last executing test programs: 57.594195763s ago: executing program 4 (id=11304): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000000c0)={0x2c, r0, 0x1, 0x0, 0x0, {{0x6}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}]]}, 0x2c}}, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000600)={0x0, 0x0, 0x0}) io_uring_setup(0x253d, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x1}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x80040) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000009a65d0860040800dec30102030109021b050000000000090400000178eaf50009058402"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 54.819561641s ago: executing program 3 (id=11318): syz_open_dev$usbfs(0x0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2000000}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) open(0x0, 0x0, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@private1}, 0x14) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000000)={r3}, 0x8) 54.537369214s ago: executing program 4 (id=11319): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000090a000000000000000000000000000008000a40000000000900020073797a32"], 0x50}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2c, 0x4, 0x0, 0x2, 0xb0, 0x67, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0xe, [{@private=0xa010102}, {@multicast1}, {@remote, 0x8000}, {@dev, 0x65c}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x9c, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0xf}}, {@remote}, {@multicast2, 0x7}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @end, @rr={0x7, 0x17, 0x0, [@dev, @loopback, @multicast1, @private=0xa010102, @loopback]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) memfd_create(&(0x7f0000000040)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xa1\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1YV\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19T\xff\x01\x00\x00\xe2\xb8\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\xbe`\'\xcb\xb6\xaf\xe4h\xfc\x14\x06\xb5\x03\x8a\xc40\xbe\xe3\x93A\x15\xec\xdb\xaa\t9\x11A\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfc\x00\xe3\xde\x00\x00\xa8\xcbo\x90\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x16\xdf\xb9q\xb6^r\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3U\xe6\xa9B\n\xc9%\x82\xed#?\xab\x1c\x11\x00\xc5\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\x00\x00\x00D~\xc9=\x95\xd4\x18\x97J\x1d\xb7\x11\xcbcE\x0eAU\xe6\x19*\x98}!\xde\xf1\xd3\xf7\x84\x9c\xb4\xf1\x17\xf9-\xc6\xba\xe3\xa8oz\b\xfe\xbc\x1b\xff$\xac=\xf2V**\x8f\x84Oq\xe3\xa16\x1d{f\x91\xbbBORJ\xbcm\xfb\xb0Q\x1c\xd9\x1bg\xf5\xc9p\xc5lo\x90\xb0\xd5\x90\x86\x19\xafC\xee7\x91O)\xf1\xf0\x00\x00\x00\x00\x00\x00\x00\x05t\v\x12\x03\xf5hRQ\b\x97\xc3d-\xfb\x12\x1e\xb2\xce\x9br*M\x10\xd5g\fwx\xb8\xa9\t\xc5\xf9W\x9b\x06\xcc\xa0\x1a\x03\v\x14n7\x92{\x8bH\x9d\x95\xe31\xf4hy\xf6%\xcdC\x9cT\xec57\xbd\xd5\x81\xd9\x13\xee\xdf\xef\xf3\x17H\xd2\xe3k\xe0\xe3^y\xe3\xbb(fEt\x15\xeb/\x90\xca\xde\x189\xdfN 7}|\xa8 2\xd9;\xfa\xeayZS\x10.\x8b,\xd0\x02J\xf8>\xe9\xf0\r\xc2A\xc8q\x89\"+\xa6\xa9^E94\x01\xb5\xba]\xa8\xe9\x86\xea\xe5\xbaH\x11\x8fLLJ(\xfb\x96\x15\xbb\a\xcbj\x1b\xfdL\x88\xbf\xd7\x00\x00\x00\x00\x00t\xdd\xe7z\x87N\x9a\xd1\xe8\xe6\xe5\xa5\rz\\ljD\x19|\x84\x90\xaa\x91\x93\xc7\xdf\xd2\xe9h', 0x0) 53.811663244s ago: executing program 3 (id=11320): r0 = socket(0x1, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x77359400}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r0}, 0x20) recvmsg(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001f00)=""/169, 0xa9}], 0x1}, 0x0) sendmmsg$unix(r0, &(0x7f0000002180)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) 52.753539471s ago: executing program 3 (id=11324): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='f2fs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount(&(0x7f0000000540)=@loop={'/dev/loop', 0x0}, &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0) 52.623835899s ago: executing program 4 (id=11325): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002800)=@newtaction={0x14c8, 0x30, 0xb, 0x0, 0x0, {}, [{0x14b4, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private1}]}, {0x4}, {0xc}, {0xc}}}, @m_skbedit={0xac, 0x0, 0x0, 0x0, {{0xc}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6}, @TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x36, 0x6, "43723d08a2db3a23bf12a92f46c67533438a4fb60c662c8abbf29b11fc4010b74f9215b92da1e54eb551b5d293a35510762d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_simple={0x144, 0x0, 0x0, 0x0, {{0xb}, {0x78, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x6, 0x3, '\xff\xff'}, @TCA_DEF_PARMS={0x18}, @TCA_DEF_DATA={0xa, 0x3, 'wlan1\x00'}, @TCA_DEF_PARMS={0x18}, @TCA_DEF_PARMS={0x18}, @TCA_DEF_PARMS={0x18}]}, {0xa3, 0x6, "f362380df07521303a57be58cfa0a69a96e7952920204347fc30d96bd33b4e77167bc9f3b3bedad3004cb0f016a47157f75fcc008a0939067b9569390435b225163cdffbf2a1b11462cca4315286e206892165ce9d6f746c08030f9e77ab40a8eed7762b661d201be061428117000d80599c61040cc4fde8747e5a3e7f2b7b6108c061d4aa433d1c391c9230052110ef19a1dbbfb9a625c4376026c6f3cbfe"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x4}}}}, @m_police={0xf4, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0xc8, 0x6, "88172c26af5080d6f40c1199a45a17cd469e0e7b56d9df7e9fca2b122485f2769711e6a0b01d525755b1e54567c6cf4567ec2a25476342db5df76919f0a29ff87094e6696cd8565e534f04ca5b3bf67dca81288bbb5b27c0661587fd7ce83b404966069feeee248f1e08cd9f1d617be755430da7e30d9fae277294fb63741d6d3fd509d10bb33cf81d52f3d551d6b5d702e8c7c26a27f4dc494f8dd2caafa7cf4a363518c66f4e125e626a8f1e5d486742b31eff943229f2249e42362f1ea4deb3c838df"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_nat={0x116c, 0x2, 0x0, 0x0, {{0x8}, {0x144, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @local}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @broadcast, @multicast1}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @dev, @multicast2}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast1, @multicast1}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @private, @remote}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x14c8}}, 0x0) 52.474147577s ago: executing program 4 (id=11326): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0), 0x0) 52.38502161s ago: executing program 3 (id=11327): syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "f4cb985d33b16266b5efb88aaa87eda081bac8b2f9a49d564054f1c9218f47b3", "cf8743eb4d9e776f94a6a58d36e006ac614f6f7bce9217cbfea31675d4a860cf6003977b1e4dbb16dc31cc76522bf19d", "5043edd2a8cc8c41345f8feb1a7a8e23043b8a465b1ed5bf8bc91307", {"c7193f7edd1efc4742dc481e6f57f901", "948177bcc5dea4029ba4683a6bdcd7a1"}}}}}}}, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000040)={@local, @link_local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}}}, 0x0) 52.300295074s ago: executing program 4 (id=11328): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001500)=[{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000003640)="60c82576efc9d0a70afe7d1f701514e8ddaf2ce931aaab50d884297e2a3f44c247d6955258350f25aa7129f8ed1faf90124306079032721b34a53b5e905aedad57b2dd637d53541f7bda2490cd12ec78d7afbe09b867d7d94432b44dbb1368245b34b1a03b7bf7c9ec3fbea5984d19cdb2fc0b6af18c1676b3d07a67cf126657954501dd8f2822a377dd8409bd93a0588e55e4b87b363f162267690da18125520a7c781af27966a7fec54d00f9e06182040e84804ab24482107e5a292a6b7f129a6797938859d859d8ddba9b9c5c5baf375bd34831bd25b9660995e5f7ca0d8959fc23160d09287522000aa5670a78061870b8748f296bb43fe182754e5eb50b28e88103a93d709205931334aedee0746f3947fb2167a443b23d69b4e542c4f00ea288dfabbe879241b2617d5373470a99ebc10bb1ce8b6b0c4283c164d7b28ec1ff1e213a6bcb6524cefd85b0482383b08c4be43bc7c7948e07e555f24c4fade8177a8f13753ab388a4ffc12d3356bd1a7a9ba64bea748974cde0876afdd3155a4e353e306926f1617284579236e5294142f94258f6f7d3b85b0d99ba05842fe199895d15ad0bb994f49de1030c53007b395edd4f5bf170826243b35fdb41f1d09179beb94cf987831a16e57745f6f4199ae57c20367eacbc6b2499192ddc9a47b3d4d6fd40c0b82318fc824fbf179ac1229bac375a4656e27775c82c5975633dd6b8d770e3574ae418332cee033eab656160c112d50e14f72f7f1e5ff8caac5ccde17528290d2dfc06928dd02239f1b2ee528cbd0cd1f67547e51ffc6da7bd8b7360469b9260aacae8520214b78f6081e5c66e495764f8d5c7e404863441834cd6023bae0c6fd2930b26556b06352c5c1400ab39bfc61237b123290171f69e94b0ccf3dc5a0f1ffb9dc6cea71a8de6586156c571a3845a969cd015b17fe43cdc1ea67695ac1673addcecdbaca67e5cde9fa241c4ed874fec484259f46b31ae342dd99a584624deaf4008dc0079a9f3eddbfb6a4bcfc3ad57fe82e6f8de9d8c391a7774a542d9f58a4175e22db9866bf02c6b4f0c3c56e31f8c259e0475112117393d8d269e01441b30776fa98edc7972c257038ab46668c93e425d976d15d913fcf4e81aeb2ee6f1b1ca1c7abaa802072f1512324de2743791ec8a58ddac92eed5055f95e682f4f67fed4d2a7474bf2e44e8ef700747a08b4d5ea060c9c3b7", 0x360}], 0x1, &(0x7f00000012c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000001900)=[{{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000200)=""/153, 0x99}, {&(0x7f00000002c0)=""/153, 0x99}, {&(0x7f0000000980)=""/162, 0xa2}, {&(0x7f0000000a40)=""/234, 0xea}, {&(0x7f0000002080)=""/4096, 0x1000}], 0x5}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000004d40)="cf", 0x1}], 0x1}, 0x0) 52.270540708s ago: executing program 3 (id=11329): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x0, 0x0, &(0x7f0000000480)='syzkaller\x00'}, 0x90) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)={@val, @void, @eth={@broadcast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x32, 0x0, @loopback, @multicast1}, {0x0, 0x0, 0x8}}}}}}, 0x2e) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x4, &(0x7f00000000c0)=[{0x0, 0x4, 0x1f, 0x4}, {0x97, 0x9, 0xed, 0x7}, {0x6, 0x3f, 0x7f, 0x9}, {0x7fff, 0x4, 0xff, 0x3}]}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x100000000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000100)=[{0x0}, {&(0x7f0000001240)="7fb1d6058af12fc5b48583ba15984723f1f631b4535e9b351c3b99211387d43bd654b0fe7e7ecbbfc9b5076927677596010321a1d76f7df7117822de96f713ab71668303c3500b53b632194032bbbdd21fad3d55097a3e37059156c60bb1e7845cc66d74e3966722dff39c18c66b5632488caaae0904bd5774eff04fe4e011efd8", 0x81}], 0x2, &(0x7f0000001cc0)=[@cred={{0x1c, 0x1, 0x2, {r6, 0x0, r8}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5, r4]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, r8}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r8}}}, @rights={{0x1c, 0x1, 0x1, [r1, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}], 0x178, 0x440c0}}], 0x1, 0x8010) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$DCCPDIAG_GETSOCK(r9, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20400028}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="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"], 0x228}, 0x1, 0x0, 0x0, 0x80}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001b80)) lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0x38, 0x0) 52.064067375s ago: executing program 4 (id=11331): io_uring_setup(0x5, &(0x7f00000002c0)) r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r2, @ANYBLOB='q'], 0x1c}}, 0x0) write$nci(r1, &(0x7f0000000900)=ANY=[@ANYBLOB="40440105"], 0x4) fcntl$setlease(r0, 0x400, 0x0) r5 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) sendmsg$inet(r6, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r6, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0x3634}], 0x7}, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f0000000140)={0x0, 0x40, 0x4, {0x1, @raw_data="3d924b8271394fa4ec01eb92492ff84715d1a004d08b012a7cafe27a5f313d31bbdae5b411ca5be6bfe92437ed0d21b5180e375be56b3b9306d7dbb26bf9f22de7ac7681cca450055250217bdf1113b4258293ba4efed32147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc3314c94970349a3c1374ffec96177b67caa0656f9664277cadb8597e7d911ad1da457ef9744b0993c57a7"}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x2, @pix_mp={0x2, 0x2, 0x52424752, 0x9, 0x12, [{0x2, 0x7}, {0xef8c, 0x9}, {0x0, 0x101}, {0x85}, {0x9, 0x2}, {0x1, 0x2}, {0x7, 0xffff0001}, {0x1}], 0xf, 0x8f, 0x7, 0x2, 0x6}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{}, {}, {0x6}]}) creat(&(0x7f0000001180)='./file0\x00', 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) open$dir(0x0, 0x0, 0x0) shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000000)) syz_emit_ethernet(0x32, &(0x7f0000000400)={@broadcast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @local, @multicast1}, {0x3f00, 0x88be, 0x10, 0x0, @opaque="0300000097dcaf25"}}}}}, 0x0) sendfile(r5, r8, 0x0, 0x200) 51.823480135s ago: executing program 3 (id=11333): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) mknod(0x0, 0x0, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000006c0)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) write$rfkill(r0, &(0x7f00000004c0)={0x0, 0x0, 0x3, 0x1}, 0x8) 15.30778195s ago: executing program 0 (id=11589): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f0000000280)='syzkaller\x00', 0x4, 0xad, &(0x7f0000000300)=""/173}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r0}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x4, 0xad, &(0x7f0000000300)=""/173}, 0x80) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r1) 15.177354967s ago: executing program 0 (id=11593): r0 = openat$mixer(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f00000001c0)=""/4096) 15.131439742s ago: executing program 0 (id=11594): syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000dc0), 0x0, 0x0) ioctl$VT_RESIZE(r0, 0x5609, 0x0) 15.036419815s ago: executing program 0 (id=11595): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000015c0), 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xb) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)={0x14}, 0x14}}, 0x0) 14.958829807s ago: executing program 0 (id=11596): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) dup3(r1, r0, 0x0) ioctl$RTC_EPOCH_SET(r0, 0x4004700e, 0x0) 14.813648487s ago: executing program 0 (id=11597): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000004040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='ipvlan0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f00000001c0)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r2}, 0x38) socket$nl_route(0x10, 0x3, 0x0) 3.636284767s ago: executing program 1 (id=11694): r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$TIOCGDEV(r0, 0x5450, 0x0) 3.609063313s ago: executing program 1 (id=11695): r0 = socket(0x1d, 0x2, 0x6) pipe2(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup2(r0, r1) write$FUSE_ENTRY(r2, 0x0, 0x0) 3.556238393s ago: executing program 1 (id=11696): r0 = socket(0x29, 0x2, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 3.480472343s ago: executing program 1 (id=11697): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0x5421, &(0x7f0000000080)) 3.480260936s ago: executing program 1 (id=11698): timerfd_create(0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x5421, &(0x7f0000000000)={0x6, 'veth1_to_team\x00'}) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockname(r0, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000000140)=0x80) dup3(r0, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000002000)=[{{&(0x7f0000000200)=@ax25={{0x3, @rose}, [@null, @default, @netrom, @null, @default, @null, @bcast, @netrom]}, 0x80, &(0x7f0000000780)=[{0x0}, {0x0}, {&(0x7f0000000400)=""/147, 0x93}], 0x3, &(0x7f0000002100)=""/143, 0x8f}}, {{&(0x7f0000000880)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000900)=""/65, 0x41}, {&(0x7f0000000980)=""/58, 0x3a}, {&(0x7f00000009c0)=""/17, 0x11}, {&(0x7f0000000a00)=""/88, 0x58}], 0x4, &(0x7f0000000b80)=""/227, 0xe3}}, {{&(0x7f0000000c80)=@can, 0x80, &(0x7f0000001f00)=[{&(0x7f0000000d00)}, {&(0x7f0000000d40)=""/237, 0xed}, {&(0x7f0000000e40)=""/136, 0x88}, {0x0}], 0x4, &(0x7f0000001f40)=""/191, 0xbf}, 0x8}], 0x3, 0x10000, 