last executing test programs: 5.39569996s ago: executing program 2 (id=12429): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x14, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000040)={0x2, 0x1, 0x9}) 4.449799827s ago: executing program 0 (id=12439): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2ca) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) 3.58736875s ago: executing program 2 (id=12444): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, r1, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xecf, 0x5c}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x3f}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x3dd0}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x4}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x3}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x68be}]}, 0x64}, 0x1, 0x0, 0x0, 0x4010}, 0x4000) unshare(0x42000000) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@local, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@dev, 0x0, 0x6c}, 0x0, @in=@multicast1}}, 0xe8) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97000288c19e9ace00000000000000002100000002ff020000000000000000000000000001"], 0x0) keyctl$restrict_keyring(0x5, 0xfffffffffffffffd, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x25dfdbfb}, 0x24}}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000140)={'#! ', './file2'}, 0xb) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_TUPLE_MASTER={0x18, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @broadcast}}}]}]}, 0x94}}, 0x0) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 3.526277224s ago: executing program 0 (id=12445): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socket(0x10, 0x3, 0x0) io_uring_setup(0x0, &(0x7f0000000000)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x4ae7, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000540), &(0x7f0000000140)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 3.367641525s ago: executing program 0 (id=12447): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="0000000e"], 0xfdef) 3.319339437s ago: executing program 1 (id=12449): io_uring_register$IORING_REGISTER_ENABLE_RINGS(0xffffffffffffffff, 0xc, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) syz_open_dev$radio(0x0, 0x0, 0x2) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="043e751d7029f063dd8e2d6bf7da997e6509e8"], 0x24) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) 3.204467465s ago: executing program 1 (id=12451): mount$fuse(0x0, 0x0, &(0x7f0000000180), 0x800, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC, @ANYBLOB=',@\x00\x00\x00\x00\x00\x00\f=', @ANYRESHEX, @ANYRES16]) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="04300300c9008cba4dffaa0a52c0186ef28359af281f3a6bfde3a6ee0de9ddee0bf7da43aebf706b3329b0a564835713c2de78691734f5b9ada875d8facbcb611c220f4296a197c00dc7780e18d276969228dd91f813fda5cbc6adcfdd40386249f98919c934448632816bbc251be47d7af97966b4a96a6a8b7f211d8e29678fe8216eb9b30f4fa5856c0371b3c31559e07c414833"], 0x6) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB], 0x22) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="890704", 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000060a0b0400000000000000000200000014000480100001800700010063740000040002800900010073797a30000000000900020073797a320000000014000000110001000000000000003a44c0c7283e00000000000a"], 0x68}, 0x1, 0x0, 0x0, 0x804}, 0x0) ppoll(&(0x7f0000000100)=[{r4}], 0x1, &(0x7f0000000140), 0x0, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = io_uring_setup(0x15ae, &(0x7f0000000080)) r8 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x121301, 0x0) write$dsp(r8, &(0x7f0000000300)="90", 0x1) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="043e1f0a00c90001"], 0x22) socket$key(0xf, 0x3, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.189748406s ago: executing program 0 (id=12452): pipe2(&(0x7f0000000040), 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r1, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/arp\x00') read$FUSE(r2, &(0x7f0000000500)={0x2020}, 0x2020) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r4, 0xc010640c, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x1) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x181480, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) 2.726348322s ago: executing program 0 (id=12455): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000002880), 0x290) splice(r0, 0x0, r2, 0x0, 0x1, 0x0) 2.700709131s ago: executing program 2 (id=12456): syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="04300300c9008cba4dffaa0a52c0186ef28359af281f3a6bfde3a6ee0de9ddee0bf7da43aebf706b3329b0a564835713c2de78691734f5b9ada875d8facbcb611c220f4296a197c00dc7780e18d276969228dd91f813fda5cbc6adcfdd40386249f98919c934448632816bbc251be47d7af97966b4a96a6a8b7f211d8e29678fe8216eb9b30f4fa5856c0371b3c31559e07c414833"], 0x6) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f0000000000)="89070404", 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000060a0b040000000000000000020000001400048010000180070001006374"], 0x68}, 0x1, 0x0, 0x0, 0x804}, 0x0) io_uring_setup(0x15ae, &(0x7f0000000080)) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x121301, 0x0) write$dsp(r5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="043e1f0a00c90001"], 0x22) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.619251495s ago: executing program 0 (id=12457): r0 = syz_open_dev$evdev(0x0, 0x2, 0x0) write$char_usb(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200067e"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x738, 0x1713, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x40, 0x30, 0x1, [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x3, 0xba, {0x9, 0x21, 0xfff8, 0x3e, 0x1, {0x22, 0x98c}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x62, 0x2, 0x6}}}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0x2, 0x1c, 0x9, 0x10, 0x2}, 0xc, &(0x7f00000001c0)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x2, 0x6, 0x6}]}, 0x5, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x44b}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x41c}}, {0x4, &(0x7f0000000280)=@lang_id={0x4}}, {0x37, &(0x7f00000002c0)=@string={0x37, 0x3, "b493d1439368b1fe56cbe72cfb079c51df8320f163a0267dacad9cc44e3426588fc118dfaa306e53bab43390238dfa81af6f3f5b9a"}}, {0xad, &(0x7f0000000300)=@string={0xad, 0x3, "ebc4e11681d694883201bd01ab0268fc051ecd0334550dc40d4e1646d23225c4a18185fe333e0ec5d35093e9ff6eba7060e5135a05fae1d4937e4fad7ef628b837fad9a7f405a036471be0775df06f8298ac56a5ff0242491b2cc53b68eaba0a168168183ce32a436c60badd5fe8f94e982f9ebc79cd2b2ee28510fe537fb6e0b1da44f045f2619b1f770a3edf059510d9fd7c6a263c60ac8356afa9f5111b308c278f46544117806b16a5"}}]}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r4, 0x5b01, 0x0) ioctl$EVIOCGMASK(r2, 0x5b06, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x5) r6 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r6) read$char_usb(r5, &(0x7f0000000440)=""/54, 0x36) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902"], 0x0) ioctl$EVIOCRMFF(r6, 0x83c0550b, 0x0) read$char_usb(r5, &(0x7f0000000080)=""/157, 0x9d) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x5, [{0x2, &(0x7f00000008c0)=@string={0x2}}, {0x0, 0x0}, {0x2, &(0x7f0000000a00)=@string={0x2}}, {0x0, 0x0}, {0x0, 0x0}]}) syz_open_dev$hiddev(&(0x7f0000000040), 0x100, 0x202000) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r7 = syz_open_dev$hidraw(&(0x7f0000000480), 0x3, 0x240000) read$hidraw(r7, &(0x7f00000004c0)=""/175, 0xaf) 2.451751378s ago: executing program 4 (id=12459): mount$fuse(0x0, 0x0, &(0x7f0000000180), 0x800, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC, @ANYBLOB=',@\x00\x00\x00\x00\x00\x00\f=', @ANYRESHEX, @ANYRES16]) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="04300300c9008cba4dffaa0a52c0186ef28359af281f3a6bfde3a6ee0de9ddee0bf7da43aebf706b3329b0a564835713c2de78691734f5b9ada875d8facbcb611c220f4296a197c00dc7780e18d276969228dd91f813fda5cbc6adcfdd40386249f98919c934448632816bbc251be47d7af97966b4a96a6a8b7f211d8e29678fe8216eb9b30f4fa5856c0371b3c31559e07c414833"], 0x6) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="03c8001e794e4cee84d39856f4752833767be125637ee49dc79a52f2f9465718460cd05feda51bbf4206b5e7325945e5f819bbace34f7d33b43908e14fa05a0f06d9dccb7f0580fe9d42d7bf6530f1a2d22cfd5396c3c67afcdc34613911e96affd46ebd4aa6c60ca02f7648783a10deccc27340c4f24ed37dd6563758d14f732e63a853a4c71c356a6309a485ed"], 0x22) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="89070404", 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000060a0b0400000000000000000200000014000480100001800700010063740000040002800900010073797a30000000000900020073797a320000000014000000110001000000000000003a44c0c7283e00000000000a"], 0x68}, 0x1, 0x0, 0x0, 0x804}, 0x0) ppoll(&(0x7f0000000100)=[{r4}], 0x1, &(0x7f0000000140), 0x0, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = io_uring_setup(0x15ae, &(0x7f0000000080)) r8 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x121301, 0x0) write$dsp(r8, &(0x7f0000000300)="90", 0x1) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="043e1f0a00c9"], 0x22) socket$key(0xf, 0x3, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.139490281s ago: executing program 2 (id=12461): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000042c0)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_ifindex, @empty}, 0x10) 2.061445274s ago: executing program 2 (id=12462): unshare(0x0) socket$inet_smc(0x2b, 0x1, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000180)=ANY=[@ANYBLOB="883909003859d63f6e3de70411000000ffffffffffff5600b800da58dd00007c1d01b7b7875f4767f4b533e6bd8859a2eb88a5ead25cdca950e8453e8fcefe44a8e0498aee41e1"], 0x47) r0 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)='u', 0x1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 1.584631868s ago: executing program 1 (id=12463): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x18, 0x2a, 0x9, 0x0, 0x0, {0x4, 0x0, 0x2c00}, [@nested={0x4, 0x1a}]}, 0x18}, 0x1, 0x3000000}, 0x0) 1.503165541s ago: executing program 1 (id=12464): ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda060200000000e80001dd0000040d001800ea11c21d000500", 0x27}], 0x1) 1.422365933s ago: executing program 1 (id=12465): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x61, 0x10, 0x54}}, 0x0}, 0x90) 1.307370869s ago: executing program 1 (id=12466): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, r1, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xecf, 0x5c}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x3f}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x3dd0}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x4}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x3}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x68be}]}, 0x64}, 0x1, 0x0, 0x0, 0x4010}, 0x4000) unshare(0x42000000) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@local, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@dev, 0x0, 0x6c}, 0x0, @in=@multicast1}}, 0xe8) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97000288c19e9ace00000000000000002100000002ff020000000000000000000000000001"], 0x0) keyctl$restrict_keyring(0x5, 0xfffffffffffffffd, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x25dfdbfb}, 0x24}}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000140)={'#! ', './file2'}, 0xb) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_TUPLE_MASTER={0x18, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @broadcast}}}]}]}, 0x94}}, 0x0) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1.152209332s ago: executing program 4 (id=12467): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x40, 0x52}}, 0x1c}}, 0x0) 1.015663285s ago: executing program 4 (id=12469): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000040), 0x4) 1.015529044s ago: executing program 3 (id=12470): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socket(0x10, 0x3, 0x0) io_uring_setup(0x1b94, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x4ae7, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000540), &(0x7f0000000140)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 999.599453ms ago: executing program 4 (id=12471): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000100)="a9914c2e55414cd28ae405a69915b589", 0x10) 944.597176ms ago: executing program 3 (id=12472): socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x2, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x24}}, 0x0) 867.598766ms ago: executing program 4 (id=12473): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000400)="3f4e55f1", 0x4) sendto$unix(r1, &(0x7f0000000080), 0xffffff9d, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x0, 0x0, 0xffffffffffffff54) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89f0, &(0x7f0000000900)={'gre0\x00', @random="e062002000"}) 867.411885ms ago: executing program 3 (id=12474): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x18, 0x2a, 0x9, 0x0, 0x0, {0x4, 0x0, 0x2c00}, [@nested={0x4, 0x1a}]}, 0x18}, 0x1, 0x3000000}, 0x0) 838.450367ms ago: executing program 3 (id=12475): ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda060200000000e80001dd0000040d001800ea11c21d00050000", 0x28}], 0x1) 807.257053ms ago: executing program 3 (id=12476): r0 = socket$vsock_stream(0x28, 0x1, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 715.699974ms ago: executing program 3 (id=12477): mount$fuse(0x0, 0x0, &(0x7f0000000180), 0x800, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC, @ANYBLOB=',@\x00\x00\x00\x00\x00\x00\f=', @ANYRESHEX, @ANYRES16]) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="04300300c9008cba4dffaa0a52c0186ef28359af281f3a6bfde3a6ee0de9ddee0bf7da43aebf706b3329b0a564835713c2de78691734f5b9ada875d8facbcb611c220f4296a197c00dc7780e18d276969228dd91f813fda5cbc6adcfdd40386249f98919c934448632816bbc251be47d7af97966b4a96a6a8b7f211d8e29678fe8216eb9b30f4fa5856c0371b3c31559e07c414833"], 0x6) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="03c8001e794e4cee84d39856f4752833767be125637ee49dc79a52f2f9465718460cd05feda51bbf4206b5e7325945e5f819bbace34f7d33b43908e14fa05a0f06d9dccb7f0580fe9d42d7bf6530f1a2d22cfd5396c3c67afcdc34613911e96affd46ebd4aa6c60ca02f7648783a10deccc27340c4f24ed37dd6563758d14f732e63a853a4c71c356a6309a485ed"], 0x22) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="89070404", 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000060a0b0400000000000000000200000014000480100001800700010063740000040002800900010073797a30000000000900020073797a320000000014000000110001000000000000003a44c0c7283e00000000000a"], 0x68}, 0x1, 0x0, 0x0, 0x804}, 0x0) ppoll(&(0x7f0000000100)=[{r4}], 0x1, &(0x7f0000000140), 0x0, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = io_uring_setup(0x15ae, &(0x7f0000000080)) r8 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x121301, 0x0) write$dsp(r8, &(0x7f0000000300)="90", 0x1) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="043e1f0a00c9"], 0x22) socket$key(0xf, 0x3, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) ioctl$KVM_RUN(r3, 0xae80, 0x0) 636.493348ms ago: executing program 2 (id=12478): clock_gettime(0x9, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180800000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000540)={0x1, 0x7d}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071103300000000001d300500000000004704000001ed00000f030000000000001d44000000000000620a00fe040400007203000000000000b500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a8641aa05a1336b3b4c4becea710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343cccc953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c9102"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 0s ago: executing program 4 (id=12480): socket$inet6(0xa, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000200)='g', 0xfdef}], 0x1) kernel console output (not intermixed with test programs): ms! [ 2507.742693][T26083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2507.769059][T26083] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2507.794161][T26083] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2507.814009][T26083] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2507.826264][T26083] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2507.925237][ T29] audit: type=1326 audit(1719982649.007:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26570 comm="syz.3.12161" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf748c579 code=0x0 [ 2508.037822][T26575] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12163'. [ 2508.059985][T16691] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2508.094503][T16691] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2508.169154][T29029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2508.212053][T29029] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2508.423890][T15405] Bluetooth: hci2: Invalid handle: 0x4fc9 > 0x0eff [ 2508.841696][ T50] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 2508.984499][T17211] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 2509.047475][ T50] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2509.062254][ T50] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 2509.073606][ T50] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2509.103073][ T50] usb 3-1: config 0 descriptor?? [ 2509.114187][ T50] usb 3-1: Found UVC 0.00 device (046d:08c1) [ 2509.131410][ T50] usb 3-1: No valid video chain found. [ 2509.164790][T17211] usb 1-1: Using ep0 maxpacket: 8 [ 2509.198437][T17211] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 2509.214539][T17211] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2509.225699][T17211] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2509.236591][T17211] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2509.248352][T17211] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2509.261886][T17211] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2509.296604][T17211] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2509.340003][T26657] netlink: 'syz.4.12182': attribute type 29 has an invalid length. [ 2509.348714][T26657] netlink: 'syz.4.12182': attribute type 29 has an invalid length. [ 2509.360265][T26657] netlink: 'syz.4.12182': attribute type 29 has an invalid length. [ 2509.468627][ T5140] usb 3-1: USB disconnect, device number 84 [ 2509.523074][T17211] usb 1-1: usb_control_msg returned -32 [ 2509.537730][ T5093] Bluetooth: hci1: command tx timeout [ 2509.545605][T17211] usbtmc 1-1:16.0: can't read capabilities [ 2509.736023][ T50] hid-generic 0000:0000:0000.007E: unknown main item tag 0x0 [ 2509.766548][ T50] hid-generic 0000:0000:0000.007E: unknown main item tag 0x0 [ 2509.777012][ T50] hid-generic 0000:0000:0000.007E: unknown main item tag 0x2 [ 2509.786943][T22887] usb 1-1: USB disconnect, device number 23 [ 2509.801502][ T50] hid-generic 0000:0000:0000.007E: unknown main item tag 0x0 [ 2509.827892][ T50] hid-generic 0000:0000:0000.007E: unknown main item tag 0x0 [ 2509.841659][T15634] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 2509.852848][ T50] hid-generic 0000:0000:0000.007E: unknown main item tag 0x0 [ 2509.863700][T15634] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 2509.872045][ T50] hid-generic 0000:0000:0000.007E: unknown main item tag 0x0 [ 2509.879752][T15634] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 2509.887700][ T50] hid-generic 0000:0000:0000.007E: item fetching failed at offset 8/43 [ 2509.897382][T15634] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 2509.911689][ T50] hid-generic 0000:0000:0000.007E: probe with driver hid-generic failed with error -22 [ 2509.921604][T15634] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 2509.931062][T15634] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 2509.939414][T15634] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 2509.947446][T15634] hid-generic 0000:0000:0000.007F: unknown main item tag 0x4 [ 2509.956452][T15634] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 2509.964070][T15634] hid-generic 0000:0000:0000.007F: unknown main item tag 0x2 [ 2509.972626][T15634] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 2509.981003][T15634] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 2509.996553][T15634] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 2510.008906][T15634] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 2510.025306][T15634] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 2510.036570][T15634] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 2510.048700][T15634] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 2510.068358][T15634] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 2510.081296][T15634] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 2510.101497][T15634] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 2510.132211][T15634] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 2510.148464][T15634] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 2510.169261][T15634] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 2510.180966][T15634] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 2510.194460][T15634] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 2510.223838][T15634] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 2510.235147][T15634] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 2510.242708][T15634] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 2510.260999][T15634] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 2510.301113][T15634] hid-generic 0000:0000:0000.007F: hidraw0: HID v0.00 Device [syz0] on syz0 [ 2511.044488][ T5140] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 2511.254673][ T5140] usb 5-1: Using ep0 maxpacket: 16 [ 2511.273743][ T5140] usb 5-1: config 6 has an invalid interface number: 236 but max is 1 [ 2511.291140][ T5140] usb 5-1: config 6 has an invalid interface number: 155 but max is 1 [ 2511.308641][ T5140] usb 5-1: config 6 has no interface number 0 [ 2511.321845][ T5140] usb 5-1: config 6 has no interface number 1 [ 2511.344618][ T5140] usb 5-1: config 6 interface 236 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2511.373023][ T5140] usb 5-1: config 6 interface 236 altsetting 0 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 2511.398431][ T5140] usb 5-1: config 6 interface 236 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2511.418652][ T5140] usb 5-1: config 6 interface 236 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 2511.440907][ T5140] usb 5-1: config 6 interface 236 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 2511.461278][ T5140] usb 5-1: config 6 interface 236 altsetting 0 bulk endpoint 0xA8 has invalid maxpacket 32 [ 2511.542205][ T5140] usb 5-1: config 6 interface 236 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 2511.573647][ T5140] usb 5-1: config 6 interface 236 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 2511.604408][ T5140] usb 5-1: config 6 interface 236 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2511.614602][ T5093] Bluetooth: hci1: command tx timeout [ 2511.630382][ T5140] usb 5-1: config 6 interface 236 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2511.652717][ T5140] usb 5-1: config 6 interface 236 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 2511.675425][ T5140] usb 5-1: config 6 interface 155 altsetting 31 has an invalid descriptor for endpoint zero, skipping [ 2511.694777][ T5140] usb 5-1: config 6 interface 155 has no altsetting 0 [ 2511.704130][ T5140] usb 5-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=d5.24 [ 2511.713586][ T5140] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2511.728857][ T5140] usb 5-1: Product: syz [ 2511.736413][ T5140] usb 5-1: Manufacturer: syz [ 2511.746728][ T5140] usb 5-1: SerialNumber: syz [ 2511.763369][T26727] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2512.135360][ T50] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 2512.235703][ T5140] usb 5-1: USB disconnect, device number 9 [ 2512.332111][ T5139] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 2512.341541][ T5139] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 2512.350983][ T5139] hid-generic 0000:0000:0000.0080: unknown main item tag 0x2 [ 2512.351364][ T50] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2512.360659][ T5139] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 2512.377579][ T5139] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 2512.386809][ T50] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 2512.386834][ T5139] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 2512.401183][ T50] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2512.403848][ T5139] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 2512.419582][ T5139] hid-generic 0000:0000:0000.0080: item fetching failed at offset 8/43 [ 2512.430233][ T5139] hid-generic 0000:0000:0000.0080: probe with driver hid-generic failed with error -22 [ 2512.432719][ T50] usb 2-1: config 0 descriptor?? [ 2512.454717][T15634] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 2512.469284][ T50] usb 2-1: Found UVC 0.00 device (046d:08c1) [ 2512.476583][ T50] usb 2-1: No valid video chain found. [ 2512.597961][T29029] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2512.644495][T15634] usb 1-1: Using ep0 maxpacket: 8 [ 2512.651950][T15634] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 2512.673905][T15634] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2512.711302][T15634] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2512.762949][T15634] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2512.798326][T29029] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2512.803631][ T5140] usb 2-1: USB disconnect, device number 101 [ 2512.814339][T15634] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2512.848717][T15634] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2512.876045][T15634] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2512.989130][T29029] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2513.130297][T29029] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2513.155038][T15634] usb 1-1: usb_control_msg returned -32 [ 2513.174672][T15634] usbtmc 1-1:16.0: can't read capabilities [ 2513.370442][T23163] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2513.394711][T23163] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2513.400325][ T50] usb 1-1: USB disconnect, device number 24 [ 2513.408753][T23163] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2513.420917][T23163] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2513.431111][T23163] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2513.439950][T23163] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2513.684916][T29029] bridge_slave_1: left allmulticast mode [ 2513.705270][T29029] bridge_slave_1: left promiscuous mode [ 2513.725263][T29029] bridge0: port 2(bridge_slave_1) entered disabled state [ 2513.747985][T29029] bridge_slave_0: left allmulticast mode [ 2513.774049][T29029] bridge_slave_0: left promiscuous mode [ 2513.780540][T29029] bridge0: port 1(bridge_slave_0) entered disabled state [ 2514.414466][T23163] Bluetooth: hci2: command 0x0406 tx timeout [ 2514.544135][ T5139] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 2514.775592][ T5139] usb 1-1: Using ep0 maxpacket: 16 [ 2514.787201][ T5139] usb 1-1: config 6 has an invalid interface number: 236 but max is 1 [ 2514.815798][ T5139] usb 1-1: config 6 has an invalid interface number: 155 but max is 1 [ 2514.834689][ T5139] usb 1-1: config 6 has no interface number 0 [ 2514.840810][ T5139] usb 1-1: config 6 has no interface number 1 [ 2514.877729][ T5139] usb 1-1: config 6 interface 236 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2514.904626][ T5139] usb 1-1: config 6 interface 236 altsetting 0 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 2514.954485][ T5139] usb 1-1: config 6 interface 236 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2514.977771][ T5139] usb 1-1: config 6 interface 236 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 2515.007147][ T5139] usb 1-1: config 6 interface 236 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 2515.044466][ T5139] usb 1-1: config 6 interface 236 altsetting 0 bulk endpoint 0xA8 has invalid maxpacket 32 [ 2515.083160][ T5139] usb 1-1: config 6 interface 236 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 2515.114726][ T5139] usb 1-1: config 6 interface 236 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 2515.146931][ T5139] usb 1-1: config 6 interface 236 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2515.174480][ T5139] usb 1-1: config 6 interface 236 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2515.211670][ T5139] usb 1-1: config 6 interface 236 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 2515.252468][ T5139] usb 1-1: config 6 interface 155 altsetting 31 has an invalid descriptor for endpoint zero, skipping [ 2515.281586][ T5139] usb 1-1: config 6 interface 155 has no altsetting 0 [ 2515.318474][ T5139] usb 1-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=d5.24 [ 2515.332092][ T5139] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2515.355646][ T5139] usb 1-1: Product: syz [ 2515.362750][ T5139] usb 1-1: Manufacturer: syz [ 2515.372292][ T5139] usb 1-1: SerialNumber: syz [ 2515.388897][T26871] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2515.444604][T29029] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2515.478694][T29029] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2515.492341][T29029] bond0 (unregistering): Released all slaves [ 2515.538659][ T5093] Bluetooth: hci3: command tx timeout [ 2515.850947][ T5139] usb 1-1: USB disconnect, device number 25 [ 2516.114727][ T5135] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 2516.335078][ T5135] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2516.361859][T29029] hsr_slave_0: left promiscuous mode [ 2516.366380][ T5135] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 2516.378647][T29029] hsr_slave_1: left promiscuous mode [ 2516.392833][ T5135] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2516.413372][T29029] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2516.422377][ T5135] usb 3-1: config 0 descriptor?? [ 2516.433942][T29029] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2516.462382][ T5135] usb 3-1: Found UVC 0.00 device (046d:08c1) [ 2516.474629][T29029] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2516.487237][ T5135] usb 3-1: No valid video chain found. [ 2516.492341][T29029] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2516.552156][T29029] veth1_macvtap: left promiscuous mode [ 2516.579340][T29029] veth0_macvtap: left promiscuous mode [ 2516.589548][T29029] veth1_vlan: left promiscuous mode [ 2516.604517][T29029] veth0_vlan: left promiscuous mode [ 2516.714884][T25024] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 2516.819967][ T5140] usb 3-1: USB disconnect, device number 85 [ 2516.924486][T25024] usb 5-1: Using ep0 maxpacket: 8 [ 2516.948287][T25024] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 2516.957128][T25024] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2516.984602][T25024] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2516.995077][T25024] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2517.010189][T25024] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2517.023641][T25024] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2517.033700][T25024] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2517.124444][T17211] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 2517.306936][T17211] usb 1-1: Using ep0 maxpacket: 16 [ 2517.319483][T25024] usb 5-1: usb_control_msg returned -32 [ 2517.344679][T25024] usbtmc 5-1:16.0: can't read capabilities [ 2517.352707][T17211] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xDF has an invalid bInterval 0, changing to 7 [ 2517.381981][T17211] usb 1-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 2517.406367][T17211] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2517.419077][T17211] usb 1-1: Product: syz [ 2517.424172][T17211] usb 1-1: Manufacturer: syz [ 2517.429477][T17211] usb 1-1: SerialNumber: syz [ 2517.456515][T17211] usb 1-1: config 0 descriptor?? [ 2517.623170][ T5093] Bluetooth: hci3: command tx timeout [ 2517.686159][T27035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2517.716869][T27035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2517.738762][T27035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2517.768857][T27035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2517.799832][T27035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2517.836413][T27035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2517.867653][T27035] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 2517.881057][T27035] usb 5-1: usbtmc_ioctl_clear_out_halt returned -32 [ 2517.894027][ T5140] usb 5-1: USB disconnect, device number 10 [ 2518.082238][T29029] team0 (unregistering): Port device team_slave_1 removed [ 2518.128296][T27035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2518.145949][T27035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2518.190743][T17211] powermate: Expected payload of 3--6 bytes, found 512 bytes! [ 2518.221724][T17211] input: Griffin PowerMate as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input170 [ 2518.242142][ C0] powermate: config urb returned -71 [ 2518.247721][ C0] powermate: config urb returned -71 [ 2518.253243][ C0] powermate: config urb returned -71 [ 2518.258766][ C0] powermate: config urb returned -71 [ 2518.281726][T17211] usb 1-1: USB disconnect, device number 26 [ 2518.287677][ C0] powermate 1-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 