last executing test programs: 10.213096201s ago: executing program 3 (id=528): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = io_uring_setup(0x7076, &(0x7f0000000200)={0x0, 0x9e34, 0x8, 0x3, 0x2a9}) io_uring_register$IORING_UNREGISTER_PBUF_RING(r5, 0x17, &(0x7f0000000940)={0x0, 0x0, 0x1}, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c000000b47b1abb41fde74a4f38369e735a449b85302b4cddf241ec5d36db409f714e3c7453a1c03a254ee6feed2399c001cf3708aac47403ea317ab78f537f8539db22e6f658e32ebeddb7e57c2306fad9024cc1d39a77d5fde8a86fffae7d068bf75cfb666c09cdbf3e26431c3c0d158b7c3b759efb", @ANYRES16=r2, @ANYBLOB="0100000000000000000007000000140008000000000000000000000000000000000005001400000000000c0016000000000000000000"], 0x3c}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x1c8, &(0x7f0000000500)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @remote, @void, {@ipv4={0x800, @icmp={{0x4a, 0x4, 0x0, 0x1, 0x1ba, 0xd, 0x0, 0x8, 0x1, 0x0, @loopback, @local, {[@end, @cipso={0x86, 0x1f, 0x2, [{0x5, 0xb, "1a1684136c584222cc"}, {0x5, 0xe, "8bdb462461c0e156b0d280fe"}]}, @cipso={0x86, 0x61, 0x0, [{0x7, 0x11, "837e24099e102598a7296473f7b96c"}, {0x2, 0xe, "f41cfc4f71f66e8b3d3f7c83"}, {0x1, 0xd, "5daae726ff199d47399a24"}, {0x2, 0x7, "090d7c055b"}, {0x7, 0xb, "f875df647ad0a0ed28"}, {0x6, 0x12, "06f18d8cefadc305b29bc1364d7200bf"}, {0x5, 0xb, "ff06a745b744e8500c"}]}, @ssrr={0x89, 0x17, 0x29, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @local, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0x1c, 0xd8, 0x1, 0x2, [{@private=0xa010101, 0x961}, {@private=0xa010100, 0x80000001}, {@rand_addr=0x64010100, 0x80000001}]}, @noop, @timestamp_prespec={0x44, 0x14, 0xb4, 0x3, 0x6, [{@multicast1, 0x1}, {@broadcast, 0xbd}]}, @timestamp_addr={0x44, 0x3c, 0xb8, 0x1, 0x5, [{@local, 0x100}, {@broadcast, 0x1}, {@loopback, 0x1}, {@multicast1, 0xb}, {@empty, 0x5}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x7f}]}, @timestamp={0x44, 0xc, 0x8, 0x0, 0xb, [0x101, 0x6]}]}}, @parameter_prob={0xc, 0x0, 0x0, 0x3, 0x1, 0x0, {0x21, 0x4, 0x3, 0x3c, 0x2, 0x64, 0x100, 0x10, 0x2, 0x72, @multicast2, @rand_addr=0x64010100, {[@timestamp_prespec={0x44, 0x2c, 0x7, 0x3, 0xb, [{@multicast2, 0x8}, {@rand_addr=0x64010102, 0x27}, {@multicast2, 0x40}, {@local, 0xad4}, {@private=0xa010101}]}, @end, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x8, 0x84, 0x0, 0x6, [0x9]}, @rr={0x7, 0x27, 0x9f, [@dev={0xac, 0x14, 0x14, 0x2c}, @local, @empty, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x36}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @empty, @multicast1]}, @ssrr={0x89, 0xf, 0xc4, [@multicast1, @private=0xa010100, @multicast2]}]}}, "735bf26152cb"}}}}}, 0x0) 9.041540096s ago: executing program 3 (id=530): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, 0xfffffffffffffffe) syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b000000000000090502"], 0x0) (async) r1 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b000000000000090502"], 0x0) syz_usb_ep_read(r1, 0x2, 0x0, 0x0) 7.737881391s ago: executing program 1 (id=531): ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000000)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x3, 0x0, 0x1400, 0x400, 0x2, 0x42c0029, r1}) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000100)='wg2\x00', 0x4) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000140)=""/157, 0x9d}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/92, 0x5c}, {&(0x7f00000012c0)=""/154, 0x9a}], 0x5, &(0x7f0000001400)=""/51, 0x33}, 0x40003043) r2 = syz_mount_image$fuse(&(0x7f0000001480), &(0x7f00000014c0)='./file0\x00', 0x8000, &(0x7f0000001500)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@default_permissions}, {@default_permissions}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x3}}, {@blksize={'blksize', 0x3d, 0x3800}}], [{@euid_eq={'euid', 0x3d, 0xee00}}, {@dont_measure}, {@uid_lt}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@fowner_gt={'fowner>', 0xee00}}]}}, 0x0, 0x0, &(0x7f0000001680)="f5cf5a2fd1") r3 = open_tree(r2, &(0x7f00000016c0)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000001700)={{0x1, 0x1, 0x18, r3, {0x700, 0x8}}, './file0/file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001740)={'wlan1\x00'}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_IO(r4, 0x2285, &(0x7f0000001a40)={0x53, 0x0, 0xd4, 0x0, @buffer={0x0, 0x51, &(0x7f0000001780)=""/81}, &(0x7f0000001800)="f763f01927b1100338573fb054cae2b08d0bc5c556c12d2eb191ff197d044e9412a41b3997117ff290b8e2f6c3fc059d92506aef5bb179d04dd89d31fba4f50ba0e7cd9a8118e1592ad6af674bf3a29fbf41c5f54db5cdd85981569f35bccc5c7be1f7bb6acb2a5c00420edb9e86f5867ca383578575e7ce9c4de00475707eefb96f57dc45180c77484f537059889b24c3a539a539dc2b3ec1fe740c57e1043591dd5c9fc75103afd8affa6fdd2d51b75157e3e2220a68104bb86674a4953714132e460c2676baeebde9cc2925bcba5c01ed846c", &(0x7f0000001900)=""/220, 0xffffffff, 0x10026, 0x2, &(0x7f0000001a00)}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000001ac0), 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r4, 0x4122, 0x0) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000001b00)='wg1\x00', 0x4) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFBR(r6, 0x8940, &(0x7f0000001b80)=@add_del={0x2, &(0x7f0000001b40)='macvlan0\x00'}) bind$inet6(r4, &(0x7f0000001bc0)={0xa, 0x4e22, 0x1ff, @empty, 0xfd}, 0x1c) write$P9_RLINK(r3, &(0x7f0000001c00)={0x7, 0x47, 0x1}, 0x7) write$UHID_CREATE2(r4, &(0x7f0000001c40)={0xb, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0xb6, 0x2, 0x7, 0x40, 0x2, 0x2, "513a2ae34c2c97bcc70b7deb231e6efa3593a4a2400be5c58619839ed71e4d7b4da5a41904b71d8b489f2691c28b5ffcc2472db874d7c4061a1a90d6f35249d82509ee545d11f4081cb73c4885e46e5bdb9b60517f5175f17c63a37adf558c589180a7dd21d82f260ad39fc9292725a65733b6ea92084b125c19d707e58a39493fee4aaef8090b48519eb0281db6be2c6ae6fb77a2c7e2ece5b5644b25e58fe5a9baa7ac191d3ff5726147656bdeaefe064a7ba816aa"}}, 0x1ce) mknod$loop(&(0x7f0000001e40)='\x00', 0x10, 0x1) r7 = fcntl$dupfd(r0, 0x0, r5) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000001e80)={@private}, &(0x7f0000001ec0)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000001f80)={0x0, 0x68, &(0x7f0000001f00)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x400, @remote, 0x1}, @in={0x2, 0x4e21, @private=0xa010100}, @in6={0xa, 0x4e22, 0xfff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80000001}]}, &(0x7f0000001fc0)=0x10) ioctl$EXT4_IOC_GETFSUUID(r7, 0x8008662c, &(0x7f0000002000)) getsockname(0xffffffffffffffff, &(0x7f0000002040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000020c0)=0x80) syz_open_procfs(0x0, &(0x7f0000002100)='net/if_inet6\x00') fcntl$setpipe(r3, 0x407, 0x8) open_tree(r4, &(0x7f0000002140)='./file0\x00', 0x1101) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f00000021c0)={0x3, r4}) 7.437460745s ago: executing program 1 (id=532): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b80000001900010000000000000000000000000002000000000000000000000000000000000000000000000000000006000000000000000002000000000000", @ANYRES32=0x0, @ANYBLOB], 0xb8}}, 0x0) 7.418715709s ago: executing program 3 (id=533): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x17, 0x4, @tid=r1}, &(0x7f0000000080)) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@ipv4_getaddr={0x20, 0x16, 0x1, 0x70bd27, 0x25dfdbfb, {0x2, 0x3f, 0x10, 0xfe, r2}, [@IFA_FLAGS={0x8, 0x8, 0x80}]}, 0x20}, 0x41}, 0x20008840) 7.276470472s ago: executing program 3 (id=534): r0 = socket$inet(0x2, 0x2000000080002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x44, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040080}, 0x30000080) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b000100000001090401"], 0x0) syz_usb_disconnect(r2) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000c00)="632a1eb3f0c0d7", 0x7}], 0x1}, 0x0) read$alg(r3, &(0x7f0000003780)=""/4096, 0x1000) syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r3], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x402, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r4, &(0x7f0000000200)="03", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0, 0x3}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000900)={0x0, 0x1c, "ea9e46a02af4b96afed651b691d9a61d3804d0f7245a22ed6810d06e"}, &(0x7f0000000940)=0x24) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000180], 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000000000000100000000000000000000000000000000000000000000000000000000000000ffffffff0000000000004fdd80ad00000000000000000000000000100000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108) 7.173389754s ago: executing program 1 (id=535): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x8, 0x3, 0x3b8, 0x0, 0x1000000, 0xffffffff, 0x280, 0xffffffff, 0x320, 0xffffffff, 0xffffffff, 0x320, 0xffffffff, 0x3, 0x0, {[{{@ip={@private, @private, 0x0, 0x0, 'bond_slave_1\x00', 'geneve1\x00'}, 0x0, 0x220, 0x280, 0x0, {0x0, 0x1c8}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_batadv\x00', {0x6, 0x0, 0x39, 0x0, 0x0, 0x80000000, 0x3}}}, @common=@inet=@hashlimit1={{0x58}, {'veth0_to_batadv\x00', {0x0, 0x0, 0x8, 0x0, 0x0, 0x10005, 0x23}}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @broadcast, 0x4, 0x7, [0x0, 0x3d, 0x19, 0x1c, 0x22, 0x30, 0x3c, 0x35, 0x38, 0x30, 0x13, 0x15, 0x1e, 0x36, 0x5, 0x2], 0x1, 0x5, 0x6}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xff, 0x0, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x418) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000000)={'nat\x00', 0x0, 0x0, 0x0, [0xffffffffffffffff, 0x1, 0xfff, 0x7, 0xfffffffffffffff7, 0x3]}, &(0x7f0000000080)=0x78) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x20, 0x38, 0x400, 0x70bd25, 0x25dfdbfd, {0xe}, [@typed={0xc, 0xd5, 0x0, 0x0, @u64=0xaa3}]}, 0x20}, 0x1, 0x0, 0x0, 0x10080}, 0x4) 6.769437757s ago: executing program 1 (id=538): bind$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000100)) memfd_create(0x0, 0x7) socket$rxrpc(0x21, 0x2, 0x2) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r0, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000060000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setresgid(0xee01, 0x0, 0x0) ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000080)) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r6 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r6, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x5, &(0x7f0000000100)=[{&(0x7f0000000500)="12", 0x1}], 0x1}, 0x0) recvmsg$kcm(r6, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x40000002) bind(r2, &(0x7f0000000200)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x80) 5.859215122s ago: executing program 1 (id=540): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000d00)={0x0, 0x0, 0x3, "e648d1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000040)='\x00', 0xf4240) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001e40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001dc0)={0x20, 0x1, 0x34, "712bab"}, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001300)={0x84, &(0x7f0000000e40)={0x0, 0x0, 0x3, "0b3b81"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f00000004c0)={0x0, 0x0, 0x3, '\b\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 4.892912186s ago: executing program 2 (id=543): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@fallback, 0xffffffffffffffff, 0x17, 0x28, 0x0, @void, @void, @void, @value}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newroute={0x48, 0x18, 0x4, 0x70bd2a, 0x25dfdbfc, {0x2, 0x0, 0x20, 0x2, 0xfc, 0x4, 0xfd, 0x0, 0x2300}, [@RTA_IP_PROTO={0x5, 0x1b, 0x6}, @RTA_SPORT={0x6, 0x1c, 0x4e23}, @RTA_MULTIPATH={0xc, 0x9, {0x8, 0x1, 0x3}}, @RTA_PRIORITY={0x8, 0x6, 0x5}, @RTA_PRIORITY={0x8, 0x6, 0x24a6}]}, 0x48}}, 0x0) 4.685963205s ago: executing program 4 (id=545): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b80000001900010000000000000000000000000002000000000000000000000000000000000000000000000000000007000000000000000002000000000000", @ANYRES32=0x0, @ANYBLOB], 0xb8}}, 0x0) 4.558465911s ago: executing program 4 (id=546): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000002c0)={0xc, r1}) (async) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000100)={0xc}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, 0x0) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r0, 0x3b8c, &(0x7f0000000300)={0x30, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(0xffffffffffffffff, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0x2a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) (async) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) (async) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket(0x1d, 0x2, 0x6) ftruncate(0xffffffffffffffff, 0xc17a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) flistxattr(r5, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, r6, 0x2}, 0x18) (async) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) quotactl_fd$Q_GETFMT(r3, 0xffffffff80000402, r7, &(0x7f0000000180)) bind$can_j1939(r3, &(0x7f0000000040)={0x1d, r6, 0x1000000000}, 0x18) (async) ioctl$INCFS_IOC_CREATE_FILE(r3, 0xc058671e, &(0x7f0000001440)={{}, {}, 0x40, 0x0, 0x0, &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000300)="bdc27092e67143d924cc82970c0a5bb8d6023b8606ea03b8bcc19166d94b6fcb746bace6763e4acb630005437aed125dac2f348362d2b013f47c49eccc291efae0f4df01fc46c81d89d786dbe38a7944f68da75dccfde526dc128db9eeaa51e5d52902cb53", 0x65, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="02000000a9050000000000000c5c000000e003639cc708159e585d61d48d39c82ba47b40708fcd8291c6c8af35cff65bddae5fc09b9d81fa33054e587e83f4d4ef53f198d26297788902b5432600161054f6388c5be43d705f40061958d3305e31f82ec7a88c5d889cb9fc274440050000e5b2a9749e11c719ce5fed621d68778e6dfe3a39ae5793f73def8f9a52fed7aa59b3b4373d2d6b4e30042c85c0d83ce0d52cf49c795d46016c84e4b5b736ce6ee3624cdbc2697ea29d5e7af5050bab9d50aa287d14b82286ff662700fe308d00d98a2cc831361860052db1ec111dab520275b07e00203004cf1702eb62b99a7156afbd5565e8b1e89ca1dce7c80cc6813bceca9ef4404ec90d196d2057565d5327545867ae54e42322cdbb9235bab2dc035bb63f2374b9810959c2bd8df8408ae262276daba31be32a9781c75acc8b5c7382a7a6d7644b4159a626b7eb68ce7ce259a17039c74c2cdffa733106432f6e66fd8a3c5a3bde432cd7a9e87244f8846408b40d1e85f832c31599cb6d4fe055c94ccf3ca4f21cce4fb489fdd112589a252cb806b04346dae84ddf267fccc9d398c486359fd1fa57c4b717fad0b67d4c926f5b43b127b5c396df4a1d5ab80509610d989ee71d4c369663f738b7759d910e94834c4a964f2f905a1ffe0239b794ebdd42e989c29cf2ab74f82557be0322914d40137f0664aaf1e175af1a963dfc4306c3b2d1afd57d12bb9cbddca70ec3c804eb54757b1b3154865d64aefeb429510d7a347a3c0dd2cd74b291bc37860548c93f014be23f0d5145c257a65963610a62d0e301e31efce68d3349cf706be4bad45635e09f90f0bc9a16b6856df99545928e716794a5fb8c9f9611b3017734bdbf7c0e312e2a3135c4aa0c2fd9ee6a50707d08ddaf205ce3a4a36d032415fd175d165b5aaf11964d71e56de0c8d8ca3ef5c0d48d738cc031205e92bcb5c0339e15acd9721b5abe1841af8a56d416746b10936b82a7ade7f66641f65a9c546fa952361c80dbe23de5c083b0ae371a9684c615a02e040b9048ce32a4de8d8c1e20f472fddae311479f148017f511cdf7d8fab9fe949ed84e85eaba71c507d12fd6962ce6e905215f90e2851c505172dc8cb1a1c887455e6df081ff0c98021a987c865c943bff8db47dd5ab6a939d12ff7e61c3ae6889897af8483f227be60f245430251140cab910c8b735ccb3cbbb9ec374fc5695f2a7b284734b752e699d092abb6e0ce3c121e99df93dc64bb7c8c84832cbcc65dd7a9074fea083eaaf338bf7823705c074af5e6215da583f120486ec17cb4a943a22a2038a7c07b8447ebc23cf487e2ad6916a38bdaaadb90da8d33e70fc0303fcd98a4b6e7a9970ffe198dd8687f0d2070cb69b0484c6ef7a606a0875c086fcd6a42f0c226476cd7d86ce20819727f8c92938494f7e75eab976dafd47743fc7ae7cd5cdd5b451114cd5840ed2cb6f7be03148aac98be226899db079f3f1e4ebf2662ef82fcaa36987e8d5d4c46917661954f2f13dcc965bc79275b87a89954cd0ea6bf7665f6e07854887f8a4b882b18a1bd6bb0cc7468626d8f199034bbb4f3d0ec0d37b89e4a131dd763a8051a36458baab9ed8e8c69160bd24678e696dc00d122e64d2737ad31e843d7ad9ee02526b2544cf754982c2f700794d4f289168217f122e4617bd763cf991ba35e63cb578f4f7f8386a1b98a90119d2da55b578bf1c24f9aa253e53b49947694f23fd7b38b99807599fa9c4a235a642ea0672bece41b5e55028b3a0ddf7b0db857d9d351d3288d4af8f679be27a9d2b36dcf2d60a6077a92ebc5e3ec383b5d0be1b01b2536eadf62c677007d2807399baac4d1729c727afebc0f57e7bf84702b00f71c0ce2f4cee7bdf78da831d6c9bea65971b72a99cc122e1aa24e8e5b36a2b7863795d178a7f777d547fd47d2182208ad9a0c1757d8d4d5755ae87c6e934c1709c9ea35998d936130e6a27dc49d8e9c3c5ab2d9de480c8abf83aabc323a46d4ec18f040f3c0717e61e039e3e88578cdbe61e8d0f9820000000ab3ec0d72f432ca5e1fb797fc10c0427ab39892f23e4e1d87d"], 0x5d5}) 4.325404506s ago: executing program 4 (id=547): getrandom(&(0x7f0000000400)=""/167, 0xa7, 0x7) syz_emit_ethernet(0x38, &(0x7f0000000200)=ANY=[@ANYBLOB="0180c20000000180c200000008004900002a004000000000907800000000ffffffff000000000100081d8d3131"], 0x0) (async) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/sockstat\x00') setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000040)=[@sack_perm], 0x1) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_1\x00', 0x200}) (async) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x5, {0x2a00, 0x80010000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x1c, 0x18, "fee8a2ab78fc979fd1e00da99350e9f12c6789e2b7fb0000e60080b8780000000100000000000000000000000000000000000000000000000000004300", "2809e8dbe108598948224ad54afac11d875397bdb22f0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000000000000000000800", "90be8b1c551265406c7f306003d8a0f4bd00", [0x3, 0x6f62]}}) 4.272150077s ago: executing program 4 (id=548): syz_mount_image$fuse(0x0, 0x0, 0x2806010, 0x0, 0x1, 0x0, &(0x7f0000000240)="512346367bc680462c65aba7458ef25e84f31e66fd683a148f027349d22cf25f397049ae3f1ca1") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)}], 0x1}], 0x1, 0x0) preadv(r2, &(0x7f00000015c0), 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x4, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x38, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x400000000000077, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x2840128, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000066c0)="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", 0x2000, &(0x7f0000008b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0x0, 0x0, {0x100000000404, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000}}}, 0x0, 0x0, 0x0, 0x0}) readlink(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000540)=""/179, 0xb9) close(0x3) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.112182024s ago: executing program 3 (id=549): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="e200"/20, @ANYRES32, @ANYBLOB="0300"/18, @ANYRES32=0x0, @ANYRES32=0xffffffffffffffff], 0x50) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="20015d000000fac5f047651415c5ef08fa5b894dbb1c7a54a1450fd27547215c78242dbe60834a2536e8ed89fe7b62091c80de4e4fb7f9d119e8abb87805e3e75a1aed345820ff1c73fab339241cbd1f612727851c1788b6fb8ef05e401b14c671f6b6"], 0x0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x1, {0x0, 0x0, 0x12, r7, {}, {0xb, 0xffff}}}, 0x24}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0, @ANYRES32=r4, @ANYBLOB="0000000000000000b705000008000000850000000c0000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x3, 0xff7, &(0x7f0000001e00)=""/4087, 0x0, 0x0, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x1a, 0x98, 0x90, 0x8, 0x547, 0x7303, 0x3027, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x27, 0x0, 0x0, 0x9e, 0x41, 0xb3}}]}}]}}, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r10, 0xae80, 0x0) 3.981386111s ago: executing program 2 (id=550): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000080)=0x1000001, 0x4) ioctl$PTP_PEROUT_REQUEST2(r0, 0x80503d0a, &(0x7f0000000040)) 3.912569646s ago: executing program 2 (id=551): r0 = syz_io_uring_setup(0x82d, &(0x7f0000000300)={0x0, 0x0, 0x20}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x1, 0x3e, &(0x7f0000000640)="81fee571", 0x4) (async) bind$inet6(r4, &(0x7f0000000800)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000180)={0x23, 0x6f, 0x2, {0x2, [{0x8, 0x2, 0x5}, {0x8, 0x4, 0x4}]}}, 0x23) (async) r8 = eventfd2(0x6, 0x800) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) (async) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$BLKZEROOUT(r11, 0x127f, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r12}, 0x10) (async) r13 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r13, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)={&(0x7f0000002740)={0x2, 0xa, 0x0, 0x8, 0x2}, 0x10}}, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)=[{}, {0x0}, {0x0}, {0x0, 0xffffffffffffffe5}, {&(0x7f00000039c0)="10", 0x1}], 0x5}, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x2, r8, 0xa}) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x2, r8, 0xb}) (async) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000000101010000000000000000020000002400028014000080080001000ae000000108000200e00000010c0002800500df05000000000c00188008000140fffffbff1e28663a"], 0x44}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x80}) (async) io_uring_enter(r0, 0x5b43, 0x0, 0x0, 0x0, 0x0) 3.615235462s ago: executing program 2 (id=552): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x8800000000000000, 0x2200) ioctl$SG_SET_DEBUG(r0, 0x227e, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)={{0x12, 0x1, 0x0, 0x40, 0x15, 0x42, 0x20, 0x5a9, 0x1550, 0xe4bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8e, 0xc4, 0x6f}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000640)={0x84, &(0x7f0000000a80)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000200)={0x0, 0x0, 0x1, "04"}, 0x0, 0x0}) r2 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, r2, 0x0, &(0x7f00000003c0)='&*\x00UB$\x1f\x18\b\'\x80\xb2\xdc\xddV\xd8H|\x10R\x94\x92\xec2\x8d\x00g|\x90\xcf\xb8L\x9e_\x99c\xc2\xba\xb9\x0e\xdd\xaa\xaa3\xf7%\x10B\xbdt[\x92\xae\xee\x94\xb4\xd1N`\t\xb1\xa7\xcc\xccL\x0ek[\r\xc8\xd3\x98\xb0\\M\x0etS\xe4^\xd6a\x1f\xbd\xf9\xa2\xc1-\x06\xb6\xc6>M\xaf\xe7\r\xa5k\xe1\x03\xcd\xbb\xbeu \x7fN\xbb2|\xe7\xf9\xbep\xbb\xee\xdc\xe5\x9a\xb6\xd8;\xa3\x94\xa9\x19\x1c2\x15\x7fV1\x1a\xc8D\x9d\xf2\x82\x8f[\xb9*&+\x8e\xe7<\xc0\x12\xae\x7f}\xbaq\xaf(\b\x14\xd3T)\x1d\xc53|\x13\xe7\x90\x96]#e e\x9f\x98\xe0\xc7\x96\xe1I\xda\x8a\xcd\x7f^\x03guf\xfa\x9b\xcb\xdb\r\xe5,5\xdeEt\xa9\x81\xfaV\x89\x888\x9b\xc4\xec|!