last executing test programs: 9.376251138s ago: executing program 1 (id=2683): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a310000000094000000060a010400000000000000000100000008000b40000000006c000480340001800b000100657874686472000024000280080001400000000c08000340000000b108000440000000220500020007000000340001800c0001"], 0x108}}, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) socket(0x10, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0xa, "112000"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCINITREPORT(r2, 0x4805, 0x0) ioctl$HIDIOCGUCODE(r2, 0xc018480d, &(0x7f00000000c0)={0x3, 0x100, 0x6, 0xe, 0x80000000, 0x5}) 6.492461871s ago: executing program 1 (id=2693): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) socket(0x15, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB, @ANYRES32=r1], 0x90}}, 0x0) 6.413155964s ago: executing program 1 (id=2694): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)={0x40, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000001c0)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000280)={0x34, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, &(0x7f00000004c0)={0x40, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.854003501s ago: executing program 0 (id=2700): r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_clone3(&(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 5.668277657s ago: executing program 0 (id=2701): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a310000000094000000060a010400000000000000000100000008000b40000000006c000480340001800b000100657874686472000024000280080001400000000c08000340000000b108000440000000220500020007000000340001800c0001"], 0x108}}, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) socket(0x10, 0x3, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0xa, "112000"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCINITREPORT(r2, 0x4805, 0x0) ioctl$HIDIOCGUCODE(r2, 0xc018480d, &(0x7f00000000c0)={0x3, 0x100, 0x6, 0xe, 0x80000000, 0x5}) 3.846198446s ago: executing program 2 (id=2706): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) read(r1, &(0x7f0000000840)=""/40, 0x28) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0xd, @tick=0x9, 0x40, {0xc0, 0xff}, 0x42, 0x1, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r5, &(0x7f0000001f80)=""/4102, 0x1006) shutdown(r4, 0x2) 2.931024515s ago: executing program 2 (id=2708): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x2d1, 0x200, 0x3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48040}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd39, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xd, 0x3}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x28, 0x4000}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200084014000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f05805000000", 0x6}], 0x2}, 0x5) 2.832124018s ago: executing program 0 (id=2709): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv6_newrule={0x30, 0x20, 0x1, 0x0, 0x25dfdbfb, {0xa, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3001a}, [@FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x30}}, 0x40000) 2.79071685s ago: executing program 3 (id=2710): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x1) fsmount(r0, 0x0, 0x0) 2.719623462s ago: executing program 0 (id=2711): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000040)={0xa, 0x4}) 2.716067072s ago: executing program 3 (id=2712): openat(0xffffffffffffff9c, 0x0, 0x107842, 0xa) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x880) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x2) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x80000000020009) r0 = syz_open_dev$vbi(0x0, 0x3, 0x2) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000080)=0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x101002) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x4001af84, &(0x7f0000000240)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) read$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0x51) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) 2.709333903s ago: executing program 2 (id=2713): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x1, @random="b76e975edd7b", 'ip6gre0\x00'}}, 0x1e) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303, 0x3a}, "56db7a2700f81000", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "336819df", "4008000000008700"}, 0x38) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001380)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d7d18db747c88f6e518f0a947ee2b49e33538afa8af9234751", 0x89}], 0x1}, 0x20004000) 2.547960518s ago: executing program 0 (id=2714): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xc, 0x1, &(0x7f0000000940)) madvise(&(0x7f000085a000/0x1000)=nil, 0x1000, 0xc) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x11) syz_clone(0xa38a1500, 0x0, 0x13, 0x0, 0x0, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, 0xfffffffffffffffe, 0x11) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a00204000000007000000001400110076657468305f746f5f6272696467650008000a00"], 0x4c}, 0x1, 0x0, 0x0, 0x24040804}, 0x8014) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001300000008000a0005"], 0x24}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x1, 0x12}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='0'], 0x30}}, 0x8040) r4 = dup2(r2, r2) write$P9_RREMOVE(r4, &(0x7f0000000000)={0x7, 0x7b, 0x2}, 0x7) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x5c}}, 0x0) 2.510584039s ago: executing program 1 (id=2715): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000680)={r3, 0x200, 0x0, 0x1, 0x1, [0x0, 0x0, 0x0, 0x0], [0x800020, 0x0, 0x4], [0x40003, 0x1001000, 0x1], [0x0, 0x8000000000000000, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r4, 0x0, 0x0, r5], [0x2b8]}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000180)={"b46474f815e8d5535f0887c44335cc824dc6121bc72a77f532ff5dad4d643a9cab29d2310e04eb26c0af4985fe45e3b3b0680b3ec92725d74b9716e0f7c3119a2c9a0ae65ff4772e2e12733cb013c4308fe40863480747c0a7ddb9361b1578015ca1b32c1677ebae096f08345408f567443842946ed946434c75916d1db83fe305920de65bfaf9bd940672216846cb16b8ae67cd3affc61375381fd81755f7cc5138cafe5239aee71dcd481fbe1ecd2547ffbaad4469a74697c28fb9beefa6a5d736712a55eb9110c2cf7964062ba8cbc1c038e84f0f5db7fc7053118bf5221e3efa6fc3edb5d0ca3c51a332520aa8478b1775d552c5cc24d3c2df9eb333e5ca3aa06c1c2cf8526714f5caff2f55b41976fc20b64f1fc61d5b44f50953582a1825d32130a31abfeafd1987317879e29ac51b93c9659e023fff3ddb5e39dd19cc3ef1d883c78b9e073d08a9197fb3717df238b9831831214b186693be9dd2d68bb77272e80df5dfed03e8c467627bedfbd93359a9f79a3aa37e803dc1357b37b43d813ea85267b0dc8b1c4cc51bd985328833beb2679b7fb762555bbea2da936b36f8f1673fd5f606b2b6eb23b72bf947206e8dbfeb40ca6f265a3485c8446e0f0da652860b88328073d2282c14b48a7774e62754a968b60e92205e8fafcdd70a55c3c4d1a4821ff44e6e3681f15ae091262e3a3290a24d8ceae30ebbf9d24287bb8a5d73c608d47d287f9e5f6cf02b4796a83fb0c05e45b89de9ef8bce834e6d7a0be6e30d2c66cb6e640600000000000000bc0701d8fe56113335ae6adec59300db04691cc4a689034272a8e086e92ce7061b4f79fa8afbb48a6ce4b62bdc44af013d78880457e1fa61eb9204818606f4c3b03c0f33cd2a841ac9bc2b73151a96e31ab99e6ec969b5f2c3edd5f9abc69845e487af992758ba445368da93dae1d44360d52a534a88276b8aaf349841d8a4788c60408618437c442308dbf70efeda2e54e9b9e4fe5f76997c9dcb945a26bd75748c85d19ca8b99264dce50580e8d4dbda401dad7df31e9a7a6a3a83bfbdfb5394abd581ac0824fbcd75d2f5205c0b7c9188e6f26bfd97734d9a20433f6cdba9d14a5f32a4d97a57f4603b21146fd1aebf082e863d463c224ad623c17d8043d3bf083f0322408dd6915ac6a5222ab51480eb6e11a8913348219515170d9df90d72d7363bbda3e327d19f98c0a856f88076380e788e602e8a2ae0a1930786874dc21a2e99abda15f35457cf1dcb440c4b41350d0e64512aad7f57a0adc8a6914da06460635ed21c4c0c4927317d4e4e079f62efba2927828b23f94b16619a5520731c2c40abb7b60000000000004b84f4877c00"}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) 2.419465102s ago: executing program 2 (id=2716): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0xf, 0x4], 0x3, [0xb, 0x3, 0x1, 0x2002, 0x1, 0x4, 0x2, 0xd09, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x2, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x3ff, 0x2, 0xc, 0x42, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) recvmsg(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x120) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x8, [0xc, 0x9, 0x5, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r9, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r8, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r10) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) 2.330166475s ago: executing program 1 (id=2717): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x1000003, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) read(r1, &(0x7f0000000840)=""/40, 0x28) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0xd, @tick=0x9, 0x40, {0xc0, 0xff}, 0x42, 0x1, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r5, &(0x7f0000001f80)=""/4102, 0x1006) shutdown(r4, 0x2) 2.028218914s ago: executing program 0 (id=2718): r0 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000040b421810040000102030109026e0003017f0006080b0002012230230904000000010130000a2401100a00090000000904014cbcda4430000904010101010230000905010960"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000240)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000500)=ANY=[@ANYBLOB="64f16146f1f5c03c6875744352304000c064428e41c177079f19fd85236a88fbee78ce5b0cc0252c3052a84a1f95f04c4f5ccb08be3bb4699f59491940d941a131e254a2f1d4909a56ca63f8b52155e82ad7fbc5a7440ee316990bf7385d56ef961799bd"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = inotify_init() r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x4b8200, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x8000}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x20) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0xfe, 0x7fff0006}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa8203, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000080)={0x20004, r4, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000440)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x59, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000280)={0x1, r7, 0xff, 0x100007, 0xa, 0x1ff, 0x1}) openat$panthor(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r6, 0xc01864c1, &(0x7f0000000180)={r8}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x9, 0x0, 0x7ffffdbd}]}) syslog(0x3, &(0x7f0000000200)=""/90, 0x5a) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close_range(r1, 0xffffffffffffffff, 0x0) 2.004677135s ago: executing program 2 (id=2719): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) ppoll(&(0x7f0000001240)=[{r0, 0x4402}], 0x1, 0x0, 0x0, 0x0) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 1.367504816s ago: executing program 1 (id=2720): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) fsync(r2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x6000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x2b, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) 1.107923914s ago: executing program 3 (id=2721): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x2d1, 0x200, 0x3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48040}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd39, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xd, 0x3}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x28, 0x4000}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200084014000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f05805000000", 0x6}], 0x2}, 0x5) 1.038334136s ago: executing program 2 (id=2722): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f00000002c0)=0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_newaddr={0x34, 0x14, 0x509, 0x70bd2c, 0xfffffffd, {0x2, 0x18, 0x0, 0xfe}, [@IFA_CACHEINFO={0x14, 0x6, {0x5, 0xd8c7, 0x200, 0xd}}, @IFA_LOCAL={0x8, 0x2, @empty}]}, 0x34}, 0x1, 0x0, 0x0, 0x871ac4b30833d133}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x10) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x100, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x3, 0x1, {}, 0x0, 0x0, r1}) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000400)={&(0x7f0000000240), 0x10, &(0x7f0000000300)={&(0x7f0000000380)={0x5, 0x24a, 0xbae, {}, {0x77359400}, {0x2, 0x0, 0x0, 0x1}, 0x1, @can={{0x2, 0x1, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, "ec445f35e347c675"}}, 0x48}, 0x1, 0x0, 0x0, 0x4000800}, 0x8000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r9, @ANYBLOB="0a001800030303030303000c00"], 0x34}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x34, r4, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x8, 0x59}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3a}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x1) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 723.616317ms ago: executing program 3 (id=2723): socket$inet6(0xa, 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000300)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000180)=""/64, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/85, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) 500.601593ms ago: executing program 3 (id=2724): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000040)={0xa, 0x4}) 0s ago: executing program 3 (id=2725): close(0xffffffffffffffff) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000680)={r2, 0x200, 0x0, 0x1, 0x1, [0x0, 0x0, 0x0, 0x0], [0x800020, 0x0, 0x4], [0x40003, 0x1001000, 0x1], [0x0, 0x8000000000000000, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r3, 0x0, 0x0, r4], [0x2b8]}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000180)={"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"}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): t Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 563.535008][T13441] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input39 [ 563.558223][T13441] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 563.625720][T13441] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 563.658310][T13441] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 563.712855][T13441] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 563.767472][T13441] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 563.824037][T13441] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 563.877317][T13441] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 563.920063][T13441] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 563.977920][T13441] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 564.017272][T13441] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 564.069200][T13441] mceusb 3-1:0.0: Registered 42424242 with mce emulator interface version 1 [ 564.097247][T13441] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 564.118603][T14578] fuse: Bad value for 'fd' [ 564.126860][T13972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 564.146602][ T5785] Bluetooth: hci0: command tx timeout [ 564.159548][T13441] usb 3-1: USB disconnect, device number 108 [ 564.310395][T13972] veth0_vlan: entered promiscuous mode [ 564.337921][T13972] veth1_vlan: entered promiscuous mode [ 564.426812][T13972] veth0_macvtap: entered promiscuous mode [ 564.445335][T13972] veth1_macvtap: entered promiscuous mode [ 564.504660][T13972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 564.535924][T13972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.567471][T13972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 564.587226][T13972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.609085][T13972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 564.652042][T13972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.679168][T13972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.721555][T13972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.757464][T13972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.797267][T13972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 