2518.320844][T29029] team0 (unregistering): Port device team_slave_0 removed [ 2518.831259][T27107] usb usb8: usbfs: process 27107 (syz.1.12236) did not claim interface 0 before use [ 2519.194503][T25024] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 2519.376513][T26831] chnl_net:caif_netlink_parms(): no params data found [ 2519.396636][T25024] usb 1-1: Using ep0 maxpacket: 16 [ 2519.415908][T25024] usb 1-1: config 6 has an invalid interface number: 236 but max is 1 [ 2519.436175][T25024] usb 1-1: config 6 has an invalid interface number: 155 but max is 1 [ 2519.451788][T25024] usb 1-1: config 6 has no interface number 0 [ 2519.463585][T25024] usb 1-1: config 6 has no interface number 1 [ 2519.479464][T25024] usb 1-1: config 6 interface 236 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2519.497218][T25024] usb 1-1: config 6 interface 236 altsetting 0 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 2519.514652][ T50] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 2519.545227][T25024] usb 1-1: config 6 interface 236 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2519.577029][T25024] usb 1-1: config 6 interface 236 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 2519.602531][T25024] usb 1-1: config 6 interface 236 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 2519.626017][T25024] usb 1-1: config 6 interface 236 altsetting 0 bulk endpoint 0xA8 has invalid maxpacket 32 [ 2519.649381][T25024] usb 1-1: config 6 interface 236 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 2519.660642][T25024] usb 1-1: config 6 interface 236 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 2519.672252][T25024] usb 1-1: config 6 interface 236 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2519.698424][T25024] usb 1-1: config 6 interface 236 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2519.701991][ T5093] Bluetooth: hci3: command tx timeout [ 2519.714357][T25024] usb 1-1: config 6 interface 236 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 2519.715675][ T50] usb 2-1: Using ep0 maxpacket: 8 [ 2519.734414][T25024] usb 1-1: config 6 interface 155 altsetting 31 has an invalid descriptor for endpoint zero, skipping [ 2519.746728][T25024] usb 1-1: config 6 interface 155 has no altsetting 0 [ 2519.765077][ T50] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 2519.773760][ T50] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2519.785117][ T50] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2519.795550][ T50] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2519.806753][ T50] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2519.820216][ T50] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2519.825537][T25024] usb 1-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=d5.24 [ 2519.829908][ T50] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2519.895733][T25024] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2519.912816][T26831] bridge0: port 1(bridge_slave_0) entered blocking state [ 2519.944041][T25024] usb 1-1: Product: syz [ 2519.955204][T26831] bridge0: port 1(bridge_slave_0) entered disabled state [ 2519.967118][T25024] usb 1-1: Manufacturer: syz [ 2519.971762][T25024] usb 1-1: SerialNumber: syz [ 2519.987367][T26831] bridge_slave_0: entered allmulticast mode [ 2520.011210][T27110] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2520.016377][T26831] bridge_slave_0: entered promiscuous mode [ 2520.039649][T26831] bridge0: port 2(bridge_slave_1) entered blocking state [ 2520.075299][T26831] bridge0: port 2(bridge_slave_1) entered disabled state [ 2520.099403][ T50] usb 2-1: usb_control_msg returned -32 [ 2520.109064][T26831] bridge_slave_1: entered allmulticast mode [ 2520.121851][ T50] usbtmc 2-1:16.0: can't read capabilities [ 2520.136016][T26831] bridge_slave_1: entered promiscuous mode [ 2520.327963][T26831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2520.370084][T26831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2520.414522][T17211] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 2520.474750][T25024] usb 1-1: USB disconnect, device number 27 [ 2520.563795][T26831] team0: Port device team_slave_0 added [ 2520.600411][T26831] team0: Port device team_slave_1 added [ 2520.628630][T17211] usb 5-1: Using ep0 maxpacket: 16 [ 2520.645983][T17211] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xDF has an invalid bInterval 0, changing to 7 [ 2520.679207][T26831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2520.687518][T17211] usb 5-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 2520.694361][T26831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2520.707915][T17211] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2520.740170][T26831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2520.759695][T26831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2520.767629][T17211] usb 5-1: Product: syz [ 2520.772646][T26831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2520.776293][T17211] usb 5-1: Manufacturer: syz [ 2520.808608][T26831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2520.834415][T17211] usb 5-1: SerialNumber: syz [ 2520.851848][T17211] usb 5-1: config 0 descriptor?? [ 2520.965928][T26831] hsr_slave_0: entered promiscuous mode [ 2520.973067][T26831] hsr_slave_1: entered promiscuous mode [ 2520.988759][T26831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2520.996783][T26831] Cannot create hsr debugfs directory [ 2521.084076][T27209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2521.126466][T27209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2521.197778][T27209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2521.240126][T27209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2521.287366][T27209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2521.338459][T27209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2521.407175][T27209] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 2521.447793][T22887] usb 2-1: USB disconnect, device number 102 [ 2521.447812][T27209] usb 2-1: usbtmc_ioctl_clear_out_halt returned -71 [ 2521.723255][T27209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2521.739999][T27209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2521.776054][ T5093] Bluetooth: hci3: command tx timeout [ 2521.794443][T17211] powermate: Expected payload of 3--6 bytes, found 512 bytes! [ 2521.858112][T17211] input: Griffin PowerMate as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input171 [ 2521.938717][ C0] powermate: config urb returned -71 [ 2521.944305][ C0] powermate: config urb returned -71 [ 2521.949910][ C0] powermate: config urb returned -71 [ 2521.955597][ C0] powermate: config urb returned -71 [ 2522.005615][T17211] usb 5-1: USB disconnect, device number 11 [ 2522.011595][ C0] powermate 5-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 2522.205908][T23163] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2522.219361][T23163] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2522.227741][T23163] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2522.237016][T23163] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2522.245688][T23163] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 2522.260479][T23163] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2522.507872][T27475] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12249'. [ 2522.780002][T27508] netlink: 'syz.2.12255': attribute type 10 has an invalid length. [ 2522.822191][T27508] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 2522.833014][T27507] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12256'. [ 2523.002406][T29029] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2523.164003][T29029] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2523.195098][T15634] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 2523.244407][T22887] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 2523.278629][T29029] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2523.396687][T15634] usb 2-1: Using ep0 maxpacket: 8 [ 2523.404228][T15634] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 2523.413321][T15634] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2523.426163][T15634] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2523.439611][T15634] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2523.450641][T15634] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2523.464505][T22887] usb 3-1: Using ep0 maxpacket: 16 [ 2523.469830][T15634] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2523.470052][T26831] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2523.487100][T15634] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2523.497076][T22887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xDF has an invalid bInterval 0, changing to 7 [ 2523.519388][T22887] usb 3-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 2523.528988][T22887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2523.539395][T26831] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2523.549294][T22887] usb 3-1: Product: syz [ 2523.553572][T22887] usb 3-1: Manufacturer: syz [ 2523.558800][T22887] usb 3-1: SerialNumber: syz [ 2523.567013][T22887] usb 3-1: config 0 descriptor?? [ 2523.638134][T29029] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2523.728002][T26831] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2523.736560][T15634] usb 2-1: usb_control_msg returned -32 [ 2523.748451][T26831] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2523.762678][T15634] usbtmc 2-1:16.0: can't read capabilities [ 2523.781627][T27526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2523.794886][T27526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2523.866523][T27526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2523.916301][T27526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2523.954623][T27471] chnl_net:caif_netlink_parms(): no params data found [ 2523.971554][T27526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2523.998049][T27526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2524.044430][T27526] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 2524.051778][T27526] usb 2-1: usbtmc_ioctl_clear_out_halt returned -32 [ 2524.116436][T15634] usb 2-1: USB disconnect, device number 103 [ 2524.299427][T27526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2524.335691][T23163] Bluetooth: hci6: command tx timeout [ 2524.365590][T27526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2524.386781][T22887] powermate: Expected payload of 3--6 bytes, found 512 bytes! [ 2524.411185][T22887] input: Griffin PowerMate as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input172 [ 2524.455182][ C1] powermate: config urb returned -71 [ 2524.460733][ C1] powermate: config urb returned -71 [ 2524.466304][ C1] powermate: config urb returned -71 [ 2524.471859][ C1] powermate: config urb returned -71 [ 2524.508738][ C1] powermate 3-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 2524.539979][T22887] usb 3-1: USB disconnect, device number 86 [ 2524.559786][T27471] bridge0: port 1(bridge_slave_0) entered blocking state [ 2524.580104][T27471] bridge0: port 1(bridge_slave_0) entered disabled state [ 2524.595430][T27471] bridge_slave_0: entered allmulticast mode [ 2524.607994][T27471] bridge_slave_0: entered promiscuous mode [ 2524.660882][T27471] bridge0: port 2(bridge_slave_1) entered blocking state [ 2524.674638][T27471] bridge0: port 2(bridge_slave_1) entered disabled state [ 2524.685391][T27471] bridge_slave_1: entered allmulticast mode [ 2524.692803][T27471] bridge_slave_1: entered promiscuous mode [ 2524.721800][T29029] bridge_slave_1: left allmulticast mode [ 2524.734564][T29029] bridge_slave_1: left promiscuous mode [ 2524.740390][T29029] bridge0: port 2(bridge_slave_1) entered disabled state [ 2524.767419][T29029] bridge_slave_0: left allmulticast mode [ 2524.774191][T29029] bridge_slave_0: left promiscuous mode [ 2524.789682][T29029] bridge0: port 1(bridge_slave_0) entered disabled state [ 2525.022395][ T29] audit: type=1326 audit(1719982666.097:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27761 comm="syz.4.12263" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x0 [ 2525.753718][T29029] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2525.778855][T29029] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2525.791846][T29029] bond0 (unregistering): Released all slaves [ 2525.940453][T27471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2526.000168][T27471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2526.225141][T27825] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12266'. [ 2526.390157][T27471] team0: Port device team_slave_0 added [ 2526.425598][T23163] Bluetooth: hci6: command tx timeout [ 2526.592434][T27471] team0: Port device team_slave_1 added [ 2526.774773][T29029] hsr_slave_0: left promiscuous mode [ 2526.786147][T29029] hsr_slave_1: left promiscuous mode [ 2526.792601][T29029] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2526.811958][T29029] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2526.853991][T29029] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2526.872803][T29029] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2526.884552][T17211] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 2526.933258][T29029] veth1_macvtap: left promiscuous mode [ 2526.939001][T29029] veth0_macvtap: left promiscuous mode [ 2526.948403][T29029] veth1_vlan: left promiscuous mode [ 2526.960428][T29029] veth0_vlan: left promiscuous mode [ 2527.097508][T17211] usb 2-1: Using ep0 maxpacket: 16 [ 2527.109319][T17211] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xDF has an invalid bInterval 0, changing to 7 [ 2527.123956][T17211] usb 2-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 2527.143118][T17211] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2527.165212][T17211] usb 2-1: Product: syz [ 2527.169507][T17211] usb 2-1: Manufacturer: syz [ 2527.179828][T17211] usb 2-1: SerialNumber: syz [ 2527.198772][T17211] usb 2-1: config 0 descriptor?? [ 2527.425883][T27878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2527.444972][T27878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2527.475372][T27878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2527.497594][T27878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2527.528081][T27878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2527.551655][T27878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2527.797406][T27878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2527.818607][T27878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2527.868026][T17211] powermate: Expected payload of 3--6 bytes, found 512 bytes! [ 2527.879197][T17211] input: Griffin PowerMate as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input173 [ 2527.898765][ C0] powermate: config urb returned -71 [ 2527.904319][ C0] powermate: config urb returned -71 [ 2527.909955][ C0] powermate: config urb returned -71 [ 2527.915505][ C0] powermate: config urb returned -71 [ 2527.931007][T17211] usb 2-1: USB disconnect, device number 104 [ 2527.931053][ C0] powermate 2-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 2528.215263][T29029] team0 (unregistering): Port device team_slave_1 removed [ 2528.289869][T29029] team0 (unregistering): Port device team_slave_0 removed [ 2528.511679][T23163] Bluetooth: hci6: command tx timeout [ 2529.307394][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 2529.313887][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 2529.665775][T27471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2529.683114][T27471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2529.723939][T27471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2529.752819][T27954] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12278'. [ 2529.812293][T27471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2529.820303][T27471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2529.860721][T27471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2529.932646][T26831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2530.106406][T27471] hsr_slave_0: entered promiscuous mode [ 2530.121367][T27471] hsr_slave_1: entered promiscuous mode [ 2530.145518][ T5139] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 2530.159921][T26831] 8021q: adding VLAN 0 to HW filter on device team0 [ 2530.224810][ T5140] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 2530.244141][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 2530.251339][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2530.326221][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 2530.333396][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2530.334629][ T5139] usb 5-1: Using ep0 maxpacket: 16 [ 2530.361289][ T5139] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 