412] bridge_slave_0: left allmulticast mode [ 1781.781053][T11412] bridge_slave_0: left promiscuous mode [ 1781.803372][T11412] bridge0: port 1(bridge_slave_0) entered disabled state [ 1783.293674][T11412] dvmrp1 (unregistering): left allmulticast mode [ 1783.543873][T11412] team0: Port device geneve0 removed [ 1783.581640][T16771] Bluetooth: hci3: command tx timeout [ 1783.626345][ T3318] binder_alloc: 3317: binder_alloc_buf, no vma [ 1784.485040][T11412] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1784.527440][T11412] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1784.549608][T11412] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1784.566672][T11412] bond0 (unregistering): Released all slaves [ 1785.095210][ T3255] bridge0: port 1(bridge_slave_0) entered blocking state [ 1785.101367][ T3344] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1785.109895][ T3255] bridge0: port 1(bridge_slave_0) entered disabled state [ 1785.112206][ T3344] IPv6: NLM_F_CREATE should be set when creating new route [ 1785.130047][ T3255] bridge_slave_0: entered allmulticast mode [ 1785.145743][ T3255] bridge_slave_0: entered promiscuous mode [ 1785.179622][ T3255] bridge0: port 2(bridge_slave_1) entered blocking state [ 1785.198539][ T3255] bridge0: port 2(bridge_slave_1) entered disabled state [ 1785.213523][ T3255] bridge_slave_1: entered allmulticast mode [ 1785.226754][ T3255] bridge_slave_1: entered promiscuous mode [ 1785.415310][ T3255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1785.497103][ T3255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1785.648951][T16771] Bluetooth: hci3: command tx timeout [ 1785.700596][ T3255] team0: Port device team_slave_0 added [ 1785.715549][ T3255] team0: Port device team_slave_1 added [ 1785.965961][ T3255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1785.984911][ T3255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1786.063959][ T3255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1786.097165][ T3255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1786.114738][ T3255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1786.167011][ T3255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1786.226787][ T3373] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 1786.233493][ T3373] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1786.282421][ T3373] vhci_hcd vhci_hcd.0: Device attached [ 1786.317265][ T3377] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(12) [ 1786.324992][ T3377] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1786.338365][ T3377] vhci_hcd vhci_hcd.0: Device attached [ 1786.385751][ T3373] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1786.391246][ T3255] hsr_slave_0: entered promiscuous mode [ 1786.426137][ T3255] hsr_slave_1: entered promiscuous mode [ 1786.434382][ T3255] debugfs: 'hsr0' already exists in 'hsr' [ 1786.447378][ T3373] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(16) [ 1786.455713][ T3373] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1786.469718][ T5915] vhci_hcd: vhci_device speed not set [ 1786.475543][ T3255] Cannot create hsr debugfs directory [ 1786.515992][ T3373] vhci_hcd vhci_hcd.0: Device attached [ 1786.528281][ T5915] usb 41-1: new full-speed USB device number 3 using vhci_hcd [ 1786.541275][ T3377] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(19) [ 1786.549603][ T3377] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1786.570591][ T3391] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1786.597194][ T3377] vhci_hcd vhci_hcd.0: Device attached [ 1786.635765][ T3373] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1786.734499][ T3389] vhci_hcd: connection closed [ 1786.736279][ T3374] vhci_hcd: connection reset by peer [ 1786.749711][ T3378] vhci_hcd: connection closed [ 1786.750020][ T3386] vhci_hcd: connection closed [ 1786.751142][ T3324] vhci_hcd: stop threads [ 1786.856522][ T3324] vhci_hcd: release socket [ 1786.869663][ T3324] vhci_hcd: disconnect device [ 1786.886834][ T3324] vhci_hcd: stop threads [ 1786.908243][ T3324] vhci_hcd: release socket [ 1786.915210][ T3324] vhci_hcd: disconnect device [ 1786.935814][ T3324] vhci_hcd: stop threads [ 1786.948479][ T3324] vhci_hcd: release socket [ 1786.957259][ T3324] vhci_hcd: disconnect device [ 1786.967714][ T3402] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9347'. [ 1786.987231][ T3324] vhci_hcd: stop threads [ 1787.008235][ T3324] vhci_hcd: release socket [ 1787.017796][ T3324] vhci_hcd: disconnect device [ 1787.397384][T11412] hsr_slave_0: left promiscuous mode [ 