564.873049][T13972] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.917261][T13972] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.926004][T13972] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.947335][T13972] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.190546][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.221958][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 565.323355][ T1084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.410395][ T1084] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 565.481879][ T28] audit: type=1326 audit(1781129675.887:20500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14648 comm="syz.1.2357" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe8f39ce59 code=0x7ffc0000 [ 565.579818][ T28] audit: type=1326 audit(1781129675.897:20501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14648 comm="syz.1.2357" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe8f39ce59 code=0x7ffc0000 [ 565.709389][ T28] audit: type=1326 audit(1781129675.947:20502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14648 comm="syz.1.2357" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe8f39ce59 code=0x7ffc0000 [ 565.939273][T14660] trusted_key: encrypted_key: insufficient parameters specified [ 565.982283][ T28] audit: type=1326 audit(1781129675.947:20503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14648 comm="syz.1.2357" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe8f39ce59 code=0x7ffc0000 [ 566.127858][ T28] audit: type=1326 audit(1781129675.947:20504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14648 comm="syz.1.2357" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7efe8f39ce59 code=0x7ffc0000 [ 566.239803][ T28] audit: type=1326 audit(1781129675.947:20505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14648 comm="syz.1.2357" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe8f39ce59 code=0x7ffc0000 [ 566.357254][ T28] audit: type=1326 audit(1781129675.947:20506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14648 comm="syz.1.2357" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe8f39ce59 code=0x7ffc0000 [ 566.478057][ T28] audit: type=1326 audit(1781129675.947:20507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14648 comm="syz.1.2357" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe8f39ce59 code=0x7ffc0000 [ 566.574290][ T28] audit: type=1326 audit(1781129675.957:20508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14648 comm="syz.1.2357" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7efe8f39ce59 code=0x7ffc0000 [ 566.635572][T14667] syzkaller0: entered promiscuous mode [ 566.657239][T14667] syzkaller0: entered allmulticast mode [ 566.667701][ T28] audit: type=1326 audit(1781129675.957:20509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14648 comm="syz.1.2357" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe8f39ce59 code=0x7ffc0000 [ 566.988742][ T5780] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 567.008294][ T5780] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 567.016038][ T5780] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 567.052583][ T5780] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 567.060538][ T5780] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 567.069102][ T5780] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 567.587921][ T788] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 567.620337][T14739] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 567.627547][T14740] IPVS: stopping backup sync thread 14739 ... [ 567.798350][ T788] usb 3-1: unable to get BOS descriptor or descriptor too short [ 567.843466][ T788] usb 3-1: language id specifier not provided by device, defaulting to English [ 567.872129][ T788] usb 3-1: New USB device found, idVendor=0763, idProduct=1031, bcdDevice= 0.40 [ 567.892719][T14678] chnl_net:caif_netlink_parms(): no params data found [ 567.917414][ T788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.927579][T13415] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 567.942972][ T788] usb 3-1: Product: @ [ 567.947021][ T788] usb 3-1: SerialNumber: syz [ 568.129615][T13415] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 568.146504][T13415] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 568.156761][T13415] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 568.170085][T13415] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 568.182242][T13415] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.201171][ T788] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 568.217927][ T788] usb 3-1: MIDIStreaming interface descriptor not found [ 568.245816][ T788] usb 3-1: USB disconnect, device number 109 [ 568.269842][T13415] usb 4-1: config 0 descriptor?? [ 568.359766][T14678] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.367006][T14678] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.380993][T14678] bridge_slave_0: entered allmulticast mode [ 568.398815][T14678] bridge_slave_0: entered promiscuous mode [ 568.419859][T14678] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.451874][T14678] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.467573][T14678] bridge_slave_1: entered allmulticast mode [ 568.485229][T14678] bridge_slave_1: entered promiscuous mode [ 568.589128][ T5788] udevd[5788]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 568.699187][T13415] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 568.756952][T13415] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 568.876607][T14678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 568.919288][ T5821] usb 4-1: USB disconnect, device number 102 [ 568.924593][T14678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 569.025591][T14902] fido_id[14902]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 569.108018][ T5785] Bluetooth: hci3: command tx timeout [ 569.165776][T14678] team0: Port device team_slave_0 added [ 569.177114][T14678] team0: Port device team_slave_1 added [ 569.257652][T14678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 569.277273][T14678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 569.339237][T14678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 569.369628][T14678] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 569.376614][T14678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 569.426081][T14678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 569.611976][T14955] syzkaller0: entered promiscuous mode [ 569.629634][T14955] syzkaller0: entered allmulticast mode [ 571.185070][ T5785] Bluetooth: hci3: command tx timeout [ 571.634841][T14678] hsr_slave_0: entered promiscuous mode [ 571.682528][T14678] hsr_slave_1: entered promiscuous mode [ 572.236123][ T11] hsr_slave_0: left promiscuous mode [ 572.255346][ T11] hsr_slave_1: left promiscuous mode [ 572.278144][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 572.296614][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 572.327978][ T11] bridge_slave_1: left promiscuous mode [ 572.344884][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.376817][ T11] bridge_slave_0: left promiscuous mode [ 572.396333][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.437274][ T1190] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 572.629909][ T1190] usb 1-1: unable to get BOS descriptor or descriptor too short [ 572.653560][ T1190] usb 1-1: language id specifier not provided by device, defaulting to English [ 572.685413][ T1190] usb 1-1: New USB device found, idVendor=0763, idProduct=1031, bcdDevice= 0.40 [ 572.705164][ T1190] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.732788][ T1190] usb 1-1: Product: @ [ 572.747325][ T1190] usb 1-1: SerialNumber: syz [ 572.995803][ T1190] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 573.037636][ T1190] usb 1-1: MIDIStreaming interface descriptor not found [ 573.148047][ T1190] usb 1-1: USB disconnect, device number 102 [ 573.269843][ T5785] Bluetooth: hci3: command tx timeout [ 573.381775][ T5788] udevd[5788]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 573.820471][ T11] team0 (unregistering): Port device team_slave_1 removed [ 573.887976][ T11] team0 (unregistering): Port device team_slave_0 removed [ 573.948437][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 574.010478][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 574.522458][ T11] bond0 (unregistering): Released all slaves [ 575.024492][T15187] fuse: Bad value for 'fd' [ 575.307950][ T5821] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 575.337443][ T5785] Bluetooth: hci3: command tx timeout [ 575.391952][ T11] IPVS: stop unused estimator thread 0... [ 575.499430][ T5821] usb 4-1: unable to get BOS descriptor or descriptor too short [ 575.520117][ T5821] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 575.530587][T14678] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 575.542274][ T5821] usb 4-1: config 3 has 0 interfaces, different from the descriptor's value: 1 [ 575.554863][T14678] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 575.566068][ T5821] usb 4-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 575.577819][ T5821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.585958][ T5821] usb 4-1: Product: syz [ 575.590342][ T5821] usb 4-1: Manufacturer: syz [ 575.596224][ T5821] usb 4-1: SerialNumber: syz [ 575.600369][T14678] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 575.635026][T14678] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 575.774791][T14678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 575.814513][T14678] 8021q: adding VLAN 0 to HW filter on device team0 [ 575.833750][ T2951] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.841023][ T2951] bridge0: port 1(bridge_slave_0) entered forwarding state [ 575.862168][ T2951] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.869361][ T2951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 576.039309][ T5821] usb 4-1: USB disconnect, device number 103 [ 576.334676][T14678] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 576.403591][T14678] veth0_vlan: entered promiscuous mode [ 576.431589][T14678] veth1_vlan: entered promiscuous mode [ 576.476364][T14678] veth0_macvtap: entered promiscuous mode [ 576.502143][T14678] veth1_macvtap: entered promiscuous mode [ 576.532701][T14678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 576.546686][T14678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.562819][T14678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 576.573563][T14678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.589369][T14678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 576.600100][T14678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.615258][T14678] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 576.627608][ T788] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 576.628329][ T5821] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 576.654521][T14678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 576.670923][T14678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.683197][T14678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 576.705176][T14678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.718107][T14678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 576.733962][T14678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.747106][T14678] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 576.770718][T14678] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.780264][T14678] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.790422][T14678] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.799519][T14678] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.842404][ T788] usb 3-1: unable to get BOS descriptor or descriptor too short [ 576.849990][ T5821] usb 4-1: Using ep0 maxpacket: 8 [ 576.871824][ T788] usb 3-1: language id specifier not provided by device, defaulting to English [ 576.875338][ T5821] usb 4-1: unable to get BOS descriptor or descriptor too short [ 576.911409][ T5821] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 576.932083][ T5821] usb 4-1: can't read configurations, error -71 [ 576.946031][ T788] usb 3-1: New USB device found, idVendor=0763, idProduct=1031, bcdDevice= 0.40 [ 576.957046][ T788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.969724][ T788] usb 3-1: Product: @ [ 576.973753][ T788] usb 3-1: SerialNumber: syz [ 576.994039][ T4243] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 577.013345][ T4243] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 577.067531][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 577.081316][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 578.650230][T15320] syzkaller0: entered promiscuous mode [ 578.662148][T15320] syzkaller0: entered allmulticast mode [ 579.022813][T15326] fuse: Bad value for 'fd' [ 579.390649][ T788] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 579.416211][ T788] usb 3-1: MIDIStreaming interface descriptor not found [ 579.533834][ T788] usb 3-1: USB disconnect, device number 110 [ 579.755677][ T5788] udevd[5788]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 579.967266][T13448] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 580.013591][T15371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2398'. [ 580.203843][T13448] usb 1-1: unable to get BOS descriptor or descriptor too short [ 580.213858][T13448] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 580.255855][T13448] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 580.272479][T13448] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 580.284699][T13448] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 580.304330][T13448] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 580.315494][T13448] usb 1-1: config 1 interface 1 has no altsetting 0 [ 580.328301][T13448] usb 1-1: string descriptor 0 read error: -22 [ 580.334898][T13448] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 580.344439][T13448] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.378293][ T5780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 580.395159][ T5780] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 580.404273][ T5780] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 580.414326][ T5780] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 580.422639][ T5780] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 580.431713][ T5780] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 580.480680][ T4243] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.590971][ T4243] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.662979][ T4243] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.746750][ T4243] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.840959][T15380] chnl_net:caif_netlink_parms(): no params data found [ 581.143843][T15380] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.159496][T15380] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.166896][T15380] bridge_slave_0: entered allmulticast mode [ 581.194575][T15380] bridge_slave_0: entered promiscuous mode [ 581.203962][ T4243] tipc: Left network mode [ 581.209847][T15487] syzkaller0: entered promiscuous mode [ 581.215350][T15487] syzkaller0: entered allmulticast mode [ 581.236961][T13448] usb 1-1: 2:0: failed to get current value for ch 1 (-71) [ 581.294121][T13448] usb 1-1: USB disconnect, device number 103 [ 581.315766][T15380] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.329043][T15380] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.342974][T15380] bridge_slave_1: entered allmulticast mode [ 581.354141][T15380] bridge_slave_1: entered promiscuous mode [ 581.562285][T15380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 581.596948][T15380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 581.692324][T15380] team0: Port device team_slave_0 added [ 581.709188][T15380] team0: Port device team_slave_1 added [ 581.763403][T15380] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 581.777570][T15380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 581.822855][T15380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 581.874680][T15380] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 581.881994][T15380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 