\xdb\xfe\xa8\x1d\xf8\xd7\xdar\xf5\x98d\x04\x05\xc6\x04Z\x9f\n\xb6G\xbf\xd2\xc4\x88\x94\xa2\x82\xebw@r\xd7\x7f\xd1N\x99\x9cE\x10\xf6\xb8\v\x05:\x84\xff)\xb3\x05\xe3]\x0f\xa9C\xcf^>\x9c\xda\xd6r\x88\xda\xdb\x95\x8b\f\n^8\xaa\x11G\x1a\x17\xb8z\xbe4u\x0f\xdb\x15\xac\x06\xc8\x88:+\xc50i\x02m\xd2\x88\xe5\xb5:\x91=!\x80\xf3\xb1/\x02\xb1M\xab`\xfcC0@\xb6\xf1\x8do[[\xc4V\xc3\xf9n', &(0x7f00000000c0)) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x40b80, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xd) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000300)={0x3ff}, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r5, 0x5423, &(0x7f0000000080)) syz_usb_control_io$uac1(r1, 0x0, 0x0) 3.177363979s ago: executing program 4 (id=553): r0 = socket$netlink(0x10, 0x3, 0x2) r1 = socket(0x10, 0x803, 0x0) write$binfmt_script(r1, 0x0, 0xfffffe5d) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000580)=[@in6={0xa, 0x4e24, 0x0, @private1}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e24, 0x0, @private1}}, 0x0, 0x0, 0x0, 0x0, 0xce0250}, 0x9c) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r3, @ANYBLOB="01ff00e1c2ed00001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="c309000004180600140035007465616d5f736c6176655f310000000008000a00", @ANYRES32=r3, @ANYBLOB="ad41df563463c1357f6587c6eaec0d05d5e97bf4291f8d0a7c6fc70d8dcdea35226ae0c5dbb0a0df268f954a21bf665a56bd27"], 0x3c}}, 0x0) 2.785905385s ago: executing program 4 (id=554): r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000140)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "28d7b07d54891881fe02c1203fe49696b9f26f2da4149683f065714f8a61d1f32c99064bbd27b2aa77459cff33a3a98350f1af9d51ed5bef3d63520d260804d0"}, 0x48, 0xfffffffffffffffd) keyctl$revoke(0x3, r0) (async, rerun: 32) syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x0) (rerun: 32) socket$inet6_sctp(0xa, 0x5, 0x84) (async) unshare(0x20000400) (async) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x2, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r4 = open(&(0x7f0000000180)='./file0\x00', 0x101000, 0x71d00c822f23120b) openat$cgroup_ro(r4, &(0x7f00000000c0)='cpuacct.usage_user\x00', 0x275a, 0x0) (async, rerun: 32) socket$igmp(0x2, 0x3, 0x2) (rerun: 32) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x138) (async, rerun: 32) socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x88) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) (async) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f0000000940), 0x4) (async, rerun: 32) syz_emit_ethernet(0x3ef, &(0x7f0000000980)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x3b9, 0x3a, 0xff, @remote, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x34, '\x00', {0x6, 0x6, "803e65", 0x7, 0x6, 0xff, @remote, @empty, [@dstopts={0x8, 0x11, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x14}}, @pad1, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x3, 0xc, 0xff, 0xfff, [0x4, 0x9, 0x469d, 0xfffffffffffffff8, 0x5, 0x7ff]}}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim, @pad1, @enc_lim={0x4, 0x1, 0xff}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @mcast2}]}, @dstopts={0x33, 0x19, '\x00', [@calipso={0x7, 0x40, {0x3, 0xe, 0x4, 0x3f, [0x400000, 0x0, 0x1, 0x9, 0x4, 0x3, 0x2]}}, @jumbo={0xc2, 0x4, 0x3}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @jumbo={0xc2, 0x4, 0x200}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @remote}, @pad1, @calipso={0x7, 0x50, {0x3, 0x12, 0x0, 0xa5, [0x126, 0x8, 0x10000, 0xffff, 0x9f3b, 0x10000, 0x3f, 0x1, 0x9]}}]}, @dstopts={0x5e, 0x10, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x5, 0x29, "4f002a4fc7c70c7aaa6fedb6618544a0a021b1032c5cb4540f0fd64bdae3389f571b61e6c59187580c"}, @generic={0xd4, 0x33, "816ead0cdbfdd805257d484bbb84f36bc7ab58b364c7971fd17dce249aa567ed67b5266fdf77763e8e62a35a8fc5a5686b95c5"}, @calipso={0x7, 0x20, {0x3, 0x6, 0x1, 0xffc1, [0xffff, 0x9, 0x3]}}]}, @hopopts={0x62, 0xe, '\x00', [@jumbo={0xc2, 0x4, 0x1}, @calipso={0x7, 0x28, {0x3, 0x8, 0x0, 0xf3, [0x2, 0x8, 0x5, 0x3f]}}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x18, {0x2, 0x4, 0xd7, 0x7f, [0x2, 0x7]}}, @calipso={0x7, 0x20, {0x3, 0x6, 0x6, 0x1000, [0x10000, 0x6, 0xff]}}]}, @srh={0x16, 0xe, 0x4, 0x7, 0x2, 0x40, 0x2, [@loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}, @local, @local]}], "3568c9a22d5fe718c510f6169214ca171fc071296f6603f7c100ea1c5256d62b3d7818dfc64b23cf10e1366f27b5177f260ab49640fadaad31bec049b5b7bf1e251d36f2a2393159c333f86f6ef5d9b0e6180746dcc82c4aed5fb6e8b5a652417d47ddeaac4256a4aebf5d3df2ad0f2e932cb2508fa481f31d1aa8d7d2dc38cff7839ffcc393d9d6882296bd65dfad8ef5"}}}}}}}, 0x0) (async, rerun: 32) socket$unix(0x1, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000010bd408205000000000000000109022400011b0000000904"], 0x0) 2.121415751s ago: executing program 0 (id=556): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b80000001900010000000000000000000000000002000000000000000000000000000000000000000000000000000020000000000000000002000000000000", @ANYRES32=0x0, @ANYBLOB], 0xb8}}, 0x0) 1.925414892s ago: executing program 0 (id=557): ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x4}}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000040)={0xe, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r2, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r2, &(0x7f0000000640)={0x2, 0x0, {&(0x7f0000000740)=""/234, 0xea, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r2, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000000)=""/106, 0xfe4e, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg(r2, &(0x7f00000005c0)={0x1, {&(0x7f0000000500)=""/167, 0xa7, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r2, &(0x7f00000006c0)={0x2, 0x0, {&(0x7f0000000200)=""/181, 0xb5, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r2, &(0x7f0000000c40)={0x2, 0x0, {&(0x7f0000000380)=""/51, 0xfffffff8, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r2, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f00000002c0)=""/119, 0xfca2, 0x0, 0x0, 0x3}}, 0x48) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x11a0c0, 0x6c) r3 = syz_open_dev$dmmidi(&(0x7f0000000240), 0x8, 0x400000) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f0000000280)) 1.707868339s ago: executing program 0 (id=558): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x40}}, 0x0) r2 = syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) syz_pidfd_open(r2, 0x0) ioprio_set$pid(0x0, r2, 0x4004) 1.127587639s ago: executing program 0 (id=559): preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000019040)=""/102385, 0x1903c}, {&(0x7f0000000040)=""/16}], 0x1, 0x40000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mprotect(&(0x7f00007ab000/0x4000)=nil, 0x4000, 0x6) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 885.247079ms ago: executing program 1 (id=560): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$qrtr(0x2a, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x4004000) socket$igmp(0x2, 0x3, 0x2) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000d80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d40)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x194}, 0x1, 0x0, 0x0, 0x800}, 0x8010) socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)) r1 = socket(0x40000000002, 0x3, 0xfb) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x19, 0x1, 0x1b8, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000208], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"]}, 0x230) openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1, 0x600b}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x7}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000001c0)={0x15, 0x1, 0x3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000400)={r6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x10001, 0x401f, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000240)={0xb6a, 0x133, 0x2}) 427.592763ms ago: executing program 0 (id=561): prctl$PR_CAPBSET_DROP(0x18, 0x13) prctl$PR_CAPBSET_DROP(0x18, 0x26) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000040)={0x8, &(0x7f0000000000)=[{0x9, 0x7}, {0x2, 0x5}, {0x1000, 0x5}, {0x0, 0x1}, {0x9, 0x4}, {0xc, 0x3}, {0x2, 0x7f}, {0x0, 0x3}]}) ioctl$TIOCL_SETSEL(r0, 0x5410, &(0x7f0000000080)={0x2, {0x2, 0x1, 0x5, 0x0, 0x0, 0x3}}) 350.324197ms ago: executing program 3 (id=562): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000002c0)=[{0x30, 0x0, 0x0, 0x27d2}, {0x16}]}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) futex_waitv(0x0, 0x0, 0x2, 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x7, &(0x7f00000001c0)=0x44, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) sendmsg$can_raw(r3, 0x0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x10, &(0x7f0000000200)=0x1c, 0x4) bind$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) connect$unix(r5, &(0x7f0000000400)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = accept4$unix(r4, 0x0, 0x0, 0x800) connect$unix(r6, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DESC={0x28, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8}, @NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x8c}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(r7, &(0x7f0000000ec0)=[{{&(0x7f0000000080)={0x2, 0x4e25, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r7, &(0x7f0000000c80)="e8", 0x6200, 0x0, 0x0, 0x0) 288.992273ms ago: executing program 2 (id=563): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000001340)=ANY=[@ANYBLOB="010000000000000008000080"]) (async) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000180)=0x6, 0x4) (async) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001440)={0x0, 0x34, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="730000000206050000000000000000000000deffffff0300030000000c0007800800590000000005"], 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x1, 0x6, 0x2, 0x6}, 0x1c) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r4, 0x0) 45.233005ms ago: executing program 0 (id=564): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x2, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000050000000000000000000000000000000000000000000000fcffffff0000ef0000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x108) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000200)={0x0, 0x4e, "bf33a010d38de7ad3c2fa2b8c3302362b11e6cbb12b3e25b6d8c6620179ff41f4caebe5aca6d33772207188272cfa448acd19ba9229335aababf963d3097ab8153ae0eec45718a0d5275db4ade59"}, &(0x7f0000000180)=0x56) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000300)={r1, 0x2c6}, &(0x7f0000000340)=0x8) socket$tipc(0x1e, 0x5, 0x0) r2 = socket(0x200000100000011, 0x803, 0x0) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100), 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x56, &(0x7f00000008c0)=ANY=[@ANYRES16]}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x1c0d}}, {0x4a, &(0x7f0000000440)=@string={0x4a, 0x3, "053464403ef2b404b6dd9d5e4558824c04a7908f5c784c5b9f000000000000c70350b07cfa888ab76ded79e5091ae70e1e03d8d4ce607f12e752a8964513d392dbeca8b90a387e58"}}]}) syz_usb_connect$uac1(0x0, 0x97, &(0x7f0000000800)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0x0, 0x0, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0xc, 0x24, 0x7, 0x0, 0x0, 0x40, "32341681c7"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x0, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x0, 0x4, 0xa1, 0x0, "8ff404000000940000"}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x4, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0xfe}}}}}}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0x25, &(0x7f0000000500)={0x5, 0xf, 0x25, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "79f03953c4c96fe6b1d67b8b584cc085"}, @ssp_cap={0xc, 0x10, 0xa, 0x0, 0x0, 0x3}]}, 0x3, [{0x9d, &(0x7f0000000740)=ANY=[@ANYBLOB="9d0379594b8573ba1de807f914061bb486a9eeb5549fd83515f82e0ca4117d5ecd579cf2a3eafef7377079eb0ecbf1b89b7a7dd3f19e9d890fe3648f133d8272af8bcd089bd8594252b1872d5a6286907b9542e69738c76ff4da43850d9423d6322609bc995eb8b7b088fd0910d90259ac61a382107a6d336cbedf657fae87a95e5a3336022d8b70ad3a67729d309b05d45251f40b91e28bfeca08fe7e43e2139e2a1b34eefdf6f454730039"]}, {0x18, &(0x7f0000000900)=ANY=[@ANYBLOB="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"]}, {0x0, 0x0}]}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x40}}, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r7, &(0x7f0000000180)='.\x00', 0x0, &(0x7f0000001dc0)={0x8f}, 0x20) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10000a1, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x20000004}, 0x4) r9 = syz_open_dev$video(&(0x7f0000000300), 0x0, 0x0) ioctl$VIDIOC_G_CROP(r9, 0xc014563b, 0x0) r10 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r10, 0xc0585609, &(0x7f00000000c0)={0x0, 0x9, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a19422ed"}}) socket$igmp6(0xa, 0x3, 0x2) 0s ago: executing program 2 (id=565): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r0) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={0xc8, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0xc8}}, 0x40000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000130000000000000600000008000300", @ANYRES32=r3, @ANYBLOB="0800050009"], 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x6020400) r5 = socket(0xa, 0x2, 0x3a) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000380)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_CAP(r6, 0xc010640c, &(0x7f0000000680)={0x1}) bind$inet(r5, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x8004}, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r9, 0x29, 0x4a, &(0x7f0000000040)=0x8000, 0x4) bind$inet6(r9, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000001600)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) recvmmsg(r9, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x38, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "4ff5677c1a"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x38}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.489521][ T7071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.513510][ T7071] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.537577][ T7071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.601795][ T7071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.636826][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.644978][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.806587][ T5239] Bluetooth: hci4: command tx timeout [ 201.863812][ T6861] veth0_macvtap: entered promiscuous mode [ 201.980047][ T7071] hsr_slave_0: entered promiscuous mode [ 202.009781][ T7071] hsr_slave_1: entered promiscuous mode [ 202.089271][ T7071] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 202.126844][ T7071] Cannot create hsr debugfs directory [ 202.191804][ T6861] veth1_macvtap: entered promiscuous mode [ 202.369831][ T51] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 202.412616][ T6861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.468298][ T6861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.505264][ T6861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.518462][ T6861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.532587][ T6861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.544067][ T51] usb 2-1: Using ep0 maxpacket: 8 [ 202.550435][ T6861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.563426][ T6861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.575785][ T6861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.586488][ T51] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 202.599775][ T51] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 202.623717][ T6861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.644337][ T51] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 202.679322][ T6861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.706532][ T51] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 202.737206][ T6861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.750251][ T51] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 202.790544][ T51] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 202.812072][ T51] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.827726][ T6861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.846868][ T6861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.996455][ T6861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.022320][ T6861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.048324][ T51] usb 2-1: usb_control_msg returned -32 [ 203.076103][ T51] usbtmc 2-1:16.0: can't read capabilities [ 203.090428][ T6861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.169004][ T6861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.299521][ T6861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.461986][ T6861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.495552][ T6861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.506390][ T6861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.516626][ T6861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.529315][ T6861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.541057][ T6861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.552542][ T6861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.566344][ T6861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.661967][ T6861] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.684214][ T6861] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.752580][ T6861] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.774695][ T6861] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.983652][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.238386][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.321020][ T5237] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 204.338968][ T5237] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 204.371551][ T5237] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 204.382659][ T5237] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 204.396827][ T5237] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 204.406404][ T5237] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 204.508559][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.791151][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.935562][ T8] usb 1-1: USB disconnect, device number 22 [ 205.262771][ T2924] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.289470][ T2924] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.323220][ T5282] usb 2-1: USB disconnect, device number 17 [ 205.529942][ T5280] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 205.701642][ T5280] usb 1-1: Using ep0 maxpacket: 32 [ 205.710024][ T5280] usb 1-1: config 0 has an invalid interface number: 26 but max is 0 [ 205.718179][ T5280] usb 1-1: config 0 has no interface number 0 [ 205.729859][ T5280] usb 1-1: New USB device found, idVendor=1740, idProduct=7100, bcdDevice=67.f4 [ 205.738974][ T5280] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.781179][ T5280] usb 1-1: config 0 descriptor?? [ 206.013114][ T8] usb 1-1: USB disconnect, device number 23 [ 206.251076][ T11] bridge_slave_1: left allmulticast mode [ 206.257374][ T11] bridge_slave_1: left promiscuous mode [ 206.263741][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.277652][ T11] bridge_slave_0: left allmulticast mode [ 206.286499][ T11] bridge_slave_0: left promiscuous mode [ 