0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r3 = socket(0x0, 0x3, 0x0) recvmsg$inet_nvme(r3, 0x0, 0x0) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) r4 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) semtimedop(r4, &(0x7f0000000300)=[{}], 0x1, 0x0) shmctl$SHM_STAT(r4, 0xd, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x5451, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f0000000080)=""/55) semctl$GETNCNT(0x0, 0x0, 0xe, &(0x7f0000000000)=""/112) semctl$GETALL(0xffffffffffffffff, 0x0, 0xd, 0x0) msgget$private(0x0, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect$unix(r6, 0x0, 0x0) dup3(0xffffffffffffffff, r6, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 2.564497631s ago: executing program 1 (id=11701): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) readv(r0, 0x0, 0x0) 266.196064ms ago: executing program 2 (id=11714): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/uts\x00') dup2(r0, r1) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x54}}, 0x0) 225.360729ms ago: executing program 2 (id=11715): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @multicast1}}}}) 88.451054ms ago: executing program 2 (id=11716): r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) write$FUSE_NOTIFY_INVAL_ENTRY(r1, 0x0, 0x0) 88.359923ms ago: executing program 2 (id=11717): r0 = syz_io_uring_setup(0x7b6a, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0)) io_uring_enter(r0, 0x0, 0x0, 0xe, 0x0, 0x0) 34.884444ms ago: executing program 2 (id=11718): r0 = socket$inet(0x2, 0x3, 0x100) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000000c0)=0x8, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000000800), 0x400000000000205, 0x0) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0xcb, 0x0) 0s ago: executing program 2 (id=11719): r0 = openat$rfkill(0xffffff9c, &(0x7f0000002580), 0x0, 0x0) read$rfkill(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): 6] usb 5-1: new low-speed USB device number 53 using dummy_hcd [ 3074.436540][ T4661] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 3074.602168][T28126] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 3074.627918][T28126] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 3074.648575][ T4661] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3074.668958][T28126] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 3074.696551][T28126] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 3074.710347][ T4661] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 3074.761983][ T4661] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3074.765382][T28126] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 3074.772356][ T4661] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3074.819303][T14597] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 3074.853598][T28126] usb 5-1: string descriptor 0 read error: -22 [ 3074.898700][T28126] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 3074.952791][T28126] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3074.976851][T28126] usb 5-1: config 0 descriptor?? [ 3074.992188][T28126] hub 5-1:0.0: bad descriptor, ignoring hub [ 3075.038873][T28126] hub 5-1:0.0: probe with driver hub failed with error -5 [ 3075.069986][T28126] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input70 [ 3075.140446][T14421] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 3075.204098][T14421] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 3075.276483][T28126] input: failed to attach handler mousedev to device input70, error: -5 [ 3075.298911][T14421] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 3075.361772][T28126] usb 5-1: USB disconnect, device number 53 [ 3075.383433][T14421] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 3075.532699][T14620] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10990'. [ 3075.561871][T14620] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10990'. [ 3075.935150][T14421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3076.024105][T23539] usb 3-1: USB disconnect, device number 26 [ 3076.782899][T14421] 8021q: adding VLAN 0 to HW filter on device team0 [ 3076.924867][ T4661] bridge0: port 1(bridge_slave_0) entered blocking state [ 3076.932145][ T4661] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3076.980837][ T4661] bridge0: port 2(bridge_slave_1) entered blocking state [ 3076.988146][ T4661] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3078.192773][ T29] audit: type=1326 audit(1720203919.555:4368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14633 comm="syz.2.10994" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff8fbd75bd9 code=0x0 [ 3078.241237][T14421] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3078.861345][T14421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3079.055587][T14671] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11000'. [ 3079.093352][T14421] veth0_vlan: entered promiscuous mode [ 3079.118388][T14671] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11000'. [ 3079.179045][T14421] veth1_vlan: entered promiscuous mode [ 3079.391196][T14680] syzkaller1: entered promiscuous mode [ 3079.408610][T14680] syzkaller1: entered allmulticast mode [ 3079.480281][T14421] veth0_macvtap: entered promiscuous mode [ 3079.952052][T14421] veth1_macvtap: entered promiscuous mode [ 3080.569543][T14421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3080.656130][T14421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3080.666465][T14421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3080.701102][T14421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3080.739270][T14421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3080.775588][T14421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3080.797338][T14421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3080.879332][T14421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3080.914364][T14421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3080.945785][T14421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3080.983402][T14421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3081.003608][T14421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3081.036167][T14421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3081.053054][T14421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3081.063694][T14421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3081.076432][T14421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3081.098420][T14421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3081.116280][T14421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3081.149401][T14421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3081.214030][T14421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3081.272651][T14421] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3081.484341][T14421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3081.505455][T14421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3081.553247][T14421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3081.607238][T14421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3081.639311][T14421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3081.678399][T14421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3081.705383][T14421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3081.718204][T14421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3081.729892][T14421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3081.771239][T14421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3081.783544][T14421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3081.794365][T14421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3081.805636][T14421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3081.816483][T14421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3081.830307][T14421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3081.855605][T14421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3081.874817][T14421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3081.896612][T14421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3081.916315][T14421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3081.941210][ T29] audit: type=1326 audit(1720203924.215:4369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14710 comm="syz.0.11004" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7febb3f75bd9 code=0x0 [ 3081.978002][T14421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3082.015189][T14421] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3082.039088][T14421] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3082.077653][T14421] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3082.097657][T14421] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3082.132113][T14421] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3082.408851][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 3082.434957][ T1277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3082.456194][ T1277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3083.953338][ T2839] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3083.996425][ T2839] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3084.246894][ T4661] usb 5-1: new low-speed USB device number 54 using dummy_hcd [ 3084.498398][ T4661] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 3084.522531][ T4661] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 3084.557660][ T4661] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 3085.196000][ T4661] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 3085.225743][ T4661] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 3085.533233][ T4661] usb 5-1: string descriptor 0 read error: -22 [ 3085.546253][ T4661] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 3085.560699][ T4661] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3086.103202][ T4661] usb 5-1: config 0 descriptor?? [ 3086.239600][ T4661] hub 5-1:0.0: bad descriptor, ignoring hub [ 3086.471536][ T4661] hub 5-1:0.0: probe with driver hub failed with error -5 [ 3086.838427][ T4661] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input71 [ 3086.912689][ T4661] usb 5-1: USB disconnect, device number 54 [ 3087.546092][ T4661] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 3087.771297][ T4661] usb 3-1: device descriptor read/64, error -71 [ 3088.936820][ T29] audit: type=1326 audit(1720203931.145:4370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14787 comm="syz.3.11019" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6455575bd9 code=0x0 [ 3089.808039][ T4661] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 3089.976025][ T4661] usb 3-1: device descriptor read/64, error -71 [ 3090.126439][ T4661] usb usb3-port1: attempt power cycle [ 3091.513988][T14819] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3091.679277][T10939] usb 5-1: new low-speed USB device number 55 using dummy_hcd [ 3091.809431][T14823] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 3091.815971][T14823] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 3091.897903][T10939] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 3091.906263][T14823] vhci_hcd vhci_hcd.0: Device attached [ 3091.918126][T14831] vhci_hcd: connection closed [ 3091.918444][ T51] vhci_hcd: stop threads [ 3091.941956][T10939] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 3091.964904][T10939] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 3091.984538][ T51] vhci_hcd: release socket [ 3092.021318][ T51] vhci_hcd: disconnect device [ 3092.048501][T10939] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 3092.085033][T10939] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 3092.142203][T10939] usb 5-1: string descriptor 0 read error: -22 [ 3092.164247][T10939] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 3092.184176][T10939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3092.213767][T10939] usb 5-1: config 0 descriptor?? [ 3092.233360][T10939] hub 5-1:0.0: bad descriptor, ignoring hub [ 3092.248814][T10939] hub 5-1:0.0: probe with driver hub failed with error -5 [ 3092.279056][T10939] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input72 [ 3092.328276][T10939] input: failed to attach handler mousedev to device input72, error: -5 [ 3092.369077][ T29] audit: type=1326 audit(1720203934.665:4371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14839 comm="syz.2.11030" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff8fbd75bd9 code=0x0 [ 3092.440482][T10939] usb 5-1: USB disconnect, device number 55 [ 3093.306171][ T5511] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 3093.486061][ T4661] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 3093.517757][ T5511] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3093.529033][ T5511] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 3093.556342][ T5511] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 3093.571120][ T5511] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3093.598777][ T5511] usb 2-1: config 0 descriptor?? [ 3093.656074][ T4661] usb 5-1: device descriptor read/64, error -71 [ 3093.926411][ T4661] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 3093.938752][ T5202] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 3094.076259][ T4661] usb 5-1: device descriptor read/64, error -71 [ 3094.136067][ T5202] usb 4-1: Using ep0 maxpacket: 16 [ 3094.164849][ T5202] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 3094.195944][ T5202] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3094.204034][ T5202] usb 4-1: Product: syz [ 3094.206328][ T4661] usb usb5-port1: attempt power cycle [ 3094.209416][ T5202] usb 4-1: Manufacturer: syz [ 3094.222101][ T5202] usb 4-1: SerialNumber: syz [ 3094.236676][ T5202] usb 4-1: config 0 descriptor?? [ 3094.626280][ T4661] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 3094.670395][ T4661] usb 5-1: device descriptor read/8, error -71 [ 3094.691568][T32275] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 3094.704187][T32275] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 3094.715686][T32275] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 3094.726866][T32275] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 3094.736880][T32275] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 3094.744594][T32275] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 3095.036163][ T4661] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 3095.096173][ T4661] usb 5-1: device descriptor read/8, error -71 [ 3095.240984][ T4661] usb usb5-port1: unable to enumerate USB device [ 3095.508524][ T1277] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3095.630979][ T1277] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3095.719160][ T1277] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3095.747862][T14864] chnl_net:caif_netlink_parms(): no params data found [ 3095.884894][ T1277] bond0: (slave netdevsim0): Releasing backup interface [ 3095.900106][ T1277] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode [ 3095.919337][ T1277] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3095.974073][T10939] usb 2-1: USB disconnect, device number 35 [ 3095.996946][T14864] bridge0: port 1(bridge_slave_0) entered blocking state [ 3096.018663][T14864] bridge0: port 1(bridge_slave_0) entered disabled state [ 3096.027140][T14864] bridge_slave_0: entered allmulticast mode [ 3096.035329][T14864] bridge_slave_0: entered promiscuous mode [ 3096.071531][T14864] bridge0: port 2(bridge_slave_1) entered blocking state [ 3096.081154][T14864] bridge0: port 2(bridge_slave_1) entered disabled state [ 3096.089351][T14864] bridge_slave_1: entered allmulticast mode [ 3096.099044][T14864] bridge_slave_1: entered promiscuous mode [ 