581.920482][T15380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 582.224251][T15380] hsr_slave_0: entered promiscuous mode [ 582.237759][T15380] hsr_slave_1: entered promiscuous mode [ 582.259141][T15380] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 582.271605][T15380] Cannot create hsr debugfs directory [ 582.447263][T13441] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 582.458035][ T5780] Bluetooth: hci1: command tx timeout [ 582.651274][T13441] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 582.684334][T13441] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 582.724132][T13441] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 582.786594][T13441] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 582.828156][T13441] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 582.837535][T13441] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 582.845733][T13441] usb 1-1: Product: syz [ 582.850521][T13441] usb 1-1: Manufacturer: syz [ 582.865811][T13441] cdc_wdm 1-1:1.0: skipping garbage [ 582.871851][T13441] cdc_wdm 1-1:1.0: skipping garbage [ 582.880086][T13441] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 582.886197][T13441] cdc_wdm 1-1:1.0: Unknown control protocol [ 583.112024][T13441] usb 1-1: USB disconnect, device number 104 [ 583.472097][ T4243] hsr_slave_0: left promiscuous mode [ 583.533924][ T4243] hsr_slave_1: left promiscuous mode [ 583.542308][ T4243] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 583.573517][ T4243] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 583.618353][ T4243] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 583.627014][ T4243] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 583.674107][ T4243] bridge_slave_1: left allmulticast mode [ 583.694880][ T4243] bridge_slave_1: left promiscuous mode [ 583.707792][ T4243] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.731044][ T4243] bridge_slave_0: left allmulticast mode [ 583.737489][ T4243] bridge_slave_0: left promiscuous mode [ 583.737509][T13441] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 583.743504][ T4243] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.815136][ T4243] veth1_macvtap: left promiscuous mode [ 583.824015][ T4243] veth0_macvtap: left promiscuous mode [ 583.833428][ T4243] veth1_vlan: left promiscuous mode [ 583.843047][ T4243] veth0_vlan: left promiscuous mode [ 583.980599][T13441] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 583.999477][T13441] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 584.025736][T13441] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 584.052132][T13441] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 584.088990][T13441] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 584.111828][T13441] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 584.147234][T13441] usb 1-1: Product: syz [ 584.151576][T13441] usb 1-1: Manufacturer: syz [ 584.198265][T13441] cdc_wdm 1-1:1.0: skipping garbage [ 584.205921][T13441] cdc_wdm 1-1:1.0: skipping garbage [ 584.243046][T13441] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 584.252217][T13441] cdc_wdm 1-1:1.0: Unknown control protocol [ 584.539275][ T5780] Bluetooth: hci1: command tx timeout [ 584.713397][T13415] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 584.862662][ T4243] team0 (unregistering): Port device team_slave_1 removed [ 584.915187][T13415] usb 4-1: unable to get BOS descriptor or descriptor too short [ 584.921319][ T4243] team0 (unregistering): Port device team_slave_0 removed [ 584.926467][T13415] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 584.941404][T13415] usb 4-1: config 3 has 0 interfaces, different from the descriptor's value: 1 [ 584.971367][T13415] usb 4-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 584.980823][T13415] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.991582][T13415] usb 4-1: Product: syz [ 584.995815][T13415] usb 4-1: Manufacturer: syz [ 585.000783][T13415] usb 4-1: SerialNumber: syz [ 585.032036][ T4243] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 585.093733][ T4243] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 585.460050][ T9] usb 4-1: USB disconnect, device number 106 [ 585.496158][ T4243] bond0 (unregistering): Released all slaves [ 585.950814][ T9] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 585.961643][T15380] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 586.001028][T15380] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 586.009969][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 586.009983][ T28] audit: type=1326 audit(1781129696.427:20520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15828 comm="syz.1.2413" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39de19ce59 code=0x7ffc0000 [ 586.040434][ C1] vkms_vblank_simulate: vblank timer overrun [ 586.054671][T15380] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 586.084456][ T28] audit: type=1326 audit(1781129696.467:20521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15828 comm="syz.1.2413" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39de19ce59 code=0x7ffc0000 [ 586.089235][T15380] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 586.109381][ T28] audit: type=1326 audit(1781129696.477:20522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15828 comm="syz.1.2413" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f39de19ce59 code=0x7ffc0000 [ 586.139759][ C1] vkms_vblank_simulate: vblank timer overrun [ 586.157298][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 586.193714][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 586.208896][ T9] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 586.219070][ T28] audit: type=1326 audit(1781129696.477:20523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15828 comm="syz.1.2413" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39de19ce59 code=0x7ffc0000 [ 586.231588][ T9] usb 4-1: can't read configurations, error -71 [ 586.246840][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 586.257166][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 586.267272][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 586.273915][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 586.280532][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 586.287169][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 586.294939][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 586.301591][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 586.308253][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 586.310091][ T4243] IPVS: stop unused estimator thread 0... [ 586.314876][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 586.326915][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 586.333564][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 586.340037][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 586.346669][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 586.353414][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 586.360055][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 586.366381][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 586.373034][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 586.379444][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 586.386083][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 586.397062][T13441] usb 1-1: USB disconnect, device number 105 [ 586.403196][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 586.417650][ T28] audit: type=1326 audit(1781129696.477:20524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15828 comm="syz.1.2413" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39de19ce59 code=0x7ffc0000 [ 586.442013][ T28] audit: type=1326 audit(1781129696.477:20525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15828 comm="syz.1.2413" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f39de19ce59 code=0x7ffc0000 [ 586.549340][ T28] audit: type=1326 audit(1781129696.477:20526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15828 comm="syz.1.2413" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39de19ce59 code=0x7ffc0000 [ 586.616719][T15380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 586.617917][ T5780] Bluetooth: hci1: command tx timeout [ 586.641127][ T28] audit: type=1326 audit(1781129696.477:20527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15828 comm="syz.1.2413" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f39de19ce59 code=0x7ffc0000 [ 586.689759][ T28] audit: type=1326 audit(1781129696.487:20528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15828 comm="syz.1.2413" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39de19ce59 code=0x7ffc0000 [ 586.720028][T15380] 8021q: adding VLAN 0 to HW filter on device team0 [ 586.727788][ T28] audit: type=1326 audit(1781129696.487:20529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15828 comm="syz.1.2413" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39de19ce59 code=0x7ffc0000 [ 586.790464][ T1084] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.797682][ T1084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 586.823229][ T1084] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.830513][ T1084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 587.492062][T15380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 587.636338][T15380] veth0_vlan: entered promiscuous mode [ 587.657062][T15380] veth1_vlan: entered promiscuous mode [ 587.706510][T15380] veth0_macvtap: entered promiscuous mode [ 587.731359][T15380] veth1_macvtap: entered promiscuous mode [ 587.768277][T15380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 587.789759][T15380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.802818][T15380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 587.814729][T15380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.830041][T15380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 587.842853][T15380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.847460][T13414] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 587.862917][T15380] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 587.885902][T15380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 587.901179][T15380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.914301][T15380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 587.929440][T15380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.942462][T15380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 587.955333][T15380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.972692][T15380] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 588.009587][T15380] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.023632][T15380] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.034800][T15380] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.047779][T15380] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.060886][T13414] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 588.077724][T13414] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 588.117600][T13414] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 588.149311][T13414] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 588.176776][T13414] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 588.201421][T13414] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 588.217307][T13414] usb 4-1: Product: syz [ 588.225226][T13414] usb 4-1: Manufacturer: syz [ 588.251161][T13414] cdc_wdm 4-1:1.0: skipping garbage [ 588.263499][ T2967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 588.274715][T13414] cdc_wdm 4-1:1.0: skipping garbage [ 588.293274][ T2967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 588.305827][T13414] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 588.334505][T13414] cdc_wdm 4-1:1.0: Unknown control protocol [ 588.393633][ T4243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 588.419670][ T4243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 588.466895][ T9] usb 4-1: USB disconnect, device number 109 [ 588.602629][T15932] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 588.603818][T15931] IPVS: stopping backup sync thread 15932 ... [ 588.698323][ T5780] Bluetooth: hci1: command tx timeout [ 588.907371][ T5821] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 589.067331][ T9] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 589.096786][ T5821] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 589.113555][ T5821] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 589.133246][ T5821] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 589.146526][ T5821] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 589.156185][ T5821] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.181783][ T5821] usb 3-1: config 0 descriptor?? [ 589.269877][ T9] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 589.283597][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 589.300338][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 589.312334][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 589.326035][ T9] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 589.337075][ T9] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 589.345495][ T9] usb 4-1: Product: syz [ 589.350431][ T9] usb 4-1: Manufacturer: syz [ 589.362090][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 589.380778][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 589.390434][ T9] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 589.396399][ T9] cdc_wdm 4-1:1.0: Unknown control protocol [ 589.612431][ T5821] usbhid 3-1:0.0: can't add hid device: -71 [ 589.635444][ T5821] usbhid: probe of 3-1:0.0 failed with error -71 [ 589.663939][ T5821] usb 3-1: USB disconnect, device number 111 [ 589.831704][T13441] usb 4-1: USB disconnect, device number 110 [ 589.831728][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 590.048426][ T1190] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 590.237954][ T1190] usb 1-1: no configurations [ 590.242630][ T1190] usb 1-1: can't read configurations, error -22 [ 590.392701][T16006] syzkaller0: entered promiscuous mode [ 590.399425][T16006] syzkaller0: entered allmulticast mode [ 590.408476][ T1190] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 590.421444][T16006] tipc: Started in network mode [ 590.426394][T16006] tipc: Node identity 527ef5289a02, cluster identity 4711 [ 590.436254][T16006] tipc: Enabled bearer , priority 0 [ 590.452019][T16005] tipc: Resetting bearer [ 590.496363][T16005] tipc: Disabling bearer [ 590.598146][ T1190] usb 1-1: no configurations [ 590.603537][ T1190] usb 1-1: can't read configurations, error -22 [ 590.619198][ T1190] usb usb1-port1: attempt power cycle [ 590.917292][T13448] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 591.037287][ T1190] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 591.068954][ T1190] usb 1-1: no configurations [ 591.073609][ T1190] usb 1-1: can't read configurations, error -22 [ 591.115915][T13448] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 591.130986][T13448] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 591.140804][T13448] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 591.154097][T13448] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 591.164801][T13448] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.175936][T13448] usb 2-1: config 0 descriptor?? [ 591.227301][ T1190] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 591.260241][ T1190] usb 1-1: no configurations [ 591.266444][ T1190] usb 1-1: can't read configurations, error -22 [ 591.278893][ T1190] usb usb1-port1: unable to enumerate USB device [ 591.605911][T13448] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 591.615371][T13448] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 591.622991][T13448] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 591.631005][T13448] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 591.639673][T13448] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 591.648737][T13448] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 591.656181][T13448] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 