206.294748][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.505757][ T5239] Bluetooth: hci3: command tx timeout [ 206.523600][ T51] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 206.730640][ T51] usb 2-1: Using ep0 maxpacket: 8 [ 206.741218][ T51] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 206.756558][ T51] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 206.774339][ T51] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 206.787299][ T51] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 206.833710][ T51] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 206.845197][ T51] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.048898][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.082550][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.123912][ T11] bond0 (unregistering): Released all slaves [ 207.157044][ T7180] chnl_net:caif_netlink_parms(): no params data found [ 207.239327][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.247232][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.504036][ T51] usb 2-1: GET_CAPABILITIES returned 0 [ 207.509863][ T51] usbtmc 2-1:16.0: can't read capabilities [ 208.166997][ T7234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.184095][ T7234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.579431][ T5239] Bluetooth: hci3: command tx timeout [ 208.665409][ T11] hsr_slave_0: left promiscuous mode [ 208.692147][ T11] hsr_slave_1: left promiscuous mode [ 208.732017][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.748102][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.760036][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.767880][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.829870][ T11] veth1_macvtap: left promiscuous mode [ 208.835598][ T11] veth0_macvtap: left promiscuous mode [ 208.841902][ T11] veth1_vlan: left promiscuous mode [ 208.847367][ T11] veth0_vlan: left promiscuous mode [ 209.129664][ T5229] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 209.320454][ T5229] usb 1-1: config 0 has an invalid descriptor of length 44, skipping remainder of the config [ 209.345217][ T5229] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 209.391599][ T5229] usb 1-1: New USB device found, idVendor=22b8, idProduct=4234, bcdDevice=32.84 [ 209.402871][ T5229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.411488][ T5229] usb 1-1: Product: syz [ 209.425980][ T5229] usb 1-1: Manufacturer: syz [ 209.431842][ T5229] usb 1-1: SerialNumber: syz [ 209.458511][ T5229] usb 1-1: config 0 descriptor?? [ 209.674753][ T5229] usb 1-1: USB disconnect, device number 24 [ 209.924674][ T5229] usb 2-1: USB disconnect, device number 18 [ 210.557778][ T11] team0 (unregistering): Port device team_slave_1 removed [ 210.660264][ T5239] Bluetooth: hci3: command tx timeout [ 210.923863][ T11] team0 (unregistering): Port device team_slave_0 removed [ 211.084559][ T7271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.119624][ T7271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.317626][ T7284] can: request_module (can-proto-0) failed. [ 212.622389][ T7180] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.637845][ T7180] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.652463][ T7180] bridge_slave_0: entered allmulticast mode [ 212.707862][ T7180] bridge_slave_0: entered promiscuous mode [ 212.742543][ T5239] Bluetooth: hci3: command tx timeout [ 212.760497][ T7071] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 212.784462][ T7273] netlink: 'syz.2.314': attribute type 22 has an invalid length. [ 212.802798][ T7283] netlink: 24 bytes leftover after parsing attributes in process `syz.1.317'. [ 212.880479][ T7180] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.909374][ T7180] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.919491][ T7180] bridge_slave_1: entered allmulticast mode [ 212.928273][ T7180] bridge_slave_1: entered promiscuous mode [ 212.942198][ T7071] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 213.005040][ T7071] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 213.126813][ T29] audit: type=1326 audit(1728876690.841:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7296 comm="syz.1.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce397dff9 code=0x7ffc0000 [ 213.171072][ T29] audit: type=1326 audit(1728876690.841:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7296 comm="syz.1.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce397dff9 code=0x7ffc0000 [ 213.194887][ T29] audit: type=1326 audit(1728876690.841:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7296 comm="syz.1.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fcce397dff9 code=0x7ffc0000 [ 213.231751][ T7071] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 213.263890][ T7180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.301693][ T7180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.328990][ T29] audit: type=1326 audit(1728876690.841:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7296 comm="syz.1.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce397dff9 code=0x7ffc0000 [ 213.400418][ T29] audit: type=1326 audit(1728876690.841:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7296 comm="syz.1.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce397dff9 code=0x7ffc0000 [ 213.425032][ T29] audit: type=1326 audit(1728876690.841:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7296 comm="syz.1.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcce397dff9 code=0x7ffc0000 [ 213.447633][ T29] audit: type=1326 audit(1728876690.841:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7296 comm="syz.1.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce397dff9 code=0x7ffc0000 [ 213.478617][ T29] audit: type=1326 audit(1728876690.841:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7296 comm="syz.1.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce397dff9 code=0x7ffc0000 [ 213.512017][ T29] audit: type=1326 audit(1728876690.871:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7296 comm="syz.1.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7fcce397dff9 code=0x7ffc0000 [ 213.539534][ T29] audit: type=1326 audit(1728876690.871:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7296 comm="syz.1.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce397dff9 code=0x7ffc0000 [ 213.567727][ T7180] team0: Port device team_slave_0 added [ 213.580825][ T7180] team0: Port device team_slave_1 added [ 213.785897][ T7180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.822548][ T7180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.871398][ T7307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.891033][ T7180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.913791][ T7307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.974383][ T7180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.011575][ T7180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.134511][ T7180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.383132][ T7312] syzkaller0: entered promiscuous mode [ 214.388964][ T7312] syzkaller0: entered allmulticast mode [ 215.998961][ T7350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.029020][ T7350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.056435][ T7350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.141853][ T7350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.937327][ T7333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.324'. [ 219.332880][ T7180] hsr_slave_0: entered promiscuous mode [ 219.382828][ T7180] hsr_slave_1: entered promiscuous mode [ 219.388576][ T7374] binder: 7372:7374 ioctl 541b 0 returned -22 [ 219.403581][ T7180] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.418652][ T7180] Cannot create hsr debugfs directory [ 219.539861][ T937] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 219.700536][ T937] usb 1-1: Using ep0 maxpacket: 16 [ 219.735422][ T937] usb 1-1: config 0 has an invalid interface number: 53 but max is 0 [ 219.761404][ T937] usb 1-1: config 0 has no interface number 0 [ 219.821942][ T937] usb 1-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=ed.e2 [ 219.848912][ T7071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.849231][ T937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.874495][ T937] usb 1-1: Product: syz [ 219.880437][ T937] usb 1-1: Manufacturer: syz [ 219.885107][ T937] usb 1-1: SerialNumber: syz [ 219.892151][ T937] usb 1-1: config 0 descriptor?? [ 219.909553][ T7383] binder: 7381:7383 ioctl c0306201 0 returned -14 [ 220.100828][ T5229] usb 1-1: USB disconnect, device number 25 [ 220.114636][ T7389] binder: 7388:7389 ioctl 4018620d 0 returned -22 [ 220.133684][ T7071] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.195553][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.202893][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.218368][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.225641][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.439690][ T51] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 220.514105][ T7071] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.621276][ T51] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 220.639480][ T51] usb 2-1: config 0 has no interface number 0 [ 220.661307][ T51] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 220.706170][ T7071] veth0_vlan: entered promiscuous mode [ 220.719459][ T51] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.727533][ T51] usb 2-1: Product: syz [ 220.774602][ T51] usb 2-1: Manufacturer: syz [ 220.786347][ T7071] veth1_vlan: entered promiscuous mode [ 220.792517][ T51] usb 2-1: SerialNumber: syz [ 220.812187][ T51] usb 2-1: config 0 descriptor?? [ 220.873515][ T7180] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 220.894583][ T7404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.942213][ T7404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.974508][ T7409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.990682][ T7180] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 221.005709][ T7410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.028988][ T7409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.061390][ T7410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.074984][ T7180] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 221.081383][ T7409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.095423][ T7180] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 221.143064][ T7071] veth0_macvtap: entered promiscuous mode [ 221.209525][ T7409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.214264][ T7071] veth1_macvtap: entered promiscuous mode [ 221.382516][ T7071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.382554][ T51] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected [ 221.414616][ T51] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81 [ 221.429347][ T51] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1 [ 221.437199][ T51] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2 [ 221.448952][ T51] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 221.465369][ T7071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.499259][ T7071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.528020][ T7071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.545793][ T7071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.564827][ T7071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.575414][ T7071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.614191][ T51] usb 2-1: USB disconnect, device number 19 [ 221.647749][ T7071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.668295][ T7071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.680259][ T51] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 221.689311][ T7071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.709520][ T7071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.721434][ T51] keyspan 2-1:0.133: device disconnected [ 221.731620][ T7071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.748361][ T7071] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.817390][ T7071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.833169][ T7071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.843701][ T7071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.854624][ T7071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.865504][ T7071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.883609][ T7071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.919560][ T7071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.931633][ T7071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.942072][ T7071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.955832][ T7071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.966331][ T7071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.987182][ T7071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.018871][ T7071] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.050314][ T7071] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.059852][ T7071] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.068692][ T7071] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.077755][ T7071] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.106755][ T7434] hsr_slave_0: left promiscuous mode [ 222.124242][ T7434] hsr_slave_1: left promiscuous mode [ 222.264895][ T7180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.629758][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.648490][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.685949][ T7180] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.726301][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.733532][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.815525][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.822820][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.999064][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.060953][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.069374][ T5282] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 223.227956][ T7180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.318098][ T5282] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 223.327545][ T5282] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.336068][ T5282] usb 2-1: Product: syz [ 223.341084][ T5282] usb 2-1: Manufacturer: syz [ 223.345749][ T5282] usb 2-1: SerialNumber: syz [ 223.404754][ T7180] veth0_vlan: entered promiscuous mode [ 223.432639][ T5282] usb 2-1: config 0 descriptor?? [ 223.503579][ T7180] veth1_vlan: entered promiscuous mode [ 223.678430][ T5282] cx82310_eth 2-1:0.0: probe with driver cx82310_eth failed with error -22 [ 223.893710][ T7180] veth0_macvtap: entered promiscuous mode [ 224.010613][ T7180] veth1_macvtap: entered promiscuous mode [ 224.108646][ T7180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.335850][ T7180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.407018][ T7180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.457295][ T7180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.518200][ T7180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.560539][ T7180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.580233][ T7180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.594170][ T7180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.604954][ T7180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.616182][ T7180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.629347][ T7180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.644032][ T7180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.669083][ T7180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.683438][ T7180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.803069][ T7180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.846942][ T5282] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 224.855491][ T7180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.899375][ T7180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.909464][ T5282] usb 2-1: USB disconnect, device number 20 [ 224.976467][ T7180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.032071][ T7180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.068805][ T7180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.096745][ T7180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.138228][ T7180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.151421][ T7180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.166895][ T7180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.183811][ T7180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.195713][ T7180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.209267][ T7180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.220079][ T7180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.231224][ T7180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.248289][ T7180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.319338][ T5282] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 225.369304][ T8] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 225.394798][ T7180] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.441279][ T7180] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.481667][ T7180] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.489398][ T5282] usb 2-1: device descriptor read/64, error -71 [ 225.491275][ T7180] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.539991][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 225.547330][ T8] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 225.555912][ T8] usb 5-1: config 0 has no interface number 0 [ 225.562584][ T8] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 225.575005][ T8] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 225.586825][ T8] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 225.596495][ T8] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 225.604930][ T8] usb 5-1: Product: syz [ 225.615853][ T8] usb 5-1: SerialNumber: syz [ 225.624470][ T8] usb 5-1: config 0 descriptor?? [ 225.638164][ T8] usbhid 5-1:0.8: couldn't find an input interrupt endpoint [ 225.759643][ T5282] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 225.839543][ T5280] usb 5-1: USB disconnect, device number 43 [ 225.921635][ T5282] usb 2-1: device descriptor read/64, error -71 [ 225.929921][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.941367][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.059339][ T5282] usb usb2-port1: attempt power cycle [ 226.076167][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.132147][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.571764][ T5282] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 226.600001][ T5282] usb 2-1: device descriptor read/8, error -71 [ 226.849354][ T5282] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 226.870577][ T5282] usb 2-1: device descriptor read/8, error -71 [ 226.950715][ T7524] input: syz0 as /devices/virtual/input/input13 [ 226.979737][ T5282] usb usb2-port1: unable to enumerate USB device [ 228.030633][ T51] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 228.060506][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 228.060527][ T29] audit: type=1326 audit(1728876705.731:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7561 comm="syz.3.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dcdb7dff9 code=0x7ffc0000 [ 228.219420][ T51] usb 5-1: device descriptor read/64, error -71 [ 228.228862][ T29] audit: type=1326 audit(1728876705.741:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7561 comm="syz.3.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dcdb7dff9 code=0x7ffc0000 [ 228.281906][ T29] audit: type=1326 audit(1728876705.741:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7561 comm="syz.3.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f9dcdb7dff9 code=0x7ffc0000 [ 228.402904][ T29] audit: type=1326 audit(1728876705.741:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7561 comm="syz.3.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dcdb7dff9 code=0x7ffc0000 [ 228.469922][ T51] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 228.512127][ T29] audit: type=1326 audit(1728876705.741:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7561 comm="syz.3.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dcdb7dff9 code=0x7ffc0000 [ 228.688900][ T29] audit: type=1326 audit(1728876705.741:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7561 comm="syz.3.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f9dcdb7dff9 code=0x7ffc0000 [ 228.770487][ T51] usb 5-1: device descriptor read/64, error -71 [ 228.804907][ T29] audit: type=1326 audit(1728876705.861:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7561 comm="syz.3.