3096.198779][T14864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3096.219846][T14864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3096.329383][T14864] team0: Port device team_slave_0 added [ 3096.349785][T14864] team0: Port device team_slave_1 added [ 3096.612666][T14864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3096.643059][T14864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3096.671591][T14864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3096.730213][T14864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3096.738485][T14864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3096.778145][T14864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3096.801469][ T1277] bridge_slave_1: left allmulticast mode [ 3096.806566][T32275] Bluetooth: hci5: command tx timeout [ 3096.807759][ T1277] bridge_slave_1: left promiscuous mode [ 3096.823779][ T1277] bridge0: port 2(bridge_slave_1) entered disabled state [ 3096.834573][ T1277] bridge_slave_0: left allmulticast mode [ 3096.840716][ T1277] bridge_slave_0: left promiscuous mode [ 3096.848106][ T1277] bridge0: port 1(bridge_slave_0) entered disabled state [ 3096.989496][ T6228] usb 4-1: USB disconnect, device number 43 [ 3097.284216][T14893] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 3097.290800][T14893] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 3097.319938][T14893] vhci_hcd vhci_hcd.0: Device attached [ 3097.448577][T14896] vhci_hcd: connection closed [ 3097.450418][T31891] vhci_hcd: stop threads [ 3097.485677][T31891] vhci_hcd: release socket [ 3097.491814][T31891] vhci_hcd: disconnect device [ 3097.596080][ T25] usb 5-1: new low-speed USB device number 60 using dummy_hcd [ 3097.804998][ T25] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 3097.813769][ T25] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 3097.835249][ T25] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 3097.864245][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 3097.906819][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 3097.922781][ T25] usb 5-1: string descriptor 0 read error: -22 [ 3097.976439][ T25] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 3097.996423][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3098.087878][ T25] usb 5-1: config 0 descriptor?? [ 3098.096974][ T25] hub 5-1:0.0: bad descriptor, ignoring hub [ 3098.124270][ T25] hub 5-1:0.0: probe with driver hub failed with error -5 [ 3098.198019][ T25] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input73 [ 3098.268084][ T25] input: failed to attach handler mousedev to device input73, error: -5 [ 3098.330605][ T25] usb 5-1: USB disconnect, device number 60 [ 3098.536394][T12566] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 3098.780191][T12566] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3098.791510][T12566] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3098.810908][T12566] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3098.823149][T12566] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3098.839602][T12566] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3098.856342][ T1277] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3098.875318][T12566] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3098.886370][T32275] Bluetooth: hci5: command tx timeout [ 3098.893294][ T1277] bond_slave_0: left promiscuous mode [ 3098.915243][T12566] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3098.935759][T12566] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3098.993820][T12566] usb 4-1: Product: syz [ 3099.006838][T12566] usb 4-1: Manufacturer: syz [ 3099.020897][ T1277] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3099.040174][T12566] usb 4-1: SerialNumber: syz [ 3099.051147][ T1277] bond_slave_1: left promiscuous mode [ 3099.092757][ T1277] bond0 (unregistering): Released all slaves [ 3099.122714][ T1277] bond1 (unregistering): (slave lo): Releasing backup interface [ 3099.150729][ T1277] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 3099.182834][ T1277] bond1 (unregistering): Released all slaves [ 3099.497270][T14864] hsr_slave_0: entered promiscuous mode [ 3099.527662][T14918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3099.541486][T14864] hsr_slave_1: entered promiscuous mode [ 3099.545536][T14918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3099.577501][T14864] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3099.590775][T14864] Cannot create hsr debugfs directory [ 3099.696222][ T6228] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 3099.896436][ T6228] usb 2-1: Using ep0 maxpacket: 16 [ 3099.939858][ T6228] usb 2-1: config 0 has an invalid descriptor of length 160, skipping remainder of the config [ 3099.981273][ T6228] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3100.018101][ T1277] hsr_slave_0: left promiscuous mode [ 3100.037939][ T6228] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 3100.049150][ T1277] hsr_slave_1: left promiscuous mode [ 3100.070855][ T1277] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3100.074350][ T6228] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3100.109867][ T1277] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3100.127386][ T6228] usb 2-1: config 0 descriptor?? [ 3100.143717][ T6228] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 3100.165001][ T1277] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3100.203798][ T1277] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3100.305500][ T1277] veth1_macvtap: left promiscuous mode [ 3100.324151][ T1277] veth0_macvtap: left promiscuous mode [ 3100.354551][ T1277] veth1_vlan: left promiscuous mode [ 3100.366629][ T1277] veth0_vlan: left promiscuous mode [ 3100.709189][T14939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3100.742189][T14939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3100.779565][ T29] audit: type=1326 audit(1720203943.075:4372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14926 comm="syz.4.11054" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff2e4d75bd9 code=0x0 [ 3100.966394][T32275] Bluetooth: hci5: command tx timeout [ 3101.225572][T12566] cdc_ncm 4-1:1.0: bind() failure [ 3101.257679][T12566] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 3101.292887][T12566] cdc_ncm 4-1:1.1: bind() failure [ 3101.360160][T12566] usb 4-1: USB disconnect, device number 44 [ 3101.460027][T14946] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3101.796211][T12566] usb 4-1: new low-speed USB device number 45 using dummy_hcd [ 3101.987802][T12566] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 3102.006056][T12566] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 3102.021151][T12566] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 3102.045024][T12566] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 3102.068290][T12566] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 3102.092228][T12566] usb 4-1: string descriptor 0 read error: -22 [ 3102.106311][T12566] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 3102.125602][T12566] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3102.170776][T12566] usb 4-1: config 0 descriptor?? [ 3102.185542][T12566] hub 4-1:0.0: bad descriptor, ignoring hub [ 3102.194008][T12566] hub 4-1:0.0: probe with driver hub failed with error -5 [ 3102.216210][T12566] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input74 [ 3102.253902][T12566] input: failed to attach handler mousedev to device input74, error: -5 [ 3102.415045][T23404] usb 2-1: USB disconnect, device number 36 [ 3102.450705][T12566] usb 4-1: USB disconnect, device number 45 [ 3102.721396][ T1277] team0 (unregistering): Port device team_slave_1 removed [ 3102.946836][ T1277] team0 (unregistering): Port device team_slave_0 removed [ 3103.047091][T32275] Bluetooth: hci5: command tx timeout [ 3103.166595][T14962] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 3103.173186][T14962] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 3103.219760][T14963] vhci_hcd: connection closed [ 3103.291945][T14962] vhci_hcd vhci_hcd.0: Device attached [ 3103.322539][ T51] vhci_hcd: stop threads [ 3103.329183][ T51] vhci_hcd: release socket [ 3103.333727][ T51] vhci_hcd: disconnect device [ 3104.934629][ T29] audit: type=1326 audit(1720203947.225:4373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14976 comm="syz.1.11065" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f48a7575bd9 code=0x0 [ 3105.807002][T10939] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 3106.006483][T10939] usb 4-1: Using ep0 maxpacket: 16 [ 3106.032919][T10939] usb 4-1: config 0 has an invalid descriptor of length 160, skipping remainder of the config [ 3106.080807][T10939] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3106.128772][T10939] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 3106.175969][T10939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3106.199742][T10939] usb 4-1: config 0 descriptor?? [ 3106.232144][T10939] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 3106.328574][ T1277] IPVS: stop unused estimator thread 0... [ 3106.703438][T14864] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 3106.782880][T14864] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 3106.792728][T15007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3106.816740][T15007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3106.863462][T14864] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 3106.926962][T14864] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 3107.139449][T14864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3107.208925][T14864] 8021q: adding VLAN 0 to HW filter on device team0 [ 3107.250247][T10939] bridge0: port 1(bridge_slave_0) entered blocking state [ 3107.257481][T10939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3107.299054][T10939] bridge0: port 2(bridge_slave_1) entered blocking state [ 3107.306308][T10939] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3107.913139][T14864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3108.071550][T14864] veth0_vlan: entered promiscuous mode [ 3108.119314][T14864] veth1_vlan: entered promiscuous mode [ 3108.236219][T14864] veth0_macvtap: entered promiscuous mode [ 3108.259010][T14864] veth1_macvtap: entered promiscuous mode [ 3108.318677][T14864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3108.347367][T14864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3108.378013][T14864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3108.419094][T14864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3108.454941][T14864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3108.476753][T14864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3108.506791][T14864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3108.536053][T14864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3108.552158][T23404] usb 4-1: USB disconnect, device number 46 [ 3108.556562][T14864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3108.586318][T14864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3108.621319][T14864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3108.648053][T14864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3108.670474][T14864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3108.681407][T14864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3108.803771][T14864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3108.846752][T14864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3108.894282][T14864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3108.969532][T14864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3108.986050][T14864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3109.011083][T14864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3109.038437][T14864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3109.051234][T14864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3109.062545][T14864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3109.083448][T14864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3109.106019][T14864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3109.131096][T14864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3109.154582][T14864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3109.183986][T14864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3109.220225][T14864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3109.239565][T14864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3109.256468][T14864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3109.274554][T14864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3109.299092][T14864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3109.330277][T15053] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 3109.336847][T15053] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 3109.349260][T14864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3109.364269][T14864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3109.384497][T14864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3109.398730][T15054] vhci_hcd: connection closed [ 3109.398990][T15053] vhci_hcd vhci_hcd.0: Device attached [ 3109.410071][T14864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3109.423062][ T35] vhci_hcd: stop threads [ 3109.431277][ T35] vhci_hcd: release socket [ 3109.438418][T14864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3109.450444][ T35] vhci_hcd: disconnect device [ 3109.455340][T14864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3109.479623][T14864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3109.510957][T14864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3109.539068][T14864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3109.571971][T15040] netlink: 2 bytes leftover after parsing attributes in process `syz.3.11073'. [ 3109.678513][T14864] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3109.717922][T14864] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3109.739353][T14864] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3109.758285][T14864] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3111.111464][ T29] audit: type=1326 audit(1720203953.405:4374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15072 comm="syz.3.11076" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6455575bd9 code=0x0 [ 3111.132451][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3111.181620][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3111.318773][T15092] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3111.337440][ T2839] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3111.348702][ T2839] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3111.848006][ T4661] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 3112.066931][ T4661] usb 3-1: Using ep0 maxpacket: 16 [ 3112.074354][ T4661] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 3112.104325][ T4661] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 3112.134080][ T4661] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3112.187717][ T4661] usb 3-1: config 0 descriptor?? [ 3112.216043][T10939] usb 4-1: new low-speed USB device number 47 using dummy_hcd [ 3112.375662][T15114] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11082'. [ 3112.446648][T10939] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 3112.454991][T10939] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 3112.459520][T15114] vlan2: entered promiscuous mode [ 3112.496459][T15114] team_slave_1: entered promiscuous mode [ 3112.526079][T10939] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 3112.526137][T10939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 3112.526160][T10939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 