591.665325][T13448] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 591.675429][T13448] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 591.683233][T13448] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 591.691114][T13448] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 591.698796][T13448] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 591.706420][T13448] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 591.715863][T13448] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 591.723652][T13448] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 591.731858][T13448] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 591.762483][T13448] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 591.901783][T13415] usb 2-1: USB disconnect, device number 98 [ 592.975881][T16050] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 593.256000][T16059] IPVS: stopping backup sync thread 16060 ... [ 593.458342][T16071] syzkaller0: entered promiscuous mode [ 593.463948][T16071] syzkaller0: entered allmulticast mode [ 593.479037][T16071] tipc: Started in network mode [ 593.484026][T16071] tipc: Node identity 2a4f3453bd1, cluster identity 4711 [ 593.492703][T16071] tipc: Enabled bearer , priority 0 [ 593.504081][T16070] tipc: Resetting bearer [ 593.537982][T13448] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 593.552125][T16070] tipc: Disabling bearer [ 593.719768][T13448] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 593.731046][T13448] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 593.741901][T13448] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 593.755184][T13448] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 593.764408][T13448] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.774799][T13448] usb 4-1: config 0 descriptor?? [ 593.947379][T13441] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 594.152444][T13441] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 594.163464][T13441] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 594.173413][T13441] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 594.186387][T13441] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 594.196767][T13441] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.214301][T13448] usbhid 4-1:0.0: can't add hid device: -71 [ 594.234807][T13448] usbhid: probe of 4-1:0.0 failed with error -71 [ 594.247505][T13441] usb 2-1: config 0 descriptor?? [ 594.266022][T13448] usb 4-1: USB disconnect, device number 111 [ 594.343498][T16096] ip6gre1: entered promiscuous mode [ 594.350900][T16096] ip6gre1: entered allmulticast mode [ 594.671769][T13441] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 594.684658][T13441] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 594.692265][T13441] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 594.700662][T13441] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 594.708262][T13441] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 594.727641][T13441] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 594.737246][T13441] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 594.753494][T13441] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 594.764101][T13441] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 594.772345][T13441] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 594.780454][T13441] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 594.790035][T13441] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 594.798481][T13441] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 594.806945][T13441] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 594.821955][T13441] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 594.863176][T13441] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 594.907705][T13441] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 594.939200][T13441] usb 2-1: USB disconnect, device number 99 [ 595.070800][T16120] fido_id[16120]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 595.692832][T16138] syzkaller0: entered promiscuous mode [ 595.711909][T16138] syzkaller0: entered allmulticast mode [ 595.760757][T16138] tipc: Enabled bearer , priority 0 [ 595.796089][T16137] tipc: Resetting bearer [ 595.859315][T16137] tipc: Disabling bearer [ 596.493608][T16151] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2455'. [ 596.807279][ T5821] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 597.013144][ T5821] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 597.043490][ T5821] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 597.056979][ T5821] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 597.071998][ T5821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.100880][ T5821] usb 4-1: config 0 descriptor?? [ 597.583835][T16190] tipc: Failed to remove unknown binding: 66,0,0/0:2039794516/2039794518 [ 597.593232][T16190] tipc: Failed to remove unknown binding: 66,0,0/0:2039794516/2039794517 [ 597.603243][T16190] tipc: Failed to remove unknown binding: 66,0,0/0:2039794516/2039794518 [ 597.613346][T16190] tipc: Failed to remove unknown binding: 66,0,0/0:2039794516/2039794517 [ 597.731014][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 597.731030][ T28] audit: type=1326 audit(1781129708.147:20536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16195 comm="syz.2.2465" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec1799ce59 code=0x7ffc0000 [ 597.764945][ T28] audit: type=1326 audit(1781129708.147:20537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16195 comm="syz.2.2465" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec1799ce59 code=0x7ffc0000 [ 597.770534][T16196] fuse: Bad value for 'fd' [ 597.794300][ T27] usb 1-1: new full-speed USB device number 110 using dummy_hcd [ 597.803752][ T28] audit: type=1326 audit(1781129708.177:20538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16195 comm="syz.2.2465" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fec1799ce59 code=0x7ffc0000 [ 597.829230][ T28] audit: type=1326 audit(1781129708.177:20539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16195 comm="syz.2.2465" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec1799ce59 code=0x7ffc0000 [ 597.854160][ T28] audit: type=1326 audit(1781129708.177:20540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16195 comm="syz.2.2465" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec1799ce59 code=0x7ffc0000 [ 597.879137][ T28] audit: type=1326 audit(1781129708.177:20541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16195 comm="syz.2.2465" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fec1799ce59 code=0x7ffc0000 [ 597.905331][ T28] audit: type=1326 audit(1781129708.217:20542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16195 comm="syz.2.2465" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec1799ce59 code=0x7ffc0000 [ 597.930954][ T28] audit: type=1326 audit(1781129708.217:20543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16195 comm="syz.2.2465" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec1799ce59 code=0x7ffc0000 [ 597.956591][ T28] audit: type=1326 audit(1781129708.217:20544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16195 comm="syz.2.2465" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fec1799ce59 code=0x7ffc0000 [ 597.983000][ T28] audit: type=1326 audit(1781129708.217:20545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16195 comm="syz.2.2465" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec1799ce59 code=0x7ffc0000 [ 598.007575][ T27] usb 1-1: config 0 interface 0 altsetting 255 has an invalid endpoint with address 0xFF, skipping [ 598.020291][ T27] usb 1-1: config 0 interface 0 has no altsetting 0 [ 598.031304][ T27] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 598.040815][ T27] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 598.054111][ T27] usb 1-1: Product: syz [ 598.058819][ T27] usb 1-1: Manufacturer: syz [ 598.063476][ T27] usb 1-1: SerialNumber: syz [ 598.070740][ T27] usb 1-1: config 0 descriptor?? [ 598.102792][ T27] snd-usb-audio: probe of 1-1:0.0 failed with error -22 [ 598.160265][ T5786] udevd[5786]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 598.298139][ T1190] usb 1-1: USB disconnect, device number 110 [ 599.442682][ T1190] usb 4-1: USB disconnect, device number 112 [ 599.522227][T16246] syzkaller0: entered promiscuous mode [ 599.528494][T16246] syzkaller0: entered allmulticast mode [ 599.549081][ T5821] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 599.571343][T16246] tipc: Enabled bearer , priority 0 [ 599.583101][T16245] tipc: Resetting bearer [ 599.633087][T16245] tipc: Disabling bearer [ 599.672763][T16254] syzkaller0: entered promiscuous mode [ 599.679050][T16254] syzkaller0: entered allmulticast mode [ 599.760090][ T5821] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 599.771029][ T5821] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 599.795159][ T5821] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 599.804752][ T5821] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 599.813907][ T5821] usb 1-1: SerialNumber: syz [ 600.043929][ T5821] usb 1-1: 0:2 : does not exist [ 600.059699][ T1190] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 600.091746][ T5821] usb 1-1: USB disconnect, device number 111 [ 600.221492][T16292] netlink: 'syz.1.2480': attribute type 2 has an invalid length. [ 600.281237][ T1190] usb 3-1: Using ep0 maxpacket: 16 [ 600.300140][ T1190] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 600.314660][ T1190] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 600.325905][ T1190] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 600.341868][ T1190] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 600.353367][T16294] pim6reg: entered allmulticast mode [ 600.356109][ T1190] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 600.377982][T16294] pim6reg: left allmulticast mode [ 600.383915][ T1190] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 600.396535][ T1190] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 600.408020][ T1190] usb 3-1: Manufacturer: syz [ 600.417109][ T1190] usb 3-1: config 0 descriptor?? [ 600.645742][T16311] syzkaller0: entered promiscuous mode [ 600.653443][T16311] syzkaller0: entered allmulticast mode [ 600.695584][T16311] tipc: Enabled bearer , priority 0 [ 600.739832][T16310] tipc: Resetting bearer [ 600.781279][T16310] tipc: Disabling bearer [ 600.787401][T13441] usb 4-1: new full-speed USB device number 113 using dummy_hcd [ 600.801943][ T1190] rc_core: IR keymap rc-hauppauge not found [ 600.808018][ T1190] Registered IR keymap rc-empty [ 600.813011][ T1190] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 600.847312][ T1190] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 600.892612][ T1190] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 600.919603][ T1190] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input40 [ 600.937888][ T1190] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 600.977480][ T1190] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 600.987653][T13441] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 601.006674][T13441] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 601.016202][T13441] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 601.037572][ T1190] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 601.050844][T13441] usb 4-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 601.062443][T13441] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.073794][T13441] usb 4-1: Product: syz [ 601.079258][T13441] usb 4-1: Manufacturer: syz [ 601.084386][T13441] usb 4-1: SerialNumber: syz [ 601.088396][ T1190] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 601.137373][ T1190] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 601.177658][ T1190] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 601.221688][ T1190] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 601.257522][ T1190] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 601.287346][ T1190] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 601.326790][T13441] usb 4-1: unit 4 not found! [ 601.333456][T13441] usb 4-1: 6:0: failed to get current value for ch 0 (-71) [ 601.348157][ T1190] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 601.389096][ T1190] mceusb 3-1:0.0: Registered 42424242 with mce emulator interface version 1 [ 601.408916][T13441] usb 4-1: USB disconnect, device number 113 [ 601.414330][ T1190] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 601.454800][ T1190] usb 3-1: USB disconnect, device number 112 [ 601.520947][ T5904] udevd[5904]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 601.946141][T16392] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2493'. [ 601.967242][ T5880] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 602.147412][ T5880] usb 1-1: Using ep0 maxpacket: 16 [ 602.558127][ T1190] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 602.597239][ T27] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 602.762703][ T1190] usb 4-1: unable to get BOS descriptor or descriptor too short [ 602.777266][ T27] usb 2-1: Using ep0 maxpacket: 32 [ 602.789454][ T1190] usb 4-1: language id specifier not provided by device, defaulting to English [ 602.804501][ T27] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 602.824719][ T1190] usb 4-1: New USB device found, idVendor=0763, idProduct=1031, bcdDevice= 0.40 [ 602.834812][ T27] usb 2-1: config 0 has no interface number 0 [ 602.835095][ T1190] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.851200][ T1190] usb 4-1: Product: @ [ 602.855408][ T1190] usb 4-1: SerialNumber: syz [ 602.860655][ T27] usb 2-1: config 0 interface 184 has no altsetting 0 [ 602.879894][ T27] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 602.900498][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.943488][ T27] usb 2-1: Product: syz [ 602.965460][ T27] usb 2-1: Manufacturer: syz [ 602.982985][ T27] usb 2-1: SerialNumber: syz [ 603.005295][ T27] usb 2-1: config 0 descriptor?? [ 603.033054][ T27] smsc75xx v1.0.0 [ 603.647345][T13415] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 603.658703][ T27] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 603.678799][ T27] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 603.847371][T13415] usb 3-1: Using ep0 maxpacket: 16 [ 603.859581][T13415] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 603.869931][T13415] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 603.881142][T13415] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 603.893058][T13415] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 603.904041][T13415] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 603.918388][ T27] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 603.932191][T13415] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 603.937370][ T27] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 603.953326][T13415] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 603.960896][ T27] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 603.974680][T13415] usb 3-1: Manufacturer: syz [ 603.974881][ T27] smsc75xx: probe of 2-1:0.184 failed with error -61 [ 603.994450][T13415] usb 3-1: config 0 descriptor?? [ 604.357456][T13415] rc_core: IR keymap rc-hauppauge not found [ 604.363722][T13415] Registered IR keymap rc-empty [ 604.370757][T13415] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 604.407421][T13415] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 604.438597][T13415] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 604.457196][T13415] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input41 [ 604.481992][T13415] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 604.517544][T13415] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 604.547351][T13415] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 604.577487][T13415] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 604.607790][T13415] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 604.647349][T13415] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 