2530.388131][ T5139] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 2530.414444][ T5139] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2530.426248][ T5140] usb 2-1: Using ep0 maxpacket: 16 [ 2530.458019][ T5139] usb 5-1: config 0 descriptor?? [ 2530.463271][ T5140] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xDF has an invalid bInterval 0, changing to 7 [ 2530.490354][ T5140] usb 2-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 2530.509400][ T5140] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2530.522248][ T5140] usb 2-1: Product: syz [ 2530.526686][ T5140] usb 2-1: Manufacturer: syz [ 2530.543900][ T5140] usb 2-1: SerialNumber: syz [ 2530.574121][ T5140] usb 2-1: config 0 descriptor?? [ 2530.585873][T23163] Bluetooth: hci6: command tx timeout [ 2530.811019][T27980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2530.865433][T27980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2530.897946][T27973] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12285'. [ 2530.964675][T27980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2531.004795][T27980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2531.042092][T27980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2531.055395][T28102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2531.065089][T27980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2531.080530][T28102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2531.113798][ T5139] hid (null): invalid report_size 812540268 [ 2531.140972][ T5139] hid (null): unknown global tag 0x83 [ 2531.157099][ T5139] hid (null): unknown global tag 0xc [ 2531.163662][T26831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2531.181784][ T5139] hid-generic 0003:0158:0100.0081: unknown main item tag 0x1 [ 2531.210211][ T5139] hid-generic 0003:0158:0100.0081: unexpected long global item [ 2531.232048][ T5139] hid-generic 0003:0158:0100.0081: probe with driver hid-generic failed with error -22 [ 2531.303597][T27980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2531.342894][T27980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2531.384666][ T5140] powermate: Expected payload of 3--6 bytes, found 512 bytes! [ 2531.410442][ T5140] input: Griffin PowerMate as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input174 [ 2531.411751][ T50] usb 5-1: USB disconnect, device number 12 [ 2531.488237][ C0] powermate: config urb returned -71 [ 2531.493820][ C0] powermate: config urb returned -71 [ 2531.499358][ C0] powermate: config urb returned -71 [ 2531.504910][ C0] powermate: config urb returned -71 [ 2531.551868][T26831] veth0_vlan: entered promiscuous mode [ 2531.561487][ T5140] usb 2-1: USB disconnect, device number 105 [ 2531.567527][ C0] powermate 2-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 2531.651408][T26831] veth1_vlan: entered promiscuous mode [ 2531.767792][T26831] veth0_macvtap: entered promiscuous mode [ 2531.867616][T26831] veth1_macvtap: entered promiscuous mode [ 2531.899285][T27471] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2531.923450][T27471] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2531.995113][T27471] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2532.076957][T27471] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2532.173990][T26831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2532.223706][T26831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2532.249432][T26831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2532.260658][T26831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2532.271019][T26831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2532.281897][T26831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2532.292127][T26831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2532.303435][T26831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2532.329146][T26831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2532.398687][T26831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2532.421587][T26831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2532.440777][T26831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2532.462834][T26831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2532.477639][T26831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2532.488594][T26831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2532.502072][T26831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2532.514255][T26831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2532.525652][T26831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2532.537514][T26831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2532.551153][T26831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2532.587131][T26831] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2532.596540][T26831] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2532.608234][T26831] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2532.617310][T26831] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2532.909774][T27471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2532.988139][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2533.014893][ T8] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 2533.015239][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2533.102501][T27471] 8021q: adding VLAN 0 to HW filter on device team0 [ 2533.127504][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 2533.134720][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2533.176497][T29029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2533.195537][T23662] bridge0: port 2(bridge_slave_1) entered blocking state [ 2533.202707][T23662] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2533.213247][T29029] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2533.217713][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 2533.234669][T15634] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 2533.238233][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 2533.277624][ T8] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 2533.314477][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2533.355019][ T8] usb 5-1: config 0 descriptor?? [ 2533.449980][T27471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2533.464419][T15634] usb 3-1: Using ep0 maxpacket: 8 [ 2533.482072][T15634] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 2533.506765][T15634] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 2533.540951][T15634] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 2533.592280][T15634] usb 3-1: config 250 has no interface number 0 [ 2533.627903][T15634] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 2533.653900][T27471] veth0_vlan: entered promiscuous mode [ 2533.678871][T15634] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 2533.702046][T27471] veth1_vlan: entered promiscuous mode [ 2533.709078][T15634] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2533.756689][T15634] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 2533.768514][T28202] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12295'. [ 2533.787758][T15634] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 2533.811788][T27471] veth0_macvtap: entered promiscuous mode [ 2533.820235][T15634] usb 3-1: config 250 interface 228 has no altsetting 0 [ 2533.833284][T27471] veth1_macvtap: entered promiscuous mode [ 2533.849473][T15634] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 2533.876047][T15634] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 2533.902054][T28202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2533.902399][T15634] usb 3-1: Product: syz [ 2533.931154][T27471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2533.942104][T28202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2533.952288][ T8] hid (null): invalid report_size 812540268 [ 2533.953208][T15634] usb 3-1: SerialNumber: syz [ 2533.980976][ T8] hid (null): unknown global tag 0x83 [ 2533.998943][T15634] hub 3-1:250.228: bad descriptor, ignoring hub [ 2533.999345][ T8] hid (null): unknown global tag 0xc [ 2534.006503][T27471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2534.024422][T15634] hub 3-1:250.228: probe with driver hub failed with error -5 [ 2534.038639][T27471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2534.045760][ T8] hid-generic 0003:0158:0100.0082: unknown main item tag 0x1 [ 2534.057515][T27471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2534.077160][ T8] hid-generic 0003:0158:0100.0082: unexpected long global item [ 2534.088533][T27471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2534.111998][ T8] hid-generic 0003:0158:0100.0082: probe with driver hid-generic failed with error -22 [ 2534.116061][T27471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2534.150753][T27471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2534.197559][ T8] usb 5-1: USB disconnect, device number 13 [ 2534.216631][T27471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2534.249350][T15634] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 87 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 2534.262285][T28221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2534.272469][T27471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2534.286357][T28221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2534.294158][T27471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2534.327136][T27471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2534.410723][T27471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2534.468913][T27471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2534.504910][T27471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2534.535708][T27471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2534.557210][T27471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2534.601321][T27471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2534.628353][T27471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2534.659261][T27471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2534.701536][T27471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2534.731258][T27471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2534.754651][T27471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2534.787377][T27471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2534.827571][T27471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2534.997816][T27471] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2535.032229][T27471] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2535.074371][T27471] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2535.103454][T27471] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2535.369430][T28300] netlink: 'syz.4.12304': attribute type 10 has an invalid length. [ 2535.451642][T28300] team0: Device veth0_macvtap failed to register rx_handler [ 2535.507660][ T1014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2535.537866][ T1014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2535.627045][T23163] Bluetooth: hci2: unexpected event for opcode 0x200c [ 2535.730357][T29029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2535.760715][T29029] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2536.112425][T23163] Bluetooth: hci2: Invalid handle: 0x4fc9 > 0x0eff [ 2536.256502][ T8] usb 3-1: USB disconnect, device number 87 [ 2536.296738][ T8] usblp0: removed [ 2536.654846][ T8] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 2536.799822][ T5093] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2536.811911][ T5093] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2536.842356][ T5093] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2536.852854][ T5093] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2536.861346][ T5093] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2536.864441][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 2536.873990][ T5093] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2536.922852][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 2536.965629][ T8] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 2536.990501][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2537.015608][ T8] usb 4-1: config 0 descriptor?? [ 2537.261606][T28384] chnl_net:caif_netlink_parms(): no params data found [ 2537.485939][T28369] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12311'. [ 2537.545272][T28384] bridge0: port 1(bridge_slave_0) entered blocking state [ 2537.569949][T28384] bridge0: port 1(bridge_slave_0) entered disabled state [ 2537.587840][T28384] bridge_slave_0: entered allmulticast mode [ 2537.606096][T28384] bridge_slave_0: entered promiscuous mode [ 2537.612127][T28554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2537.626778][T28554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2537.652016][ T8] hid (null): invalid report_size 812540268 [ 2537.686019][ T8] hid (null): unknown global tag 0x83 [ 2537.691480][ T8] hid (null): unknown global tag 0xc [ 2537.717413][ T8] hid-generic 0003:0158:0100.0083: unknown main item tag 0x1 [ 2537.735385][ T8] hid-generic 0003:0158:0100.0083: unexpected long global item [ 2537.751179][T28384] bridge0: port 2(bridge_slave_1) entered blocking state [ 2537.765691][T28384] bridge0: port 2(bridge_slave_1) entered disabled state [ 2537.774946][ T8] hid-generic 0003:0158:0100.0083: probe with driver hid-generic failed with error -22 [ 2537.783272][T28384] bridge_slave_1: entered allmulticast mode [ 2537.794640][T28384] bridge_slave_1: entered promiscuous mode [ 2537.892157][T25024] usb 4-1: USB disconnect, device number 100 [ 2537.943468][T28384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2537.979862][T28384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2538.071658][T28384] team0: Port device team_slave_0 added [ 2538.093718][T28384] team0: Port device team_slave_1 added [ 2538.158508][T28384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2538.178419][T28384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2538.207539][T28384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2538.221707][T28384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2538.228887][T28384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2538.257469][T28384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2538.365188][T28652] bridge0: port 3(batadv1) entered blocking state [ 2538.372879][T28652] bridge0: port 3(batadv1) entered disabled state [ 2538.399909][T28652] batadv1: entered allmulticast mode [ 2538.411548][T28652] batadv1: entered promiscuous mode [ 2538.437148][T28384] hsr_slave_0: entered promiscuous mode [ 2538.472139][T28384] hsr_slave_1: entered promiscuous mode [ 2538.489734][T28384] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2538.514528][T28384] Cannot create hsr debugfs directory [ 2538.690643][ T1014] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2538.859763][ T1014] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2538.861445][ T51] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 2538.880600][ T51] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 2538.974517][T23163] Bluetooth: hci1: command tx timeout [ 2539.047527][ T1014] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2539.304888][ T1014] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2539.466568][T25024] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 2539.666781][T25024] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2539.690524][T25024] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 2539.717879][T25024] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2539.758295][T25024] usb 2-1: config 0 descriptor?? [ 2539.787075][T25024] usb 2-1: Found UVC 0.00 device (046d:08c1) [ 2539.797468][T25024] usb 2-1: No valid video chain found. [ 2539.855116][ T1014] bridge_slave_1: left allmulticast mode [ 2539.874640][ T1014] bridge_slave_1: left promiscuous mode [ 2539.891691][ T1014] bridge0: port 2(bridge_slave_1) entered disabled state [ 2539.921048][ T1014] bridge_slave_0: left allmulticast mode [ 2539.932588][ T1014] bridge_slave_0: left promiscuous mode [ 2539.942842][ T1014] bridge0: port 1(bridge_slave_0) entered disabled state [ 2540.072004][ T5093] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2540.085931][T25024] usb 2-1: USB disconnect, device number 106 [ 2540.095794][ T5093] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2540.111407][ T5093] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2540.120648][ T5093] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2540.129862][ T5093] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2540.139411][ T5093] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2540.645466][ T1014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2540.663028][ T1014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2540.674465][ T1014] bond0 (unregistering): Released all