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dcdb7dff9 code=0x7ffc0000 [ 228.890145][ T51] usb usb5-port1: attempt power cycle [ 228.961326][ T29] audit: type=1326 audit(1728876705.861:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7561 comm="syz.3.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dcdb7dff9 code=0x7ffc0000 [ 229.109348][ T29] audit: type=1326 audit(1728876705.891:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7568 comm="syz.3.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9dcdbb00e5 code=0x7ffc0000 [ 229.259513][ T51] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 229.287786][ T29] audit: type=1326 audit(1728876705.981:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7561 comm="syz.3.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f9dcdb7dff9 code=0x7ffc0000 [ 229.321874][ T51] usb 5-1: device descriptor read/8, error -71 [ 229.563861][ T7587] mmap: syz.3.365 (7587) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 229.640145][ T51] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 229.670031][ T51] usb 5-1: device descriptor read/8, error -71 [ 229.781596][ T51] usb usb5-port1: unable to enumerate USB device [ 229.887801][ T7596] netlink: 28 bytes leftover after parsing attributes in process `syz.1.368'. [ 230.425879][ T7605] netlink: 'syz.3.370': attribute type 2 has an invalid length. [ 230.786915][ T7613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.830281][ T7613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.843897][ T7613] netlink: 'syz.2.372': attribute type 4 has an invalid length. [ 231.263188][ T7622] binder: 7621:7622 ioctl 4008f510 20000100 returned -22 [ 231.324386][ T8] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 231.509325][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 231.532700][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.546020][ T8] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 231.558143][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 231.569615][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 231.579753][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 231.738687][ T8] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 231.750810][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 231.764903][ T8] usb 2-1: Product: syz [ 231.770599][ T8] usb 2-1: Manufacturer: syz [ 231.775610][ T8] usb 2-1: SerialNumber: syz [ 231.807306][ T8] usb 2-1: config 0 descriptor?? [ 231.849639][ T5280] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 232.020257][ T5280] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 232.034563][ T5280] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 232.080245][ T8] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 232.087229][ T5280] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 232.128350][ T8] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 232.150939][ T5280] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 232.161657][ T5280] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.174690][ T7628] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 232.286531][ T8] radio-si470x 2-1:0.0: software version 0, hardware version 0 [ 232.310780][ T8] radio-si470x 2-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 232.337958][ T8] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 232.401560][ T7652] program syz.4.385 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 232.495719][ T8] radio-si470x 2-1:0.0: submitting int urb failed (-90) [ 232.889039][ T7648] mac80211_hwsim hwsim35 wlan1: entered promiscuous mode [ 232.914838][ T7648] mac80211_hwsim hwsim35 wlan1: left promiscuous mode [ 233.189517][ T7662] input: syz1 as /devices/virtual/input/input17 [ 233.199453][ T5229] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 233.372440][ T5229] usb 5-1: device descriptor read/64, error -71 [ 233.624700][ T5229] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 233.731532][ T51] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 233.759483][ T5229] usb 5-1: device descriptor read/64, error -71 [ 233.871965][ T5229] usb usb5-port1: attempt power cycle [ 233.917890][ T51] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 233.949508][ T51] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.980267][ T51] usb 1-1: config 0 descriptor?? [ 234.111522][ T5280] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 234.124703][ T5280] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input15 [ 234.139370][ T8] usb 2-1: USB disconnect, device number 25 [ 234.196899][ C0] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 234.206058][ T5280] usb 4-1: USB disconnect, device number 17 [ 234.239401][ T5229] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 234.313075][ T5229] usb 5-1: device descriptor read/8, error -71 [ 234.394835][ T51] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 234.410719][ T51] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 234.433268][ T51] [drm:udl_init] *ERROR* Selecting channel failed [ 234.494008][ T51] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 234.534232][ T51] [drm] Initialized udl on minor 2 [ 234.546608][ T51] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 234.562191][ T51] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 234.575167][ T937] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 234.585123][ T51] usb 1-1: USB disconnect, device number 26 [ 234.594244][ T937] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 234.602207][ T5229] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 234.629989][ T5229] usb 5-1: device descriptor read/8, error -71 [ 234.752774][ T5229] usb usb5-port1: unable to enumerate USB device [ 235.080042][ T5229] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 235.169323][ T8] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 235.242005][ T5229] usb 4-1: Using ep0 maxpacket: 32 [ 235.246216][ T7696] debugfs: Directory 'netdev:nicvf0' with parent 'phy35' already present! [ 235.254458][ T5229] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.268795][ T5229] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.280330][ T5229] usb 4-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 235.290638][ T5229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.309453][ T5282] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 235.310579][ T5229] usb 4-1: config 0 descriptor?? [ 235.326146][ T8] usb 2-1: device descriptor read/64, error -71 [ 235.486296][ T7700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.500660][ T5282] usb 1-1: config 252 has an invalid interface number: 254 but max is 0 [ 235.512854][ T7700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.520342][ T5282] usb 1-1: config 252 has no interface number 0 [ 235.527376][ T5282] usb 1-1: config 252 interface 254 has no altsetting 0 [ 235.599367][ T5282] usb 1-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=46.29 [ 235.608494][ T5282] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.616785][ T8] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 235.620647][ T7706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.650434][ T5282] usb 1-1: Product: syz [ 235.654844][ T5282] usb 1-1: Manufacturer: syz [ 235.669361][ T5282] usb 1-1: SerialNumber: syz [ 235.680231][ T7706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.690212][ T5282] bfusb 1-1:252.254: probe with driver bfusb failed with error -5 [ 235.734656][ T7687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.753204][ T7687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.770773][ T7687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.780132][ T8] usb 2-1: device descriptor read/64, error -71 [ 235.814839][ T7687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.883344][ T7694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.892982][ T8] usb usb2-port1: attempt power cycle [ 235.927077][ T7694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.947107][ T7706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.967455][ T7694] netlink: 12 bytes leftover after parsing attributes in process `syz.0.397'. [ 236.016065][ T7706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.027907][ T7710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.074634][ T7694] vlan2: entered promiscuous mode [ 236.075922][ T7710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.083548][ T7694] dummy0: entered promiscuous mode [ 236.104282][ T7694] vlan2: entered allmulticast mode [ 236.143971][ T7694] dummy0: entered allmulticast mode [ 236.215017][ T7694] dummy0: left allmulticast mode [ 236.220292][ T7694] dummy0: left promiscuous mode [ 236.290795][ T8] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 236.298738][ T7706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.401'. [ 236.338371][ T8] usb 2-1: device descriptor read/8, error -71 [ 236.480569][ T5284] usb 1-1: USB disconnect, device number 27 [ 236.579766][ T8] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 236.657440][ T8] usb 2-1: device descriptor read/8, error -71 [ 236.777633][ T8] usb usb2-port1: unable to enumerate USB device [ 237.049809][ T8] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 237.216681][ T8] usb 1-1: config index 0 descriptor too short (expected 2102, got 54) [ 237.223886][ T7732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.226744][ T8] usb 1-1: config 150 has an invalid interface number: 36 but max is 1 [ 237.242613][ T8] usb 1-1: config 150 has an invalid descriptor of length 36, skipping remainder of the config [ 237.243530][ T7732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.253280][ T8] usb 1-1: config 150 has 1 interface, different from the descriptor's value: 2 [ 237.270467][ T8] usb 1-1: config 150 has no interface number 0 [ 237.276788][ T8] usb 1-1: config 150 interface 36 has no altsetting 0 [ 237.309780][ T8] usb 1-1: New USB device found, idVendor=05d1, idProduct=1011, bcdDevice=75.63 [ 237.355997][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.386801][ T8] usb 1-1: Product: syz [ 237.400626][ T8] usb 1-1: Manufacturer: syz [ 237.412283][ T8] usb 1-1: SerialNumber: syz [ 237.542112][ T5281] usb 5-1: new low-speed USB device number 52 using dummy_hcd [ 237.720437][ T5281] usb 5-1: device descriptor read/64, error -71 [ 237.810181][ T8] ftdi_sio 1-1:150.36: FTDI USB Serial Device converter detected [ 237.820772][ T8] ftdi_sio ttyUSB0: unknown device type: 0x7563 [ 237.831528][ T8] usb 1-1: USB disconnect, device number 28 [ 237.838544][ T8] ftdi_sio 1-1:150.36: device disconnected [ 238.004931][ T5281] usb 5-1: new low-speed USB device number 53 using dummy_hcd [ 238.117678][ T7743] netlink: 8 bytes leftover after parsing attributes in process `syz.1.413'. [ 238.127562][ T7743] netlink: 8 bytes leftover after parsing attributes in process `syz.1.413'. [ 238.152897][ T5281] usb 5-1: device descriptor read/64, error -71 [ 238.274060][ T5281] usb usb5-port1: attempt power cycle [ 238.451585][ T51] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 238.639426][ T5281] usb 5-1: new low-speed USB device number 54 using dummy_hcd [ 238.647418][ T51] usb 2-1: Using ep0 maxpacket: 8 [ 238.655225][ T51] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 238.664508][ T51] usb 2-1: config 0 has no interface number 0 [ 238.671860][ T5281] usb 5-1: device descriptor read/8, error -71 [ 238.713636][ T51] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 238.726737][ T51] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 238.736635][ T51] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.850475][ T51] usb 2-1: config 0 descriptor?? [ 238.882240][ T5239] Bluetooth: hci7: unexpected cc 0x203e length: 2 > 1 [ 238.900671][ T5239] Bluetooth: hci7: unexpected event for opcode 0x203e [ 238.907718][ T5239] Bluetooth: hci7: unexpected cc 0x203e length: 2 > 1 [ 238.915039][ T5281] usb 5-1: new low-speed USB device number 55 using dummy_hcd [ 238.926467][ T5239] Bluetooth: hci7: unexpected event for opcode 0x203e [ 238.934388][ T5239] Bluetooth: hci7: unexpected cc 0x203e length: 2 > 1 [ 238.942828][ T5239] Bluetooth: hci7: unexpected event for opcode 0x203e [ 238.950452][ T5239] Bluetooth: hci7: unexpected cc 0x203e length: 2 > 1 [ 238.957555][ T5239] Bluetooth: hci7: unexpected event for opcode 0x203e [ 238.965309][ T5239] Bluetooth: hci7: unexpected cc 0x203e length: 2 > 1 [ 238.972963][ T5239] Bluetooth: hci7: unexpected event for opcode 0x203e [ 238.980749][ T5239] Bluetooth: hci7: unexpected cc 0x203e length: 2 > 1 [ 238.987798][ T5239] Bluetooth: hci7: unexpected event for opcode 0x203e [ 238.995552][ T5239] Bluetooth: hci7: unexpected cc 0x203e length: 2 > 1 [ 239.005143][ T5239] Bluetooth: hci7: unexpected event for opcode 0x203e [ 239.012748][ T5239] Bluetooth: hci7: unexpected cc 0x203e length: 2 > 1 [ 239.020275][ T5239] Bluetooth: hci7: unexpected event for opcode 0x203e [ 239.028753][ T5239] Bluetooth: hci7: unexpected cc 0x203e length: 2 > 1 [ 239.036654][ T5239] Bluetooth: hci7: unexpected event for opcode 0x203e [ 239.044305][ T5239] Bluetooth: hci7: unexpected cc 0x203e length: 2 > 1 [ 239.051909][ T5239] Bluetooth: hci7: unexpected event for opcode 0x203e [ 239.058996][ T5239] Bluetooth: hci7: unexpected cc 0x203e length: 2 > 1 [ 239.066850][ T5239] Bluetooth: hci7: unexpected event for opcode 0x203e [ 239.074542][ T5239] Bluetooth: hci7: unexpected cc 0x203e length: 2 > 1 [ 239.082223][ T5239] Bluetooth: hci7: unexpected event for opcode 0x203e [ 239.091112][ T5239] Bluetooth: hci7: unexpected cc 0x203e length: 2 > 1 [ 239.102654][ T5239] Bluetooth: hci7: unexpected event for opcode 0x203e [ 239.109957][ T5239] Bluetooth: hci7: unexpected cc 0x203e length: 2 > 1 [ 239.116934][ T5239] Bluetooth: hci7: unexpected event for opcode 0x203e [ 239.125478][ T5239] Bluetooth: hci7: unexpected cc 0x203e length: 2 > 1 [ 239.135309][ T5239] Bluetooth: hci7: unexpected event for opcode 0x203e [ 239.146026][ T5239] Bluetooth: hci7: unexpected cc 0x203e length: 2 > 1 [ 239.153156][ T5281] usb 5-1: device descriptor read/8, error -71 [ 239.159691][ T5239] Bluetooth: hci7: unexpected event for opcode 0x203e [ 239.167695][ T5239] Bluetooth: hci7: unexpected cc 0x203e length: 2 > 1 [ 239.179283][ T5239] Bluetooth: hci7: unexpected event for opcode 0x203e [ 239.186581][ T5239] Bluetooth: hci7: unexpected cc 0x203e length: 2 > 1 [ 239.193718][ T5239] Bluetooth: hci7: unexpected event for opcode 0x203e [ 239.201017][ T5239] Bluetooth: hci7: unexpected cc 0x203e length: 2 > 1 [ 239.207988][ T5239] Bluetooth: hci7: unexpected event for opcode 0x203e [ 239.216554][ T5239] Bluetooth: hci7: unexpected cc 0x203e length: 2 > 1 [ 239.223846][ T5239] Bluetooth: hci7: unexpected event for opcode 0x203e [ 239.232332][ T937] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 239.240396][ T5239] Bluetooth: hci7: unexpected cc 0x203e length: 2 > 1 [ 239.247369][ T5239] Bluetooth: hci7: unexpected event for opcode 0x203e [ 239.254719][ T5239] Bluetooth: hci7: unexpected cc 0x203e length: 2 > 1 [ 239.261913][ T5239] Bluetooth: hci7: unexpected event for opcode 0x203e [ 239.270249][ T5239] Bluetooth: hci7: unexpected cc 0x203e length: 2 > 1 [ 239.278466][ T5239] Bluetooth: hci7: unexpected event for opcode 0x203e [ 239.285711][ T5239] Bluetooth: hci7: unexpected cc 0x203e length: 2 > 1 [ 239.292870][ T5239] Bluetooth: hci7: unexpected event for opcode 0x203e [ 239.300199][ T5239] Bluetooth: hci7: unexpected cc 0x203e length: 2 > 1 [ 239.307290][ T5239] Bluetooth: hci7: unexpected event for opcode 0x203e [ 239.314490][ T5239] Bluetooth: hci7: unexpected cc 0x203e length: 2 > 1 [ 239.321744][ T5239] Bluetooth: hci7: unexpected event for opcode 0x203e [ 239.330326][ T5239] Bluetooth: hci7: unexpected cc 0x203e length: 2 > 1 [ 239.338592][ T5239] Bluetooth: hci7: unexpected event for opcode 0x203e [ 239.345895][ T5239] Bluetooth: hci7: unexpected cc 0x203e length: 2 > 1 [ 239.354362][ T5239] Bluetooth: hci7: unexpected event for opcode 0x203e [ 239.362751][ T5239] Bluetooth: hci7: unexpected cc 0x203e length: 2 > 1 [ 239.369935][ T5239] Bluetooth: hci7: unexpected event for opcode 0x203e [ 239.377161][ T5239] Bluetooth: hci7: unexpected cc 0x203e length: 2 > 1 [ 239.385337][ T5239] Bluetooth: hci7: unexpected event for opcode 0x203e [ 239.392569][ T5239] Bluetooth: hci7: unexpected cc 0x203e length: 2 > 1 [ 239.401002][ T5239] Bluetooth: hci7: unexpected event for opcode 0x203e [ 239.408162][ T5239] Bluetooth: hci7: unexpected cc 0x203e length: 2 > 1 [ 239.415201][ T5239] Bluetooth: hci7: unexpected event for opcode 0x203e [ 239.422447][ T5239] Bluetooth: hci7: unexpected cc 0x203e length: 2 > 1 [ 239.429562][ T5239] Bluetooth: hci7: unexpected event for opcode 0x203e [ 239.437712][ T5239] Bluetooth: hci7: unexpected cc 0x203e length: 2 > 1 [ 239.449203][ T5239] Bluetooth: hci7: unexpected event for opcode 0x203e [ 239.456424][ T5239] Bluetooth: hci7: unexpected cc 0x203e length: 2 > 1 [ 239.464198][ T5239] Bluetooth: hci7: unexpected event for opcode 0x203e [ 239.471459][ T5239] Bluetooth: hci7: unexpected cc 0x203e length: 2 > 1 [ 239.478361][ T5239] Bluetooth: hci7: unexpected event for opcode 0x203e [ 239.485866][ T5239] Bluetooth: hci7: unexpected cc 0x203e length: 2 > 1 [ 239.492845][ T5239] Bluetooth: hci7: unexpected event for opcode 0x203e [ 239.516939][ T5239] Bluetooth: hci7: unexpected cc 0x203e length: 2 > 1 [ 239.524736][ T5239] Bluetooth: hci7: unexpected event for opcode 0x203e [ 239.532607][ T5239] Bluetooth: hci7: unexpected cc 0x203e length: 2 > 1 [ 239.541252][ T5239] Bluetooth: hci7: unexpected event for opcode 0x203e [ 239.548465][ T5239] Bluetooth: hci7: unexpected cc 0x203e length: 2 > 1 [ 239.558233][ T5239] Bluetooth: hci7: unexpected event for opcode 0x203e [ 239.566835][ T5239] Bluetooth: hci7: unexpected cc 0x203e length: 2 > 1 [ 239.574315][ T5239] Bluetooth: hci7: unexpected event for opcode 0x203e [ 239.582374][ T5239] Bluetooth: hci7: unexpected cc 0x203e length: 2 > 1 [ 239.589390][ T5239] Bluetooth: hci7: unexpected event for opcode 0x203e [ 239.596645][ T5239] Bluetooth: hci7: unexpected cc 0x203e length: 2 > 1 [ 239.603630][ T5239] Bluetooth: hci7: unexpected event for opcode 0x203e [ 239.611229][ T5239] Bluetooth: hci7: unexpected cc 0x203e length: 2 > 1 [ 239.618719][ T5239] Bluetooth: hci7: unexpected event for opcode 0x203e [ 239.627119][ T5239] Bluetooth: hci7: unexpected cc 0x203e length: 2 > 1 [ 239.646901][ T5239] Bluetooth: hci7: unexpected event for opcode 0x203e [ 239.654530][ T5239] Bluetooth: hci7: unexpected cc 0x203e length: 2 > 1 [ 239.661723][ T5239] Bluetooth: hci7: unexpected event for opcode 0x203e [ 239.669058][ T5239] Bluetooth: hci7: unexpected cc 0x203e length: 2 > 1 [ 239.676632][ T5239] Bluetooth: hci7: unexpected event for opcode 0x203e [ 239.683698][ T5239] Bluetooth: hci7: unexpected cc 0x203e length: 2 > 1 [ 239.690865][ T5239] Bluetooth: hci7: unexpected event for opcode 0x203e [ 239.697983][ T5239] Bluetooth: hci7: unexpected cc 0x203e length: 2 > 1 [ 239.704945][ T5239] Bluetooth: hci7: unexpected event for opcode 0x203e [ 239.712009][ T5239] Bluetooth: hci7: unexpected cc 0x203e length: 2 > 1 [ 239.718965][ T5239] Bluetooth: hci7: unexpected event for opcode 0x203e [ 239.726016][ T5239] Bluetooth: hci7: unexpected cc 0x203e length: 2 > 1 [ 239.733148][ T5239] Bluetooth: hci7: unexpected event for opcode 0x203e [ 239.740189][ T5239] Bluetooth: hci7: unexpected cc 0x203e length: 2 > 1 [ 239.748366][ T5239] Bluetooth: hci7: unexpected event for opcode 0x203e [ 239.755396][ T5239] Bluetooth: hci7: unexpected cc 0x203e length: 2 > 1 [ 239.762296][ T5239] Bluetooth: hci7: unexpected event for opcode 0x203e [ 239.769407][ T5239] Bluetooth: hci7: unexpected cc 0x203e length: 2 > 1 [ 239.776271][ T5239] Bluetooth: hci7: unexpected event for opcode 0x203e [ 239.783738][ T5239] Bluetooth: hci7: unexpected cc 0x203e length: 2 > 1 [ 239.791120][ T5239] Bluetooth: hci7: unexpected event for opcode 0x203e [ 239.798237][ T5239] Bluetooth: hci7: unexpected cc 0x203e length: 2 > 1 [ 239.805281][ T5239] Bluetooth: hci7: unexpected event for opcode 0x203e [ 239.812317][ T5239] Bluetooth: hci7: unexpected cc 0x203e length: 2 > 1 [ 239.819287][ T5239] Bluetooth: hci7: unexpected event for opcode 0x203e [ 239.829462][ T5239] Bluetooth: hci7: unexpected cc 0x203e length: 2 > 1 [ 239.836364][ T5239] Bluetooth: hci7: unexpected event for opcode 0x203e [ 239.844204][ T5239] Bluetooth: hci7: unexpected cc 0x203e length: 2 > 1 [ 239.851787][ T5239] Bluetooth: hci7: unexpected event for opcode 0x203e [ 239.858761][ T5239] Bluetooth: hci7: unexpected cc 0x203e length: 2 > 1 [ 239.865828][ T5239] Bluetooth: hci7: unexpected event for opcode 0x203e [ 239.873055][ T5239] Bluetooth: hci7: unexpected cc 