604.677436][T13415] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 604.717576][T13415] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 604.768094][T13415] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 604.783088][ T5880] usb 1-1: unable to get BOS descriptor or descriptor too short [ 604.807422][T13415] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 604.817413][ T5880] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 604.825067][ T5880] usb 1-1: can't read configurations, error -71 [ 604.869854][T13415] mceusb 3-1:0.0: Registered 42424242 with mce emulator interface version 1 [ 604.879539][T13415] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 604.898116][T13415] usb 3-1: USB disconnect, device number 113 [ 605.251107][ T1190] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 605.258948][ T1190] usb 4-1: MIDIStreaming interface descriptor not found [ 605.346034][ T1190] usb 4-1: USB disconnect, device number 114 [ 605.408903][T16489] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2505'. [ 605.450628][ T788] usb 2-1: USB disconnect, device number 100 [ 605.522524][ T5788] udevd[5788]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 605.627834][T16523] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2506'. [ 605.641355][T16523] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2506'. [ 605.821880][T16536] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2509'. [ 606.007317][ T788] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 606.097292][T13441] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 606.199512][ T788] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 121, changing to 10 [ 606.221174][ T788] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 606.249757][ T788] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 606.262107][ T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.275155][ T788] usb 2-1: Product: syz [ 606.279658][ T788] usb 2-1: Manufacturer: syz [ 606.284375][ T788] usb 2-1: SerialNumber: syz [ 606.293992][T13441] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 606.306437][T13441] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 606.336853][T13441] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 606.355627][T13441] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.371156][T13441] usb 4-1: config 0 descriptor?? [ 606.751113][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 606.763502][ T788] cdc_ncm 2-1:1.0: bind() failure [ 606.772729][ T788] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 606.807661][ T788] cdc_ncm 2-1:1.1: bind() failure [ 606.838814][ T788] usb 2-1: USB disconnect, device number 101 [ 606.988932][T16578] input: syz0 as /devices/virtual/input/input42 [ 607.537242][T13441] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 607.667268][ T788] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 607.719805][T13441] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 607.732450][T13441] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 607.751495][T13441] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 607.760809][T13441] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.768944][T13441] usb 1-1: Product: syz [ 607.773190][T13441] usb 1-1: Manufacturer: syz [ 607.778008][T13441] usb 1-1: SerialNumber: syz [ 607.847261][ T788] usb 2-1: Using ep0 maxpacket: 8 [ 607.855643][ T788] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 607.866097][ T788] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 607.877578][ T788] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 607.889050][ T788] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid wMaxPacketSize 0 [ 607.899758][ T788] usb 2-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 607.913238][ T788] usb 2-1: config 168 interface 0 has no altsetting 0 [ 607.921405][ T788] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 607.932400][ T788] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 607.943913][ T788] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 607.956104][ T788] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid wMaxPacketSize 0 [ 607.967095][ T788] usb 2-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 607.985626][ T788] usb 2-1: config 168 interface 0 has no altsetting 0 [ 607.997788][T16589] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 608.007008][ T788] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 608.017634][ T788] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 608.031259][ T788] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 608.043930][ T788] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid wMaxPacketSize 0 [ 608.057557][ T788] usb 2-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 608.071036][ T788] usb 2-1: config 168 interface 0 has no altsetting 0 [ 608.083808][ T788] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 608.093099][ T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.102120][ T788] usb 2-1: Product: syz [ 608.106447][ T788] usb 2-1: Manufacturer: syz [ 608.111156][ T788] usb 2-1: SerialNumber: syz [ 608.180211][T16602] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2519'. [ 608.189408][T16602] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2519'. [ 608.205750][T16602] bond0: entered promiscuous mode [ 608.213912][T16602] bond_slave_0: entered promiscuous mode [ 608.221237][T16602] bond_slave_1: entered promiscuous mode [ 608.233095][T16602] bond0: left promiscuous mode [ 608.238250][T16602] bond_slave_0: left promiscuous mode [ 608.243864][T16602] bond_slave_1: left promiscuous mode [ 608.342705][ T788] adutux 2-1:168.0: interrupt endpoints not found [ 608.363057][ T788] usb 2-1: USB disconnect, device number 102 [ 608.614369][T16589] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 608.824004][T13441] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 608.837303][T13441] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 608.867905][ T788] usb 4-1: USB disconnect, device number 115 [ 608.876071][T13441] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 609.028826][T13441] cdc_ncm 1-1:1.0: setting tx_max = 184 [ 609.075042][T16638] syzkaller0: entered promiscuous mode [ 609.082746][T16638] syzkaller0: entered allmulticast mode [ 609.291066][T13441] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 609.327758][T13441] usb 1-1: USB disconnect, device number 114 [ 609.358917][T13441] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 609.657655][T13448] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 609.717287][T16695] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2532'. [ 609.847914][T13448] usb 4-1: Using ep0 maxpacket: 16 [ 609.865498][T13448] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 609.887072][T13448] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 609.901820][T13448] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 609.921689][T13448] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 609.941683][T13448] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 609.973207][T13448] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 609.997859][T13441] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 610.017571][T13448] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 610.025600][T13448] usb 4-1: Manufacturer: syz [ 610.033126][T13448] usb 4-1: config 0 descriptor?? [ 610.219765][T13441] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 610.231724][T13441] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 610.244278][T13441] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 610.282055][T13441] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.305064][T13441] usb 2-1: config 0 descriptor?? [ 610.457529][T13448] rc_core: IR keymap rc-hauppauge not found [ 610.463942][T13448] Registered IR keymap rc-empty [ 610.477340][T13448] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 610.519124][T13448] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 610.569532][T13448] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 610.595069][T13448] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input43 [ 610.618019][T13448] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 610.667329][T13448] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 610.714450][T13448] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 610.757365][T13448] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 610.787398][T13448] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 610.828252][T13448] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 610.887364][T13448] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 610.918116][T13448] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 610.967331][T13448] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 611.007276][T13448] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 611.041097][T13448] mceusb 4-1:0.0: Registered 42424242 with mce emulator interface version 1 [ 611.050150][T13448] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 611.067238][T13448] usb 4-1: USB disconnect, device number 116 [ 611.705133][T16761] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2540'. [ 611.727571][T16761] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2540'. [ 611.762656][T16761] bond0: entered promiscuous mode [ 611.775838][T16761] bond_slave_0: entered promiscuous mode [ 611.790956][T16761] bond_slave_1: entered promiscuous mode [ 611.814052][T16761] bond0: left promiscuous mode [ 611.825841][T16761] bond_slave_0: left promiscuous mode [ 611.841117][T16761] bond_slave_1: left promiscuous mode [ 611.943062][T16771] tipc: Failed to remove unknown binding: 66,0,0/0:3887138956/3887138958 [ 611.961131][T16771] tipc: Failed to remove unknown binding: 66,0,0/0:3887138956/3887138957 [ 612.017895][T16771] tipc: Failed to remove unknown binding: 66,0,0/0:3887138956/3887138958 [ 612.080884][T16771] tipc: Failed to remove unknown binding: 66,0,0/0:3887138956/3887138957 [ 612.577242][T13414] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 612.753899][T13441] usb 2-1: USB disconnect, device number 103 [ 612.770166][T13414] usb 4-1: unable to get BOS descriptor or descriptor too short [ 612.838882][T13414] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 612.878594][T13414] usb 4-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 612.893788][T13414] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.911808][T13414] usb 4-1: Product: syz [ 612.921736][T13414] usb 4-1: Manufacturer: syz [ 612.932295][T13414] usb 4-1: SerialNumber: syz [ 613.867259][T13414] usb 4-1: reset high-speed USB device number 117 using dummy_hcd [ 613.883170][T13414] usb 4-1: device reset changed ep0 maxpacket size! [ 613.926769][T13414] usb 4-1: USB disconnect, device number 117 [ 614.087427][T13414] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 614.277281][T13414] usb 4-1: Using ep0 maxpacket: 8 [ 614.283595][T16843] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2556'. [ 614.293095][ T5880] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 614.310849][T13414] usb 4-1: unable to get BOS descriptor or descriptor too short [ 614.326991][T13414] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 614.335872][T13414] usb 4-1: can't read configurations, error -71 [ 614.477300][ T5880] usb 3-1: Using ep0 maxpacket: 8 [ 614.487208][ T5880] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 614.496335][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.505061][ T5880] usb 3-1: Product: syz [ 614.509584][ T5880] usb 3-1: Manufacturer: syz [ 614.514240][ T5880] usb 3-1: SerialNumber: syz [ 614.521331][ T5880] usb 3-1: config 0 descriptor?? [ 614.601476][T13446] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 614.733361][ T5880] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 614.744051][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 614.744064][ T28] audit: type=1326 audit(1781129725.157:20559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16852 comm="syz.1.2557" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39de19ce59 code=0x7ffc0000 [ 614.774548][ C1] vkms_vblank_simulate: vblank timer overrun [ 614.786707][ T28] audit: type=1326 audit(1781129725.187:20560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16852 comm="syz.1.2557" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39de19ce59 code=0x7ffc0000 [ 614.824746][ T28] audit: type=1326 audit(1781129725.197:20561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16852 comm="syz.1.2557" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39de19ce59 code=0x7ffc0000 [ 614.832220][T13446] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 614.859503][ T28] audit: type=1326 audit(1781129725.197:20562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16852 comm="syz.1.2557" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39de19ce59 code=0x7ffc0000 [ 614.859551][ T28] audit: type=1326 audit(1781129725.197:20563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16852 comm="syz.1.2557" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f39de19ce59 code=0x7ffc0000 [ 614.859626][ T28] audit: type=1326 audit(1781129725.197:20564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16852 comm="syz.1.2557" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39de19ce59 code=0x7ffc0000 [ 614.859672][ T28] audit: type=1326 audit(1781129725.197:20565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16852 comm="syz.1.2557" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39de19ce59 code=0x7ffc0000 [ 614.859765][ T28] audit: type=1326 audit(1781129725.197:20566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16852 comm="syz.1.2557" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39de19ce59 code=0x7ffc0000 [ 614.895667][T13446] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 614.910305][ T28] audit: type=1326 audit(1781129725.197:20567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16852 comm="syz.1.2557" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39de19ce59 code=0x7ffc0000 [ 615.023406][ T28] audit: type=1326 audit(1781129725.197:20568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16852 comm="syz.1.2557" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f39de19ce59 code=0x7ffc0000 [ 615.033108][T13446] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 615.063523][T13446] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.094204][T13446] usb 1-1: config 0 descriptor?? [ 616.212419][T16832] binder: 16831:16832 unknown command 1074553620 [ 616.224559][T16832] binder: 16831:16832 ioctl c0306201 200000000640 returned -22 [ 616.235572][ T5880] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 616.254786][ T5880] usb 3-1: USB disconnect, device number 114 [ 617.293052][ T5880] usb 1-1: USB disconnect, device number 115 [ 618.369198][T16920] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2571'. [ 618.667610][ T1190] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 618.868956][ T1190] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 618.878470][ T1190] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 618.888137][ T1190] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.925944][ T1190] usb 2-1: config 0 descriptor?? [ 619.748212][ T28] kauditd_printk_skb: 2167 callbacks suppressed [ 619.748230][ T28] audit: type=1326 audit(1781129730.167:22736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16935 comm="syz.0.2574" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f61f2d5d68e code=0x7ffc0000 [ 619.782699][ T28] audit: type=1326 audit(1781129730.167:22737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16935 comm="syz.0.2574" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f61f2d5d68e code=0x7ffc0000 [ 619.806955][ C1] vkms_vblank_simulate: vblank timer overrun [ 619.813787][ T28] audit: type=1326 audit(1781129730.167:22738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16935 comm="syz.0.2574" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f61f2d5d68e code=0x7ffc0000 [ 619.838088][ C1] vkms_vblank_simulate: vblank timer overrun [ 619.846123][ T28] audit: type=1326 