slaves [ 2541.055182][T23163] Bluetooth: hci1: command tx timeout [ 2541.135900][ T8] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 2541.321897][ T1014] hsr_slave_0: left promiscuous mode [ 2541.332398][ T1014] hsr_slave_1: left promiscuous mode [ 2541.347296][ T1014] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2541.354981][ T1014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2541.355271][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 2541.395295][ T1014] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2541.404672][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 2541.414494][ T1014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2541.439669][ T8] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 2541.466661][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2541.470157][ T1014] veth1_macvtap: left promiscuous mode [ 2541.480948][ T1014] veth0_macvtap: left promiscuous mode [ 2541.487033][ T1014] veth1_vlan: left promiscuous mode [ 2541.492509][ T1014] veth0_vlan: left promiscuous mode [ 2541.509766][ T8] usb 2-1: config 0 descriptor?? [ 2541.962117][T28858] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12330'. [ 2542.117387][T28924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2542.129719][T28924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2542.143120][ T8] hid (null): invalid report_size 812540268 [ 2542.152440][ T8] hid (null): unknown global tag 0x83 [ 2542.167990][ T8] hid (null): unknown global tag 0xc [ 2542.179685][ T8] hid-generic 0003:0158:0100.0084: unknown main item tag 0x1 [ 2542.187524][ T8] hid-generic 0003:0158:0100.0084: unexpected long global item [ 2542.197317][ T8] hid-generic 0003:0158:0100.0084: probe with driver hid-generic failed with error -22 [ 2542.254541][T23163] Bluetooth: hci5: command tx timeout [ 2542.746635][ T1014] team0 (unregistering): Port device team_slave_1 removed [ 2542.813655][ T1014] team0 (unregistering): Port device team_slave_0 removed [ 2543.134551][T23163] Bluetooth: hci1: command tx timeout [ 2543.564246][T15634] usb 2-1: USB disconnect, device number 107 [ 2543.893688][T28843] chnl_net:caif_netlink_parms(): no params data found [ 2544.035834][T28384] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2544.127135][T28384] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2544.242392][T28384] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2544.271118][T28384] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2544.306061][T28843] bridge0: port 1(bridge_slave_0) entered blocking state [ 2544.322467][T28843] bridge0: port 1(bridge_slave_0) entered disabled state [ 2544.338729][T23163] Bluetooth: hci5: command tx timeout [ 2544.351695][T28843] bridge_slave_0: entered allmulticast mode [ 2544.376051][T28843] bridge_slave_0: entered promiscuous mode [ 2544.406144][T28843] bridge0: port 2(bridge_slave_1) entered blocking state [ 2544.454914][T28843] bridge0: port 2(bridge_slave_1) entered disabled state [ 2544.462178][T28843] bridge_slave_1: entered allmulticast mode [ 2544.496088][T28843] bridge_slave_1: entered promiscuous mode [ 2544.675826][T28843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2544.799756][ T1014] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2544.876191][T28843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2545.082867][ T1014] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2545.161627][T28843] team0: Port device team_slave_0 added [ 2545.189139][T28843] team0: Port device team_slave_1 added [ 2545.215399][T23163] Bluetooth: hci1: command tx timeout [ 2545.257183][ T1014] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2545.296446][ T5093] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2545.309489][ T5093] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2545.319491][ T5093] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2545.339229][ T5093] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2545.347621][ T5093] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2545.358111][ T5093] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2545.491415][ T1014] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2545.530908][T28843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2545.539208][T28843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2545.566635][T28843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2545.604821][T28843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2545.611816][T28843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2545.651759][T28843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2545.758797][T28384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2545.850643][T28843] hsr_slave_0: entered promiscuous mode [ 2545.860267][T28843] hsr_slave_1: entered promiscuous mode [ 2545.940975][T28384] 8021q: adding VLAN 0 to HW filter on device team0 [ 2546.027174][ T1014] bridge_slave_1: left allmulticast mode [ 2546.032862][ T1014] bridge_slave_1: left promiscuous mode [ 2546.039348][ T1014] bridge0: port 2(bridge_slave_1) entered disabled state [ 2546.060418][ T1014] bridge_slave_0: left allmulticast mode [ 2546.066709][ T1014] bridge_slave_0: left promiscuous mode [ 2546.072503][ T1014] bridge0: port 1(bridge_slave_0) entered disabled state [ 2546.419089][T23163] Bluetooth: hci5: command tx timeout [ 2546.542706][ T1014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2546.554002][ T1014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2546.571359][ T1014] bond0 (unregistering): Released all slaves [ 2546.645938][T15634] bridge0: port 1(bridge_slave_0) entered blocking state [ 2546.653088][T15634] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2546.730081][ T5140] bridge0: port 2(bridge_slave_1) entered blocking state [ 2546.737285][ T5140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2546.954472][ T8] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 2547.144821][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 2547.156949][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 2547.182566][ T8] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 2547.191901][T29203] chnl_net:caif_netlink_parms(): no params data found [ 2547.226649][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2547.248936][ T8] usb 3-1: config 0 descriptor?? [ 2547.308364][ T1014] hsr_slave_0: left promiscuous mode [ 2547.325517][ T1014] hsr_slave_1: left promiscuous mode [ 2547.332049][ T1014] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2547.361982][ T1014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2547.385528][ T1014] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2547.393387][ T1014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2547.431057][ T1014] veth1_macvtap: left promiscuous mode [ 2547.437165][ T1014] veth1_vlan: left promiscuous mode [ 2547.442655][ T1014] veth0_vlan: left promiscuous mode [ 2547.454831][T23163] Bluetooth: hci3: command tx timeout [ 2547.662236][T29344] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12346'. [ 2547.771916][T29486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2547.801064][T29486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2547.827264][ T8] hid (null): invalid report_size 812540268 [ 2547.844038][ T8] hid (null): unknown global tag 0x83 [ 2547.850765][ T8] hid (null): unknown global tag 0xc [ 2547.873790][ T8] hid-generic 0003:0158:0100.0085: unknown main item tag 0x1 [ 2547.891814][ T8] hid-generic 0003:0158:0100.0085: unexpected long global item [ 2547.910517][ T8] hid-generic 0003:0158:0100.0085: probe with driver hid-generic failed with error -22 [ 2548.289218][ T1014] team0 (unregistering): Port device team_slave_1 removed [ 2548.343047][ T1014] team0 (unregistering): Port device team_slave_0 removed [ 2548.497975][T23163] Bluetooth: hci5: command tx timeout [ 2549.030607][T28384] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2549.043048][ T8] usb 3-1: USB disconnect, device number 88 [ 2549.534739][T23163] Bluetooth: hci3: command tx timeout [ 2549.698228][T28384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2549.768425][T29203] bridge0: port 1(bridge_slave_0) entered blocking state [ 2549.786202][ T5093] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2549.797513][ T5093] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2549.808409][ T5093] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2549.816694][T29203] bridge0: port 1(bridge_slave_0) entered disabled state [ 2549.824196][T29203] bridge_slave_0: entered allmulticast mode [ 2549.832571][T29203] bridge_slave_0: entered promiscuous mode [ 2549.834400][ T5093] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2549.853007][ T5093] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2549.863050][ T5093] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2549.872613][T29203] bridge0: port 2(bridge_slave_1) entered blocking state [ 2549.880350][T29203] bridge0: port 2(bridge_slave_1) entered disabled state [ 2549.889441][T29203] bridge_slave_1: entered allmulticast mode [ 2549.915668][T29203] bridge_slave_1: entered promiscuous mode [ 2550.053667][T29203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2550.106889][T29203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2550.155497][T28384] veth0_vlan: entered promiscuous mode [ 2550.227262][T28384] veth1_vlan: entered promiscuous mode [ 2550.260887][T28843] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2550.300965][T29203] team0: Port device team_slave_0 added [ 2550.319965][T28843] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2550.377117][T29203] team0: Port device team_slave_1 added [ 2550.470916][ T1014] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2550.499484][T28843] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2550.518952][T28843] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2550.604497][ T1014] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2550.648284][T29203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2550.658376][T29203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2550.685410][T29203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2550.781641][ T1014] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2550.812689][T29203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2550.829896][T29203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2550.863769][T29203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2550.998878][ T1014] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2551.153784][T28384] veth0_macvtap: entered promiscuous mode [ 2551.216069][T28384] veth1_macvtap: entered promiscuous mode [ 2551.342948][T29599] chnl_net:caif_netlink_parms(): no params data found [ 2551.385675][T29203] hsr_slave_0: entered promiscuous mode [ 2551.393015][T29203] hsr_slave_1: entered promiscuous mode [ 2551.403195][T29203] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2551.411349][T29203] Cannot create hsr debugfs directory [ 2551.615083][ T5093] Bluetooth: hci3: command tx timeout [ 2551.869558][T28384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2551.894241][T28384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2551.909468][T28384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2551.931176][T28384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2551.941493][ T5093] Bluetooth: hci2: command tx timeout [ 2551.955038][T28384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2551.974463][T28384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2551.985047][T28384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2551.996534][T28384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2552.008567][T28384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2552.020675][T28384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2552.031193][T28384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2552.042402][T28384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2552.053028][T28384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2552.063018][T28384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2552.074517][T28384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2552.084464][T28384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2552.104336][T28384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2552.125391][T28384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2552.153233][T28384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2552.166545][T28384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2552.240713][T29599] bridge0: port 1(bridge_slave_0) entered blocking state [ 2552.261626][T29599] bridge0: port 1(bridge_slave_0) entered disabled state [ 2552.275038][T29599] bridge_slave_0: entered allmulticast mode [ 2552.282475][T29599] bridge_slave_0: entered promiscuous mode [ 2552.384661][T29599] bridge0: port 2(bridge_slave_1) entered blocking state [ 2552.397909][T29599] bridge0: port 2(bridge_slave_1) entered disabled state [ 2552.406236][T29599] bridge_slave_1: entered allmulticast mode [ 2552.413083][T29599] bridge_slave_1: entered promiscuous mode [ 2552.445632][T28384] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2552.455161][T28384] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2552.463913][T28384] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2552.474208][T28384] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2552.486174][ T1014] bridge_slave_1: left allmulticast mode [ 2552.491835][ T1014] bridge_slave_1: left promiscuous mode [ 2552.500179][ T1014] bridge0: port 2(bridge_slave_1) entered disabled state [ 2552.509704][ T1014] bridge_slave_0: left allmulticast mode [ 2552.515855][ T1014] bridge_slave_0: left promiscuous mode [ 2552.521607][ T1014] bridge0: port 1(bridge_slave_0) entered disabled state [ 2552.981294][ T1014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2552.997883][ T1014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2553.015954][ T1014] bond0 (unregistering): Released all slaves [ 2553.088147][T29599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2553.118495][T29599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2553.233347][T30044] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12355'. [ 2553.437611][T29599] team0: Port device team_slave_0 added [ 2553.456183][T29599] team0: Port device team_slave_1 added [ 2553.705050][ T5093] Bluetooth: hci3: command tx timeout [ 2553.709961][T28843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2553.825705][T29599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2553.833360][T29599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2553.899291][T29599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2553.914017][T29599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2553.923404][T29599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2553.952382][T29599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2554.001096][ T1014] hsr_slave_0: left promiscuous mode [ 2554.015061][ T5093] Bluetooth: hci2: command tx timeout [ 2554.022849][ T1014] hsr_slave_1: left promiscuous mode [ 2554.039279][ T1014] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2554.046982][ T1014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2554.067113][ T1014] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2554.080148][ T1014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2554.103210][ T1014] veth1_macvtap: left promiscuous mode [ 2554.109016][ T1014] veth0_macvtap: left promiscuous mode [ 2554.115650][ T1014] veth1_vlan: left promiscuous mode [ 2554.121018][ T1014] veth0_vlan: left promiscuous mode [ 2554.743713][ T1014] team0 (unregistering): Port device team_slave_1 removed [ 2554.801785][ T1014] team0 (unregistering): Port device team_slave_0 removed [ 2555.600710][T29599] hsr_slave_0: entered promiscuous mode [ 2555.623802][T29599] hsr_slave_1: entered promiscuous mode [ 2555.633293][T29599] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2555.641670][T29599] Cannot create hsr debugfs directory [ 2555.743207][T28843] 8021q: adding VLAN 0 to HW filter on device team0 [ 2555.820049][T23503] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2555.847651][ T5140] bridge0: port 1(bridge_slave_0) entered blocking state [ 2555.854860][ T5140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2555.862729][T23503] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2555.881936][ T5140] bridge0: port 2(bridge_slave_1) entered blocking state [ 2555.889316][ T5140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2555.978516][T15008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2555.988000][T15008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2556.094599][ T5093] Bluetooth: hci2: command tx timeout [ 