0x203e length: 2 > 1 [ 239.879997][ T5239] Bluetooth: hci7: unexpected event for opcode 0x203e [ 239.887329][ T5239] Bluetooth: hci7: unexpected cc 0x203e length: 2 > 1 [ 239.894606][ T5239] Bluetooth: hci7: unexpected event for opcode 0x203e [ 239.902023][ T5239] Bluetooth: hci7: unexpected cc 0x203e length: 2 > 1 [ 239.909212][ T5239] Bluetooth: hci7: unexpected event for opcode 0x203e [ 239.916327][ T5239] Bluetooth: hci7: unexpected cc 0x203e length: 2 > 1 [ 239.923779][ T5239] Bluetooth: hci7: unexpected event for opcode 0x203e [ 239.931172][ T5239] Bluetooth: hci7: unexpected cc 0x203e length: 2 > 1 [ 239.938387][ T5239] Bluetooth: hci7: unexpected event for opcode 0x203e [ 239.957345][ T5281] usb usb5-port1: unable to enumerate USB device [ 239.964556][ T51] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 240.070083][ T937] usb 1-1: device descriptor read/64, error -71 [ 240.111631][ T7757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.142151][ T7757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.319309][ T937] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 240.459408][ T937] usb 1-1: device descriptor read/64, error -71 [ 240.569528][ T937] usb usb1-port1: attempt power cycle [ 240.583529][ T5229] usbhid 4-1:0.0: can't add hid device: -32 [ 240.606802][ T5229] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 240.949336][ T937] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 241.000473][ T937] usb 1-1: device descriptor read/8, error -71 [ 241.236107][ T5280] usb 2-1: USB disconnect, device number 30 [ 241.262389][ T5280] iowarrior 2-1:0.1: I/O-Warror #0 now disconnected [ 241.269368][ T937] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 241.330951][ T5229] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 241.362431][ T937] usb 1-1: device descriptor read/8, error -71 [ 241.395634][ T7772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.423631][ T7772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.470328][ T937] usb usb1-port1: unable to enumerate USB device [ 241.498311][ T5229] usb 5-1: Using ep0 maxpacket: 8 [ 241.529826][ T5229] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.537823][ T5280] usb 4-1: USB disconnect, device number 18 [ 241.540350][ T5229] usb 5-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6 [ 241.555477][ T5229] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.573224][ T5229] usb 5-1: config 0 descriptor?? [ 241.787866][ T5280] usb 5-1: USB disconnect, device number 56 [ 242.049305][ T5229] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 242.229582][ T5229] usb 4-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=9f.d4 [ 242.238912][ T5229] usb 4-1: New USB device strings: Mfr=188, Product=0, SerialNumber=0 [ 242.247352][ T5229] usb 4-1: Manufacturer: syz [ 242.262999][ T5229] usb 4-1: config 0 descriptor?? [ 242.680528][ T5229] gs_usb 4-1:0.0: Configuring for 149 interfaces [ 242.687189][ T5229] gs_usb 4-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 242.696984][ T5229] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -22 [ 242.941326][ T7774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.983415][ T7774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.992048][ T5239] Bluetooth: hci7: Controller not accepting commands anymore: ncmd = 0 [ 243.001448][ T5239] Bluetooth: hci7: Injecting HCI hardware error event [ 243.011597][ T5237] Bluetooth: hci7: hardware error 0x00 [ 243.085124][ T51] usb 4-1: USB disconnect, device number 19 [ 243.289297][ T5229] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 243.439850][ T5229] usb 5-1: device descriptor read/64, error -71 [ 243.739352][ T5229] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 244.089313][ T5229] usb 5-1: device descriptor read/64, error -71 [ 244.162656][ T7811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.431'. [ 244.199676][ T5229] usb usb5-port1: attempt power cycle [ 244.217507][ T7811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.431'. [ 244.439326][ T5280] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 244.549643][ T5229] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 244.580249][ T5229] usb 5-1: device descriptor read/8, error -71 [ 244.589529][ T5280] usb 1-1: Using ep0 maxpacket: 32 [ 244.618126][ T5280] usb 1-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=82.d5 [ 244.628412][ T5280] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.637194][ T5280] usb 1-1: Product: syz [ 244.641843][ T5280] usb 1-1: Manufacturer: syz [ 244.646630][ T5280] usb 1-1: SerialNumber: syz [ 244.662039][ T5280] usb 1-1: config 0 descriptor?? [ 244.670494][ T5280] hub 1-1:0.0: bad descriptor, ignoring hub [ 244.676502][ T5280] hub 1-1:0.0: probe with driver hub failed with error -5 [ 244.685496][ T5280] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 244.839370][ T5229] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 244.876748][ T7809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.876906][ T5229] usb 5-1: device descriptor read/8, error -71 [ 244.944271][ T7809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.964041][ T7822] netlink: 'syz.2.435': attribute type 8 has an invalid length. [ 244.982787][ T7809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.024759][ T5229] usb usb5-port1: unable to enumerate USB device [ 245.033427][ T7809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.132601][ T7815] capability: warning: `syz.0.432' uses 32-bit capabilities (legacy support in use) [ 245.144266][ T5237] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 245.199733][ T5280] gspca_vc032x: reg_w err -110 [ 245.204677][ T5280] gspca_vc032x: I2c Bus Busy Wait 00 [ 245.222599][ T5280] gspca_vc032x: I2c Bus Busy Wait 00 [ 245.228026][ T5280] gspca_vc032x: I2c Bus Busy Wait 00 [ 245.253999][ T5280] gspca_vc032x: I2c Bus Busy Wait 00 [ 245.260205][ T937] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 245.272702][ T5280] gspca_vc032x: I2c Bus Busy Wait 00 [ 245.288547][ T5280] gspca_vc032x: I2c Bus Busy Wait 00 [ 245.298696][ T5280] gspca_vc032x: I2c Bus Busy Wait 00 [ 245.329121][ T5280] gspca_vc032x: I2c Bus Busy Wait 00 [ 245.334710][ T5280] gspca_vc032x: I2c Bus Busy Wait 00 [ 245.369720][ T5280] gspca_vc032x: I2c Bus Busy Wait 00 [ 245.376358][ T5280] gspca_vc032x: I2c Bus Busy Wait 00 [ 245.382044][ T5280] gspca_vc032x: I2c Bus Busy Wait 00 [ 245.387612][ T5280] gspca_vc032x: I2c Bus Busy Wait 00 [ 245.425235][ T5280] gspca_vc032x: I2c Bus Busy Wait 00 [ 245.435724][ T5280] gspca_vc032x: I2c Bus Busy Wait 00 [ 245.444916][ T5280] gspca_vc032x: I2c Bus Busy Wait 00 [ 245.450501][ T5280] gspca_vc032x: I2c Bus Busy Wait 00 [ 245.456013][ T5280] gspca_vc032x: I2c Bus Busy Wait 00 [ 245.465210][ T5280] gspca_vc032x: I2c Bus Busy Wait 00 [ 245.470083][ T937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.483187][ T937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.493884][ T937] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 245.499528][ T5280] gspca_vc032x: Unknown sensor... [ 245.510289][ T937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.543021][ T937] usb 4-1: config 0 descriptor?? [ 245.559540][ T5280] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 245.626077][ T5280] usb 1-1: USB disconnect, device number 33 [ 245.961909][ T7824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.005974][ T7836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.042428][ T7824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.058173][ T7836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.185077][ T937] hid (null): bogus close delimiter [ 246.241317][ T937] steelseries 0003:1038:12B6.000B: bogus close delimiter [ 246.258759][ T937] steelseries 0003:1038:12B6.000B: item 0 1 2 10 parsing failed [ 246.281291][ T937] steelseries 0003:1038:12B6.000B: probe with driver steelseries failed with error -22 [ 246.399937][ T937] usb 4-1: USB disconnect, device number 20 [ 246.514546][ T7845] netlink: 'syz.0.442': attribute type 1 has an invalid length. [ 247.730207][ T5284] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 247.903434][ T5284] usb 5-1: Using ep0 maxpacket: 16 [ 248.028083][ T5284] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.048856][ T5284] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.059524][ T5284] usb 5-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 248.069977][ T5284] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.086442][ T5284] usb 5-1: config 0 descriptor?? [ 248.508662][ T5284] usbhid 5-1:0.0: can't add hid device: -71 [ 248.514858][ T5280] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 248.522994][ T5284] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 248.535627][ T5284] usb 5-1: USB disconnect, device number 61 [ 248.679489][ T5280] usb 2-1: Using ep0 maxpacket: 8 [ 248.688445][ T5280] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 248.746925][ T5280] usb 2-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 248.792183][ T5280] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.800501][ T5280] usb 2-1: Product: syz [ 248.804875][ T5280] usb 2-1: Manufacturer: syz [ 248.809621][ T5280] usb 2-1: SerialNumber: syz [ 248.816344][ T5280] usb 2-1: config 0 descriptor?? [ 248.835244][ T5280] smsusb:smsusb_probe: board id=2, interface number 0 [ 248.851089][ T5280] smsusb:smsusb_probe: Device initialized with return code -19 [ 248.976763][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.078767][ T7879] netlink: 56 bytes leftover after parsing attributes in process `syz.1.448'. [ 249.090851][ T5229] usb 2-1: USB disconnect, device number 32 [ 249.262254][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.445014][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.487670][ T5239] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 249.500396][ T5239] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 249.509305][ T5239] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 249.520944][ T5239] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 249.529857][ T5239] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 249.539072][ T5239] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 249.560715][ T8] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 249.581672][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 249.581692][ T29] audit: type=1326 audit(1728876727.301:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7893 comm="syz.0.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708cd7dff9 code=0x7ffc0000 [ 249.669121][ T29] audit: type=1326 audit(1728876727.331:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7893 comm="syz.0.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708cd7dff9 code=0x7ffc0000 [ 249.693181][ C1] vkms_vblank_simulate: vblank timer overrun [ 249.717831][ T29] audit: type=1326 audit(1728876727.331:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7893 comm="syz.0.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f708cd74fa7 code=0x7ffc0000 [ 249.727814][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.739915][ C1] vkms_vblank_simulate: vblank timer overrun [ 249.753233][ T29] audit: type=1326 audit(1728876727.331:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7893 comm="syz.0.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f708cd19959 code=0x7ffc0000 [ 249.756411][ T8] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 249.780651][ T29] audit: type=1326 audit(1728876727.331:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7893 comm="syz.0.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f708cd74fa7 code=0x7ffc0000 [ 249.811720][ T29] audit: type=1326 audit(1728876727.331:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7893 comm="syz.0.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f708cd19959 code=0x7ffc0000 [ 249.839493][ T29] audit: type=1326 audit(1728876727.331:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7893 comm="syz.0.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f708cd74fa7 code=0x7ffc0000 [ 249.864626][ T29] audit: type=1326 audit(1728876727.331:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7893 comm="syz.0.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f708cd19959 code=0x7ffc0000 [ 249.888780][ T29] audit: type=1326 audit(1728876727.331:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7893 comm="syz.0.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f708cd74fa7 code=0x7ffc0000 [ 249.912038][ T29] audit: type=1326 audit(1728876727.331:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7893 comm="syz.0.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f708cd19959 code=0x7ffc0000 [ 249.980208][ T8] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 250.015284][ T8] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 250.024614][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.033874][ T8] usb 5-1: Product: syz [ 250.038110][ T8] usb 5-1: Manufacturer: syz [ 250.078472][ T8] usb 5-1: SerialNumber: syz [ 250.363713][ T8] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 250.439533][ T8] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 250.449359][ T5284] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 250.469484][ T8] usb 5-1: USB disconnect, device number 62 [ 250.525337][ T5295] udevd[5295]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 250.535267][ T35] bridge_slave_1: left allmulticast mode [ 250.574194][ T35] bridge_slave_1: left promiscuous mode [ 250.583332][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.621610][ T5284] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 250.630924][ T5284] usb 2-1: config 1 has no interface number 0 [ 250.637074][ T5284] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.657315][ T35] bridge_slave_0: left allmulticast mode [ 250.665349][ T5284] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 250.675918][ T35] bridge_slave_0: left promiscuous mode [ 250.684073][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.694698][ T5284] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 101, changing to 10 [ 250.708845][ T5284] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 26213, setting to 1024 [ 250.726997][ T5284] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 250.736461][ T5284] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.759423][ T5284] usb 2-1: Product: syz [ 250.763669][ T5284] usb 2-1: Manufacturer: syz [ 250.768315][ T5284] usb 2-1: SerialNumber: syz [ 251.034952][ T7897] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 251.395206][ T7905] netlink: 8 bytes leftover after parsing attributes in process `syz.4.462'. [ 251.621488][ T5239] Bluetooth: hci3: command tx timeout [ 251.719948][ T7897] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 251.756819][ T5284] cdc_ncm 2-1:1.1: bind() failure [ 251.960637][ T937] usb 2-1: USB disconnect, device number 33 [ 252.583213][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 252.686499][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 252.748278][ T35] bond0 (unregistering): Released all slaves [ 253.361561][ T7920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.465'. [ 253.412273][ T7920] openvswitch: netlink: Actions may not be safe on all matching packets [ 253.425489][ T7920] loop2: detected capacity change from 0 to 7 [ 253.437877][ T7920] Dev loop2: unable to read RDB block 7 [ 253.485421][ T7895] chnl_net:caif_netlink_parms(): no params data found [ 253.511742][ T7920] loop2: AHDI p1 p3 p4 [ 253.546942][ T7920] loop2: partition table partially beyond EOD, truncated [ 253.567640][ T7920] loop2: p1 start 2048 is beyond EOD, truncated [ 253.584648][ T7920] loop2: p3 size 16779293 extends beyond EOD, truncated [ 253.699466][ T5239] Bluetooth: hci3: command tx timeout [ 253.810236][ T5295] udevd[5295]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 254.070131][ T5237] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 254.098749][ T5237] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 254.110227][ T5237] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 254.122814][ T5237] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 254.133299][ T5237] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 254.142082][ T5237] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 254.177468][ T35] hsr_slave_0: left promiscuous mode [ 254.287980][ T35] hsr_slave_1: left promiscuous mode [ 254.357043][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.376238][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.413597][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.424503][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.458467][ T35] veth1_macvtap: left promiscuous mode [ 254.466936][ T35] veth0_macvtap: left promiscuous mode [ 254.473313][ T35] veth1_vlan: left promiscuous mode [ 254.478808][ T35] veth0_vlan: left promiscuous mode [ 254.479439][ T5229] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 254.653946][ T5229] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 254.665257][ T5229] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 254.675530][ T5229] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 254.700746][ T5229] usb 1-1: New USB device found, idVendor=413c, idProduct=8186, bcdDevice=a0.a2 [ 254.720810][ T5229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.738757][ T5229] usb 1-1: Product: syz [ 254.745170][ T5229] usb 1-1: Manufacturer: syz [ 254.752730][ T5229] usb 1-1: SerialNumber: syz [ 254.776789][ T5229] usb 1-1: config 0 descriptor?? [ 255.562602][ T35] team0 (unregistering): Port device team_slave_1 removed [ 255.692814][ T35] team0 (unregistering): Port device team_slave_0 removed [ 255.779354][ T5239] Bluetooth: hci3: command tx timeout [ 256.039713][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.046383][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.184598][ T5239] Bluetooth: hci7: command tx timeout [ 256.725829][ T5284] usb 1-1: USB disconnect, device number 34 [ 256.895023][ T7895] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.907253][ T7895] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.917374][ T7895] bridge_slave_0: entered allmulticast mode [ 256.925905][ T7895] bridge_slave_0: entered promiscuous mode [ 256.935012][ T7895] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.942258][ T7895] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.950592][ T7895] bridge_slave_1: entered allmulticast mode [ 256.957903][ T7895] bridge_slave_1: entered promiscuous mode [ 257.134887][ T7895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.147297][ T7895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.268204][ T7895] team0: Port device team_slave_0 added [ 257.278715][ T7895] team0: Port device team_slave_1 added [ 257.608251][ T7895] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.616754][ T7895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.644203][ T7895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.754213][ T7895] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.767984][ T7895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.833972][ T7895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.860165][ T5239] Bluetooth: hci3: command tx timeout [ 258.269621][ T5239] Bluetooth: hci7: command tx timeout [ 258.538536][ T7895] hsr_slave_0: entered promiscuous mode [ 258.584906][ T7895] hsr_slave_1: entered promiscuous mode [ 258.619515][ T7895] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 258.659511][ T7895] Cannot create hsr debugfs directory [ 258.757962][ T7944] chnl_net:caif_netlink_parms(): no params data found [ 259.047750][ T5237] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 259.056090][ T5237] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 259.076748][ T5237] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 259.088463][ T5237] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 259.101822][ T5237] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 259.111475][ T5237] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 259.174843][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.487713][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.734670][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.842593][ T7944] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.850191][ T7944] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.858023][ T7944] bridge_slave_0: entered allmulticast mode [ 259.865784][ T7944] bridge_slave_0: entered promiscuous mode [ 259.874126][ T7944] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.883907][ T7944] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.893735][ T7944] bridge_slave_1: entered allmulticast mode [ 259.901295][ T7944] bridge_slave_1: entered promiscuous mode [ 