audit(1781129730.167:22739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16935 comm="syz.0.2574" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f61f2d5d68e code=0x7ffc0000 [ 619.870498][ C1] vkms_vblank_simulate: vblank timer overrun [ 619.878155][ T28] audit: type=1326 audit(1781129730.167:22740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16935 comm="syz.0.2574" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f61f2d5d68e code=0x7ffc0000 [ 619.902410][ C1] vkms_vblank_simulate: vblank timer overrun [ 619.910379][ T28] audit: type=1326 audit(1781129730.167:22741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16935 comm="syz.0.2574" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f61f2d5d68e code=0x7ffc0000 [ 619.936467][ T28] audit: type=1326 audit(1781129730.167:22742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16935 comm="syz.0.2574" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f61f2d5d68e code=0x7ffc0000 [ 619.971570][ T28] audit: type=1326 audit(1781129730.167:22743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16935 comm="syz.0.2574" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f61f2d5d68e code=0x7ffc0000 [ 620.007244][ T28] audit: type=1326 audit(1781129730.167:22744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16935 comm="syz.0.2574" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f61f2d5d68e code=0x7ffc0000 [ 620.032536][ T28] audit: type=1326 audit(1781129730.167:22745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16935 comm="syz.0.2574" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f61f2d5d68e code=0x7ffc0000 [ 620.056805][ C1] vkms_vblank_simulate: vblank timer overrun [ 620.463433][T16980] syzkaller0: entered promiscuous mode [ 620.476553][T16980] syzkaller0: entered allmulticast mode [ 621.452278][ T5880] usb 2-1: USB disconnect, device number 104 [ 622.087248][ T5880] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 622.290863][ T5880] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 121, changing to 10 [ 622.322847][ T5880] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 622.349480][ T5880] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 622.359184][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.367711][ T5880] usb 3-1: Product: syz [ 622.372003][ T5880] usb 3-1: Manufacturer: syz [ 622.376748][ T5880] usb 3-1: SerialNumber: syz [ 622.814761][ T5880] cdc_ncm 3-1:1.0: bind() failure [ 622.833380][ T5880] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 622.842997][ T5880] cdc_ncm 3-1:1.1: bind() failure [ 622.855553][ T5880] usb 3-1: USB disconnect, device number 115 [ 623.216712][T17051] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2595'. [ 623.520269][ T5880] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 623.708983][ T5880] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 623.734844][ T5880] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 623.746172][ T5880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.775276][ T5880] usb 1-1: config 0 descriptor?? [ 624.128468][T13448] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 624.337672][T13448] usb 3-1: Using ep0 maxpacket: 32 [ 624.353469][T13448] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 624.367238][T13448] usb 3-1: config 0 has no interface number 0 [ 624.380423][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.387851][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.395021][T13448] usb 3-1: config 0 interface 184 has no altsetting 0 [ 624.414933][T13448] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 624.437528][T13448] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.445526][T13448] usb 3-1: Product: syz [ 624.467750][T13448] usb 3-1: Manufacturer: syz [ 624.477179][T13448] usb 3-1: SerialNumber: syz [ 624.486311][T13448] usb 3-1: config 0 descriptor?? [ 624.510336][T13448] smsc75xx v1.0.0 [ 624.757983][ T28] kauditd_printk_skb: 1561 callbacks suppressed [ 624.757997][ T28] audit: type=1326 audit(1781129735.177:24307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17066 comm="syz.1.2598" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f39de15d68e code=0x7ffc0000 [ 624.792016][ T28] audit: type=1326 audit(1781129735.177:24308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17066 comm="syz.1.2598" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f39de15d68e code=0x7ffc0000 [ 624.816682][ T28] audit: type=1326 audit(1781129735.177:24309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17066 comm="syz.1.2598" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f39de15d68e code=0x7ffc0000 [ 624.843207][ T28] audit: type=1326 audit(1781129735.177:24310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17066 comm="syz.1.2598" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f39de15d68e code=0x7ffc0000 [ 624.872188][ T28] audit: type=1326 audit(1781129735.177:24311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17066 comm="syz.1.2598" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f39de15d68e code=0x7ffc0000 [ 624.896797][ T28] audit: type=1326 audit(1781129735.177:24312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17066 comm="syz.1.2598" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f39de15d68e code=0x7ffc0000 [ 624.922230][ T28] audit: type=1326 audit(1781129735.177:24313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17066 comm="syz.1.2598" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f39de15d68e code=0x7ffc0000 [ 624.953686][ T28] audit: type=1326 audit(1781129735.177:24314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17066 comm="syz.1.2598" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f39de15d68e code=0x7ffc0000 [ 624.980813][ T28] audit: type=1326 audit(1781129735.177:24315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17066 comm="syz.1.2598" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f39de15d68e code=0x7ffc0000 [ 625.005245][ T28] audit: type=1326 audit(1781129735.177:24316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17066 comm="syz.1.2598" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f39de15d68e code=0x7ffc0000 [ 625.138369][T13448] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 625.150035][T13448] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 625.364440][T13448] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 625.375933][T13448] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 625.386154][T13448] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 625.397006][T13448] smsc75xx: probe of 3-1:0.184 failed with error -61 [ 625.607303][T13441] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 625.797226][T13441] usb 4-1: Using ep0 maxpacket: 32 [ 625.805277][T13441] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 625.818816][T13441] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 625.828550][T13441] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 625.836785][T13441] usb 4-1: Product: syz [ 625.841225][T13441] usb 4-1: Manufacturer: syz [ 625.845871][T13441] usb 4-1: SerialNumber: syz [ 625.860382][T13441] usb 4-1: config 0 descriptor?? [ 625.866212][T17108] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 625.876810][T13441] hub 4-1:0.0: bad descriptor, ignoring hub [ 625.884714][T13441] hub: probe of 4-1:0.0 failed with error -5 [ 626.213195][ T5880] usb 1-1: USB disconnect, device number 116 [ 626.347659][T13414] usb 4-1: USB disconnect, device number 120 [ 626.478754][T17139] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 626.767422][T13441] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 626.869449][T13446] usb 3-1: USB disconnect, device number 116 [ 626.927291][T13441] usb 1-1: device descriptor read/64, error -71 [ 627.247913][T13441] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 627.427300][T13441] usb 1-1: device descriptor read/64, error -71 [ 627.547559][T13441] usb usb1-port1: attempt power cycle [ 627.655030][T17179] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2613'. [ 627.967263][T13441] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 627.997247][T13446] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 628.005731][T13441] usb 1-1: device descriptor read/8, error -71 [ 628.189253][T13446] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 628.201368][T13446] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 628.212877][T13446] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.231333][T13446] usb 4-1: config 0 descriptor?? [ 628.277332][T13441] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 628.320457][T13441] usb 1-1: device descriptor read/8, error -71 [ 628.457386][T13441] usb usb1-port1: unable to enumerate USB device [ 629.661414][T17207] syzkaller0: entered promiscuous mode [ 629.677447][T17207] syzkaller0: entered allmulticast mode [ 629.956858][ T5785] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 629.970592][ T5785] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 629.980965][ T5785] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 630.005345][ T5785] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 630.013522][ T5785] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 630.022715][ T5785] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 630.134551][ T2951] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.263435][ T2951] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.402456][ T2951] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.529185][ T2951] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.698345][T13414] usb 4-1: USB disconnect, device number 121 [ 630.716426][T17215] chnl_net:caif_netlink_parms(): no params data found [ 631.030591][T17349] syzkaller0: entered promiscuous mode [ 631.049019][T17349] syzkaller0: entered allmulticast mode [ 631.124632][T17215] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.148359][T17215] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.155569][T17215] bridge_slave_0: entered allmulticast mode [ 631.178748][T17215] bridge_slave_0: entered promiscuous mode [ 631.189497][ T2951] tipc: Left network mode [ 631.196195][T17215] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.203455][T17215] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.211060][T17215] bridge_slave_1: entered allmulticast mode [ 631.224393][T17215] bridge_slave_1: entered promiscuous mode [ 631.476516][T17215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 631.516676][T17215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 631.684344][T17215] team0: Port device team_slave_0 added [ 631.770246][T17215] team0: Port device team_slave_1 added [ 631.945852][T17215] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 631.967641][T17215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 631.997575][T17215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 632.058293][ T5785] Bluetooth: hci2: command tx timeout [ 632.077887][T17215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 632.084894][T17215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 632.114526][T17215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 632.222762][T17215] hsr_slave_0: entered promiscuous mode [ 632.240622][T17215] hsr_slave_1: entered promiscuous mode [ 632.247049][T17215] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 632.263887][T17215] Cannot create hsr debugfs directory [ 632.793872][T17443] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 632.813761][T17443] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 632.833256][ T2951] team0: left promiscuous mode [ 632.839435][ T2951] team_slave_0: left promiscuous mode [ 632.845433][ T2951] team_slave_1: left promiscuous mode [ 632.855172][ T2951] bond0: left promiscuous mode [ 632.861004][ T2951] bond_slave_0: left promiscuous mode [ 632.866596][ T2951] bond_slave_1: left promiscuous mode [ 632.889943][ T2951] hsr_slave_0: left promiscuous mode [ 632.901125][ T2951] hsr_slave_1: left promiscuous mode [ 632.902155][T17443] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 632.913343][ T2951] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 632.924409][ T2951] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 632.938453][ T2951] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 632.946849][T17443] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 632.953924][ T2951] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 632.961602][T17443] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 632.968875][ T2951] bridge_slave_1: left allmulticast mode [ 632.974946][ T2951] bridge_slave_1: left promiscuous mode [ 632.979696][T17443] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 632.991521][ T2951] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.008441][ T2951] bridge_slave_0: left allmulticast mode [ 633.016312][T17443] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 633.024348][ T2951] bridge_slave_0: left promiscuous mode [ 633.030373][T17443] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 633.036602][ T2951] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.046583][T17443] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 633.070150][T17443] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 633.084638][T17443] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 633.105279][T17443] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 633.113388][ T2951] veth1_macvtap: left promiscuous mode [ 633.134996][ T2951] veth0_macvtap: left promiscuous mode [ 633.153675][ T2951] veth1_vlan: left promiscuous mode [ 633.165171][ T2951] veth0_vlan: left promiscuous mode [ 633.261415][T17579] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2635'. [ 633.344184][ T28] kauditd_printk_skb: 1086 callbacks suppressed [ 633.344203][ T28] audit: type=1326 audit(1781129743.757:25403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17576 comm="syz.2.2634" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec1799ce59 code=0x7ffc0000 [ 633.422540][ T28] audit: type=1326 audit(1781129743.797:25404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17576 comm="syz.2.2634" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec1799ce59 code=0x7ffc0000 [ 633.455743][ T28] audit: type=1326 audit(1781129743.797:25405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17576 comm="syz.2.2634" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec1799ce59 code=0x7ffc0000 [ 633.510540][ T28] audit: type=1326 audit(1781129743.797:25406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17576 comm="syz.2.2634" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fec1799ce59 code=0x7ffc0000 [ 633.547630][T13446] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 633.568322][ T28] audit: type=1326 audit(1781129743.797:25407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17576 comm="syz.2.2634" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec1799ce59 code=0x7ffc0000 [ 633.614077][ T28] audit: type=1326 audit(1781129743.797:25408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17576 comm="syz.2.2634" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec1799ce59 code=0x7ffc0000 [ 633.670835][ T28] audit: type=1326 audit(1781129743.807:25409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17576 comm="syz.2.2634" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec1799ce59 code=0x7ffc0000 [ 633.728342][ T28] audit: type=1326 audit(1781129743.807:25410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17576 comm="syz.2.2634" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fec1799ce59 code=0x7ffc0000 [ 633.789457][T13446] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 633.817251][T13446] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.838633][ T28] audit: type=1326 audit(1781129743.807:25411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17576 comm="syz.2.2634" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec1799ce59 code=0x7ffc0000 [ 633.865785][T13446] usb 2-1: config 0 descriptor?? [ 633.890772][ T28] audit: type=1326 audit(1781129743.807:25412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17576 comm="syz.2.2634" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec1799ce59 