2556.218490][T28843] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2556.417426][T29203] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2556.451955][T29203] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2556.530798][T29203] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2556.549548][T29203] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2556.689405][T29599] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2556.857108][T28843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2556.989901][T29599] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2557.229309][T29599] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2557.389681][T29599] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2557.533303][T28843] veth0_vlan: entered promiscuous mode [ 2557.606070][T28843] veth1_vlan: entered promiscuous mode [ 2557.784894][T29203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2557.869465][T28843] veth0_macvtap: entered promiscuous mode [ 2557.906025][T29599] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2557.932658][T29599] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2557.962322][T29203] 8021q: adding VLAN 0 to HW filter on device team0 [ 2557.995247][T29599] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2558.020767][T28843] veth1_macvtap: entered promiscuous mode [ 2558.041350][T29599] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2558.143403][T17211] bridge0: port 1(bridge_slave_0) entered blocking state [ 2558.150567][T17211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2558.185043][ T5093] Bluetooth: hci2: command tx timeout [ 2558.203852][T28843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2558.216365][T28843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2558.227817][T28843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2558.240286][T28843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2558.251340][T28843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2558.262292][T28843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2558.272654][T28843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2558.283545][T28843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2558.296080][T28843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2558.309291][T22887] bridge0: port 2(bridge_slave_1) entered blocking state [ 2558.316466][T22887] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2558.352463][T28843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2558.370585][T28843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2558.395353][T28843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2558.415896][T28843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2558.438173][T28843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2558.454521][T28843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2558.465943][T28843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2558.477003][T28843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2558.487342][T28843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2558.498510][T28843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2558.510331][T28843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2558.528376][T28843] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2558.537583][T28843] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2558.550024][T28843] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2558.559261][T28843] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2558.634951][ T1014] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2558.839811][ T1014] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2558.917996][T23163] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2558.931112][T23163] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2558.941175][T23163] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2558.956255][T23163] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2558.967935][T23163] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2558.976549][T23163] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2559.038577][ T1014] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2559.167138][ T1014] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2559.246945][T16691] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2559.264661][T29203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2559.274267][T16691] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2559.416559][T15008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2559.429262][T15008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2559.527928][ T1014] bridge_slave_1: left allmulticast mode [ 2559.533768][ T1014] bridge_slave_1: left promiscuous mode [ 2559.555725][ T1014] bridge0: port 2(bridge_slave_1) entered disabled state [ 2559.579918][ T1014] bridge_slave_0: left allmulticast mode [ 2559.586915][ T1014] bridge_slave_0: left promiscuous mode [ 2559.592681][ T1014] bridge0: port 1(bridge_slave_0) entered disabled state [ 2560.035698][T25024] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 2560.196319][T25024] usb 5-1: device descriptor read/64, error -71 [ 2560.294169][ T1014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2560.331699][ T1014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2560.359744][ T1014] bond0 (unregistering): Released all slaves [ 2560.474460][T25024] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 2560.561563][T29599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2560.611972][T29203] veth0_vlan: entered promiscuous mode [ 2560.672218][T25024] usb 5-1: device descriptor read/64, error -71 [ 2560.713543][T30390] chnl_net:caif_netlink_parms(): no params data found [ 2560.762315][T29203] veth1_vlan: entered promiscuous mode [ 2560.796472][T25024] usb usb5-port1: attempt power cycle [ 2560.837751][T29599] 8021q: adding VLAN 0 to HW filter on device team0 [ 2560.974489][ T5135] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 2561.054736][T23163] Bluetooth: hci1: command tx timeout [ 2561.080607][T22887] bridge0: port 1(bridge_slave_0) entered blocking state [ 2561.087823][T22887] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2561.112094][ T1014] hsr_slave_0: left promiscuous mode [ 2561.119017][ T1014] hsr_slave_1: left promiscuous mode [ 2561.127311][ T1014] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2561.136060][ T1014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2561.144081][ T1014] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2561.152110][ T1014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2561.164736][ T5135] usb 3-1: Using ep0 maxpacket: 16 [ 2561.174250][ T5135] usb 3-1: config 6 has an invalid interface number: 236 but max is 1 [ 2561.184728][ T5135] usb 3-1: config 6 has an invalid interface number: 155 but max is 1 [ 2561.203812][ T5135] usb 3-1: config 6 has no interface number 0 [ 2561.217970][ T1014] veth1_macvtap: left promiscuous mode [ 2561.223551][ T1014] veth0_macvtap: left promiscuous mode [ 2561.229282][ T5135] usb 3-1: config 6 has no interface number 1 [ 2561.236625][T25024] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 2561.236761][ T5135] usb 3-1: config 6 interface 236 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2561.255373][ T1014] veth1_vlan: left promiscuous mode [ 2561.260768][ T1014] veth0_vlan: left promiscuous mode [ 2561.267406][ T5135] usb 3-1: config 6 interface 236 altsetting 0 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 2561.285568][T25024] usb 5-1: device descriptor read/8, error -71 [ 2561.288633][ T5135] usb 3-1: config 6 interface 236 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2561.319338][ T5135] usb 3-1: config 6 interface 236 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 2561.364619][ T5135] usb 3-1: config 6 interface 236 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 2561.395663][ T5135] usb 3-1: config 6 interface 236 altsetting 0 bulk endpoint 0xA8 has invalid maxpacket 32 [ 2561.425722][ T5135] usb 3-1: config 6 interface 236 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 2561.438396][ T5135] usb 3-1: config 6 interface 236 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 2561.449778][ T5135] usb 3-1: config 6 interface 236 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2561.462176][ T5135] usb 3-1: config 6 interface 236 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2561.472450][ T5135] usb 3-1: config 6 interface 236 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 2561.486488][ T5135] usb 3-1: config 6 interface 155 altsetting 31 has an invalid descriptor for endpoint zero, skipping [ 2561.498308][ T5135] usb 3-1: config 6 interface 155 has no altsetting 0 [ 2561.508146][ T5135] usb 3-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=d5.24 [ 2561.518622][ T5135] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2561.527014][ T5135] usb 3-1: Product: syz [ 2561.531193][ T5135] usb 3-1: Manufacturer: syz [ 2561.544603][ T5135] usb 3-1: SerialNumber: syz [ 2561.558676][T30536] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2561.575028][T25024] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 2561.631850][T25024] usb 5-1: device descriptor read/8, error -71 [ 2561.764594][T25024] usb usb5-port1: unable to enumerate USB device [ 2562.029817][ T5135] usb 3-1: USB disconnect, device number 89 [ 2562.192751][ T1014] team0 (unregistering): Port device team_slave_1 removed [ 2562.250776][ T1014] team0 (unregistering): Port device team_slave_0 removed [ 2562.983456][T23163] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 2562.994872][T23163] CPU: 1 PID: 23163 Comm: kworker/u9:2 Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 2563.005236][T23163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 2563.015319][T23163] Workqueue: hci5 hci_rx_work [ 2563.020029][T23163] Call Trace: [ 2563.023312][T23163] [ 2563.026249][T23163] dump_stack_lvl+0x241/0x360 [ 2563.031053][T23163] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2563.036386][T23163] ? __pfx__printk+0x10/0x10 [ 2563.041005][T23163] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 2563.046309][T23163] ? kmalloc_trace_noprof+0x19c/0x2c0 [ 2563.051718][T23163] sysfs_create_dir_ns+0x2ce/0x3a0 [ 2563.056865][T23163] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 2563.062533][T23163] kobject_add_internal+0x435/0x8d0 [ 2563.067774][T23163] kobject_add+0x152/0x220 [ 2563.072215][T23163] ? do_raw_spin_unlock+0x13c/0x8b0 [ 2563.077438][T23163] ? device_add+0x3e7/0xbf0 [ 2563.081963][T23163] ? __pfx_kobject_add+0x10/0x10 [ 2563.086923][T23163] ? _raw_spin_unlock+0x28/0x50 [ 2563.091801][T23163] ? get_device_parent+0x165/0x410 [ 2563.096939][T23163] device_add+0x4e5/0xbf0 [ 2563.101294][T23163] hci_conn_add_sysfs+0xe8/0x200 [ 2563.106265][T23163] le_conn_complete_evt+0xc9f/0x12e0 [ 2563.111586][T23163] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 2563.117347][T23163] ? __mutex_unlock_slowpath+0x21d/0x750 [ 2563.123002][T23163] ? __copy_skb_header+0x437/0x5b0 [ 2563.128133][T23163] ? skb_pull_data+0x112/0x230 [ 2563.132912][T23163] hci_le_enh_conn_complete_evt+0x185/0x420 [ 2563.138823][T23163] hci_event_packet+0xa53/0x1540 [ 2563.143779][T23163] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 2563.149075][T23163] ? __pfx_hci_event_packet+0x10/0x10 [ 2563.154466][T23163] ? do_raw_spin_unlock+0x13c/0x8b0 [ 2563.159688][T23163] ? hci_send_to_monitor+0xd8/0x7f0 [ 2563.164947][T23163] ? kcov_remote_start+0x9e/0x7e0 [ 2563.170003][T23163] hci_rx_work+0x3e8/0xca0 [ 2563.174458][T23163] ? process_scheduled_works+0x945/0x1830 [ 2563.180202][T23163] process_scheduled_works+0xa2c/0x1830 [ 2563.185815][T23163] ? __pfx_process_scheduled_works+0x10/0x10 [ 2563.191831][T23163] ? assign_work+0x364/0x3d0 [ 2563.196450][T23163] worker_thread+0x86d/0xd50 [ 2563.201079][T23163] ? __kthread_parkme+0x169/0x1d0 [ 2563.206133][T23163] ? __pfx_worker_thread+0x10/0x10 [ 2563.211256][T23163] kthread+0x2f0/0x390 [ 2563.215332][T23163] ? __pfx_worker_thread+0x10/0x10 [ 2563.220460][T23163] ? __pfx_kthread+0x10/0x10 [ 2563.225070][T23163] ret_from_fork+0x4b/0x80 [ 2563.229505][T23163] ? __pfx_kthread+0x10/0x10 [ 2563.234105][T23163] ret_from_fork_asm+0x1a/0x30 [ 2563.238897][T23163] [ 2563.242695][ T5093] Bluetooth: hci1: command tx timeout [ 2563.248697][T23163] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 2563.264267][T23163] Bluetooth: hci5: failed to register connection device [ 2563.338667][T30390] bridge0: port 1(bridge_slave_0) entered blocking state [ 2563.357419][T30390] bridge0: port 1(bridge_slave_0) entered disabled state [ 2563.384691][T30390] bridge_slave_0: entered allmulticast mode [ 2563.407908][T30390] bridge_slave_0: entered promiscuous mode [ 2563.443884][T30390] bridge0: port 2(bridge_slave_1) entered blocking state [ 2563.474601][T30390] bridge0: port 2(bridge_slave_1) entered disabled state [ 2563.484584][T30390] bridge_slave_1: entered allmulticast mode [ 2563.491778][T30390] bridge_slave_1: entered promiscuous mode [ 2563.502555][T17211] bridge0: port 2(bridge_slave_1) entered blocking state [ 2563.509794][T17211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2563.667071][T29203] veth0_macvtap: entered promiscuous mode [ 2563.712464][T30390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2563.739283][T30390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2563.776170][T29203] veth1_macvtap: entered promiscuous mode [ 2563.820543][T30390] team0: Port device team_slave_0 added [ 2563.863196][T30390] team0: Port device team_slave_1 added [ 2563.992781][T30390] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2564.009224][T30390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2564.054036][T30390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2564.109355][T30390] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2564.133034][T30390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2564.172570][T30390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2564.329831][T30390] hsr_slave_0: entered promiscuous mode [ 2564.365051][T30390] hsr_slave_1: entered promiscuous mode [ 2564.398005][T30390] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2564.415119][T30390] Cannot create hsr debugfs directory [ 2564.432007][T29203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2564.452472][T29203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2564.491630][T29203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2564.526926][T29203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2564.558618][T29203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2564.574126][T29203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2564.596634][T29203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2564.607675][T29203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2564.621437][T29203] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2564.812334][T29203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2564.833623][T29203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2564.844138][T29203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2564.856122][T17258] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 2564.863749][T29203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2564.875515][T29203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2564.886377][T29203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2564.898462][T29203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2564.909238][T29203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2564.919182][T29203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2564.929843][T29203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2564.947547][T29203] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2564.959235][T29203] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2564.972321][T29203] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2564.982192][T29203] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2564.992519][T29203] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2565.036869][T17258] usb 3-1: device descriptor read/64, error -71 [ 2565.069531][T29599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2565.205063][ T5136] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 2565.295199][T23163] Bluetooth: hci1: command tx timeout [ 2565.326471][T17258] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 2565.383164][T29599] veth0_vlan: entered promiscuous mode [ 2565.400249][T29029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2565.430913][T29029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2565.438331][ T5136] usb 5-1: Using ep0 maxpacket: 16 [ 2565.476524][ T5136] usb 5-1: config 6 has an invalid interface number: 236 but max is 1 [ 2565.494121][ T5136] usb 5-1: config 6 has an invalid interface number: 155 but max is 1 [ 2565.504966][T17258] usb 3-1: device descriptor read/64, error -71 [ 2565.521987][ T5136] usb 5-1: config 6 has no interface number 0 [ 2565.534612][ T5136] usb 5-1: config 6 has no interface number 1 [ 2565.540759][ T5136] usb 5-1: config 