1787.417479][T11412] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1787.440143][ T2293] usb 4-1: new full-speed USB device number 76 using dummy_hcd [ 1787.451005][T11412] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1787.642446][ T2293] usb 4-1: not running at top speed; connect to a high speed hub [ 1787.653700][ T2293] usb 4-1: config 95 has an invalid interface number: 1 but max is 0 [ 1787.665971][ T2293] usb 4-1: config 95 has no interface number 0 [ 1787.674411][ T2293] usb 4-1: config 95 interface 1 has no altsetting 0 [ 1787.692789][ T2293] usb 4-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f [ 1787.726628][ T2293] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1787.740094][T26850] Bluetooth: hci3: command tx timeout [ 1787.747020][ T2293] usb 4-1: Product: syz [ 1787.753779][ T2293] usb 4-1: Manufacturer: syz [ 1787.765396][ T2293] usb 4-1: SerialNumber: syz [ 1787.868315][ T45] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 1788.030416][ T45] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1788.043279][ T45] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 11 [ 1788.096138][ T45] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 59391, setting to 1024 [ 1788.117219][ T45] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1788.175971][ T45] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1788.196643][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1788.238298][ T45] usb 1-1: Product: syz [ 1788.244375][ T2293] usb 4-1: USB disconnect, device number 76 [ 1788.248243][ T45] usb 1-1: Manufacturer: syz [ 1788.267189][ T45] usb 1-1: SerialNumber: syz [ 1788.525345][ T3423] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1788.577975][ T3427] udevd[3427]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1788.928479][T26850] Bluetooth: hci4: command 0x0406 tx timeout [ 1789.190348][ T3423] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1789.433350][ T45] cdc_ncm 1-1:1.0: bind() failure [ 1789.482138][ T45] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1789.524202][ T45] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1789.589165][ T45] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 1789.628839][ T45] usb 1-1: USB disconnect, device number 115 [ 1789.919539][T11412] team0 (unregistering): Port device team_slave_1 removed [ 1790.112395][T11412] team0 (unregistering): Port device team_slave_0 removed [ 1790.184019][ T3453] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9365'. [ 1791.744898][ T3475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9374'. [ 1791.748395][ T5915] vhci_hcd: vhci_device speed not set [ 1791.765016][ T3475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9374'. [ 1791.858740][ T2293] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 1791.973233][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.982196][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.038391][ T2293] usb 1-1: Using ep0 maxpacket: 8 [ 1792.117864][ T2293] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 1792.170450][ T2293] usb 1-1: config 179 has no interface number 0 [ 1792.190588][ T2293] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1792.255733][ T2293] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1792.306983][ T2293] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1792.343537][ T2293] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1792.393495][ T2293] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1792.425829][ T2293] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1792.499134][ T3472] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1792.827593][ T2318] usb 1-1: USB disconnect, device number 116 [ 1792.827681][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1792.844066][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1793.051451][ T3255] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1793.110970][ T3255] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1793.153973][ T3255] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1793.240059][ T3255] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1793.833069][ T3255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1793.854967][ T3516] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9382'. [ 1793.945990][ T3255] 8021q: adding VLAN 0 to HW filter on device team0 [ 1794.007538][T18326] bridge0: port 1(bridge_slave_0) entered blocking state [ 1794.017399][T18326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1794.150582][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1794.158794][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1794.534253][ T3255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1794.771828][ T3255] veth0_vlan: entered promiscuous mode [ 1794.823208][ T3255] veth1_vlan: entered promiscuous mode [ 1795.011563][ T3255] veth0_macvtap: entered promiscuous mode [ 1795.047675][ T3255] veth1_macvtap: entered promiscuous mode [ 1795.177019][ T3255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1795.235310][ T3255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1795.295195][T11412] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1795.352988][T11412] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1795.471645][ T3536] delete_channel: no stack [ 1795.480594][ T3534] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1795.689759][T11412] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1795.789513][T11412] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1796.197786][ T3552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9392'. [ 1796.220303][T11412] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1796.278811][T11412] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1796.444147][T18264] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1796.491314][T18264] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1796.532981][ T3556] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9393'. [ 1797.136444][ T3575] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1798.104530][ T3592] program syz.3.9402 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1798.546336][ T3606] binder: BINDER_SET_CONTEXT_MGR already set [ 1798.593292][ T3606] binder: 3605:3606 ioctl 4018620d 200000000040 returned -16 [ 1798.865137][ T3617] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9412'. [ 1798.908476][ T3617] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9412'. [ 1798.978453][ T3617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9412'. [ 1802.284525][ T3671] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9427'. [ 1802.457640][ T3679] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9430'. [ 1803.803743][ T3681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1804.462458][ T3687] netlink: 4280 bytes leftover after parsing attributes in process `syz.4.9433'. [ 1804.529395][ T3687] netlink: 4280 bytes leftover after parsing attributes in process `syz.4.9433'. [ 1805.188516][ T2293] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1805.273527][ T3716] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9442'. [ 1805.363673][ T2293] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1805.403652][ T2293] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1805.443971][ T2293] usb 3-1: Product: syz [ 1805.461287][ T2293] usb 3-1: Manufacturer: syz [ 1805.480412][ T2293] usb 3-1: SerialNumber: syz [ 1805.514885][ T2293] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1805.532677][ T2293] r8152-cfgselector 3-1: config 0 descriptor?? [ 1806.587260][ T2318] r8152-cfgselector 3-1: USB disconnect, device number 7 [ 1807.447308][ T3754] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9452'. [ 1810.417705][ T3769] tipc: Started in network mode [ 1810.435817][ T3769] tipc: Node identity 4, cluster identity 4711 [ 1810.445945][ T3769] tipc: Node number set to 4 [ 1811.784544][ T3804] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9475'. [ 1812.488437][T17249] usb 1-1: new full-speed USB device number 117 using dummy_hcd [ 1812.728793][T17249] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 1812.769452][T17249] usb 1-1: config 0 has no interface number 0 [ 1812.789433][T17249] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1812.816672][ T3827] binder: 3805:3827 ioctl 4018620d 0 returned -22 [ 1812.819117][T17249] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1812.870056][T17249] usb 1-1: Product: syz [ 1812.876140][T17249] usb 1-1: Manufacturer: syz [ 1812.917208][T17249] usb 1-1: SerialNumber: syz [ 1812.935147][T17249] usb 1-1: config 0 descriptor?? [ 1813.471088][T17249] usb 1-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 1813.494955][T17249] usb 1-1: Firmware version (0.0) predates our first public release. [ 1813.552572][T17249] usb 1-1: Please update to version 0.2 or newer [ 1813.919595][T17249] usb 1-1: USB disconnect, device number 117 [ 1815.025855][ T3850] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9489'. [ 1816.328688][ T5915] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1816.767699][ T5915] usb 5-1: Using ep0 maxpacket: 8 [ 1816.986423][ T5915] usb 5-1: config 2 has an invalid interface number: 31 but max is 0 [ 1817.030565][ T3874] syz.1.9499 (3874): drop_caches: 2 [ 1817.050425][ T5915] usb 5-1: config 2 has no interface number 0 [ 1817.134141][ T5915] usb 5-1: config 2 interface 31 has no altsetting 0 [ 1817.190272][ T5915] usb 5-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1817.255649][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1817.371399][ T5915] usb 5-1: Product: syz [ 1817.445578][ T5915] usb 5-1: Manufacturer: syz [ 1817.463263][ T5915] usb 5-1: SerialNumber: syz [ 1817.530885][ T5915] ch9200 5-1:2.31: probe with driver ch9200 failed with error -22 [ 1819.222315][T19054] usb 5-1: USB disconnect, device number 110 [ 1819.629995][ T3908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9509'. [ 1820.038794][ T3921] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9514'. [ 1820.051007][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805ee31000: rx timeout, send abort [ 1820.546381][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805ee32400: rx timeout, send abort [ 1820.557027][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805ee31000: abort rx timeout. Force session deactivation [ 1820.705418][ T3925] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1821.056338][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805ee32400: abort rx timeout. Force session deactivation [ 1821.308320][ T3937] delete_channel: no stack [ 1821.579616][T18326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1821.598241][T18326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1821.680481][T18326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1821.740073][T18326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1821.816188][T18326] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 1821.927837][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1821.990747][ T3952] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9526'. [ 1821.998186][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1822.136617][ T3954] tipc: Enabling of bearer rejected, failed to enable media [ 1822.138332][T18326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1822.194124][T18326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1822.289847][ T3955] syzkaller0: entered promiscuous mode [ 1822.300619][ T3955] syzkaller0: entered allmulticast mode [ 1822.312627][T18326] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 1822.362915][T18326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1822.428599][T18326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1822.518313][ T3954] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9527'. [ 1822.602235][T15737] ------------[ cut here ]------------ [ 1822.612828][T15737] WARNING: CPU: 1 PID: 15737 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x3ca/0x440 [ 1822.625200][T15737] Modules linked in: [ 1822.631003][T15737] CPU: 1 UID: 0 PID: 15737 Comm: kworker/u8:4 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 1822.644760][T15737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1822.655483][T15737] Workqueue: cfg80211 cfg80211_event_work [ 1822.661536][T15737] RIP: 0010:__cfg80211_ibss_joined+0x3ca/0x440 [ 1822.668544][T15737] Code: 00 00 00 75 69 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 92 76 e7 f6 90 0f 0b 90 eb bd e8 87 76 e7 f6 90 <0f> 0b 90 4c 8b 6c 24 18 eb ad e8 77 76 e7 f6 90 0f 0b 90 e9 de fd [ 1822.694493][T15737] RSP: 0018:ffffc9001c60f8e0 EFLAGS: 00010293 [ 1822.702494][T15737] RAX: ffffffff8ad83509 RBX: dffffc0000000000 RCX: ffff88801cb30000 [ 1822.703685][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803185bc00: rx timeout, send abort [ 1822.712391][T15737] RDX: 0000000000000000 RSI: ffffffff8d9b6dbe RDI: ffffffff8be33400 [ 1822.731009][T15737] RBP: ffffc9001c60f9b0 R08: ffffffff8fa37e37 R09: 1ffffffff1f46fc6 [ 1822.741055][T15737] R10: dffffc0000000000 R11: fffffbfff1f46fc7 R12: ffff888068978d90 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1822.750682][T15737] R13: 1ffff920038c1f24 R14: ffff8880753b3338 R15: 0000000000000006 [ 1822.760980][T15737] FS: 0000000000000000(0000) GS:ffff888125d1c000(0000) knlGS:0000000000000000 [ 1822.771448][T15737] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1822.780154][T15737] CR2: 0000001b35108ff8 CR3: 000000002fcdc000 CR4: 00000000003526f0 [ 1822.791862][T15737] DR0: 000000000000000a DR1: 0000000000000002 DR2: 0000000000000003 [ 1822.802515][T15737] DR3: 0000000080000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1822.818792][T15737] Call Trace: [ 1822.825741][T15737] [ 1822.830191][T15737] ? lockdep_hardirqs_on+0x9c/0x150 [ 1822.836259][T15737] ? __pfx___cfg80211_ibss_joined+0x10/0x10 [ 1822.845014][T15737] ? __pfx___mutex_lock+0x10/0x10 [ 