3112.548059][T10939] usb 4-1: string descriptor 0 read error: -22 [ 3112.548232][T10939] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 3112.548258][T10939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3112.560424][T15114] team_slave_1: left promiscuous mode [ 3112.565253][T10939] usb 4-1: config 0 descriptor?? [ 3112.568482][T10939] hub 4-1:0.0: bad descriptor, ignoring hub [ 3112.568518][T10939] hub 4-1:0.0: probe with driver hub failed with error -5 [ 3112.572003][T10939] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input75 [ 3112.660517][T10939] input: failed to attach handler mousedev to device input75, error: -5 [ 3112.736620][T13658] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 3112.742232][T13658] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 3112.744275][T13658] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 3112.787532][T13658] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 3112.790778][T13658] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 3112.796676][T13658] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 3112.831062][ T5202] usb 4-1: USB disconnect, device number 47 [ 3112.955590][T15120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3112.989096][T15120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3113.025578][ T4661] hid (null): unknown global tag 0x83 [ 3113.025632][ T4661] hid (null): unknown global tag 0xc [ 3113.038112][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x1 [ 3113.038156][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.038187][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.038216][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.038244][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.038271][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.038298][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.038326][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.038350][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.038378][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.038403][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.038427][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.038454][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.038481][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.038509][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.038538][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.038567][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.038596][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.038625][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.038654][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.038682][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.038711][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.038740][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.038768][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.038797][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.038832][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.038861][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.038890][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.038919][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.038947][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.038976][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.039005][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.039034][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.039062][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.039089][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.039116][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.039144][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.039172][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.039200][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.039229][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.039258][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.039286][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.039315][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.039344][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.039372][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.039401][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.039430][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.039459][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.039488][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.039517][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.039545][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.039574][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.039603][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x2 [ 3113.039632][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.039661][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.039690][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.039719][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x6 [ 3113.039748][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x6 [ 3113.039778][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x7 [ 3113.039807][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.039841][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.039869][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.039898][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.039928][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.039957][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.039986][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.040015][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.040044][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.040072][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.040101][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.040130][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.040159][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.040188][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.040217][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.040246][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.040275][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.040304][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.040332][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.040362][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.040390][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.040419][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.040448][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.040477][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.040505][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.040535][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.040563][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.040592][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.040621][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.040650][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.040679][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.040708][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.040737][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.040766][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.040795][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.040829][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.040857][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.040886][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.040916][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.040944][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.040974][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.041002][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.041031][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.041060][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.041089][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.041118][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.041147][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.041176][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.041204][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.041233][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.041262][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.041291][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.047765][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.047805][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.047842][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.047870][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.047898][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.047925][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.047953][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.047981][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.048009][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.048036][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.048060][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.048086][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.048114][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.048140][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.048166][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.048191][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.048216][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.048241][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.048268][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.048294][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.048322][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.048350][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.048379][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.048406][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.048435][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.048463][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.048491][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.048519][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.048545][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.048574][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.048602][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.048630][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.048658][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.048685][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.048713][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.048738][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.048765][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.048792][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.048827][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.048855][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.048884][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.048912][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.048940][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.048966][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.048994][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.049023][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.049051][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.049077][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.049103][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.049130][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.049158][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.049186][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x2 [ 3113.049214][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.049242][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.049270][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.049298][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.049325][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.049352][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.049379][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.049407][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.049432][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.049459][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.049486][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.049515][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.049543][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.049570][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.049598][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.049627][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.049656][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.049684][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.049712][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.049739][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.049766][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.049793][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.049825][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.049853][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.049882][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.049910][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.049938][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.049967][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.049994][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.050021][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.050048][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.050075][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.050103][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.050131][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.050159][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.050186][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.050214][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.050241][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.050269][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.050297][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.050325][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.050353][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.050381][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.050409][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.050438][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.050465][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.050494][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.050521][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.050550][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.050577][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.050604][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.050630][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.050658][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.050686][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.050713][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.050742][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.050768][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.050796][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.050828][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.050855][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.050883][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.050912][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.050940][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.050967][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.050995][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.051023][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.051050][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.051078][