6 interface 236 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2565.563111][T29599] veth1_vlan: entered promiscuous mode [ 2565.570971][ T5136] usb 5-1: config 6 interface 236 altsetting 0 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 2565.588481][ T5136] usb 5-1: config 6 interface 236 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2565.599876][ T5136] usb 5-1: config 6 interface 236 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 2565.612818][ T5136] usb 5-1: config 6 interface 236 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 2565.624642][ T5136] usb 5-1: config 6 interface 236 altsetting 0 bulk endpoint 0xA8 has invalid maxpacket 32 [ 2565.640781][T17258] usb usb3-port1: attempt power cycle [ 2565.647138][ T5136] usb 5-1: config 6 interface 236 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 2565.675403][ T5136] usb 5-1: config 6 interface 236 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 2565.694537][ T5136] usb 5-1: config 6 interface 236 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2565.712328][ T5136] usb 5-1: config 6 interface 236 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2565.734146][T23503] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2565.754332][T23503] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2565.761420][ T5136] usb 5-1: config 6 interface 236 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 2565.820342][ T5136] usb 5-1: config 6 interface 155 altsetting 31 has an invalid descriptor for endpoint zero, skipping [ 2565.843118][ T5136] usb 5-1: config 6 interface 155 has no altsetting 0 [ 2565.873580][ T5136] usb 5-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=d5.24 [ 2565.902386][ T5136] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2565.935199][ T5136] usb 5-1: Product: syz [ 2565.939408][ T5136] usb 5-1: Manufacturer: syz [ 2565.944020][ T5136] usb 5-1: SerialNumber: syz [ 2565.977041][T30808] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2566.053407][T29599] veth0_macvtap: entered promiscuous mode [ 2566.086959][T29599] veth1_macvtap: entered promiscuous mode [ 2566.094624][T17258] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 2566.127980][T29599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2566.138870][T29599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2566.150432][T17258] usb 3-1: device descriptor read/8, error -71 [ 2566.168179][T29599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2566.204870][T29599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2566.224402][T29599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2566.235355][T29599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2566.245495][T29599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2566.258128][T29599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2566.268637][T29599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2566.279573][T29599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2566.301611][T29599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2566.371889][T29599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2566.383454][T29599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2566.421754][T29599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2566.433768][ T5136] usb 5-1: USB disconnect, device number 18 [ 2566.443515][T17258] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 2566.464337][T29599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2566.474226][T29599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2566.492563][T29599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2566.503338][T29599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2566.514006][T29599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2566.524655][T29599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2566.536948][T17258] usb 3-1: device descriptor read/8, error -71 [ 2566.543199][T29599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2566.553704][T29599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2566.564947][T29599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2566.580151][T29599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2566.657743][T17258] usb usb3-port1: unable to enumerate USB device [ 2566.671465][T29599] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2566.682457][T29599] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2566.692528][T29599] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2566.702244][T29599] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2566.793453][T30390] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2566.832889][T30390] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2566.877527][T30390] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2566.902435][T30390] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2567.092329][T23503] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2567.116369][T23503] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2567.267136][T23503] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2567.294726][T23503] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2567.374777][ T5093] Bluetooth: hci1: command tx timeout [ 2567.549169][T30390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2567.641962][T30390] 8021q: adding VLAN 0 to HW filter on device team0 [ 2567.683129][T15634] bridge0: port 1(bridge_slave_0) entered blocking state [ 2567.690368][T15634] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2567.820414][ T5093] Bluetooth: hci2: Invalid handle: 0x4fc9 > 0x0eff [ 2567.836409][T15634] bridge0: port 2(bridge_slave_1) entered blocking state [ 2567.843569][T15634] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2568.006667][T30390] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2568.047956][T30390] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2568.170933][T30390] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2568.312937][T30390] veth0_vlan: entered promiscuous mode [ 2568.348983][T30390] veth1_vlan: entered promiscuous mode [ 2568.458089][T30390] veth0_macvtap: entered promiscuous mode [ 2568.524781][T30390] veth1_macvtap: entered promiscuous mode [ 2568.594084][T30390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2568.634744][T30390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2568.664587][T30390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2568.703809][T30390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2568.714541][T30390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2568.745338][T30390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2568.764792][T30390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2568.805028][T30390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2568.828603][T30390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2568.841306][T30390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2568.851771][T30390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2568.863270][T30390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2568.907441][T30390] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2568.927416][T30390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2568.938236][T30390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2568.951569][T30390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2568.962601][T30390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2568.981989][T30390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2569.000167][ T5093] Bluetooth: hci5: command 0x0406 tx timeout [ 2569.009514][T30390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2569.046562][T30390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2569.078489][T30390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2569.124428][T30390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2569.147610][T30390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2569.163112][ T29] audit: type=1326 audit(1719982710.237:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31024 comm="syz.3.12406" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7467579 code=0x0 [ 2569.186898][T30390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2569.199430][T15634] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 2569.207741][T30390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2569.219392][T30390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2569.234331][T30390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2569.272569][T30390] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2569.346864][T30390] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2569.358342][T30390] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2569.375821][T30390] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2569.395205][T30390] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2569.413110][T15634] usb 5-1: Using ep0 maxpacket: 16 [ 2569.445142][T15634] usb 5-1: config 6 has an invalid interface number: 236 but max is 1 [ 2569.465090][T15634] usb 5-1: config 6 has an invalid interface number: 155 but max is 1 [ 2569.491243][T15634] usb 5-1: config 6 has no interface number 0 [ 2569.542262][T15634] usb 5-1: config 6 has no interface number 1 [ 2569.575396][T15634] usb 5-1: config 6 interface 236 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2569.616883][T15634] usb 5-1: config 6 interface 236 altsetting 0 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 2569.661860][T15634] usb 5-1: config 6 interface 236 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2569.691531][T16691] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2569.705623][T15634] usb 5-1: config 6 interface 236 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 2569.721165][T16691] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2569.741198][T15634] usb 5-1: config 6 interface 236 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 2569.758949][T16691] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2569.767971][T16691] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2569.782913][T15634] usb 5-1: config 6 interface 236 altsetting 0 bulk endpoint 0xA8 has invalid maxpacket 32 [ 2569.814456][T22937] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 2569.818761][T15634] usb 5-1: config 6 interface 236 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 2569.861781][T15634] usb 5-1: config 6 interface 236 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 2569.893581][T15634] usb 5-1: config 6 interface 236 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2569.929367][T15634] usb 5-1: config 6 interface 236 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2569.971321][T15634] usb 5-1: config 6 interface 236 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 2570.004761][T22937] usb 3-1: device descriptor read/64, error -71 [ 2570.008581][T15634] usb 5-1: config 6 interface 155 altsetting 31 has an invalid descriptor for endpoint zero, skipping [ 2570.064446][T15634] usb 5-1: config 6 interface 155 has no altsetting 0 [ 2570.079838][T15634] usb 5-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=d5.24 [ 2570.100168][T15634] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2570.122099][T15634] usb 5-1: Product: syz [ 2570.126538][T15634] usb 5-1: Manufacturer: syz [ 2570.131156][T15634] usb 5-1: SerialNumber: syz [ 2570.140049][T31013] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2570.296204][T22937] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 2570.304177][T31082] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 2570.310759][T31082] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2570.330282][T31082] vhci_hcd vhci_hcd.0: Device attached [ 2570.344750][T23662] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 2570.360698][T31084] vhci_hcd: connection closed [ 2570.361076][T16691] vhci_hcd: stop threads [ 2570.383289][T16691] vhci_hcd: release socket [ 2570.390406][T16691] vhci_hcd: disconnect device [ 2570.464571][T22937] usb 3-1: device descriptor read/64, error -71 [ 2570.537205][T23662] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2570.559229][T23662] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2570.588517][T22937] usb usb3-port1: attempt power cycle [ 2570.589170][T23662] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2570.629476][T15634] usb 5-1: USB disconnect, device number 19 [ 2570.635987][T23662] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2570.648615][T23662] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2570.686552][T23662] usb 1-1: config 0 descriptor?? [ 2571.014475][T22937] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 2571.085726][T22937] usb 3-1: device descriptor read/8, error -71 [ 2571.138817][T23662] plantronics 0003:047F:FFFF.0086: unknown main item tag 0x0 [ 2571.175351][T23662] plantronics 0003:047F:FFFF.0086: unknown main item tag 0x0 [ 2571.182831][T23662] plantronics 0003:047F:FFFF.0086: unknown main item tag 0x0 [ 2571.206309][T23662] plantronics 0003:047F:FFFF.0086: unknown main item tag 0x0 [ 2571.213778][T23662] plantronics 0003:047F:FFFF.0086: unknown main item tag 0x0 [ 2571.239941][T23662] plantronics 0003:047F:FFFF.0086: unknown main item tag 0x0 [ 2571.263704][T23662] plantronics 0003:047F:FFFF.0086: unknown main item tag 0x0 [ 2571.271480][T23662] plantronics 0003:047F:FFFF.0086: unknown main item tag 0x0 [ 2571.311474][T23662] plantronics 0003:047F:FFFF.0086: unknown main item tag 0x0 [ 2571.312765][T23163] Bluetooth: hci2: Invalid handle: 0x4fc9 > 0x0eff [ 2571.320399][T23662] plantronics 0003:047F:FFFF.0086: unknown main item tag 0x0 [ 2571.357340][T23662] plantronics 0003:047F:FFFF.0086: unknown main item tag 0x0 [ 2571.364728][T22937] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 2571.377845][T23163] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 2571.388156][T23163] CPU: 0 PID: 23163 Comm: kworker/u9:2 Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 2571.390710][T23662] plantronics 0003:047F:FFFF.0086: unknown main item tag 0x0 [ 2571.398522][T23163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 2571.398579][T23163] Workqueue: hci3 hci_rx_work [ 2571.398612][T23163] Call Trace: [ 2571.398622][T23163] [ 2571.426942][T23163] dump_stack_lvl+0x241/0x360 [ 2571.431667][T23163] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2571.436898][T23163] ? __pfx__printk+0x10/0x10 [ 2571.438268][T23662] plantronics 0003:047F:FFFF.0086: unknown main item tag 0x0 [ 2571.441588][T23163] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 2571.441618][T23163] ? kmalloc_trace_noprof+0x19c/0x2c0 [ 2571.441650][T23163] sysfs_create_dir_ns+0x2ce/0x3a0 [ 2571.441679][T23163] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 2571.441713][T23163] kobject_add_internal+0x435/0x8d0 [ 2571.441752][T23163] kobject_add+0x152/0x220 [ 2571.441779][T23163] ? do_raw_spin_unlock+0x13c/0x8b0 [ 2571.441810][T23163] ? device_add+0x3e7/0xbf0 [ 2571.441838][T23163] ? __pfx_kobject_add+0x10/0x10 [ 2571.441865][T23163] ? _raw_spin_unlock+0x28/0x50 [ 2571.441889][T23163] ? get_device_parent+0x165/0x410 [ 2571.441920][T23163] device_add+0x4e5/0xbf0 [ 2571.441954][T23163] hci_conn_add_sysfs+0xe8/0x200 [ 2571.441982][T23163] le_conn_complete_evt+0xc9f/0x12e0 [ 2571.442026][T23163] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 2571.442055][T23163] ? __mutex_unlock_slowpath+0x21d/0x750 [ 2571.442082][T23163] ? __copy_skb_header+0x437/0x5b0 [ 2571.442110][T23163] ? skb_pull_data+0x112/0x230 [ 2571.442142][T23163] hci_le_enh_conn_complete_evt+0x185/0x420 [ 2571.442180][T23163] hci_event_packet+0xa53/0x1540 [ 2571.442211][T23163] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 2571.442245][T23163] ? __pfx_hci_event_packet+0x10/0x10 [ 2571.442268][T23163] ? do_raw_spin_unlock+0x13c/0x8b0 [ 2571.442303][T23163] ? hci_send_to_monitor+0xd8/0x7f0 [ 2571.442332][T23163] ? kcov_remote_start+0x9e/0x7e0 [ 2571.442359][T23163] hci_rx_work+0x3e8/0xca0 [ 2571.442395][T23163] ? process_scheduled_works+0x945/0x1830 [ 2571.442416][T23163] process_scheduled_works+0xa2c/0x1830 [ 2571.442470][T23163] ? __pfx_process_scheduled_works+0x10/0x10 [ 2571.442503][T23163] ? assign_work+0x364/0x3d0 [ 2571.442531][T23163] worker_thread+0x86d/0xd50 [ 2571.442570][T23163] ? __kthread_parkme+0x169/0x1d0 [ 2571.442599][T23163] ? __pfx_worker_thread+0x10/0x10 [ 2571.442621][T23163] kthread+0x2f0/0x390 [ 2571.442646][T23163] ? __pfx_worker_thread+0x10/0x10 [ 2571.442667][T23163] ? __pfx_kthread+0x10/0x10 [ 2571.442692][T23163] ret_from_fork+0x4b/0x80 [ 2571.442716][T23163] ? __pfx_kthread+0x10/0x10 [ 2571.442740][T23163] ret_from_fork_asm+0x1a/0x30 [ 2571.442810][T23163] [ 2571.447101][T23163] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 2571.517502][T23662] plantronics 0003:047F:FFFF.0086: unknown main item tag 0x0 [ 2571.523614][T22937] usb 3-1: device descriptor read/8, error -71 [ 2571.574135][T23662] plantronics 