1822.850431][T15737] cfg80211_process_wdev_events+0x38a/0x4f0 [ 1822.859419][T15737] cfg80211_process_rdev_events+0xa1/0x110 [ 1822.867043][T15737] cfg80211_event_work+0x31/0x70 [ 1822.873705][T15737] ? process_scheduled_works+0x9ef/0x17b0 [ 1822.880634][T15737] process_scheduled_works+0xade/0x17b0 [ 1822.887065][T15737] ? __pfx_process_scheduled_works+0x10/0x10 [ 1822.893691][T15737] worker_thread+0x8a0/0xda0 [ 1822.898935][T15737] kthread+0x70e/0x8a0 [ 1822.903498][T15737] ? __pfx_worker_thread+0x10/0x10 [ 1822.909049][T15737] ? __pfx_kthread+0x10/0x10 [ 1822.914318][T15737] ? _raw_spin_unlock_irq+0x23/0x50 [ 1822.919877][T15737] ? lockdep_hardirqs_on+0x9c/0x150 [ 1822.925229][T15737] ? __pfx_kthread+0x10/0x10 [ 1822.930057][T15737] ret_from_fork+0x3f9/0x770 [ 1822.935239][T15737] ? __pfx_ret_from_fork+0x10/0x10 [ 1822.940422][T15737] ? __switch_to_asm+0x39/0x70 [ 1822.945867][T15737] ? __switch_to_asm+0x33/0x70 [ 1822.950900][T15737] ? __pfx_kthread+0x10/0x10 [ 1822.955512][T15737] ret_from_fork_asm+0x1a/0x30 [ 1822.961044][T15737] [ 1822.964689][T15737] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1822.972417][T15737] CPU: 1 UID: 0 PID: 15737 Comm: kworker/u8:4 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 1822.986324][T15737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1822.998049][T15737] Workqueue: cfg80211 cfg80211_event_work [ 1823.004342][T15737] Call Trace: [ 1823.008250][T15737] [ 1823.012055][T15737] dump_stack_lvl+0x99/0x250 [ 1823.016997][T15737] ? __asan_memcpy+0x40/0x70 [ 1823.021787][T15737] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1823.027277][T15737] ? __pfx__printk+0x10/0x10 [ 1823.032129][T15737] vpanic+0x281/0x750 [ 1823.037147][T15737] ? __pfx__printk+0x10/0x10 [ 1823.042774][T15737] ? __pfx_vpanic+0x10/0x10 [ 1823.047854][T15737] ? is_bpf_text_address+0x26/0x2b0 [ 1823.053359][T15737] panic+0xb9/0xc0 [ 1823.057286][T15737] ? __pfx_panic+0x10/0x10 [ 1823.061842][T15737] __warn+0x31b/0x4b0 [ 1823.065836][T15737] ? __cfg80211_ibss_joined+0x3ca/0x440 [ 1823.071695][T15737] ? __cfg80211_ibss_joined+0x3ca/0x440 [ 1823.078020][T15737] report_bug+0x2be/0x4f0 [ 1823.083561][T15737] ? __cfg80211_ibss_joined+0x3ca/0x440 [ 1823.089927][T15737] ? __cfg80211_ibss_joined+0x3ca/0x440 [ 1823.096189][T15737] ? __cfg80211_ibss_joined+0x3cc/0x440 [ 1823.102410][T15737] handle_bug+0x84/0x160 [ 1823.107007][T15737] exc_invalid_op+0x1a/0x50 [ 1823.111979][T15737] asm_exc_invalid_op+0x1a/0x20 [ 1823.117306][T15737] RIP: 0010:__cfg80211_ibss_joined+0x3ca/0x440 [ 1823.123661][T15737] Code: 00 00 00 75 69 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 92 76 e7 f6 90 0f 0b 90 eb bd e8 87 76 e7 f6 90 <0f> 0b 90 4c 8b 6c 24 18 eb ad e8 77 76 e7 f6 90 0f 0b 90 e9 de fd [ 1823.145124][T15737] RSP: 0018:ffffc9001c60f8e0 EFLAGS: 00010293 [ 1823.151658][T15737] RAX: ffffffff8ad83509 RBX: dffffc0000000000 RCX: ffff88801cb30000 [ 1823.160276][T15737] RDX: 0000000000000000 RSI: ffffffff8d9b6dbe RDI: ffffffff8be33400 [ 1823.168737][T15737] RBP: ffffc9001c60f9b0 R08: ffffffff8fa37e37 R09: 1ffffffff1f46fc6 [ 1823.177522][T15737] R10: dffffc0000000000 R11: fffffbfff1f46fc7 R12: ffff888068978d90 [ 1823.187011][T15737] R13: 1ffff920038c1f24 R14: ffff8880753b3338 R15: 0000000000000006 [ 1823.196003][T15737] ? __cfg80211_ibss_joined+0x3c9/0x440 [ 1823.202031][T15737] ? lockdep_hardirqs_on+0x9c/0x150 [ 1823.208316][T15737] ? __pfx___cfg80211_ibss_joined+0x10/0x10 [ 1823.215373][T15737] ? __pfx___mutex_lock+0x10/0x10 [ 1823.221327][T15737] cfg80211_process_wdev_events+0x38a/0x4f0 [ 1823.227947][T15737] cfg80211_process_rdev_events+0xa1/0x110 [ 1823.233892][T15737] cfg80211_event_work+0x31/0x70 [ 1823.239525][T15737] ? process_scheduled_works+0x9ef/0x17b0 [ 1823.245810][T15737] process_scheduled_works+0xade/0x17b0 [ 1823.251742][T15737] ? __pfx_process_scheduled_works+0x10/0x10 [ 1823.257941][T15737] worker_thread+0x8a0/0xda0 [ 1823.263007][T15737] kthread+0x70e/0x8a0 [ 1823.267757][T15737] ? __pfx_worker_thread+0x10/0x10 [ 1823.273700][T15737] ? __pfx_kthread+0x10/0x10 [ 1823.278585][T15737] ? _raw_spin_unlock_irq+0x23/0x50 [ 1823.284347][T15737] ? lockdep_hardirqs_on+0x9c/0x150 [ 1823.289697][T15737] ? __pfx_kthread+0x10/0x10 [ 1823.295054][T15737] ret_from_fork+0x3f9/0x770 [ 1823.299675][T15737] ? __pfx_ret_from_fork+0x10/0x10 [ 1823.305470][T15737] ? __switch_to_asm+0x39/0x70 [ 1823.310371][T15737] ? __switch_to_asm+0x33/0x70 [ 1823.315480][T15737] ? __pfx_kthread+0x10/0x10 [ 1823.320162][T15737] ret_from_fork_asm+0x1a/0x30 [ 1823.325010][T15737] [ 1823.328550][T15737] Kernel Offset: disabled [ 1823.333007][T15737] Rebooting in 86400 seconds..