260.197173][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.344972][ T5239] Bluetooth: hci7: command tx timeout [ 260.385575][ T7944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.522165][ T7944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.950113][ T937] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 260.962473][ T7944] team0: Port device team_slave_0 added [ 261.094455][ T7944] team0: Port device team_slave_1 added [ 261.116258][ T937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.132902][ T937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.146314][ T937] usb 5-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 261.155609][ T937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.179723][ T5239] Bluetooth: hci0: command tx timeout [ 261.253683][ T937] usb 5-1: config 0 descriptor?? [ 261.487283][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.666074][ T937] dragonrise 0003:0079:0011.000C: unknown main item tag 0x0 [ 261.679380][ T937] dragonrise 0003:0079:0011.000C: unknown main item tag 0x0 [ 261.713656][ T937] dragonrise 0003:0079:0011.000C: hidraw0: USB HID v0.00 Device [HID 0079:0011] on usb-dummy_hcd.4-1/input0 [ 261.738835][ T7944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.772731][ T7944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.837770][ T7944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.872543][ T8070] netlink: 'syz.4.496': attribute type 8 has an invalid length. [ 261.883742][ T8070] netlink: 161700 bytes leftover after parsing attributes in process `syz.4.496'. [ 261.927665][ T8070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.955619][ T8070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.045302][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.102052][ T7944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.168635][ T7944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.197314][ T7944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.421078][ T5232] Bluetooth: hci7: command tx timeout [ 262.570332][ T5289] usb 5-1: USB disconnect, device number 63 [ 262.635038][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.715286][ T7944] hsr_slave_0: entered promiscuous mode [ 262.741970][ T7944] hsr_slave_1: entered promiscuous mode [ 262.759680][ T7944] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 262.767332][ T7944] Cannot create hsr debugfs directory [ 262.789441][ T939] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 262.833025][ T8020] chnl_net:caif_netlink_parms(): no params data found [ 262.886904][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.990026][ T939] usb 1-1: Using ep0 maxpacket: 32 [ 263.023062][ T939] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.042351][ T939] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.079349][ T939] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 263.098619][ T939] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.122282][ T939] usb 1-1: config 0 descriptor?? [ 263.167959][ T939] hub 1-1:0.0: USB hub found [ 263.219367][ T5232] Bluetooth: hci5: command 0x0406 tx timeout [ 263.225635][ T5237] Bluetooth: hci0: command tx timeout [ 263.320859][ T7895] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 263.359382][ T7895] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 263.367922][ T939] hub 1-1:0.0: 1 port detected [ 263.396395][ T8] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 263.466155][ T7895] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 263.485267][ T7895] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 263.511306][ T8020] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.518485][ T8020] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.569355][ T8020] bridge_slave_0: entered allmulticast mode [ 263.578358][ T8094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.586290][ T8020] bridge_slave_0: entered promiscuous mode [ 263.595000][ T8094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.609405][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 263.638200][ T8] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 263.655320][ T8] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 263.666583][ T8] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 263.676578][ T8] usb 5-1: config 1 has no interface number 1 [ 263.709562][ T8] usb 5-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 263.743902][ T8] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 263.779883][ T8] usb 5-1: config 1 interface 2 has no altsetting 0 [ 263.787160][ T8020] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.791656][ T8] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 263.806237][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.819307][ T8] usb 5-1: Product: syz [ 263.824324][ T8] usb 5-1: Manufacturer: syz [ 263.832833][ T8020] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.850133][ T8] usb 5-1: SerialNumber: syz [ 263.855621][ T8020] bridge_slave_1: entered allmulticast mode [ 263.887946][ T8020] bridge_slave_1: entered promiscuous mode [ 264.036478][ T939] hub 1-1:0.0: activate --> -90 [ 264.073824][ T8099] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 264.112972][ T35] bridge_slave_1: left allmulticast mode [ 264.118877][ T35] bridge_slave_1: left promiscuous mode [ 264.127315][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.156359][ T8] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 264.169667][ T8] usb 5-1: 2:1 : format type 39 is not supported yet [ 264.176614][ T8] usb 5-1: selecting invalid altsetting 0 [ 264.185032][ T35] bridge_slave_0: left allmulticast mode [ 264.199052][ T8] usb 5-1: USB disconnect, device number 64 [ 264.215865][ T35] bridge_slave_0: left promiscuous mode [ 264.258508][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.281675][ T5295] udevd[5295]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 264.319409][ T35] bridge_slave_1: left allmulticast mode [ 264.325140][ T35] bridge_slave_1: left promiscuous mode [ 264.416717][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.468264][ T35] bridge_slave_0: left allmulticast mode [ 264.487610][ T35] bridge_slave_0: left promiscuous mode [ 264.509631][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.862246][ T5229] usb 1-1: USB disconnect, device number 35 [ 265.029373][ T9] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 265.189574][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 265.202138][ T9] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 265.227641][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.248504][ T9] usb 5-1: Product: syz [ 265.258022][ T9] usb 5-1: Manufacturer: syz [ 265.272729][ T9] usb 5-1: SerialNumber: syz [ 265.299571][ T5239] Bluetooth: hci0: command tx timeout [ 265.308246][ T9] usb 5-1: config 0 descriptor?? [ 265.534375][ T9] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 265.573752][ T8122] netlink: 'syz.0.504': attribute type 1 has an invalid length. [ 265.582922][ T8122] netlink: 212908 bytes leftover after parsing attributes in process `syz.0.504'. [ 266.172262][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.215858][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.250632][ T35] bond0 (unregistering): Released all slaves [ 266.559785][ T8] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 266.656068][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.680965][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.707462][ T35] bond0 (unregistering): Released all slaves [ 266.731406][ T8] usb 1-1: unable to get BOS descriptor or descriptor too short [ 266.752772][ T8] usb 1-1: not running at top speed; connect to a high speed hub [ 266.776542][ T8] usb 1-1: config 81 has an invalid descriptor of length 192, skipping remainder of the config [ 266.801911][ T8020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.823465][ T8] usb 1-1: config 81 has 0 interfaces, different from the descriptor's value: 1 [ 266.856903][ T8] usb 1-1: New USB device found, idVendor=1164, idProduct=0622, bcdDevice=30.5c [ 266.885974][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.966863][ T9] usb write operation failed. (-71) [ 266.975243][ T9] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 266.990366][ T8] usb 1-1: Product: syz [ 266.994605][ T8] usb 1-1: Manufacturer: syz [ 267.020669][ T8] usb 1-1: SerialNumber: syz [ 267.026992][ T9] dvbdev: DVB: registering new adapter (Terratec H7) [ 267.058452][ T9] usb 5-1: media controller created [ 267.067684][ T8020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.077402][ T9] usb read operation failed. (-71) [ 267.086678][ T9] usb write operation failed. (-71) [ 267.095408][ T9] dvb_usb_az6007 5-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 267.109531][ T9] usb 5-1: USB disconnect, device number 65 [ 267.246323][ T8133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.283324][ T8133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.379286][ T5239] Bluetooth: hci0: command tx timeout [ 267.470434][ T8020] team0: Port device team_slave_0 added [ 267.890282][ T8020] team0: Port device team_slave_1 added [ 268.196341][ T8156] program syz.4.510 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 268.361650][ T8020] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.372137][ T8020] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.410571][ T8020] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.499485][ T5229] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 268.641878][ T8020] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.653359][ T5229] usb 5-1: device descriptor read/64, error -71 [ 268.662570][ T8020] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.700606][ T8020] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.830272][ T35] hsr_slave_0: left promiscuous mode [ 268.848625][ T35] hsr_slave_1: left promiscuous mode [ 268.863011][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.883558][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.901348][ T5229] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 268.911432][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.918993][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.965447][ T35] hsr_slave_0: left promiscuous mode [ 268.996892][ T35] hsr_slave_1: left promiscuous mode [ 269.013973][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.040882][ T5229] usb 5-1: device descriptor read/64, error -71 [ 269.047463][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.058802][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.082451][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.159804][ T5229] usb usb5-port1: attempt power cycle [ 269.215957][ T35] veth1_macvtap: left promiscuous mode [ 269.233800][ T35] veth0_macvtap: left promiscuous mode [ 269.253420][ T35] veth1_vlan: left promiscuous mode [ 269.270623][ T35] veth0_vlan: left promiscuous mode [ 269.284437][ T35] veth1_macvtap: left promiscuous mode [ 269.300017][ T35] veth0_macvtap: left promiscuous mode [ 269.335885][ T35] veth1_vlan: left promiscuous mode [ 269.352730][ T35] veth0_vlan: left promiscuous mode [ 269.382077][ T8] usb 1-1: USB disconnect, device number 36 [ 269.519327][ T5229] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 269.540237][ T5229] usb 5-1: device descriptor read/8, error -71 [ 269.781921][ T5229] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 269.812159][ T5229] usb 5-1: device descriptor read/8, error -71 [ 269.819795][ T8] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 269.919683][ T5229] usb usb5-port1: unable to enumerate USB device [ 270.009063][ T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 270.024141][ T8] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 270.033241][ T8] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 270.053086][ T8] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 270.062664][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.070918][ T8] usb 1-1: Product: syz [ 270.075331][ T8] usb 1-1: Manufacturer: syz [ 270.081457][ T8] usb 1-1: SerialNumber: syz [ 270.108551][ T8] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 270.117267][ T8] cdc_ncm 1-1:1.0: bind() failure [ 270.305745][ T8180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.335376][ T8188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.351730][ T8180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.361579][ T8188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.378857][ T8180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.411909][ T8180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.432671][ T8] usb 1-1: USB disconnect, device number 37 [ 270.852654][ T35] team0 (unregistering): Port device team_slave_1 removed [ 270.938946][ T35] team0 (unregistering): Port device team_slave_0 removed [ 271.077043][ T8190] program syz.0.512 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 271.353420][ T8190] kvm_intel: kvm [8189]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xff5556c5 [ 271.364954][ T8190] kvm: kvm [8189]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xff555ee1 [ 271.383737][ T8190] kvm: kvm [8189]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xffdbff555e59 [ 271.395393][ T8190] kvm: kvm [8189]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xffb4ff555eb8 [ 272.818637][ T35] team0 (unregistering): Port device team_slave_1 removed [ 272.890472][ T35] team0 (unregistering): Port device team_slave_0 removed [ 273.571920][ T8192] netlink: 'syz.0.512': attribute type 21 has an invalid length. [ 273.581019][ T8192] netlink: 128 bytes leftover after parsing attributes in process `syz.0.512'. [ 273.591504][ T8192] netlink: 'syz.0.512': attribute type 4 has an invalid length. [ 273.599905][ T8192] netlink: 'syz.0.512': attribute type 5 has an invalid length. [ 273.607605][ T8192] netlink: 3 bytes leftover after parsing attributes in process `syz.0.512'. [ 273.890426][ T7944] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 273.956621][ T8020] hsr_slave_0: entered promiscuous mode [ 273.994707][ T8020] hsr_slave_1: entered promiscuous mode [ 274.066637][ T8020] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 274.088805][ T8020] Cannot create hsr debugfs directory [ 274.134137][ T7944] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 274.204314][ T7944] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 274.431141][ T7944] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 274.560958][ T7895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.820818][ T7895] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.121351][ T1003] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.128562][ T1003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.202899][ T1003] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.210103][ T1003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.338989][ T7944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.499468][ T7944] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.564172][ T2548] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.571431][ T2548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.663475][ T7895] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 275.795593][ T2548] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.802829][ T2548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.839598][ T939] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 276.001419][ T939] usb 1-1: config 0 has an invalid interface number: 156 but max is 1 [ 276.009864][ T939] usb 1-1: config 0 has no interface number 1 [ 276.016379][ T939] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 276.030695][ T939] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 276.044835][ T939] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 276.077234][ T939] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 276.122342][ T939] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 276.153001][ T939] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.181241][ T939] usb 1-1: config 0 descriptor?? [ 276.234309][ T939] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 276.289314][ T939] usb 1-1: MIDIStreaming interface descriptor not found [ 276.329928][ T7895] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.470941][ T939] gspca_main: spca561-2.14.0 probing abcd:cdee [ 276.475249][ T8249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.520'. [ 276.516658][ T939] spca561 1-1:0.0: probe with driver spca561 failed with error -22 [ 276.556939][ T939] usb 1-1: USB disconnect, device number 38 [ 276.769358][ T8] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 276.930413][ T8] usb 5-1: device descriptor read/64, error -71 [ 276.940868][ T7895] veth0_vlan: entered promiscuous mode [ 276.992443][ T7895] veth1_vlan: entered promiscuous mode [ 277.038507][ T8020] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 277.057658][ T8020] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 277.084790][ T8020] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 277.117145][ T8020] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 277.172623][ T8] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 277.228575][ T7944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.329968][ T8] usb 5-1: device descriptor read/64, error -71 [ 277.351359][ T7895] veth0_macvtap: entered promiscuous mode [ 277.398522][ T7895] veth1_macvtap: entered promiscuous mode [ 277.420798][ T7895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.431969][ T7895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.442383][ T7895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.453238][ T7895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.463521][ T7895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.474175][ T7895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.484105][ T7895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.494709][ T7895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.504787][ T7895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.515347][ T7895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.527120][ T7895] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.551377][ T8] usb usb5-port1: attempt power cycle [ 277.559237][ T7944] veth0_vlan: entered promiscuous mode [ 277.591425][ T7895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.602286][ T7895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.615059][ T7895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.626107][ T7895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.642713][ T7895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.654293][ T7895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.666601][ T7895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.678227][ T7895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.688918][ T7895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.702073][ T7895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.714015][ T7895] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.767509][ T7895] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.777503][ T7895] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.800056][ T7895] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.809104][ T7895] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.856381][ T7944] veth1_vlan: entered promiscuous mode [ 277.889018][ T8020] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.907871][ T8020] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.917217][ T8] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 277.940040][ T8] usb 5-1: device descriptor read/8, error -71 [ 278.065297][ T2924] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.072702][ T2924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.124078][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.131364][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.179859][ T8] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 278.237143][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.250605][ T8] usb 5-1: device descriptor read/8, error -71 [ 278.258269][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.362772][ T7944] veth0_macvtap: entered promiscuous mode [ 278.381364][ T8] usb usb5-port1: unable to enumerate USB device [ 278.443745][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.457725][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.467011][ T7944] veth1_macvtap: entered promiscuous mode [ 278.512254][ T8020] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.569625][ T8090] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 278.655514][ T7944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.685093][ T7944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.699423][ T7944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.716006][ T7944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.744542][ T7944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.768576][ T8090] usb 1-1: Using ep0 maxpacket: 32 [ 278.775955][ T8090] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 278.784719][ T8090] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 278.797515][ T7944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.805093][ T8090] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 278.820348][ T8090] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 278.830874][ T8090] usb 1-1: config 1 has no interface number 0 [ 278.837160][ T8090] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 278.847247][ T7944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.848030][ T8090] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.902343][ T7944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.905253][ T8090] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 278.944498][ T7944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.965749][ T7944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.975807][ T7944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.986615][ T7944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.998350][ T7944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.128619][ T8274] netlink: 'syz.0.525': attribute type 1 has an invalid length. [ 279.170062][ T7944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.184567][ T8090] snd_usb_pod 1-1:1.1: set_interface failed [ 279.194207][ T8090] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 279.202564][ T8090] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 279.213639][ T8090] usb 1-1: USB disconnect, device number 39 [ 279.226049][ T7944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.238597][ T7944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.258220][ T7944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.270659][ T7944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.282291][ T7944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.292496][ T7944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.303261][ T7944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.323346][ T7944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.359003][ T7944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.386020][ T7944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.406858][ T7944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.426941][ T7944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.488138][ T7944] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.500166][ T7944] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.511423][ T7944] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.522309][ T7944] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.606161][ T8020] veth0_vlan: entered promiscuous mode [ 279.736550][ T8020] veth1_vlan: entered promiscuous mode [ 279.849735][ T8020] veth0_macvtap: entered promiscuous mode [ 279.859792][ T8020] veth1_macvtap: entered promiscuous mode [ 279.883182][ T8020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.893772][ T8020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.903890][ T8020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.914647][ T8020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.924932][ T8020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.935683][ T8020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.945861][ T8020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.956728][ T8020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.966879][ T8020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.977657][ T8020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.988366][ T8020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.999496][ T8020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.009612][ T8020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.020219][ T8020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.031795][ T8020] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.044453][ T5229] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 280.070988][ T8020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.099728][ T8020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.160872][ T8020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.196640][ T8020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.206805][ T5229] usb 5-1: Using ep0 maxpacket: 16 [ 280.213298][ T8020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.226009][ T8020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.237897][ T8020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.249886][ T5229] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.262429][ T5229] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.270898][ T8020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.273390][ T5229] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 280.298246][ T5229] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 280.309239][ T5229] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.315356][ T8020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.320716][ T5229] usb 5-1: config 0 descriptor?? [ 280.376336][ T8020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.413673][ T8020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.425154][ T8020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.435663][ T8020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.446953][ T8020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.461159][ T8020] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.494895][ T2924] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.534419][ T8020] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.543996][ T2924] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.545485][ T8020] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.560535][ T8020] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.578173][ T8020] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.854802][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.863419][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.895619][ T8315] binder: 8314:8315 ioctl c00c6211 9999999999999999 returned -14 [ 280.925068][ T8316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.934409][ T8316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.179429][ T5282] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 281.278390][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.308993][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.339452][ T5282] usb 4-1: Using ep0 maxpacket: 16 [ 281.358994][ T5282] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 281.367882][ T5282] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 281.377191][ T5282] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.388160][ T5282] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 281.397699][ T5282] usb 4-1: config 0 has no interface number 0 [ 281.404318][ T5282] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 281.415748][ T5282] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 281.426508][ T5282] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 281.437124][ T5282] usb 4-1: config 0 interface 125 has no altsetting 0 [ 281.463147][ T5282] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 281.472972][ T5282] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.490520][ T5282] usb 4-1: Product: syz [ 281.494767][ T5282] usb 4-1: Manufacturer: syz [ 281.505305][ T5282] usb 4-1: SerialNumber: syz [ 281.508102][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.553662][ T5282] usb 4-1: config 0 descriptor?? [ 281.560166][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.799668][ T8324] fuse: Invalid uid '00000000000000000000003' [ 281.825613][ T939] usb 4-1: USB disconnect, device number 21 [ 282.238349][ T8333] fuse: Bad value for 'fd' [ 282.915447][ T5229] usbhid 5-1:0.0: can't add hid device: -71 [ 282.930684][ T939] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 282.931849][ T5229] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 282.982967][ T5229] usb 5-1: USB disconnect, device number 74 [ 283.069363][ T8090] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 283.129730][ T939] usb 4-1: Using ep0 maxpacket: 8 [ 283.143445][ T939] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 283.153321][ T939] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.177057][ T939] usb 4-1: config 0 has no interface number 0 [ 283.188124][ T939] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 283.201294][ T939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.232034][ T939] usb 4-1: config 0 descriptor?? [ 283.233417][ T8090] usb 1-1: Using ep0 maxpacket: 8 [ 283.267270][ T939] iowarrior 4-1:0.1: no interrupt-in endpoint found [ 283.277566][ T8090] usb 1-1: unable to get BOS descriptor or descriptor too short [ 283.293231][ T8090] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 283.304376][ T8090] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 283.314106][ T8090] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 283.332272][ T8090] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 283.341768][ T8090] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.352904][ T8090] usb 1-1: Product: syz [ 283.365804][ T8090] usb 1-1: Manufacturer: syz [ 283.374531][ T8090] usb 1-1: SerialNumber: syz [ 283.471090][ T5289] usb 4-1: USB disconnect, device number 22 [ 283.700838][ T5232] Bluetooth: hci6: command 0x0406 tx timeout [ 283.737443][ T8090] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 283.759263][ T8090] cdc_ncm 1-1:1.0: bind() failure [ 283.780919][ T8090] usb 1-1: USB disconnect, device number 40 [ 283.895019][ T8354] netlink: 'syz.4.539': attribute type 1 has an invalid length. [ 283.997372][ T8354] bond1: entered promiscuous mode [ 284.009699][ T939] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 284.172198][ T939] usb 4-1: device descriptor read/64, error -71 [ 284.249550][ T5229] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 284.299311][ T5282] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 284.421780][ T939] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 284.422342][ T5229] usb 5-1: Using ep0 maxpacket: 8 [ 284.438307][ T5229] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 284.451964][ T5229] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 284.461257][ T5229] usb 5-1: config 1 has an invalid descriptor of length 129, skipping remainder of the config [ 284.472368][ T5229] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 284.481760][ T5229] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 284.498466][ T5229] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 284.508822][ T5229] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.517231][ T5229] usb 5-1: Product: syz [ 284.523387][ T5229] usb 5-1: Manufacturer: Џ [ 284.527958][ T5229] usb 5-1: SerialNumber: syz [ 284.529638][ T5282] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 284.546449][ T5282] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 284.558603][ T5282] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 284.565567][ T8356] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 284.570298][ T5282] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 284.586638][ T5282] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.614822][ T8358] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 284.622361][ T939] usb 4-1: device descriptor read/64, error -71 [ 284.734079][ T939] usb usb4-port1: attempt power cycle [ 285.081036][ T939] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 285.118801][ T5229] usb 5-1: 0:2 : does not exist [ 285.141007][ T5229] usb 5-1: USB disconnect, device number 75 [ 285.153799][ T939] usb 4-1: device descriptor read/8, error -71 [ 285.248739][ T5295] udevd[5295]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 285.281887][ T8090] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 285.429471][ T939] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 285.469517][ T8090] usb 1-1: Using ep0 maxpacket: 32 [ 285.481186][ T8090] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 42994, setting to 1024 [ 285.491680][ T939] usb 4-1: device descriptor read/8, error -71 [ 285.509249][ T8090] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 285.573959][ T8090] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 285.629554][ T939] usb usb4-port1: unable to enumerate USB device [ 285.636418][ T8090] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 285.663419][ T8090] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.709306][ T8090] usb 1-1: Product: А [ 285.741588][ T8090] usb 1-1: Manufacturer: 뛣홤৓ው퐮텤࿎㚚⒩ [ 285.770501][ T8090] usb 1-1: SerialNumber: ш [ 285.797112][ T8364] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 286.049540][ T5229] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 286.218484][ T5229] usb 4-1: Using ep0 maxpacket: 8 [ 286.229671][ T5229] usb 4-1: config 0 has an invalid interface number: 39 but max is 0 [ 286.240231][ T8364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.270772][ T8364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.289377][ T5229] usb 4-1: config 0 has no interface number 0 [ 286.290405][ T8364] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 286.305509][ T5229] usb 4-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=30.27 [ 286.315064][ T5229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.328102][ T5229] usb 4-1: Product: syz [ 286.333985][ T5229] usb 4-1: Manufacturer: syz [ 286.338694][ T5229] usb 4-1: SerialNumber: syz [ 286.344240][ T8364] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 286.347307][ T5229] usb 4-1: config 0 descriptor?? [ 286.360572][ T5229] gspca_main: dtcs033-2.14.0 probing 0547:7303 [ 286.395591][ T8398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.438808][ T8398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.592827][ T8364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.764064][ T8364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.797594][ T8364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.832722][ T8364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.918333][ T8364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.952016][ T8364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.976962][ T8090] cdc_ncm 1-1:1.0: bind() failure [ 287.003592][ T8090] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 287.065354][ T8090] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 287.076255][ T8090] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 287.115073][ T8090] usb 1-1: USB disconnect, device number 41 [ 287.201508][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.474095][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.723311][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.062900][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.255920][ T5282] aiptek 2-1:17.0: Aiptek tried all speeds, no sane response [ 288.263885][ T5282] aiptek 2-1:17.0: probe with driver aiptek failed with error -22 [ 288.302733][ T5282] usb 2-1: USB disconnect, device number 34 [ 288.555741][ T35] bridge_slave_1: left allmulticast mode [ 288.569825][ T35] bridge_slave_1: left promiscuous mode [ 288.588501][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.602398][ T5232] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 288.612905][ T5232] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 288.622372][ T5232] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 288.639743][ T5232] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 288.650315][ T5232] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 288.658043][ T5232] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 288.700256][ T35] bridge_slave_0: left allmulticast mode [ 288.705964][ T35] bridge_slave_0: left promiscuous mode [ 288.780194][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.174557][ T9] usb 4-1: USB disconnect, device number 27 [ 290.303804][ T9] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 290.568488][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 290.649302][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 290.701806][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 290.729264][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.750132][ T5239] Bluetooth: hci4: command tx timeout [ 290.774406][ T9] usb 1-1: Manufacturer: 넧㠹⒈㴘橇掆ㆻ⠍酂튱 [ 290.833525][ T9] usb 1-1: SerialNumber: syz [ 291.366598][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.455941][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 291.588544][ T35] bond0 (unregistering): Released all slaves [ 291.637370][ T35] bond1 (unregistering): Released all slaves [ 291.682701][ T8419] netlink: 'syz.1.560': attribute type 27 has an invalid length. [ 291.872033][ T30] INFO: task syz.0.169:6226 blocked for more than 143 seconds. [ 291.883498][ T30] Not tainted 6.12.0-rc2-syzkaller-00320-gba01565ced22 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 291.940709][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 292.179180][ T30] task:syz.0.169 state:D stack:25920 pid:6226 tgid:6226 ppid:5245 flags:0x00004004 [ 292.234646][ T30] Call Trace: [ 292.238098][ T30] [ 292.242052][ T30] __schedule+0x1895/0x4b30 [ 292.246736][ T30] ? __pfx___schedule+0x10/0x10 [ 292.254172][ T30] ? __pfx_lock_release+0x10/0x10 [ 292.259913][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 292.269617][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 292.277157][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 292.282985][ T30] ? schedule+0x90/0x320 [ 292.288983][ T30] schedule+0x14b/0x320 [ 292.295198][ T30] ? down_read+0x6a5/0xa40 [ 292.300117][ T30] schedule_preempt_disabled+0x13/0x30 [ 292.305684][ T30] down_read+0x705/0xa40 [ 292.310366][ T30] ? __pfx_down_read+0x10/0x10 [ 292.315233][ T30] ? __filemap_get_folio+0x949/0xbd0 [ 292.323486][ T30] filemap_fault+0xd54/0x1950 [ 292.330649][ T30] ? pte_alloc_one+0x3b2/0x5d0 [ 292.335551][ T30] ? __pfx_filemap_fault+0x10/0x10 [ 292.342658][ T30] ? pte_alloc_one+0x442/0x5d0 [ 292.347559][ T30] ? __pfx_pte_alloc_one+0x10/0x10 [ 292.353096][ T30] ? __pfx_validate_chain+0x10/0x10 [ 292.358418][ T30] ? __lock_acquire+0x1384/0x2050 [ 292.367416][ T30] __do_fault+0x135/0x460 [ 292.375653][ T30] handle_pte_fault+0x1105/0x6800 [ 292.382798][ T30] ? mark_lock+0x9a/0x360 [ 292.389650][ T30] ? __pfx_handle_pte_fault+0x10/0x10 [ 292.395142][ T30] ? __lock_acquire+0x1384/0x2050 [ 292.405460][ T30] ? reacquire_held_locks+0x3eb/0x690 [ 292.411229][ T30] ? lock_vma_under_rcu+0x34b/0x790 [ 292.416587][ T30] ? __thp_vma_allowable_orders+0x39e/0x9f0 [ 292.423156][ T30] ? __pfx_reacquire_held_locks+0x10/0x10 [ 292.429019][ T30] handle_mm_fault+0x1106/0x1bb0 [ 292.435791][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 292.443479][ T30] ? lock_vma_under_rcu+0x602/0x790 [ 292.454190][ T30] ? lock_vma_under_rcu+0x1dd/0x790 [ 292.464575][ T30] exc_page_fault+0x459/0x8c0 [ 292.471583][ T30] asm_exc_page_fault+0x26/0x30 [ 292.477517][ T30] RIP: 0033:0x7f694b651629 [ 292.482473][ T30] RSP: 002b:00007f694ba5fb90 EFLAGS: 00010246 [ 292.530234][ T30] RAX: 0000000000000000 RBX: 0000000000000002 RCX: ffffffffe0000000 [ 292.539256][ T30] RDX: bf27d1f6a2e3efa9 RSI: 0000000000000000 RDI: 00005555873d03c8 [ 292.547328][ T30] RBP: 00007f694b937a80 R08: 00007f694b600000 R09: 0000000000000003 [ 292.560346][ T30] R10: 0000000000000001 R11: 0000000000000004 R12: 000000000001f45d [ 292.568430][ T30] R13: 00007f694ba5fc90 R14: 0000000000000032 R15: fffffffffffffffe [ 292.578057][ T30] [ 292.587967][ T30] INFO: task syz.0.169:6227 blocked for more than 144 seconds. [ 292.629318][ T30] Not tainted 6.12.0-rc2-syzkaller-00320-gba01565ced22 #0 [ 292.637037][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 292.646390][ T30] task:syz.0.169 state:D stack:25968 pid:6227 tgid:6226 ppid:5245 flags:0x00004004 [ 292.657885][ T30] Call Trace: [ 292.663324][ T30] [ 292.688859][ T30] __schedule+0x1895/0x4b30 [ 292.704992][ T30] ? __pfx___schedule+0x10/0x10 [ 292.728122][ T30] ? __pfx_lock_release+0x10/0x10 [ 292.733828][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 292.740410][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 292.746852][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 292.752203][ T30] ? schedule+0x90/0x320 [ 292.756587][ T30] schedule+0x14b/0x320 [ 292.762171][ T30] ? down_read+0x6a5/0xa40 [ 292.766707][ T30] schedule_preempt_disabled+0x13/0x30 [ 292.775306][ T30] down_read+0x705/0xa40 [ 292.785284][ T30] ? __pfx_down_read+0x10/0x10 [ 292.790340][ T30] ? do_sync_mmap_readahead+0x699/0x970 [ 292.796020][ T30] page_cache_ra_unbounded+0x135/0x8a0 [ 292.804428][ T30] do_sync_mmap_readahead+0x499/0x970 [ 292.810101][ T30] ? __pfx_do_sync_mmap_readahead+0x10/0x10 [ 292.816133][ T30] ? count_memcg_event_mm+0x90/0x420 [ 292.819584][ T5239] Bluetooth: hci4: command tx timeout [ 292.839874][ T30] ? __filemap_get_folio+0x949/0xbd0 [ 292.845311][ T30] filemap_fault+0x8c5/0x1950 [ 292.850154][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 292.856609][ T30] ? pte_alloc_one+0x3b2/0x5d0 [ 292.861714][ T30] ? __pfx_filemap_fault+0x10/0x10 [ 292.866955][ T30] ? pte_alloc_one+0x442/0x5d0 [ 292.871890][ T30] ? __pfx_pte_alloc_one+0x10/0x10 [ 292.877161][ T30] __do_fault+0x135/0x460 [ 292.881767][ T30] handle_pte_fault+0x1105/0x6800 [ 292.887998][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 292.894193][ T30] ? mark_lock+0x9a/0x360 [ 292.917894][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 292.927605][ T30] ? __pfx_handle_pte_fault+0x10/0x10 [ 292.933173][ T30] ? __lock_acquire+0x1384/0x2050 [ 292.938345][ T30] ? __thp_vma_allowable_orders+0x39e/0x9f0 [ 292.944628][ T30] ? mt_find+0x2a9/0x920 [ 292.949320][ T30] ? __pfx_lock_release+0x10/0x10 [ 292.954477][ T30] handle_mm_fault+0x1106/0x1bb0 [ 292.999408][ T30] ? mt_find+0x2a9/0x920 [ 293.004749][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 293.035754][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 293.056529][ T30] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 293.070728][ T30] exc_page_fault+0x2b9/0x8c0 [ 293.075511][ T30] asm_exc_page_fault+0x26/0x30 [ 293.099482][ T30] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 293.105443][ T30] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 293.127464][ T30] RSP: 0018:ffffc90003d77ad0 EFLAGS: 00050246 [ 293.135783][ T30] RAX: ffffffff84bc3501 RBX: 000000002003d3c0 RCX: 0000000000000040 [ 293.148832][ T30] RDX: 0000000000000000 RSI: ffffc90003d77b60 RDI: 000000002003d380 [ 293.175225][ T30] RBP: ffffc90003d77c10 R08: ffffc90003d77b9f R09: 1ffff920007aef73 [ 293.198543][ T30] R10: dffffc0000000000 R11: fffff520007aef74 R12: 0000000000000040 [ 293.208385][ T30] R13: 0000000000009900 R14: 000000002003d380 R15: ffffc90003d77b60 [ 293.223132][ T30] ? _copy_from_user+0x61/0xe0 [ 293.228043][ T30] _copy_to_user+0x86/0xb0 [ 293.233242][ T30] rng_dev_read+0x3bb/0x6d0 [ 293.237852][ T30] ? __pfx_rng_dev_read+0x10/0x10 [ 293.244514][ T30] ? rw_verify_area+0x568/0x6f0 [ 293.258544][ T30] vfs_readv+0x6bc/0xa80 [ 293.264095][ T30] ? __pfx_rng_dev_read+0x10/0x10 [ 293.269307][ T30] ? __pfx_vfs_readv+0x10/0x10 [ 293.274202][ T30] ? __fget_files+0x29/0x470 [ 293.278890][ T30] ? __fget_files+0x29/0x470 [ 293.283686][ T30] __x64_sys_preadv+0x1c7/0x2d0 [ 293.290120][ T30] ? __pfx___x64_sys_preadv+0x10/0x10 [ 293.298888][ T30] ? do_syscall_64+0x100/0x230 [ 293.305416][ T30] ? do_syscall_64+0xb6/0x230 [ 293.311529][ T30] do_syscall_64+0xf3/0x230 [ 293.316134][ T30] ? clear_bhb_loop+0x35/0x90 [ 293.323257][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.330585][ T30] RIP: 0033:0x7f694b77dff9 [ 293.335950][ T30] RSP: 002b:00007f694b1ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 293.345211][ T30] RAX: ffffffffffffffda RBX: 00007f694b935f80 RCX: 00007f694b77dff9 [ 293.355999][ T30] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000003 [ 293.370290][ T30] RBP: 00007f694b7f0296 R08: 0000000000000000 R09: 0000000000000000 [ 293.378346][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 293.404871][ T30] R13: 0000000000000000 R14: 00007f694b935f80 R15: 00007f694ba5fa28 [ 293.413454][ T30] [ 293.430702][ T30] INFO: task syz.0.169:6229 blocked for more than 144 seconds. [ 293.438379][ T30] Not tainted 6.12.0-rc2-syzkaller-00320-gba01565ced22 #0 [ 293.464363][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 293.484811][ T30] task:syz.0.169 state:D stack:25296 pid:6229 tgid:6226 ppid:5245 flags:0x00004006 [ 293.496614][ T30] Call Trace: [ 293.507983][ T30] [ 293.514545][ T30] __schedule+0x1895/0x4b30 [ 293.519815][ T30] ? __pfx___schedule+0x10/0x10 [ 293.524870][ T30] ? __pfx_lock_release+0x10/0x10 [ 293.530382][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 293.536496][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 293.543676][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 293.549017][ T30] ? schedule+0x90/0x320 [ 293.554691][ T30] schedule+0x14b/0x320 [ 293.558983][ T30] ? down_read+0x6a5/0xa40 [ 293.565372][ T30] schedule_preempt_disabled+0x13/0x30 [ 293.572383][ T30] down_read+0x705/0xa40 [ 293.576732][ T30] ? __pfx_down_read+0x10/0x10 [ 293.582674][ T30] ? do_sync_mmap_readahead+0x699/0x970 [ 293.591889][ T30] page_cache_ra_unbounded+0x135/0x8a0 [ 293.614194][ T30] do_sync_mmap_readahead+0x499/0x970 [ 293.620254][ T30] ? __pfx_do_sync_mmap_readahead+0x10/0x10 [ 293.626275][ T30] ? count_memcg_event_mm+0x90/0x420 [ 293.633046][ T30] ? __filemap_get_folio+0x949/0xbd0 [ 293.638546][ T30] filemap_fault+0x8c5/0x1950 [ 293.645672][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 293.652817][ T30] ? pte_alloc_one+0x3b2/0x5d0 [ 293.657667][ T30] ? __pfx_filemap_fault+0x10/0x10 [ 293.662991][ T30] ? pte_alloc_one+0x442/0x5d0 [ 293.667866][ T30] ? __pfx_pte_alloc_one+0x10/0x10 [ 293.673267][ T30] __do_fault+0x135/0x460 [ 293.680459][ T30] handle_pte_fault+0x1105/0x6800 [ 293.685579][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 293.692730][ T30] ? mark_lock+0x9a/0x360 [ 293.698109][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 293.703930][ T30] ? __pfx_handle_pte_fault+0x10/0x10 [ 293.712741][ T30] ? __lock_acquire+0x1384/0x2050 [ 293.717925][ T30] ? __thp_vma_allowable_orders+0x39e/0x9f0 [ 293.724087][ T30] ? mt_find+0x2a9/0x920 [ 293.728490][ T30] ? __pfx_lock_release+0x10/0x10 [ 293.734632][ T30] handle_mm_fault+0x1106/0x1bb0 [ 293.739738][ T30] ? mt_find+0x2a9/0x920 [ 293.744059][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 293.750739][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 293.758229][ T30] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 293.764935][ T30] exc_page_fault+0x2b9/0x8c0 [ 293.770901][ T30] asm_exc_page_fault+0x26/0x30 [ 293.776903][ T30] RIP: 0010:rep_movs_alternative+0x33/0x70 [ 293.788550][ T30] Code: 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb [ 293.810504][ T30] RSP: 0018:ffffc90003bf78d0 EFLAGS: 00050212 [ 293.816678][ T30] RAX: 0a00000000050070 RBX: 0000000020000098 RCX: 0000000000000010 [ 293.824944][ T30] RDX: 0000000000000000 RSI: ffff8880279c0300 RDI: 0000000020000088 [ 293.833158][ T30] RBP: ffffc90003bf7d10 R08: ffff8880279c030f R09: 1ffff11004f38061 [ 293.842118][ T30] R10: dffffc0000000000 R11: ffffed1004f38062 R12: 0000000000000010 [ 293.851206][ T30] R13: fffff5200077ef34 R14: 0000000020000088 R15: ffff8880279c0300 [ 293.860887][ T30] _copy_to_user+0x86/0xb0 [ 293.866356][ T30] scsi_ioctl+0x2313/0x2d80 [ 293.871946][ T30] ? tomoyo_path_number_perm+0x68d/0x880 [ 293.878599][ T30] ? do_vfs_ioctl+0xf08/0x2e40 [ 293.884492][ T30] ? __pfx_scsi_ioctl+0x10/0x10 [ 293.891228][ T30] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 293.897419][ T30] ? mark_lock+0x9a/0x360 [ 293.902004][ T30] ? tomoyo_path_number_perm+0x208/0x880 [ 293.907710][ T30] ? __pfx_lock_release+0x10/0x10 [ 293.914863][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 293.920296][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 293.926359][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 293.932945][ T30] ? tomoyo_path_number_perm+0x71a/0x880 [ 293.951167][ T30] ? irqentry_exit+0x63/0x90 [ 293.956997][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 293.962376][ T30] ? __pfx_sg_ioctl+0x10/0x10 [ 293.967580][ T30] ? do_vfs_ioctl+0x152/0x2e40 [ 293.972562][ T30] sg_ioctl+0x16e9/0x2e80 [ 293.976950][ T30] ? __pfx_sg_ioctl+0x10/0x10 [ 293.984792][ T30] ? __fget_files+0x29/0x470 [ 293.990098][ T30] ? __fget_files+0x3f3/0x470 [ 293.994924][ T30] ? __pfx_sg_ioctl+0x10/0x10 [ 294.001617][ T30] __se_sys_ioctl+0xf9/0x170 [ 294.006296][ T30] do_syscall_64+0xf3/0x230 [ 294.011129][ T30] ? clear_bhb_loop+0x35/0x90 [ 294.023669][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.031447][ T30] RIP: 0033:0x7f694b77dff9 [ 294.037332][ T30] RSP: 002b:00007f694b1de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 294.047017][ T30] RAX: ffffffffffffffda RBX: 00007f694b936058 RCX: 00007f694b77dff9 [ 294.056214][ T30] RDX: 0000000020000080 RSI: 0000000000000001 RDI: 0000000000000005 [ 294.066332][ T30] RBP: 00007f694b7f0296 R08: 0000000000000000 R09: 0000000000000000 [ 294.075650][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 294.084818][ T30] R13: 0000000000000000 R14: 00007f694b936058 R15: 00007f694ba5fa28 [ 294.093924][ T30] [ 294.098090][ T30] [ 294.098090][ T30] Showing all locks held in the system: [ 294.119096][ T30] 6 locks held by kworker/0:1/9: [ 294.124190][ T30] #0: ffff88801de90548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 294.138133][ T30] #1: ffffc900000e7d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 294.150157][ T30] #2: ffff888028834190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 294.171197][ T30] #3: ffff88805e2c3190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 294.189310][ T30] #4: ffff888029b44160 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 294.198788][ T30] #5: ffffffff8fc60988 (register_mutex#6){+.+.}-{3:3}, at: usb_audio_probe+0x417/0x2100 [ 294.222427][ T30] 1 lock held by khungtaskd/30: [ 294.227371][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 294.239649][ T30] 4 locks held by kworker/u8:2/35: [ 294.246025][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 294.268700][ T30] #1: ffffc90000ab7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 294.280800][ T30] #2: ffffffff8fcc5690 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 294.291724][ T30] #3: ffffffff8fcd2188 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 294.308209][ T30] 3 locks held by kworker/u8:4/59: [ 294.314367][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 294.332318][ T30] #1: ffffc90001457d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 294.358431][ T30] #2: ffffffff8fcd2188 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 294.370624][ T30] 2 locks held by dhcpcd/4899: [ 294.375474][ T30] #0: ffffffff8fcb6c88 (vlan_ioctl_mutex){+.+.}-{3:3}, at: sock_ioctl+0x661/0x8e0 [ 294.399543][ T30] #1: ffffffff8fcd2188 (rtnl_mutex){+.+.}-{3:3}, at: vlan_ioctl_handler+0x112/0x9d0 [ 294.411592][ T30] 2 locks held by getty/4993: [ 294.418094][ T30] #0: ffff88814b9e40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 294.432328][ T30] #1: ffffc900031232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 294.444604][ T30] 4 locks held by udevd/5295: [ 294.461018][ T30] #0: ffff88802e5c99e0 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xb4/0xd70 [ 294.470447][ T30] #1: ffff88802890e088 (&of->mutex#2){+.+.}-{3:3}, at: kernfs_seq_start+0x53/0x3b0 [ 294.480552][ T30] #2: ffff888058ce5788 (kn->active#25){++++}-{0:0}, at: kernfs_seq_start+0x72/0x3b0 [ 294.492503][ T30] #3: ffff88805e2c3190 (&dev->mutex){....}-{3:3}, at: manufacturer_show+0x26/0xa0 [ 294.507483][ T30] 1 lock held by syz.2.166/6203: [ 294.512614][ T30] 2 locks held by syz.0.169/6226: [ 294.517710][ T30] #0: ffff8880307a9070 (&vma->vm_lock->lock){++++}-{3:3}, at: lock_vma_under_rcu+0x34b/0x790 [ 294.530521][ T30] #1: ffff8880234ca040 (mapping.invalidate_lock#2){++++}-{3:3}, at: filemap_fault+0xd54/0x1950 [ 294.545067][ T30] 1 lock held by syz.0.169/6227: [ 294.553781][ T30] #0: ffff8880234ca040 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0x135/0x8a0 [ 294.567699][ T30] 1 lock held by syz.0.169/6229: [ 294.572783][ T30] #0: ffff8880234ca040 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0x135/0x8a0 [ 294.584294][ T30] 1 lock held by syz.2.239/6718: [ 294.589346][ T30] #0: ffff8880234ca040 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0x135/0x8a0 [ 294.601093][ T30] 1 lock held by syz.2.239/6719: [ 294.606277][ T30] #0: ffff8880234ca040 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0x135/0x8a0 [ 294.617917][ T30] 1 lock held by syz.2.239/6720: [ 294.629752][ T30] #0: ffff8880234ca040 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0x135/0x8a0 [ 294.643357][ T30] 1 lock held by syz.2.239/6723: [ 294.648407][ T30] #0: ffff8880234ca040 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0x135/0x8a0 [ 294.662414][ T30] 2 locks held by syz-executor/8414: [ 294.668836][ T30] #0: ffffffff8fcc5690 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 294.684753][ T30] #1: ffffffff8fcd2188 (rtnl_mutex){+.+.}-{3:3}, at: setup_net+0x602/0x9e0 [ 294.693876][ T30] 2 locks held by syz.1.560/8419: [ 294.699011][ T30] #0: ffffffff8fcd2188 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 294.709899][ T30] #1: ffffffff8e93d378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 294.726926][ T30] 2 locks held by syz.3.562/8421: [ 294.734248][ T30] #0: ffff88807e7e5608 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 294.744784][ T30] #1: ffffffff8fcd2188 (rtnl_mutex){+.+.}-{3:3}, at: raw_release+0x1b8/0x8b0 [ 294.753993][ T30] 2 locks held by syz.2.565/8434: [ 294.759085][ T30] #0: ffffffff8fd37ef0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 294.768202][ T30] #1: ffffffff8fcd2188 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5f/0x8b0 [ 294.787404][ T30] 2 locks held by syz.2.565/8436: [ 294.792844][ T30] #0: ffffffff8fd37ef0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 294.804437][ T30] #1: ffffffff8fcd2188 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5f/0x8b0 [ 294.815043][ T30] 2 locks held by syz.0.564/8435: [ 294.820234][ T30] #0: ffffffff8fd37ef0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 294.828700][ T30] #1: ffffffff8fcd2188 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5f/0x8b0 [ 294.841295][ T30] [ 294.857730][ T30] ============================================= [ 294.857730][ T30] [ 294.869538][ T30] NMI backtrace for cpu 0 [ 294.873930][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00320-gba01565ced22 #0 [ 294.884467][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 294.894568][ T30] Call Trace: [ 294.897855][ T30] [ 294.900824][ T30] dump_stack_lvl+0x241/0x360 [ 294.905542][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 294.907690][ T5239] Bluetooth: hci4: command tx timeout [ 294.910760][ T30] ? __pfx__printk+0x10/0x10 [ 294.910808][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 294.925773][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 294.931272][ T30] ? _printk+0xd5/0x120 [ 294.935463][ T30] ? __pfx__printk+0x10/0x10 [ 294.940117][ T30] ? __wake_up_klogd+0xcc/0x110 [ 294.945058][ T30] ? __pfx__printk+0x10/0x10 [ 294.949705][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 294.954778][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 294.960805][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 294.966842][ T30] watchdog+0xff4/0x1040 [ 294.971130][ T30] ? watchdog+0x1ea/0x1040 [ 294.975570][ T30] ? __pfx_watchdog+0x10/0x10 [ 294.980266][ T30] kthread+0x2f0/0x390 [ 294.984373][ T30] ? __pfx_watchdog+0x10/0x10 [ 294.989064][ T30] ? __pfx_kthread+0x10/0x10 [ 294.993689][ T30] ret_from_fork+0x4b/0x80 [ 294.998154][ T30] ? __pfx_kthread+0x10/0x10 [ 295.002851][ T30] ret_from_fork_asm+0x1a/0x30 [ 295.007659][ T30] [ 295.011751][ T30] Sending NMI from CPU 0 to CPUs 1: [ 295.017041][ C1] NMI backtrace for cpu 1 [ 295.017056][ C1] CPU: 1 UID: 0 PID: 52 Comm: kworker/u8:3 Not tainted 6.12.0-rc2-syzkaller-00320-gba01565ced22 #0 [ 295.017078][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 295.017091][ C1] Workqueue: bat_events batadv_nc_worker [ 295.017121][ C1] RIP: 0010:validate_chain+0x23/0x5920 [ 295.017146][ C1] Code: 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 81 ec c0 02 00 00 49 89 ce 89 54 24 58 <48> 89 bc 24 80 00 00 00 65 48 8b 04 25 28 00 00 00 48 89 84 24 a0 [ 295.017162][ C1] RSP: 0018:ffffc90000bc75e0 EFLAGS: 00000082 [ 295.017178][ C1] RAX: 1ffffffff2788232 RBX: ffffffff93c41190 RCX: 000530efb14bf448 [ 295.017193][ C1] RDX: 0000000000000000 RSI: ffff88801e6a6530 RDI: ffff88801e6a5a00 [ 295.017205][ C1] RBP: ffffc90000bc78e0 R08: ffffffff942c7807 R09: 1ffffffff2858f00 [ 295.017220][ C1] R10: dffffc0000000000 R11: fffffbfff2858f01 R12: 0000000000000000 [ 295.017233][ C1] R13: ffff88801e6a64d8 R14: 000530efb14bf448 R15: ffff88801e6a6550 [ 295.017256][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 295.017272][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 295.017286][ C1] CR2: 00007ffd8d618ff8 CR3: 000000000e734000 CR4: 00000000003526f0 [ 295.017308][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 295.017325][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 295.017338][ C1] Call Trace: [ 295.017345][ C1] [ 295.017352][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 295.017375][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 295.017404][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 295.017432][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 295.017458][ C1] ? nmi_handle+0x14f/0x5a0 [ 295.017477][ C1] ? nmi_handle+0x2a/0x5a0 [ 295.017497][ C1] ? validate_chain+0x23/0x5920 [ 295.017516][ C1] ? default_do_nmi+0x63/0x160 [ 295.017540][ C1] ? exc_nmi+0x123/0x1f0 [ 295.017562][ C1] ? end_repeat_nmi+0xf/0x53 [ 295.017583][ C1] ? validate_chain+0x23/0x5920 [ 295.017604][ C1] ? validate_chain+0x23/0x5920 [ 295.017624][ C1] ? validate_chain+0x23/0x5920 [ 295.017644][ C1] [ 295.017651][ C1] [ 295.017661][ C1] ? validate_chain+0x11e/0x5920 [ 295.017683][ C1] ? __pfx_validate_chain+0x10/0x10 [ 295.017704][ C1] ? __pfx_validate_chain+0x10/0x10 [ 295.017723][ C1] ? __pfx_validate_chain+0x10/0x10 [ 295.017747][ C1] ? __pfx_validate_chain+0x10/0x10 [ 295.017767][ C1] ? mark_lock+0x9a/0x360 [ 295.017786][ C1] ? __lock_acquire+0x1384/0x2050 [ 295.017816][ C1] ? look_up_lock_class+0x77/0x170 [ 295.017845][ C1] ? mark_lock+0x9a/0x360 [ 295.017882][ C1] __lock_acquire+0x1384/0x2050 [ 295.017915][ C1] lock_acquire+0x1ed/0x550 [ 295.017941][ C1] ? batadv_nc_worker+0xcb/0x610 [ 295.017968][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 295.017995][ C1] ? batadv_nc_worker+0xcb/0x610 [ 295.018018][ C1] ? __pfx_lock_release+0x10/0x10 [ 295.018046][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 295.018078][ C1] batadv_nc_worker+0xec/0x610 [ 295.018100][ C1] ? batadv_nc_worker+0xcb/0x610 [ 295.018123][ C1] ? batadv_nc_worker+0xcb/0x610 [ 295.018147][ C1] ? process_scheduled_works+0x976/0x1850 [ 295.018172][ C1] process_scheduled_works+0xa63/0x1850 [ 295.018208][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 295.018236][ C1] ? assign_work+0x364/0x3d0 [ 295.018262][ C1] worker_thread+0x870/0xd30 [ 295.018291][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 295.018326][ C1] ? __kthread_parkme+0x169/0x1d0 [ 295.018354][ C1] ? __pfx_worker_thread+0x10/0x10 [ 295.018379][ C1] kthread+0x2f0/0x390 [ 295.018397][ C1] ? __pfx_worker_thread+0x10/0x10 [ 295.018421][ C1] ? __pfx_kthread+0x10/0x10 [ 295.018439][ C1] ret_from_fork+0x4b/0x80 [ 295.018465][ C1] ? __pfx_kthread+0x10/0x10 [ 295.018482][ C1] ret_from_fork_asm+0x1a/0x30 [ 295.018514][ C1] [ 295.045770][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 295.045796][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00320-gba01565ced22 #0 [ 295.045824][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 295.045840][ T30] Call Trace: [ 295.045850][ T30] [ 295.045861][ T30] dump_stack_lvl+0x241/0x360 [ 295.045897][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 295.045923][ T30] ? __pfx__printk+0x10/0x10 [ 295.045957][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 295.046001][ T30] ? vscnprintf+0x5d/0x90 [ 295.046033][ T30] panic+0x349/0x880 [ 295.046070][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 295.046102][ T30] ? __pfx_panic+0x10/0x10 [ 295.046135][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 295.046163][ T30] ? __irq_work_queue_local+0x137/0x410 [ 295.046198][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 295.046224][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 295.046254][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 295.046287][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 295.046328][ T30] watchdog+0x1033/0x1040 [ 295.046362][ T30] ? watchdog+0x1ea/0x1040 [ 295.046400][ T30] ? __pfx_watchdog+0x10/0x10 [ 295.046433][ T30] kthread+0x2f0/0x390 [ 295.046457][ T30] ? __pfx_watchdog+0x10/0x10 [ 295.046488][ T30] ? __pfx_kthread+0x10/0x10 [ 295.046513][ T30] ret_from_fork+0x4b/0x80 [ 295.046547][ T30] ? __pfx_kthread+0x10/0x10 [ 295.046572][ T30] ret_from_fork_asm+0x1a/0x30 [ 295.046620][ T30] [ 295.554952][ T30] Kernel Offset: disabled [ 295.559294][ T30] Rebooting in 86400 seconds..