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.051105][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.051133][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.051160][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.051187][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.051213][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.051240][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.051268][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.051297][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.051325][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.051354][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.051382][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.051410][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.051442][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.057862][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.057899][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.057927][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.057957][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.057986][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.058014][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.058043][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.058070][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.058098][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.058128][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.058156][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.058185][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.058213][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.058241][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.058267][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.058292][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.058315][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.058338][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.058363][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.058386][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.058411][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.059234][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.059266][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.059294][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.059323][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.059352][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.059380][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.059408][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.059436][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.059462][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.059490][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.059518][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.059547][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.059575][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.059604][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.059632][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.059660][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.059689][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.059717][ T4661] hid-generic 0003:0158:0100.006B: unknown main item tag 0x0 [ 3113.059747][ T4661] hid-generic 0003:0158:0100.006B: unexpected long global item [ 3113.060483][ T4661] hid-generic 0003:0158:0100.006B: probe with driver hid-generic failed with error -22 [ 3114.455631][ T1277] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3114.647049][ T5202] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 3114.733763][ T1277] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3115.076816][ T5202] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 189, changing to 11 [ 3115.077739][ T5202] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58801, setting to 1024 [ 3115.077801][ T5202] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3115.079194][ T5202] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3115.079423][ T5202] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3115.172959][T13658] Bluetooth: hci10: command tx timeout [ 3115.388617][ T5202] usb 4-1: config 0 descriptor?? [ 3115.389330][T15137] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 3115.491214][ T1277] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3115.648515][ T1277] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3115.928691][ T5202] plantronics 0003:047F:FFFF.006C: unknown main item tag 0x3 [ 3117.236228][T13658] Bluetooth: hci10: command tx timeout [ 3117.249743][ T5202] plantronics 0003:047F:FFFF.006C: unknown main item tag 0x7 [ 3117.808154][ T5202] plantronics 0003:047F:FFFF.006C: No inputs registered, leaving [ 3117.815312][ T5202] plantronics 0003:047F:FFFF.006C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 3117.829099][ T5202] usb 4-1: USB disconnect, device number 48 [ 3118.061960][T15119] chnl_net:caif_netlink_parms(): no params data found [ 3118.579231][T15119] bridge0: port 1(bridge_slave_0) entered blocking state [ 3118.579438][T15119] bridge0: port 1(bridge_slave_0) entered disabled state [ 3118.586569][T15119] bridge_slave_0: entered allmulticast mode [ 3118.588008][T15119] bridge_slave_0: entered promiscuous mode [ 3118.616737][T15119] bridge0: port 2(bridge_slave_1) entered blocking state [ 3118.616874][T15119] bridge0: port 2(bridge_slave_1) entered disabled state [ 3118.617139][T15119] bridge_slave_1: entered allmulticast mode [ 3118.618774][T15119] bridge_slave_1: entered promiscuous mode [ 3119.196140][T23539] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 3119.336179][T13658] Bluetooth: hci10: command tx timeout [ 3119.406297][ T1277] bridge_slave_0: left allmulticast mode [ 3119.406328][ T1277] bridge_slave_0: left promiscuous mode [ 3119.406537][ T1277] bridge0: port 1(bridge_slave_0) entered disabled state [ 3119.436040][T23539] usb 4-1: Using ep0 maxpacket: 16 [ 3119.438310][T23539] usb 4-1: config 0 has an invalid interface number: 215 but max is 0 [ 3119.438342][T23539] usb 4-1: config 0 has no interface number 0 [ 3119.438385][T23539] usb 4-1: config 0 interface 215 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 3119.439291][ T1277] bridge_slave_1: left allmulticast mode [ 3119.439316][ T1277] bridge_slave_1: left promiscuous mode [ 3119.439546][ T1277] bridge1: port 1(bridge_slave_1) entered disabled state [ 3119.441370][T23539] usb 4-1: New USB device found, idVendor=04ca, idProduct=3008, bcdDevice=e6.00 [ 3119.441402][T23539] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3119.441425][T23539] usb 4-1: Product: syz [ 3119.441441][T23539] usb 4-1: Manufacturer: syz [ 3119.441458][T23539] usb 4-1: SerialNumber: syz [ 3119.444792][T23539] usb 4-1: config 0 descriptor?? [ 3119.573275][T15166] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3119.994791][T10939] usb 3-1: USB disconnect, device number 30 [ 3121.406072][T13658] Bluetooth: hci10: command tx timeout [ 3121.474402][ T5202] usb 4-1: USB disconnect, device number 49 [ 3121.741069][ T1277] bond0 (unregistering): left promiscuous mode [ 3121.758065][ T1277] bond_slave_0: left promiscuous mode [ 3121.763914][ T1277] bond_slave_1: left promiscuous mode [ 3121.823994][ T1277] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3121.866854][ T1277] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3121.925058][ T1277] bond0 (unregistering): Released all slaves [ 3122.223339][T15119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3122.282841][ T1277] tipc: Disabling bearer [ 3122.368411][ T1277] tipc: Left network mode [ 3123.008901][T15119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3123.348143][T15119] team0: Port device team_slave_0 added [ 3123.839427][T15119] team0: Port device team_slave_1 added [ 3124.492625][ T1277] team0: left promiscuous mode [ 3124.497597][ T1277] team_slave_0: left promiscuous mode [ 3124.549860][ T1277] team_slave_1: left promiscuous mode [ 3124.735387][ T1277] hsr_slave_0: left promiscuous mode [ 3124.816171][ T1277] hsr_slave_1: left promiscuous mode [ 3124.871827][ T1277] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3124.896098][ T1277] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3125.056287][ T1277] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3125.088545][ T1277] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3125.824831][ T1277] veth0_macvtap: left promiscuous mode [ 3125.940624][ T1277] veth1_vlan: left promiscuous mode [ 3125.967767][ T1277] veth0_vlan: left promiscuous mode [ 3127.311261][T15255] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11109'. [ 3127.321726][T15255] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11109'. [ 3127.802096][ T1277] team0 (unregistering): Port device team_slave_1 removed [ 3127.892437][ T1277] team0 (unregistering): Port device team_slave_0 removed [ 3130.262068][T32275] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 3130.302464][T32275] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 3130.325110][T32275] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 3130.337691][T32275] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 3130.347537][T32275] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 3130.362750][T32275] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 3130.736907][T15119] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3130.743914][T15119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3130.769878][ C1] vkms_vblank_simulate: vblank timer overrun [ 3130.804015][T15119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3130.828162][T15119] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3130.836206][T15119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3130.986298][T15119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3131.209471][T15286] VFS: unable to find oldfs superblock on device nullb0 [ 3132.141070][T15119] hsr_slave_0: entered promiscuous mode [ 3132.157534][T15119] hsr_slave_1: entered promiscuous mode [ 3132.188550][T15119] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3132.200875][T15119] Cannot create hsr debugfs directory [ 3132.406475][T13658] Bluetooth: hci11: command tx timeout [ 3133.204315][T15272] chnl_net:caif_netlink_parms(): no params data found [ 3133.426179][T12566] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 3133.634760][T15322] Process accounting resumed [ 3133.643423][T12566] usb 3-1: Using ep0 maxpacket: 32 [ 3133.670083][T12566] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 3133.689156][T12566] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3133.711953][T12566] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 3133.730222][T12566] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3133.840892][T12566] usb 3-1: config 0 descriptor?? [ 3134.083877][T12566] hub 3-1:0.0: bad descriptor, ignoring hub [ 3134.207250][T12566] hub 3-1:0.0: probe with driver hub failed with error -5 [ 3134.309261][T12566] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 3134.427562][ T1277] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3134.486138][T32275] Bluetooth: hci11: command tx timeout [ 3134.628103][T15358] netlink: 68 bytes leftover after parsing attributes in process `syz.1.11128'. [ 3134.658188][T15358] netlink: 68 bytes leftover after parsing attributes in process `syz.1.11128'. [ 3134.883209][ T1277] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3134.970278][T32275] Bluetooth: hci1: command 0x0406 tx timeout [ 3134.979008][T15272] bridge0: port 1(bridge_slave_0) entered blocking state [ 3134.986441][T15272] bridge0: port 1(bridge_slave_0) entered disabled state [ 3134.997662][T15272] bridge_slave_0: entered allmulticast mode [ 3135.005492][T15272] bridge_slave_0: entered promiscuous mode [ 3135.056343][T15272] bridge0: port 2(bridge_slave_1) entered blocking state [ 3135.063460][T15272] bridge0: port 2(bridge_slave_1) entered disabled state [ 3135.086520][T15272] bridge_slave_1: entered allmulticast mode [ 3135.094119][T15272] bridge_slave_1: entered promiscuous mode [ 3135.198280][ T1277] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3135.389438][ T1277] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3135.604146][T15272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3135.643785][T15272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3135.735070][T15119] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 3135.763736][T15119] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 3135.801214][T15272] team0: Port device team_slave_0 added [ 3135.827494][T15272] team0: Port device team_slave_1 added [ 3135.846266][T12566] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 3135.885155][T15119] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 3135.920147][T15119] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 3136.056299][T12566] usb 2-1: Using ep0 maxpacket: 16 [ 3136.091786][T12566] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 3136.098032][T15272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3136.124411][T12566] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3136.132789][T15272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3136.147218][T12566] usb 2-1: Product: syz [ 3136.210092][T12566] usb 2-1: Manufacturer: syz [ 3136.229294][T12566] usb 2-1: SerialNumber: syz [ 3136.266119][T15272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3136.266546][T12566] usb 2-1: config 0 descriptor?? [ 3136.309113][T15272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3136.350766][T15272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3136.353049][ T25] usb 3-1: USB disconnect, device number 31 [ 3136.452143][T15272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3136.568346][T13658] Bluetooth: hci11: command tx timeout [ 3137.330829][T15272] hsr_slave_0: entered promiscuous mode [ 3137.364249][T15272] hsr_slave_1: entered promiscuous mode [ 3137.410804][T15272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3137.434382][T15272] Cannot create hsr debugfs directory [ 3137.495283][ T1277] bridge_slave_1: left allmulticast mode [ 3137.516449][ T1277] bridge_slave_1: left promiscuous mode [ 3137.538147][ T1277] bridge0: port 2(bridge_slave_1) entered disabled state [ 3137.596512][ T1277] bridge_slave_0: left allmulticast mode [ 3137.602653][ T1277] bridge_slave_0: left promiscuous mode [ 3137.623750][ T1277] bridge0: port 1(bridge_slave_0) entered disabled state [ 3138.667972][T13658] Bluetooth: hci11: command tx timeout [ 3139.321540][ T1277] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3139.356282][ T1277] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3139.442430][ T1277] bond0 (unregistering): Released all slaves [ 3140.413067][ T1277] hsr_slave_0: left promiscuous mode [ 3140.452950][ T1277] hsr_slave_1: left promiscuous mode [ 3140.468095][ T1277] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3140.496265][ T1277] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3140.521673][ T1277] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3140.553788][ T1277] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3140.670490][ T1277] veth0_macvtap: left promiscuous mode [ 3140.686644][ T1277] veth1_vlan: left promiscuous mode [ 3140.692044][ T1277] veth0_vlan: left promiscuous mode [ 3140.888862][ T25] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 3141.093859][ T5202] usb 2-1: USB disconnect, device number 37 [ 3141.116232][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 3141.126373][ T25] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 3141.135807][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3141.206133][ T25] usb 4-1: Product: syz [ 3141.210376][ T25] usb 4-1: Manufacturer: syz [ 