code=0x7ffc0000 [ 634.232557][ T5785] Bluetooth: hci0: command 0x0c1a tx timeout [ 634.486705][ T2951] team0 (unregistering): Port device team_slave_1 removed [ 634.532354][ T2951] team0 (unregistering): Port device team_slave_0 removed [ 634.576530][ T2951] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 634.625051][ T2951] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 634.940739][ T2951] bond0 (unregistering): Released all slaves [ 635.018502][ T5785] Bluetooth: hci1: command 0x0c1a tx timeout [ 635.018511][ T5780] Bluetooth: hci3: command 0x0c1a tx timeout [ 635.097323][ T5780] Bluetooth: hci2: command 0x040f tx timeout [ 635.537332][T13414] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 635.570395][ T2951] IPVS: stop unused estimator thread 0... [ 635.739335][T13414] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 121, changing to 10 [ 635.761715][T13414] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 635.781136][T17215] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 635.790523][T13414] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 635.806002][T13414] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.814618][T17215] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 635.826362][T17215] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 635.841700][T13414] usb 4-1: Product: syz [ 635.847020][T17215] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 635.856756][T13414] usb 4-1: Manufacturer: syz [ 635.872776][T13414] usb 4-1: SerialNumber: syz [ 636.014107][T17215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 636.045768][T17215] 8021q: adding VLAN 0 to HW filter on device team0 [ 636.073249][ T2951] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.080575][ T2951] bridge0: port 1(bridge_slave_0) entered forwarding state [ 636.095756][ T2951] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.102945][ T2951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 636.298653][ T5780] Bluetooth: hci0: command 0x0c1a tx timeout [ 636.320441][T17629] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 636.340755][T13441] usb 2-1: USB disconnect, device number 105 [ 636.573544][T13414] cdc_ncm 4-1:1.0: bind() failure [ 636.617251][T13414] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 636.636223][T13414] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 636.668382][T13414] usbtest: probe of 4-1:1.1 failed with error -71 [ 636.692886][T13414] usb 4-1: USB disconnect, device number 122 [ 636.909940][T17215] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 637.097365][ T5780] Bluetooth: hci1: command 0x0c1a tx timeout [ 637.097409][ T5785] Bluetooth: hci3: command 0x0c1a tx timeout [ 637.177741][ T5780] Bluetooth: hci2: command 0x040f tx timeout [ 637.196079][T17215] veth0_vlan: entered promiscuous mode [ 637.213429][T17215] veth1_vlan: entered promiscuous mode [ 637.279006][T17215] veth0_macvtap: entered promiscuous mode [ 637.292697][T17215] veth1_macvtap: entered promiscuous mode [ 637.323153][T17215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 637.365119][T17215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.402860][T17215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 637.415611][T17215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.443926][T17215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 637.496791][T17215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.555118][T17215] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 637.594215][T17215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 637.605727][T17215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.677194][T17215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 637.717257][T17215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.767516][T17215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 637.783194][T17215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.794720][T17215] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 637.841091][T17215] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.850794][T17215] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.864702][T17215] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.873535][T17215] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.068609][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 638.107310][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 638.230532][T10509] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 638.252351][T10509] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 638.378468][ T5780] Bluetooth: hci0: command 0x0c1a tx timeout [ 638.473891][T17755] syzkaller0: entered promiscuous mode [ 638.480881][T17755] syzkaller0: entered allmulticast mode [ 638.533656][T17762] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2643'. [ 638.576838][T17762] ipvlan2: entered allmulticast mode [ 638.586272][T17762] syz_tun: entered allmulticast mode [ 638.811765][ T28] kauditd_printk_skb: 1154 callbacks suppressed [ 638.811780][ T28] audit: type=1326 audit(1781129749.227:26567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17770 comm="syz.1.2645" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39de19ce59 code=0x7ffc0000 [ 638.854732][ T28] audit: type=1326 audit(1781129749.267:26568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17770 comm="syz.1.2645" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39de19ce59 code=0x7ffc0000 [ 638.932424][ T28] audit: type=1326 audit(1781129749.267:26569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17770 comm="syz.1.2645" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39de19ce59 code=0x7ffc0000 [ 638.966771][ T28] audit: type=1326 audit(1781129749.267:26570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17770 comm="syz.1.2645" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39de19ce59 code=0x7ffc0000 [ 638.997429][ T28] audit: type=1326 audit(1781129749.267:26571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17770 comm="syz.1.2645" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f39de19ce59 code=0x7ffc0000 [ 639.032826][ T28] audit: type=1326 audit(1781129749.267:26572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17770 comm="syz.1.2645" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39de19ce59 code=0x7ffc0000 [ 639.068344][ T28] audit: type=1326 audit(1781129749.267:26573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17770 comm="syz.1.2645" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39de19ce59 code=0x7ffc0000 [ 639.126677][ T28] audit: type=1326 audit(1781129749.267:26574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17770 comm="syz.1.2645" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39de19ce59 code=0x7ffc0000 [ 639.183550][ T5780] Bluetooth: hci1: command 0x0c1a tx timeout [ 639.183562][ T5785] Bluetooth: hci3: command 0x0c1a tx timeout [ 639.206710][ T28] audit: type=1326 audit(1781129749.267:26575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17770 comm="syz.1.2645" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39de19ce59 code=0x7ffc0000 [ 639.233084][ T28] audit: type=1326 audit(1781129749.267:26576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17770 comm="syz.1.2645" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f39de19ce59 code=0x7ffc0000 [ 639.257505][ T5780] Bluetooth: hci2: command 0x040f tx timeout [ 640.746661][T17835] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2654'. [ 641.337316][ T5780] Bluetooth: hci2: command 0x040f tx timeout [ 641.418830][T17864] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 641.538083][ T27] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 641.707202][ T1190] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 641.728202][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 641.758050][ T27] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 641.781466][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 641.808088][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 641.837164][ T27] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 641.881140][ T27] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 641.899346][ T1190] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 641.914122][ T27] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 641.937228][ T1190] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 641.951460][ T27] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 641.969095][ T27] usb 3-1: Manufacturer: syz [ 641.980895][ T1190] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 642.018307][ T27] usb 3-1: config 0 descriptor?? [ 642.026189][ T1190] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 642.066098][ T1190] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.109145][ T1190] usb 1-1: config 0 descriptor?? [ 642.357647][ T27] rc_core: IR keymap rc-hauppauge not found [ 642.363626][ T27] Registered IR keymap rc-empty [ 642.387373][ T27] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 642.436885][ T27] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 642.499711][ T27] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 642.534733][ T27] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input44 [ 642.555241][ T1190] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 642.596040][ T1190] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 642.619096][ T27] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 642.677525][ T27] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 642.707322][ T27] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 642.758352][ T27] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 642.799975][ T27] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 642.837814][ T27] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 642.917232][ T27] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 642.967520][ T27] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 642.984757][T17915] syzkaller0: entered promiscuous mode [ 642.995098][T17915] syzkaller0: entered allmulticast mode [ 643.026119][ T27] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 643.043210][T17915] tipc: Started in network mode [ 643.052663][T17915] tipc: Node identity e24152500f2c, cluster identity 4711 [ 643.064173][ T27] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 643.081438][T17915] tipc: Enabled bearer , priority 0 [ 643.104083][T17914] tipc: Resetting bearer [ 643.119586][ T27] mceusb 3-1:0.0: Registered 42424242 with mce emulator interface version 1 [ 643.146850][ T27] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 643.188660][T17914] tipc: Disabling bearer [ 643.197287][ T27] usb 3-1: USB disconnect, device number 117 [ 643.417714][ T5780] Bluetooth: hci2: command 0x040f tx timeout [ 643.451649][T17938] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2667'. [ 643.555391][T17938] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2667'. [ 643.778739][ C0] plantronics 0003:047F:FFFF.000A: usb_submit_urb(ctrl) failed: -1 [ 644.257247][ T27] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 644.449131][ T27] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 644.460904][ T27] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 644.471365][ T27] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 644.492117][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 644.507879][ T27] usb 4-1: SerialNumber: syz [ 644.545557][T17981] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2676'. [ 644.557305][T13441] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 644.609316][T13446] usb 1-1: USB disconnect, device number 121 [ 644.641856][T17988] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2676'. [ 644.765084][T13441] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 121, changing to 10 [ 644.778560][ T27] usb 4-1: 0:2 : does not exist [ 644.802081][T13441] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 644.833027][ T27] usb 4-1: USB disconnect, device number 123 [ 644.853351][T13441] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 644.875398][T13441] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.899128][T13441] usb 3-1: Product: syz [ 644.903557][T13441] usb 3-1: Manufacturer: syz [ 644.929955][T13441] usb 3-1: SerialNumber: syz [ 644.936057][ T5786] udevd[5786]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 645.371446][T17972] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 645.602080][T13441] cdc_ncm 3-1:1.0: bind() failure [ 645.625661][T13441] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 645.637982][T13441] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 645.646328][T13441] usbtest: probe of 3-1:1.1 failed with error -71 [ 645.659570][T13441] usb 3-1: USB disconnect, device number 118 [ 645.737609][ T5821] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 645.937200][ T5821] usb 4-1: Using ep0 maxpacket: 32 [ 645.947915][ T5821] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 645.957469][ T5821] usb 4-1: config 0 has no interface number 0 [ 645.963701][ T5821] usb 4-1: config 0 interface 184 has no altsetting 0 [ 645.974196][ T5821] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 645.983442][ T5821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.991803][ T5821] usb 4-1: Product: syz [ 645.996116][ T5821] usb 4-1: Manufacturer: syz [ 646.000868][ T5821] usb 4-1: SerialNumber: syz [ 646.011109][ T5821] usb 4-1: config 0 descriptor?? [ 646.023021][ T5821] smsc75xx v1.0.0 [ 646.317236][T13415] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 646.530136][T13415] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 646.547153][T13415] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 646.567341][T13415] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 646.587174][T13415] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 646.607168][T13415] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.642323][ T5821] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 646.655053][T13415] usb 2-1: config 0 descriptor?? [ 646.683264][ T5821] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 646.770808][T18070] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2685'. [ 646.845705][T18070] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2685'. [ 646.905289][ T5821] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 646.920810][ T5821] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 646.934584][ T5821] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 646.948720][ T5821] smsc75xx: probe of 4-1:0.184 failed with error -61 [ 647.076172][T13415] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 647.101449][T18081] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2687'. [ 647.112184][T13415] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 647.857211][ T27] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 648.067070][ T27] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 648.077836][ T27] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 648.094015][ T27] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 648.108771][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 648.116820][ T27] usb 3-1: SerialNumber: syz [ 648.307721][ C0] plantronics 0003:047F:FFFF.000B: usb_submit_urb(ctrl) failed: -1 [ 648.348458][ T27] usb 3-1: 0:2 : does not exist [ 648.403775][ T27] usb 3-1: USB disconnect, device number 119 [ 648.492112][T13441] usb 4-1: USB disconnect, device number 124 [ 648.880756][T18146] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2693'. [ 648.891087][T18146] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2693'. [ 649.034542][T18153] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2695'. [ 649.099712][T18159] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2695'. [ 649.464250][T13415] usb 2-1: reset high-speed USB device number 106 using dummy_hcd [ 649.662360][T13415] usb 2-1: device firmware changed [ 649.677645][ T5821] usb 2-1: USB disconnect, device number 106 [ 649.857776][T18196] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2702'. [ 649.877238][T18196] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2702'. [ 