0003:047F:FFFF.0086: unknown main item tag 0x0 [ 2571.577584][T23163] Bluetooth: hci3: failed to register connection device [ 2571.605260][T23662] plantronics 0003:047F:FFFF.0086: No inputs registered, leaving [ 2571.724823][T22937] usb usb3-port1: unable to enumerate USB device [ 2571.802077][T23662] plantronics 0003:047F:FFFF.0086: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 2571.842373][T23662] usb 1-1: USB disconnect, device number 28 [ 2571.894429][T17258] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 2572.075910][T17258] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2572.087074][T17258] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 2572.102448][T17258] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2572.115656][T17258] usb 5-1: config 0 descriptor?? [ 2572.127875][T17258] usb 5-1: Found UVC 0.00 device (046d:08c1) [ 2572.136917][T17258] usb 5-1: No valid video chain found. [ 2572.163261][T31165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12419'. [ 2572.381165][T17258] usb 5-1: USB disconnect, device number 20 [ 2572.509815][ T29] audit: type=1326 audit(1719982713.587:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31179 comm="syz.3.12420" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7467579 code=0x0 [ 2572.702960][T31191] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2573.431899][ T5093] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 2573.534429][T22887] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 2573.750134][T22887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2573.772854][T22887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2573.794456][T22887] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2573.818486][T22887] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2573.846330][T22887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2573.875010][T22887] usb 3-1: config 0 descriptor?? [ 2573.986483][ T5093] Bluetooth: hci2: Invalid handle: 0x4fc9 > 0x0eff [ 2574.301730][T22887] plantronics 0003:047F:FFFF.0087: unknown main item tag 0x0 [ 2574.322576][T22887] plantronics 0003:047F:FFFF.0087: unknown main item tag 0x0 [ 2574.348114][T22887] plantronics 0003:047F:FFFF.0087: unknown main item tag 0x0 [ 2574.357222][T22887] plantronics 0003:047F:FFFF.0087: unknown main item tag 0x0 [ 2574.367369][T22887] plantronics 0003:047F:FFFF.0087: unknown main item tag 0x0 [ 2574.378380][T22887] plantronics 0003:047F:FFFF.0087: unknown main item tag 0x0 [ 2574.392924][T22887] plantronics 0003:047F:FFFF.0087: unknown main item tag 0x0 [ 2574.400829][T22887] plantronics 0003:047F:FFFF.0087: unknown main item tag 0x0 [ 2574.402710][ T29] audit: type=1326 audit(1719982715.467:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31276 comm="syz.4.12440" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf742c579 code=0x0 [ 2574.409299][T22887] plantronics 0003:047F:FFFF.0087: unknown main item tag 0x0 [ 2574.454600][T22887] plantronics 0003:047F:FFFF.0087: unknown main item tag 0x0 [ 2574.477644][T22887] plantronics 0003:047F:FFFF.0087: unknown main item tag 0x0 [ 2574.489808][T22887] plantronics 0003:047F:FFFF.0087: unknown main item tag 0x0 [ 2574.518539][T22887] plantronics 0003:047F:FFFF.0087: unknown main item tag 0x0 [ 2574.532354][T22887] plantronics 0003:047F:FFFF.0087: unknown main item tag 0x0 [ 2574.551639][T22887] plantronics 0003:047F:FFFF.0087: unknown main item tag 0x0 [ 2574.576258][T22887] plantronics 0003:047F:FFFF.0087: No inputs registered, leaving [ 2574.592982][T22887] plantronics 0003:047F:FFFF.0087: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 2574.629519][T22887] usb 3-1: USB disconnect, device number 98 [ 2575.325277][T31339] syzkaller1: entered promiscuous mode [ 2575.334638][T31339] syzkaller1: entered allmulticast mode [ 2575.652875][ T5093] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 2575.662979][ T5093] CPU: 0 PID: 5093 Comm: kworker/u9:5 Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 2575.673225][ T5093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 2575.683290][ T5093] Workqueue: hci2 hci_rx_work [ 2575.687967][ T5093] Call Trace: [ 2575.691232][ T5093] [ 2575.694165][ T5093] dump_stack_lvl+0x241/0x360 [ 2575.698838][ T5093] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2575.704031][ T5093] ? __pfx__printk+0x10/0x10 [ 2575.708611][ T5093] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 2575.713897][ T5093] ? kmalloc_trace_noprof+0x19c/0x2c0 [ 2575.719278][ T5093] sysfs_create_dir_ns+0x2ce/0x3a0 [ 2575.724391][ T5093] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 2575.730045][ T5093] kobject_add_internal+0x435/0x8d0 [ 2575.735315][ T5093] kobject_add+0x152/0x220 [ 2575.739728][ T5093] ? do_raw_spin_unlock+0x13c/0x8b0 [ 2575.744935][ T5093] ? device_add+0x3e7/0xbf0 [ 2575.749505][ T5093] ? __pfx_kobject_add+0x10/0x10 [ 2575.754471][ T5093] ? _raw_spin_unlock+0x28/0x50 [ 2575.759348][ T5093] ? get_device_parent+0x165/0x410 [ 2575.764492][ T5093] device_add+0x4e5/0xbf0 [ 2575.768855][ T5093] hci_conn_add_sysfs+0xe8/0x200 [ 2575.773834][ T5093] le_conn_complete_evt+0xc9f/0x12e0 [ 2575.779164][ T5093] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 2575.784916][ T5093] ? __mutex_unlock_slowpath+0x21d/0x750 [ 2575.790584][ T5093] ? __copy_skb_header+0x437/0x5b0 [ 2575.795735][ T5093] ? skb_pull_data+0x112/0x230 [ 2575.800543][ T5093] hci_le_enh_conn_complete_evt+0x185/0x420 [ 2575.806479][ T5093] hci_event_packet+0xa53/0x1540 [ 2575.811451][ T5093] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 2575.816777][ T5093] ? __pfx_hci_event_packet+0x10/0x10 [ 2575.822171][ T5093] ? do_raw_spin_unlock+0x13c/0x8b0 [ 2575.829582][ T5093] ? hci_send_to_monitor+0xd8/0x7f0 [ 2575.829617][ T5093] ? kcov_remote_start+0x9e/0x7e0 [ 2575.839821][ T5093] hci_rx_work+0x3e8/0xca0 [ 2575.844237][ T5093] ? process_scheduled_works+0x945/0x1830 [ 2575.849977][ T5093] process_scheduled_works+0xa2c/0x1830 [ 2575.855535][ T5093] ? __pfx_process_scheduled_works+0x10/0x10 [ 2575.861541][ T5093] ? assign_work+0x364/0x3d0 [ 2575.866139][ T5093] worker_thread+0x86d/0xd50 [ 2575.870772][ T5093] ? __kthread_parkme+0x169/0x1d0 [ 2575.875917][ T5093] ? __pfx_worker_thread+0x10/0x10 [ 2575.881056][ T5093] kthread+0x2f0/0x390 [ 2575.885239][ T5093] ? __pfx_worker_thread+0x10/0x10 [ 2575.890402][ T5093] ? __pfx_kthread+0x10/0x10 [ 2575.890432][ T5093] ret_from_fork+0x4b/0x80 [ 2575.890465][ T5093] ? __pfx_kthread+0x10/0x10 [ 2575.890490][ T5093] ret_from_fork_asm+0x1a/0x30 [ 2575.890535][ T5093] [ 2575.898551][ T5093] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 2575.898594][ T5093] Bluetooth: hci2: failed to register connection device [ 2576.150322][T31375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12456'. [ 2576.198707][T31375] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12456'. [ 2576.334711][T22887] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 2576.514677][T22887] usb 1-1: device descriptor read/64, error -71 [ 2576.540893][ T5093] Bluetooth: hci5: Invalid handle: 0x4fc9 > 0x0eff [ 2576.748480][T31397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2576.814864][T22887] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 2576.985443][T22887] usb 1-1: device descriptor read/64, error -71 [ 2577.116164][T22887] usb usb1-port1: attempt power cycle [ 2577.557571][T22887] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 2577.606275][T22887] usb 1-1: device descriptor read/8, error -71 [ 2577.902200][T22887] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 2577.949895][T22887] usb 1-1: device descriptor read/8, error -71 [ 2578.001267][ T5093] Bluetooth: hci3: Invalid handle: 0x4fc9 > 0x0eff [ 2578.088421][T22887] usb usb1-port1: unable to enumerate USB device [ 2578.728150][T29599] ------------[ cut here ]------------ [ 2578.734213][T29599] ida_free called for id=25445 which is not allocated. [ 2578.755743][T29599] WARNING: CPU: 1 PID: 29599 at lib/idr.c:525 ida_free+0x370/0x420 [ 2578.763705][T29599] Modules linked in: [ 2578.767984][T29599] CPU: 1 PID: 29599 Comm: syz-executor Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 2578.778466][T29599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 2578.788796][T29599] RIP: 0010:ida_free+0x370/0x420 [ 2578.793778][T29599] Code: 10 42 80 3c 28 00 74 05 e8 8d bd 82 f6 48 8b 7c 24 40 4c 89 fe e8 40 a5 17 00 90 48 c7 c7 60 33 ec 8c 89 de e8 51 36 df f5 90 <0f> 0b 90 90 eb 3d e8 05 08 1d f6 49 bd 00 00 00 00 00 fc ff df 4d [ 2578.813708][T29599] RSP: 0018:ffffc90004e1f680 EFLAGS: 00010246 [ 2578.820966][T29599] RAX: 99d90d21530c3600 RBX: 0000000000006365 RCX: ffff888021d90000 [ 2578.829926][T29599] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 2578.838281][T29599] RBP: ffffc90004e1f770 R08: ffffffff81585822 R09: fffffbfff1c39994 [ 2578.846870][T29599] R10: dffffc0000000000 R11: fffffbfff1c39994 R12: ffffc90004e1f6c0 [ 2578.855010][T29599] R13: dffffc0000000000 R14: ffff88806f4d40a0 R15: 0000000000000246 [ 2578.863016][T29599] FS: 0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 2578.872093][T29599] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 2578.878732][T29599] CR2: 00000000f7f845b8 CR3: 00000000299fa000 CR4: 00000000003526f0 [ 2578.886896][T29599] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2578.895154][T29599] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2578.903151][T29599] Call Trace: [ 2578.906642][T29599] [ 2578.909594][T29599] ? __warn+0x163/0x4e0 [ 2578.913777][T29599] ? ida_free+0x370/0x420 [ 2578.919181][T29599] ? report_bug+0x2b3/0x500 [ 2578.923720][T29599] ? ida_free+0x370/0x420 [ 2578.928915][T29599] ? handle_bug+0x3e/0x70 [ 2578.933760][T29599] ? exc_invalid_op+0x1a/0x50 [ 2578.938512][T29599] ? asm_exc_invalid_op+0x1a/0x20 [ 2578.943631][T29599] ? __warn_printk+0x292/0x360 [ 2578.948505][T29599] ? ida_free+0x370/0x420 [ 2578.952863][T29599] ? __pfx_ida_free+0x10/0x10 [ 2578.957606][T29599] ? synchronize_rcu+0x11b/0x360 [ 2578.962577][T29599] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2578.968688][T29599] hci_conn_del+0x746/0xc40 [ 2578.973576][T29599] hci_conn_hash_flush+0x18e/0x240 [ 2578.979103][T29599] hci_dev_close_sync+0x911/0xf60 [ 2578.984260][T29599] hci_unregister_dev+0x1db/0x4e0 [ 2578.989498][T29599] vhci_release+0x83/0xd0 [ 2578.993907][T29599] ? __pfx_vhci_release+0x10/0x10 [ 2578.999008][T29599] __fput+0x24a/0x8a0 [ 2579.003021][T29599] task_work_run+0x24f/0x310 [ 2579.007737][T29599] ? __pfx_task_work_run+0x10/0x10 [ 2579.012876][T29599] ? do_exit+0xa22/0x27e0 [ 2579.017300][T29599] ? kmem_cache_free+0x145/0x350 [ 2579.023273][T29599] do_exit+0xa27/0x27e0 [ 2579.028361][T29599] ? __pfx_do_exit+0x10/0x10 [ 2579.032970][T29599] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2579.038431][T29599] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2579.044900][T29599] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2579.051251][T29599] ? _raw_spin_lock_irq+0xdf/0x120 [ 2579.056896][T29599] do_group_exit+0x207/0x2c0 [ 2579.061522][T29599] ? _raw_spin_unlock_irq+0x23/0x50 [ 2579.067355][T29599] ? lockdep_hardirqs_on+0x99/0x150 [ 2579.072592][T29599] get_signal+0x16a1/0x1740 [ 2579.077397][T29599] ? __pfx_get_signal+0x10/0x10 [ 2579.082286][T29599] arch_do_signal_or_restart+0x96/0x860 [ 2579.088038][T29599] ? __se_compat_sys_socketcall+0x85a/0x1430 [ 2579.094054][T29599] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2579.100336][T29599] ? syscall_exit_to_user_mode+0xa3/0x360 [ 2579.106180][T29599] syscall_exit_to_user_mode+0xc9/0x360 [ 2579.111763][T29599] __do_fast_syscall_32+0xc4/0x120 [ 2579.116956][T29599] ? exc_page_fault+0x590/0x8c0 [ 2579.122844][T29599] do_fast_syscall_32+0x34/0x80 [ 2579.128613][T29599] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2579.135374][T29599] RIP: 0023:0xf7442579 [ 2579.139458][T29599] Code: Unable to access opcode bytes at 0xf744254f. [ 2579.146281][T29599] RSP: 002b:00000000f7594650 EFLAGS: 00000206 ORIG_RAX: 0000000000000066 [ 2579.154814][T29599] RAX: 0000000000000000 RBX: 000000000000000e RCX: 00000000f7594678 [ 2579.162810][T29599] RDX: 00000000f7430940 RSI: 00000000f742dff4 RDI: 0000000000000066 [ 2579.170867][T29599] RBP: 00000000f7594678 R08: 0000000000000000 R09: 0000000000000000 [ 2579.178950][T29599] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2579.186989][T29599] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2579.195082][T29599] [ 2579.198119][T29599] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2579.205412][T29599] CPU: 1 PID: 29599 Comm: syz-executor Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 2579.215744][T29599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 2579.225809][T29599] Call Trace: [ 2579.229100][T29599] [ 2579.232053][T29599] dump_stack_lvl+0x241/0x360 [ 2579.236758][T29599] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2579.241967][T29599] ? __pfx__printk+0x10/0x10 [ 2579.246583][T29599] ? vscnprintf+0x5d/0x90 [ 2579.250904][T29599] panic+0x349/0x860 [ 2579.254795][T29599] ? __warn+0x172/0x4e0 [ 2579.258945][T29599] ? __pfx_panic+0x10/0x10 [ 2579.263379][T29599] __warn+0x346/0x4e0 [ 2579.267359][T29599] ? ida_free+0x370/0x420 [ 2579.271685][T29599] report_bug+0x2b3/0x500 [ 2579.276005][T29599] ? ida_free+0x370/0x420 [ 2579.280329][T29599] handle_bug+0x3e/0x70 [ 2579.284479][T29599] exc_invalid_op+0x1a/0x50 [ 2579.288972][T29599] asm_exc_invalid_op+0x1a/0x20 [ 2579.293814][T29599] RIP: 0010:ida_free+0x370/0x420 [ 2579.298743][T29599] Code: 10 42 80 3c 28 00 74 05 e8 8d bd 82 f6 48 8b 7c 24 40 4c 89 fe e8 40 a5 17 00 90 48 c7 c7 60 33 ec 8c 89 de e8 51 36 df f5 90 <0f> 0b 90 90 eb 3d e8 05 08 1d f6 49 bd 00 00 00 00 00 fc ff df 4d [ 2579.318336][T29599] RSP: 0018:ffffc90004e1f680 EFLAGS: 00010246 [ 2579.324392][T29599] RAX: 99d90d21530c3600 RBX: 0000000000006365 RCX: ffff888021d90000 [ 2579.332357][T29599] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 2579.340321][T29599] RBP: ffffc90004e1f770 R08: ffffffff81585822 R09: fffffbfff1c39994 [ 2579.348285][T29599] R10: dffffc0000000000 R11: fffffbfff1c39994 R12: ffffc90004e1f6c0 [ 2579.356246][T29599] R13: dffffc0000000000 R14: ffff88806f4d40a0 R15: 0000000000000246 [ 2579.364210][T29599] ? __warn_printk+0x292/0x360 [ 2579.369006][T29599] ? __pfx_ida_free+0x10/0x10 [ 2579.373848][T29599] ? synchronize_rcu+0x11b/0x360 [ 2579.378778][T29599] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2579.384752][T29599] hci_conn_del+0x746/0xc40 [ 2579.389246][T29599] hci_conn_hash_flush+0x18e/0x240 [ 2579.394347][T29599] hci_dev_close_sync+0x911/0xf60 [ 2579.399393][T29599] hci_unregister_dev+0x1db/0x4e0 [ 2579.404436][T29599] vhci_release+0x83/0xd0 [ 2579.408771][T29599] ? __pfx_vhci_release+0x10/0x10 [ 2579.413796][T29599] __fput+0x24a/0x8a0 [ 2579.417779][T29599] task_work_run+0x24f/0x310 [ 2579.422366][T29599] ? __pfx_task_work_run+0x10/0x10 [ 2579.427470][T29599] ? do_exit+0xa22/0x27e0 [ 2579.431808][T29599] ? kmem_cache_free+0x145/0x350 [ 2579.436759][T29599] do_exit+0xa27/0x27e0 [ 2579.440919][T29599] ? __pfx_do_exit+0x10/0x10 [ 2579.445507][T29599] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2579.450880][T29599] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2579.456858][T29599] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2579.463179][T29599] ? _raw_spin_lock_irq+0xdf/0x120 [ 2579.468303][T29599] do_group_exit+0x207/0x2c0 [ 2579.472884][T29599] ? _raw_spin_unlock_irq+0x23/0x50 [ 2579.478081][T29599] ? lockdep_hardirqs_on+0x99/0x150 [ 2579.483273][T29599] get_signal+0x16a1/0x1740 [ 2579.487800][T29599] ? __pfx_get_signal+0x10/0x10 [ 2579.492663][T29599] arch_do_signal_or_restart+0x96/0x860 [ 2579.498206][T29599] ? __se_compat_sys_socketcall+0x85a/0x1430 [ 2579.504187][T29599] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2579.510366][T29599] ? syscall_exit_to_user_mode+0xa3/0x360 [ 2579.516093][T29599] syscall_exit_to_user_mode+0xc9/0x360 [ 2579.521639][T29599] __do_fast_syscall_32+0xc4/0x120 [ 2579.526760][T29599] ? exc_page_fault+0x590/0x8c0 [ 2579.531619][T29599] do_fast_syscall_32+0x34/0x80 [ 2579.536488][T29599] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2579.542813][T29599] RIP: 0023:0xf7442579 [ 2579.546873][T29599] Code: Unable to access opcode bytes at 0xf744254f. [ 2579.553524][T29599] RSP: 002b:00000000f7594650 EFLAGS: 00000206 ORIG_RAX: 0000000000000066 [ 2579.561928][T29599] RAX: 0000000000000000 RBX: 000000000000000e RCX: 00000000f7594678 [ 2579.569888][T29599] RDX: 00000000f7430940 RSI: 00000000f742dff4 RDI: 0000000000000066 [ 2579.577862][T29599] RBP: 00000000f7594678 R08: 0000000000000000 R09: 0000000000000000 [ 2579.585832][T29599] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2579.593809][T29599] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2579.601788][T29599] [ 2579.605045][T29599] Kernel Offset: disabled [ 2579.609460][T29599] Rebooting in 86400 seconds..