3141.215011][ T25] usb 4-1: SerialNumber: syz [ 3141.246919][ T25] usb 4-1: config 0 descriptor?? [ 3142.162690][ T5171] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 3142.357307][ T5171] usb 2-1: Using ep0 maxpacket: 32 [ 3142.370151][ T5171] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 3142.396651][ T5171] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3142.446993][ T5171] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 3142.466090][ T5171] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3142.509526][ T5171] usb 2-1: config 0 descriptor?? [ 3142.529187][ T5171] hub 2-1:0.0: bad descriptor, ignoring hub [ 3142.555852][ T5171] hub 2-1:0.0: probe with driver hub failed with error -5 [ 3142.564845][ T5171] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 3142.985736][T15482] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 3143.284907][ T1277] team0 (unregistering): Port device team_slave_1 removed [ 3143.427589][ T1277] team0 (unregistering): Port device team_slave_0 removed [ 3143.866529][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 3145.008034][ T784] usb 2-1: USB disconnect, device number 38 [ 3145.310867][ T25] usb 4-1: USB disconnect, device number 50 [ 3145.431415][T15119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3145.491788][T15119] 8021q: adding VLAN 0 to HW filter on device team0 [ 3146.092603][ T784] bridge0: port 1(bridge_slave_0) entered blocking state [ 3146.099837][ T784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3146.542491][ T4661] bridge0: port 2(bridge_slave_1) entered blocking state [ 3146.549771][ T4661] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3146.582206][T15518] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 3146.588778][T15518] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 3146.607321][T15518] vhci_hcd vhci_hcd.0: Device attached [ 3146.734208][T15525] vhci_hcd: connection closed [ 3146.766340][ T35] vhci_hcd: stop threads [ 3146.810548][ T35] vhci_hcd: release socket [ 3146.826122][ T35] vhci_hcd: disconnect device [ 3147.185010][T15272] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 3147.320921][T15272] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 3147.369375][T15272] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 3147.411797][T15272] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 3147.456679][T15119] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3148.113494][T15555] batadv0: mtu less than device minimum [ 3148.664692][T15272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3148.792367][T15272] 8021q: adding VLAN 0 to HW filter on device team0 [ 3148.860691][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 3148.867939][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3148.939423][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 3148.946593][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3149.024578][T15588] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 3149.031142][T15588] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 3149.056716][T15588] vhci_hcd vhci_hcd.0: Device attached [ 3149.179808][T15590] vhci_hcd: connection closed [ 3149.188265][ T5510] vhci_hcd: stop threads [ 3149.207124][ T5510] vhci_hcd: release socket [ 3149.211714][ T5510] vhci_hcd: disconnect device [ 3149.233382][T15119] veth0_vlan: entered promiscuous mode [ 3149.279275][T15119] veth1_vlan: entered promiscuous mode [ 3149.513597][T15119] veth0_macvtap: entered promiscuous mode [ 3149.553230][T15119] veth1_macvtap: entered promiscuous mode [ 3149.615167][T15119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3149.666119][T15119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3149.686416][T15119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3149.716233][T15119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3149.746204][T15119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3149.763618][T15119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3149.774448][T15119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3149.789472][T15119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3149.812823][T15119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3149.826718][T15119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3149.837405][T15119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3149.848899][T15119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3149.864631][T15119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3149.875787][T15119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3149.886225][T15119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3149.896944][T15119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3149.907114][T15119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3149.917811][T15119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3149.933275][T15119] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3149.981237][T15119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3150.006807][T15119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3150.022728][T15119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3150.034926][T15119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3150.047487][T15119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3150.060007][T15119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3150.076040][T15119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3150.087194][T15119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3150.105963][T15119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3150.134055][T15119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3150.144275][T15119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3150.154843][T15119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3150.165489][T15119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3150.183207][T15119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3150.193481][T15119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3150.204110][T15119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3150.214866][T15119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3150.226402][T15119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3150.249027][T15119] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3150.294693][T15272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3150.306339][ T25] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 3150.330516][T15119] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3150.358037][T15119] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3150.386165][T15119] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3150.394925][T15119] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3150.510643][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 255, changing to 11 [ 3150.541627][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 3150.573620][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3150.607149][T15640] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 3150.613722][T15640] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 3150.627007][T15640] vhci_hcd vhci_hcd.0: Device attached [ 3150.645084][ T25] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3150.658418][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3150.704368][T15272] veth0_vlan: entered promiscuous mode [ 3150.714331][ T25] usb 4-1: config 0 descriptor?? [ 3150.741766][T15625] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 3150.781144][T15641] vhci_hcd: connection closed [ 3150.781437][ T2895] vhci_hcd: stop threads [ 3150.812187][ T2895] vhci_hcd: release socket [ 3150.815950][T15272] veth1_vlan: entered promiscuous mode [ 3150.837384][ T2895] vhci_hcd: disconnect device [ 3150.844500][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3150.862901][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3150.930993][ T2895] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3150.940316][ T2895] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3150.948389][T15272] veth0_macvtap: entered promiscuous mode [ 3150.980605][T15272] veth1_macvtap: entered promiscuous mode [ 3151.161937][T15272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3151.172861][T15272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3151.196909][T15272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3151.215915][T15272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3151.229852][T15272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3151.240766][T15272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3151.251103][T15272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3151.262041][T15272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3151.272918][T15272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3151.299964][T15272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3151.310477][T15272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3151.322479][T15272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3151.333417][T15272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3151.335722][ T25] plantronics 0003:047F:FFFF.006D: unknown main item tag 0xd [ 3151.347288][T15272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3151.362405][T15272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3151.374172][T15272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3151.384673][T15272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3151.397230][ T25] plantronics 0003:047F:FFFF.006D: No inputs registered, leaving [ 3151.404054][T15272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3151.547613][T15272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3151.560467][T15272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3151.573725][ T25] plantronics 0003:047F:FFFF.006D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 3151.575801][T15272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3151.590532][ T25] usb 4-1: USB disconnect, device number 51 [ 3152.389531][T15272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3152.400198][T15272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3152.415027][T15272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3152.449112][T15272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3152.481713][T15272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3152.498037][T15272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3152.509130][T15272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3152.522293][T15272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3152.536339][T15272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3152.554866][T15272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3152.602421][T15272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3152.621724][T15272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3152.646105][T15272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3152.678169][T15272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3152.706082][T15272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3152.741793][T15272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3152.762355][T15272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3152.782664][T15272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3152.800772][T15272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3152.818180][T15272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3152.847971][T15272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3152.882434][T15272] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3152.897958][T15272] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3152.918270][T15272] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3152.979454][T15272] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3153.528286][ T25] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 3153.619188][ T5510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3153.962062][ T5510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3154.080421][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3154.111629][T15681] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 3154.113368][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3154.118177][T15681] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 3154.146945][T15681] vhci_hcd vhci_hcd.0: Device attached [ 3154.161924][T15690] vhci_hcd: connection closed [ 3154.167497][ T1277] vhci_hcd: stop threads [ 3154.180616][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 3154.184794][ T1277] vhci_hcd: release socket [ 3154.208667][ T25] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 3154.216606][ T1277] vhci_hcd: disconnect device [ 3154.240480][ T25] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 3154.272340][ T25] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 3154.299812][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 3154.309961][T23539] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 3154.328483][ T25] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 0 [ 3154.357503][ T25] usb 2-1: string descriptor 0 read error: -22 [ 3154.374249][ T25] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 3154.397140][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3154.428987][ T25] usb 2-1: config 0 descriptor?? [ 3154.438785][ T25] hub 2-1:0.0: bad descriptor, ignoring hub [ 3154.466506][ T25] hub 2-1:0.0: probe with driver hub failed with error -5 [ 3154.508419][T23539] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3154.552135][T23539] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3154.582238][T23539] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3154.613771][T23539] usb 5-1: Product: syz [ 3154.621723][ T29] audit: type=1326 audit(1720203996.915:4375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15696 comm="syz.0.11112" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f43a8575bd9 code=0x0 [ 3154.622258][T23539] usb 5-1: Manufacturer: syz [ 3154.706619][T23539] usb 5-1: SerialNumber: syz [ 3154.786421][ T25] usb 2-1: USB disconnect, device number 39 [ 3155.217236][T28126] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 3155.416100][T28126] usb 3-1: Using ep0 maxpacket: 16 [ 3155.450968][T28126] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 3155.484923][T28126] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 3155.536251][T28126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3155.557735][T28126] usb 3-1: config 0 descriptor?? [ 3155.746852][T12566] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 3155.765251][T23539] cdc_ncm 5-1:1.0: failed to get mac address [ 3155.797844][T23539] cdc_ncm 5-1:1.0: bind() failure [ 3155.829262][T23539] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 3156.092701][T23539] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 3156.102843][T23539] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 3156.122249][T23539] usb 5-1: USB disconnect, device number 61 [ 3156.523374][T28126] usbhid 3-1:0.0: can't add hid device: -71 [ 3156.538175][T28126] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 3156.567911][T12566] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 255, changing to 11 [ 3156.596512][T28126] usb 3-1: USB disconnect, device number 32 [ 3156.611957][T12566] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 3156.631591][T12566] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3156.656950][T12566] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3156.739012][T15732] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 3156.745575][T15732] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 3156.756312][T15732] vhci_hcd vhci_hcd.0: Device attached [ 3156.766098][T12566] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3156.796104][T15733] vhci_hcd: connection closed [ 3156.796528][ T63] vhci_hcd: stop threads [ 3156.804817][T12566] usb 2-1: config 0 descriptor?? [ 3156.829396][ T63] vhci_hcd: release socket [ 3156.830566][T15713] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 3156.833946][ T63] vhci_hcd: disconnect device [ 3157.252019][T15750] geneve2: entered promiscuous mode [ 3157.257633][T15750] geneve2: entered allmulticast mode [ 3157.279507][T12566] plantronics 0003:047F:FFFF.006E: unknown main item tag 0xd [ 3157.301840][T12566] plantronics 0003:047F:FFFF.006E: No inputs registered, leaving [ 3157.313807][T12566] plantronics 0003:047F:FFFF.006E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 3157.315009][ T29] audit: type=1326 audit(1720203999.605:4376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15744 comm="syz.0.11221" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f43a8575bd9 code=0x0 [ 3157.381756][T23404] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 3157.563448][ T784] usb 2-1: USB disconnect, device number 40 [ 3157.578918][T23404] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 189, changing to 11 [ 3157.594442][T23404] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58801, setting to 1024 [ 3157.606611][T23404] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3157.620320][T23404] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3157.641078][T23404] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3157.669870][T23404] usb 4-1: config 0 descriptor?? [ 3157.682665][T15743] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 3157.769133][T12566] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 3157.968664][T12566] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3157.994094][T12566] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3158.031293][T12566] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3158.040459][T12566] usb 3-1: Product: syz [ 3158.044815][T12566] usb 3-1: Manufacturer: syz [ 3158.052135][T12566] usb 3-1: SerialNumber: syz [ 3158.121242][T23404] plantronics 0003:047F:FFFF.006F: unknown main item tag 0x3 [ 3158.153640][T23404] plantronics 0003:047F:FFFF.006F: unknown main item tag 0x7 [ 3158.173907][T15763] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11226'. [ 3158.179490][T23404] plantronics 0003:047F:FFFF.006F: No inputs registered, leaving [ 3158.197375][T15763] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11226'. [ 3158.222434][T23404] plantronics 0003:047F:FFFF.006F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 3159.646056][T23404] usb 4-1: reset high-speed USB device number 52 using dummy_hcd [ 3159.758424][T12566] cdc_ncm 3-1:1.0: failed to get mac address [ 3159.776130][T12566] cdc_ncm 3-1:1.0: bind() failure [ 3159.798329][T12566] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 3159.807381][T12566] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 3159.816738][T12566] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 3159.832887][T12566] usb 3-1: USB disconnect, device number 33 [ 3161.984073][ T29] audit: type=1326 audit(1720204004.275:4377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15795 comm="syz.1.11236" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f48a7575bd9 code=0x0 [ 3162.006044][T12566] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 3162.391543][T12566] usb 3-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=1f.2f [ 3162.391581][T12566] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3162.395154][T12566] usb 3-1: config 0 descriptor?? [ 3162.400135][T12566] rndis_host 3-1:0.0: More than one union descriptor, skipping ... [ 3162.400322][T12566] rndis_host 3-1:0.0: probe with driver rndis_host failed with error -22 [ 3162.400673][T12566] cdc_acm 3-1:0.0: More than one union descriptor, skipping ... [ 3162.400698][T12566] cdc_acm 3-1:0.0: Control and data interfaces are not separated! [ 3162.400719][T12566] cdc_acm 3-1:0.0: This needs exactly 3 endpoints [ 3162.400749][T12566] cdc_acm 3-1:0.0: probe with driver cdc_acm failed with error -22 [ 3163.253091][T15819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11241'. [ 3163.253139][T15819] nbd: couldn't find a device at index 0 [ 3163.588987][ T4661] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 3163.691471][T13658] Bluetooth: hci11: command 0x0406 tx timeout [ 3163.877545][T23539] usb 3-1: USB disconnect, device number 34 [ 3163.978678][ T4661] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3163.989100][ T4661] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3164.008439][ T4661] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3164.023074][ T4661] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3164.032363][ T4661] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3164.766258][T23404] usb 4-1: device descriptor read/64, error -71 [ 3164.772645][ T4661] usb 2-1: Product: syz [ 3164.777032][ T4661] usb 2-1: Manufacturer: syz [ 3164.781651][ T4661] usb 2-1: SerialNumber: syz [ 3164.807444][ T4661] usb 2-1: selecting invalid altsetting 1 [ 3165.036970][T23404] usb 4-1: reset high-speed USB device number 52 using dummy_hcd [ 3165.068007][T23404] usb 4-1: device reset changed ep0 maxpacket size! [ 3165.078126][ T784] usb 4-1: USB disconnect, device number 52 [ 3165.402461][ T784] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 3166.328421][ T784] usb 4-1: Using ep0 maxpacket: 8 [ 3166.354547][ T784] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3166.369921][ T784] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 3166.383505][ T784] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 3166.395269][ T784] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 3166.406554][ T784] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3166.421109][ T784] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3166.430999][ T784] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3166.524611][ T4661] cdc_ncm 2-1:1.0: bind() failure [ 3166.540579][ T4661] cdc_ncm 2-1:1.1: skipping garbage [ 3166.559401][ T4661] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 3166.566634][ T4661] cdc_ncm 2-1:1.1: bind() failure [ 3166.576378][ T4661] usb 2-1: USB disconnect, device number 41 [ 3166.593826][ T29] audit: type=1326 audit(1720204008.885:4378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15857 comm="syz.2.11252" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc351b75bd9 code=0x0 [ 3166.676630][ T784] usb 4-1: usb_control_msg returned -71 [ 3166.699515][ T784] usbtmc 4-1:16.0: can't read capabilities [ 3166.714211][ T784] usb 4-1: USB disconnect, device number 53 [ 3167.761235][T15890] geneve2: entered promiscuous mode [ 3167.779556][T15890] geneve2: entered allmulticast mode [ 3169.266179][T12566] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 3169.391947][ T29] audit: type=1326 audit(1720204011.675:4379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15910 comm="syz.2.11267" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc351b75bd9 code=0x0 [ 3169.538857][T12566] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3169.609833][T12566] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 3169.719492][T12566] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3169.854422][T12566] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3170.053239][T15907] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 3170.344797][T23404] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 3170.556402][T23404] usb 5-1: Using ep0 maxpacket: 16 [ 3170.564407][T23404] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 3170.596302][T23404] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 3170.622985][T23404] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3170.673188][T23404] usb 5-1: config 0 descriptor?? [ 3171.233317][T15923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3171.407227][T15923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3171.671917][T23404] usbhid 5-1:0.0: can't add hid device: -71 [ 3171.696200][T23404] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 3171.734813][T23404] usb 5-1: USB disconnect, device number 62 [ 3172.557236][ T784] usb 2-1: USB disconnect, device number 42 [ 3172.986095][ T29] audit: type=1326 audit(1720204015.275:4380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15966 comm="syz.2.11283" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc351b75bd9 code=0x0 [ 3173.127312][ T25] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 3173.352602][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 255, changing to 11 [ 3173.374427][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 3173.399234][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3173.412773][ T25] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3173.424947][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3173.446052][ T25] usb 4-1: config 0 descriptor?? [ 3173.451821][T15971] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 3173.873168][ T25] plantronics 0003:047F:FFFF.0070: unknown main item tag 0xd [ 3173.904050][ T25] plantronics 0003:047F:FFFF.0070: No inputs registered, leaving [ 3173.938593][ T25] plantronics 0003:047F:FFFF.0070: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 3174.078796][ T25] usb 4-1: USB disconnect, device number 54 [ 3174.403030][T15997] binder: 15989:15997 ioctl c0306201 0 returned -14 [ 3174.566552][T28126] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 3174.856250][T28126] usb 5-1: Using ep0 maxpacket: 16 [ 3174.956687][T28126] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 3175.195141][T28126] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 3175.204829][T28126] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3175.217630][T28126] usb 5-1: config 0 descriptor?? [ 3175.859103][T15994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3175.888831][T15994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3176.198531][T16020] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11298'. [ 3176.221374][T28126] usbhid 5-1:0.0: can't add hid device: -71 [ 3176.236207][T28126] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 3176.239380][T16020] nbd: couldn't find a device at index 0 [ 3176.245071][ T29] audit: type=1326 audit(1720204018.535:4381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16014 comm="syz.1.11297" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f48a7575bd9 code=0x0 [ 3176.277162][T28126] usb 5-1: USB disconnect, device number 63 [ 3177.232190][T16046] binder: 16037:16046 ioctl c0306201 0 returned -14 [ 3178.066302][T28126] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 3178.286225][T28126] usb 5-1: Using ep0 maxpacket: 8 [ 3178.297452][T28126] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 3178.328229][T28126] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 3178.421448][T28126] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 3178.579673][T28126] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 4 [ 3178.957248][T28126] usb 5-1: string descriptor 0 read error: -22 [ 3178.976324][T28126] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 3179.026052][T28126] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3179.081120][T16060] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3179.089486][T16060] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 3179.120358][T16060] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3179.134218][T28126] usb 5-1: config 0 descriptor?? [ 3179.147838][T16060] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 3179.156553][T16041] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 3179.157869][T28126] hub 5-1:0.0: bad descriptor, ignoring hub [ 3179.208444][T28126] hub 5-1:0.0: probe with driver hub failed with error -5 [ 3179.476514][T28126] usb 5-1: USB disconnect, device number 64 [ 3179.713269][ T29] audit: type=1326 audit(1720204022.005:4382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16073 comm="syz.0.11315" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f43a8575bd9 code=0x0 [ 3180.054400][T16094] binder: 16085:16094 ioctl c0306201 0 returned -14 [ 3181.892511][T16116] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3181.919209][T16116] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 3181.936855][ T5202] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 3181.965188][T16116] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3182.026210][T16116] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 3182.149224][ T5202] usb 3-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=1f.2f [ 3182.168712][ T5202] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3182.227460][ T5202] usb 3-1: config 0 descriptor?? [ 3182.236045][ T5202] rndis_host 3-1:0.0: More than one union descriptor, skipping ... [ 3182.247639][ T5202] rndis_host 3-1:0.0: probe with driver rndis_host failed with error -22 [ 3182.257571][ T5202] cdc_acm 3-1:0.0: More than one union descriptor, skipping ... [ 3182.265267][ T5202] cdc_acm 3-1:0.0: Control and data interfaces are not separated! [ 3182.277951][ T5202] cdc_acm 3-1:0.0: This needs exactly 3 endpoints [ 3182.285096][ T5202] cdc_acm 3-1:0.0: probe with driver cdc_acm failed with error -22 [ 3182.865545][ T29] audit: type=1326 audit(1720204025.155:4383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16133 comm="syz.4.11331" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f846a175bd9 code=0x0 [ 3183.669557][T16145] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 3183.804620][T16145] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 3183.864748][T16154] netlink: 68 bytes leftover after parsing attributes in process `syz.0.11334'. [ 3184.107419][ T5202] usb 3-1: USB disconnect, device number 35 [ 3185.714410][T16145] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 3185.765845][T16145] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 3186.056356][T16145] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 3186.086529][T16145] Bluetooth: hci8: Error when powering off device on rfkill (-4) [ 3186.894759][T13658] Bluetooth: hci1: command 0x0406 tx timeout [ 3186.936593][T16145] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 3186.942574][T16145] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 3187.086035][T23404] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 3187.216082][T16145] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 3187.241495][T16145] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 3187.296521][T23404] usb 2-1: Using ep0 maxpacket: 16 [ 3187.310762][T23404] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 3187.351689][T23404] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 3187.376179][T16145] Bluetooth: hci10: Opcode 0x0c1a failed: -4 [ 3187.382479][T23404] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3187.404718][T16145] Bluetooth: hci10: Error when powering off device on rfkill (-4) [ 3187.467566][T23404] usb 2-1: config 0 descriptor?? [ 3187.595229][T16145] Bluetooth: hci11: Opcode 0x0c1a failed: -4 [ 3187.609997][T16145] Bluetooth: hci11: Error when powering off device on rfkill (-4) [ 3187.918202][T16193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3188.198433][T16193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3188.444049][T23404] usbhid 2-1:0.0: can't add hid device: -71 [ 3188.471401][T23404] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 3188.506291][T23404] usb 2-1: USB disconnect, device number 43 [ 3193.166050][T12566] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 3193.366077][T12566] usb 3-1: Using ep0 maxpacket: 16 [ 3193.373492][T12566] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 3193.385093][T12566] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 