649.887216][ T5821] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 649.987334][T13441] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 650.092677][ T5821] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 650.101870][ T5821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.110386][ T5821] usb 2-1: Product: syz [ 650.114586][ T5821] usb 2-1: Manufacturer: syz [ 650.119582][ T5821] usb 2-1: SerialNumber: syz [ 650.180431][T13441] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 650.191603][T13441] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 650.202817][T13441] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 650.215902][T13441] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 650.225223][T13441] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.235909][T13441] usb 1-1: config 0 descriptor?? [ 650.247694][T13415] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 650.457233][T13415] usb 4-1: Using ep0 maxpacket: 16 [ 650.465893][T13415] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 650.476147][T13415] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 650.487163][T13415] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 650.507329][T13415] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 650.517024][T13415] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 650.547273][ T5821] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 650.561342][T13415] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 650.571481][T13415] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 650.579922][T13415] usb 4-1: Manufacturer: syz [ 650.595002][T13415] usb 4-1: config 0 descriptor?? [ 650.658444][T13441] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 650.687806][T13441] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 650.909996][T13415] rc_core: IR keymap rc-hauppauge not found [ 650.916241][T13415] Registered IR keymap rc-empty [ 650.923923][T13415] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 650.962122][T13415] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 651.009652][T13415] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 651.059422][T18223] tipc: Enabling of bearer rejected, failed to enable media [ 651.070297][T13415] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input45 [ 651.110290][T13415] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 651.148362][T13415] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 651.207266][T13415] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 651.260603][T13415] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 651.319191][T13415] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 651.330455][T18235] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2705'. [ 651.348473][T13415] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 651.398203][T13415] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 651.411756][T18239] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2705'. [ 651.437357][T13415] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 651.478769][T13415] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 651.517299][T13415] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 651.559638][T13415] mceusb 4-1:0.0: Registered 42424242 with mce emulator interface version 1 [ 651.587291][T13415] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 651.616179][T13415] usb 4-1: USB disconnect, device number 125 [ 651.957623][ C1] plantronics 0003:047F:FFFF.000C: usb_submit_urb(ctrl) failed: -1 [ 651.981680][ T5821] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -32 [ 652.196327][ T5821] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 652.214847][ T5821] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 652.227042][ T5821] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 652.239342][ T5821] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 652.251843][ T5821] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 652.263990][ T5821] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -71 [ 652.276525][ T5821] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -71 [ 652.288242][ T5821] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 652.298811][ T5821] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 652.309267][ T5821] lan78xx: probe of 2-1:1.0 failed with error -71 [ 652.329160][ T5821] usb 2-1: USB disconnect, device number 107 [ 652.462593][T18271] syzkaller0: entered promiscuous mode [ 652.468173][T18271] syzkaller0: entered allmulticast mode [ 652.808383][T13415] usb 1-1: USB disconnect, device number 122 [ 653.024896][T18311] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2714'. [ 653.160344][T18302] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2714'. [ 653.237620][T18313] tipc: Enabling of bearer rejected, failed to enable media [ 653.617263][T13415] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 653.800096][T13415] usb 1-1: unable to get BOS descriptor or descriptor too short [ 653.809153][T13415] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 653.821182][T13415] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 653.832331][T13415] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 653.843361][T13415] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 653.856691][T13415] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 653.867670][T13415] usb 1-1: config 1 interface 1 has no altsetting 0 [ 653.877712][T13415] usb 1-1: string descriptor 0 read error: -22 [ 653.884172][T13415] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 653.893681][T13415] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.351783][T18348] syzkaller0: entered promiscuous mode [ 654.358039][T18348] syzkaller0: entered allmulticast mode [ 654.532578][T13446] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 654.780833][T18361] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2722'. [ 654.817748][T13446] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 654.826158][T13446] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 654.904103][T13446] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 654.950297][T13446] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 654.969358][T13446] usb 2-1: Manufacturer: syz [ 654.989228][T13446] usb 2-1: config 0 descriptor?? [ 654.990107][T13415] usb 1-1: 2:0: failed to get current value for ch 1 (-71) [ 655.130230][T13415] usb 1-1: USB disconnect, device number 123 [ 655.247234][T13446] rc_core: IR keymap rc-hauppauge not found [ 655.253374][T13446] Registered IR keymap rc-empty [ 655.275589][T13446] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 655.320022][T13446] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input46 [ 655.367346][T13446] ------------[ cut here ]------------ [ 655.372967][T13446] usb 2-1: BOGUS control dir, pipe 80006c80 doesn't match bRequestType 70 [ 655.416296][T13446] WARNING: CPU: 1 PID: 13446 at drivers/usb/core/urb.c:413 usb_submit_urb+0x10ac/0x17d0 [ 655.426716][T13446] Modules linked in: [ 655.431166][T13446] CPU: 1 PID: 13446 Comm: kworker/1:12 Not tainted syzkaller #0 [ 655.439014][T13446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 655.449150][T13446] Workqueue: usb_hub_wq hub_event [ 655.454197][T13446] RIP: 0010:usb_submit_urb+0x10ac/0x17d0 [ 655.460042][T13446] Code: df 0f b6 44 05 00 84 c0 0f 85 29 06 00 00 45 0f b6 45 00 48 c7 c7 c0 7a 6b 8b 48 8b 74 24 20 4c 89 fa 44 89 f1 e8 54 66 ed fa <0f> 0b 49 bc 00 00 00 00 00 fc ff df e9 96 f4 ff ff 89 e9 80 e1 07 [ 655.480548][T13446] RSP: 0018:ffffc90003516e00 EFLAGS: 00010246 [ 655.486676][T13446] RAX: 0a99fbb01dcff800 RBX: ffff88802d217b00 RCX: 0000000000100000 [ 655.494989][T13446] RDX: ffffc90017659000 RSI: 0000000000051508 RDI: 0000000000051509 [ 655.503107][T13446] RBP: 1ffff11005c12108 R08: ffffc90003516b07 R09: 1ffff920006a2d60 [ 655.511166][T13446] R10: dffffc0000000000 R11: fffff520006a2d61 R12: dffffc0000000000 [ 655.519260][T13446] R13: ffff88802e090840 R14: 0000000080006c80 R15: ffff888143f31708 [ 655.527316][T13446] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 655.536264][T13446] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 655.543075][T13446] CR2: 00007f2724f4da08 CR3: 000000005e778000 CR4: 00000000003506e0 [ 655.551190][T13446] Call Trace: [ 655.554537][T13446] [ 655.557645][T13446] igorplugusb_probe+0x812/0xc60 [ 655.562857][T13446] usb_probe_interface+0x5c9/0xb20 [ 655.568939][T13446] ? usb_register_driver+0x3d0/0x3d0 [ 655.574356][T13446] really_probe+0x25b/0xb20 [ 655.579122][T13446] ? pm_runtime_barrier+0x14b/0x1c0 [ 655.584404][T13446] __driver_probe_device+0x1ef/0x390 [ 655.589807][T13446] driver_probe_device+0x4f/0x420 [ 655.594937][T13446] __device_attach_driver+0x2ca/0x510 [ 655.600458][T13446] bus_for_each_drv+0x252/0x2e0 [ 655.605368][T13446] ? coredump_store+0x90/0x90 [ 655.610158][T13446] ? bus_find_device+0x300/0x300 [ 655.615186][T13446] __device_attach+0x2c2/0x420 [ 655.620071][T13446] ? device_attach+0x20/0x20 [ 655.624710][T13446] ? kobject_uevent_env+0x363/0x8b0 [ 655.630116][T13446] ? do_raw_spin_unlock+0x121/0x230 [ 655.635446][T13446] bus_probe_device+0x180/0x260 [ 655.640449][T13446] device_add+0x88e/0xc50 [ 655.644857][T13446] usb_set_configuration+0x1a79/0x20c0 [ 655.650442][T13446] usb_generic_driver_probe+0x8d/0x150 [ 655.655988][T13446] usb_probe_device+0x13d/0x270 [ 655.661051][T13446] ? usb_register_device_driver+0x230/0x230 [ 655.667015][T13446] really_probe+0x25b/0xb20 [ 655.672639][T13446] ? pm_runtime_barrier+0x14b/0x1c0 [ 655.678099][T13446] __driver_probe_device+0x1ef/0x390 [ 655.683447][T13446] driver_probe_device+0x4f/0x420 [ 655.688590][T13446] __device_attach_driver+0x2ca/0x510 [ 655.694020][T13446] bus_for_each_drv+0x252/0x2e0 [ 655.699019][T13446] ? coredump_store+0x90/0x90 [ 655.703758][T13446] ? bus_find_device+0x300/0x300 [ 655.708838][T13446] __device_attach+0x2c2/0x420 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 655.713651][T13446] ? device_attach+0x20/0x20 [ 655.719148][T13446] ? kobject_uevent_env+0x363/0x8b0 [ 655.724439][T13446] ? do_raw_spin_unlock+0x121/0x230 [ 655.729844][T13446] bus_probe_device+0x180/0x260 [ 655.734757][T13446] device_add+0x88e/0xc50 [ 655.740352][T13446] usb_new_device+0xa3c/0x1660 [ 655.745185][T13446] ? usb_disconnect+0x8a0/0x8a0 [ 655.750400][T13446] ? _raw_spin_unlock_irq+0x23/0x50 [ 655.755722][T13446] ? lockdep_hardirqs_on+0x98/0x150 [ 655.761242][T13446] hub_event+0x29bf/0x49f0 [ 655.765767][T13446] ? hub_post_resume+0x120/0x120 [ 655.770799][T13446] ? read_lock_is_recursive+0x20/0x20 [ 655.777279][T13446] ? _raw_spin_unlock_irq+0x23/0x50 [ 655.782550][T13446] ? process_scheduled_works+0x96f/0x15d0 [ 655.788581][T13446] ? process_scheduled_works+0x96f/0x15d0 [ 655.794337][T13446] process_scheduled_works+0xa5d/0x15d0 [ 655.799960][T13446] ? worker_attach_to_pool+0x380/0x380 [ 655.805438][T13446] ? assign_work+0x3d2/0x5d0 [ 655.810083][T13446] worker_thread+0xa55/0xfc0 [ 655.814709][T13446] kthread+0x2fa/0x390 [ 655.818904][T13446] ? pr_cont_work+0x560/0x560 [ 655.823634][T13446] ? kthread_blkcg+0xd0/0xd0 [ 655.828315][T13446] ret_from_fork+0x48/0x80 [ 655.832768][T13446] ? kthread_blkcg+0xd0/0xd0 [ 655.837388][T13446] ret_from_fork_asm+0x11/0x20 [ 655.842185][T13446] [ 655.845208][T13446] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 655.852485][T13446] CPU: 1 PID: 13446 Comm: kworker/1:12 Not tainted syzkaller #0 [ 655.860131][T13446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 655.870194][T13446] Workqueue: usb_hub_wq hub_event [ 655.875241][T13446] Call Trace: [ 655.878561][T13446] [ 655.881530][T13446] dump_stack_lvl+0x18c/0x250 [ 655.886220][T13446] ? show_regs_print_info+0x20/0x20 [ 655.891427][T13446] ? load_image+0x420/0x420 [ 655.895952][T13446] panic+0x2dc/0x730 [ 655.899869][T13446] ? bpf_jit_dump+0xd0/0xd0 [ 655.904396][T13446] ? ret_from_fork_asm+0x11/0x20 [ 655.909369][T13446] __warn+0x2e0/0x470 [ 655.913355][T13446] ? usb_submit_urb+0x10ac/0x17d0 [ 655.918385][T13446] ? usb_submit_urb+0x10ac/0x17d0 [ 655.923420][T13446] report_bug+0x2be/0x4f0 [ 655.927776][T13446] ? usb_submit_urb+0x10ac/0x17d0 [ 655.932835][T13446] ? usb_submit_urb+0x10ac/0x17d0 [ 655.937912][T13446] ? usb_submit_urb+0x10ae/0x17d0 [ 655.942944][T13446] handle_bug+0xcf/0x120 [ 655.947205][T13446] exc_invalid_op+0x1a/0x50 [ 655.951753][T13446] asm_exc_invalid_op+0x1a/0x20 [ 655.956680][T13446] RIP: 0010:usb_submit_urb+0x10ac/0x17d0 [ 655.962410][T13446] Code: df 0f b6 44 05 00 84 c0 0f 85 29 06 00 00 45 0f b6 45 00 48 c7 c7 c0 7a 6b 8b 48 8b 74 24 20 4c 89 fa 44 89 f1 e8 54 66 ed fa <0f> 0b 49 bc 00 00 00 00 00 fc ff df e9 96 f4 ff ff 89 e9 80 e1 07 [ 655.982073][T13446] RSP: 0018:ffffc90003516e00 EFLAGS: 00010246 [ 655.988157][T13446] RAX: 0a99fbb01dcff800 RBX: ffff88802d217b00 RCX: 0000000000100000 [ 655.996134][T13446] RDX: ffffc90017659000 RSI: 0000000000051508 RDI: 0000000000051509 [ 656.004113][T13446] RBP: 1ffff11005c12108 R08: ffffc90003516b07 R09: 1ffff920006a2d60 [ 656.012090][T13446] R10: dffffc0000000000 R11: fffff520006a2d61 R12: dffffc0000000000 [ 656.020085][T13446] R13: ffff88802e090840 R14: 0000000080006c80 R15: ffff888143f31708 [ 656.028085][T13446] igorplugusb_probe+0x812/0xc60 [ 656.033038][T13446] usb_probe_interface+0x5c9/0xb20 [ 656.038160][T13446] ? usb_register_driver+0x3d0/0x3d0 [ 656.043447][T13446] really_probe+0x25b/0xb20 [ 656.047968][T13446] ? pm_runtime_barrier+0x14b/0x1c0 [ 656.053175][T13446] __driver_probe_device+0x1ef/0x390 [ 656.058470][T13446] driver_probe_device+0x4f/0x420 [ 656.063635][T13446] __device_attach_driver+0x2ca/0x510 [ 656.069010][T13446] bus_for_each_drv+0x252/0x2e0 [ 656.073863][T13446] ? coredump_store+0x90/0x90 [ 656.078602][T13446] ? bus_find_device+0x300/0x300 [ 656.083596][T13446] __device_attach+0x2c2/0x420 [ 656.088374][T13446] ? device_attach+0x20/0x20 [ 656.092966][T13446] ? kobject_uevent_env+0x363/0x8b0 [ 656.098182][T13446] ? do_raw_spin_unlock+0x121/0x230 [ 656.103394][T13446] bus_probe_device+0x180/0x260 [ 656.108254][T13446] device_add+0x88e/0xc50 [ 656.112594][T13446] usb_set_configuration+0x1a79/0x20c0 [ 656.118086][T13446] usb_generic_driver_probe+0x8d/0x150 [ 656.123650][T13446] usb_probe_device+0x13d/0x270 [ 656.128518][T13446] ? usb_register_device_driver+0x230/0x230 [ 656.134418][T13446] really_probe+0x25b/0xb20 [ 656.138987][T13446] ? pm_runtime_barrier+0x14b/0x1c0 [ 656.144194][T13446] __driver_probe_device+0x1ef/0x390 [ 656.149507][T13446] driver_probe_device+0x4f/0x420 [ 656.154550][T13446] __device_attach_driver+0x2ca/0x510 [ 656.159932][T13446] bus_for_each_drv+0x252/0x2e0 [ 656.164785][T13446] ? coredump_store+0x90/0x90 [ 656.169471][T13446] ? bus_find_device+0x300/0x300 [ 656.174420][T13446] __device_attach+0x2c2/0x420 [ 656.179202][T13446] ? device_attach+0x20/0x20 [ 656.183805][T13446] ? kobject_uevent_env+0x363/0x8b0 [ 656.189019][T13446] ? do_raw_spin_unlock+0x121/0x230 [ 656.194231][T13446] bus_probe_device+0x180/0x260 [ 656.199118][T13446] device_add+0x88e/0xc50 [ 656.203477][T13446] usb_new_device+0xa3c/0x1660 [ 656.208265][T13446] ? usb_disconnect+0x8a0/0x8a0 [ 656.213116][T13446] ? _raw_spin_unlock_irq+0x23/0x50 [ 656.218325][T13446] ? lockdep_hardirqs_on+0x98/0x150 [ 656.223530][T13446] hub_event+0x29bf/0x49f0 [ 656.227980][T13446] ? hub_post_resume+0x120/0x120 [ 656.232925][T13446] ? read_lock_is_recursive+0x20/0x20 [ 656.238305][T13446] ? _raw_spin_unlock_irq+0x23/0x50 [ 656.243526][T13446] ? process_scheduled_works+0x96f/0x15d0 [ 656.249320][T13446] ? process_scheduled_works+0x96f/0x15d0 [ 656.255086][T13446] process_scheduled_works+0xa5d/0x15d0 [ 656.260673][T13446] ? worker_attach_to_pool+0x380/0x380 [ 656.266158][T13446] ? assign_work+0x3d2/0x5d0 [ 656.270756][T13446] worker_thread+0xa55/0xfc0 [ 656.275372][T13446] kthread+0x2fa/0x390 [ 656.279465][T13446] ? pr_cont_work+0x560/0x560 [ 656.284166][T13446] ? kthread_blkcg+0xd0/0xd0 [ 656.288777][T13446] ret_from_fork+0x48/0x80 [ 656.293198][T13446] ? kthread_blkcg+0xd0/0xd0 [ 656.297792][T13446] ret_from_fork_asm+0x11/0x20 [ 656.302594][T13446] [ 656.306229][T13446] Kernel Offset: disabled [ 656.310642][T13446] Rebooting in 86400 seconds..