3193.395048][T12566] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3193.407034][T12566] usb 3-1: config 0 descriptor?? [ 3194.318371][T16297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3194.346645][T16297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3194.418373][T12566] hid (null): unknown global tag 0xd [ 3194.436751][T12566] hid (null): unknown global tag 0xc [ 3194.452491][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x1 [ 3194.488908][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3194.518819][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3194.542198][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3194.559839][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3194.574057][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3194.608520][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3194.631950][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3194.856512][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3194.863978][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3194.871759][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3194.879468][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3194.887387][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3194.894801][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3194.902569][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3195.106366][ T784] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 3195.345812][ T784] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3195.480452][ T784] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 3195.546184][ T784] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3195.575735][ T784] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3195.671519][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3195.679063][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3195.686560][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3195.693998][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3195.701641][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3195.709223][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3195.716695][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3195.724110][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3195.746082][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3195.774096][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3195.791193][T16306] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 3195.806686][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3195.824645][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3195.845268][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3195.861535][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3195.899143][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3196.105557][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3196.330275][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3196.488465][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3196.532740][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3196.579979][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3196.606195][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3196.634789][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3196.686139][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3196.704856][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3196.735497][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3196.756131][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3196.766247][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3196.776050][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3196.794095][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3196.814290][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3196.855218][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3196.873123][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3196.891693][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3196.917215][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3196.937528][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3196.956924][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3196.964492][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3196.992643][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3197.010527][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3197.037246][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3197.066471][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3197.073978][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3197.101939][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3197.112084][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3197.137078][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3197.157746][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3197.175487][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3197.185604][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3197.206177][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3197.214150][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3197.229756][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3197.257103][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3197.271925][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3197.285581][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3197.294379][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3197.302052][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3197.309799][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3197.317523][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3197.325140][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3197.332849][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3197.340571][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3197.358002][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3197.386070][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3197.393534][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3197.421030][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3197.438050][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3197.458902][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3197.484090][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3197.502706][ T5202] usb 2-1: USB disconnect, device number 44 [ 3197.508906][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3197.557585][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3197.596008][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3197.613963][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3197.628757][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3197.641264][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3197.656010][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3197.664365][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3197.688696][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3197.705998][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3197.724379][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3197.735829][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3197.744010][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3197.764255][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3197.777150][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3197.784678][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3197.802782][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3197.822362][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3197.836749][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3197.854712][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3197.874983][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3197.889205][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3197.908988][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3197.925988][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3197.940544][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3197.955981][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3197.975947][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3197.983442][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3198.001615][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3198.016062][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3198.033794][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3198.054080][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3198.061995][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3198.079819][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3198.095949][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3198.106292][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3198.124273][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3198.144272][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3198.164537][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3198.172080][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3198.186000][T12566] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 3198.203885][T12566] hid-generic 0003:0158:0100.0071: unexpected long global item [ 3198.216685][T12566] hid-generic 0003:0158:0100.0071: probe with driver hid-generic failed with error -22 [ 3198.264131][T12566] usb 3-1: USB disconnect, device number 36 [ 3199.988527][T16350] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11380'. [ 3202.747478][T16404] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11398'. [ 3204.186056][T16446] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11413'. [ 3205.257425][T16443] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 3205.290115][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 3206.617159][T16508] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11434'. [ 3211.596340][T16656] input: syz0 as /devices/virtual/input/input79 [ 3211.806493][T16656] block device autoloading is deprecated and will be removed. [ 3212.866329][T16672] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 3216.091336][T16810] serio: Serial port pts0 [ 3221.286372][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 3225.292461][ T29] audit: type=1800 audit(1720204067.585:4384): pid=16990 uid=0 auid=4294967295 ses=4294967295 subj=_ op=set_data cause=unavailable-hash-algorithm comm="syz.1.11650" name="/" dev="sockfs" ino=228182 res=0 errno=0 [ 3227.233096][T17045] serio: Serial port pts0 [ 3229.536127][T23539] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 3229.724566][T23539] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 3229.736266][T23539] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 3229.747347][T23539] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3229.760360][T23539] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3229.770663][T23539] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3229.781276][T23539] usb 3-1: config 0 descriptor?? [ 3230.199863][T23539] plantronics 0003:047F:FFFF.0072: unknown main item tag 0x0 [ 3230.207574][T23539] plantronics 0003:047F:FFFF.0072: unknown main item tag 0x0 [ 3230.216128][T23539] plantronics 0003:047F:FFFF.0072: No inputs registered, leaving [ 3230.231692][T23539] plantronics 0003:047F:FFFF.0072: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 3230.488276][T17542] usb 3-1: USB disconnect, device number 37 [ 3230.584347][T17092] serio: Serial port pts0 [ 3231.398213][T17542] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 3231.618394][T17542] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3231.632034][T17542] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3231.642383][T17542] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 3231.651592][T17542] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3231.663482][T17542] usb 3-1: config 0 descriptor?? [ 3232.089745][T17542] cm6533_jd 0003:0D8C:0022.0073: unknown main item tag 0x0 [ 3232.100153][T17542] cm6533_jd 0003:0D8C:0022.0073: unknown main item tag 0x0 [ 3232.108986][T17542] cm6533_jd 0003:0D8C:0022.0073: unknown main item tag 0x0 [ 3232.116836][T17542] cm6533_jd 0003:0D8C:0022.0073: unknown main item tag 0x0 [ 3232.124250][T17542] cm6533_jd 0003:0D8C:0022.0073: unknown main item tag 0x0 [ 3232.133166][T17542] cm6533_jd 0003:0D8C:0022.0073: No inputs registered, leaving [ 3232.147140][T17542] cm6533_jd 0003:0D8C:0022.0073: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 3232.373623][T23404] usb 3-1: USB disconnect, device number 38 [ 3266.730937][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 3328.169556][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 3337.126647][ T30] INFO: task kworker/0:0:15836 blocked for more than 143 seconds. [ 3337.134510][ T30] Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 3337.142969][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3337.151734][ T30] task:kworker/0:0 state:D stack:25680 pid:15836 tgid:15836 ppid:2 flags:0x00004000 [ 3337.163847][ T30] Workqueue: events rfkill_global_led_trigger_worker [ 3337.171492][ T30] Call Trace: SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 3337.174808][ T30] [ 3337.177842][ T30] __schedule+0x1796/0x49d0 [ 3337.182486][ T30] ? __pfx___schedule+0x10/0x10 [ 3337.188396][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 3337.194411][ T30] ? __pfx_lock_release+0x10/0x10 [ 3337.199775][ T30] ? kick_pool+0x45c/0x620 [ 3337.204223][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 3337.209734][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 3337.215917][ T30] ? schedule+0x90/0x320 [ 3337.220200][ T30] schedule+0x14b/0x320 [ 3337.242637][ T30] schedule_preempt_disabled+0x13/0x30 [ 3337.248271][ T30] __mutex_lock+0x6a4/0xd70 [ 3337.252992][ T30] ? __mutex_lock+0x527/0xd70 [ 3337.257808][ T30] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 3337.264079][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 3337.270668][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 3337.277228][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 3337.283608][ T30] ? process_scheduled_works+0x945/0x1830 [ 3337.289869][ T30] rfkill_global_led_trigger_worker+0x27/0xd0 [ 3337.297138][ T30] ? process_scheduled_works+0x945/0x1830 [ 3337.303262][ T30] process_scheduled_works+0xa2c/0x1830 [ 3337.308937][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 3337.314947][ T30] ? assign_work+0x364/0x3d0 [ 3337.319696][ T30] worker_thread+0x86d/0xd50 [ 3337.324749][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 3337.332929][ T30] ? __kthread_parkme+0x169/0x1d0 [ 3337.338558][ T30] ? __pfx_worker_thread+0x10/0x10 [ 3337.343705][ T30] kthread+0x2f0/0x390 [ 3337.348350][ T30] ? __pfx_worker_thread+0x10/0x10 [ 3337.353513][ T30] ? __pfx_kthread+0x10/0x10 [ 3337.358624][ T30] ret_from_fork+0x4b/0x80 [ 3337.363073][ T30] ? __pfx_kthread+0x10/0x10 [ 3337.368636][ T30] ret_from_fork_asm+0x1a/0x30 [ 3337.373456][ T30] [ 3337.377080][ T30] INFO: task syz.4.11331:16133 blocked for more than 143 seconds. [ 3337.384901][ T30] Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 3337.393186][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3337.402396][ T30] task:syz.4.11331 state:D stack:24672 pid:16133 tgid:16133 ppid:15119 flags:0x00004006 [ 3337.415201][ T30] Call Trace: [ 3337.418928][ T30] [ 3337.421887][ T30] __schedule+0x1796/0x49d0 [ 3337.426944][ T30] ? __pfx___schedule+0x10/0x10 [ 3337.432013][ T30] ? __pfx_lock_release+0x10/0x10 [ 3337.439211][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 3337.444724][ T30] ? schedule+0x90/0x320 [ 3337.449529][ T30] schedule+0x14b/0x320 [ 3337.453713][ T30] schedule_preempt_disabled+0x13/0x30 [ 3337.459327][ T30] __mutex_lock+0x6a4/0xd70 [ 3337.463854][ T30] ? kobject_put+0x443/0x480 [ 3337.468570][ T30] ? __mutex_lock+0x527/0xd70 [ 3337.473271][ T30] ? rfkill_unregister+0xd0/0x230 [ 3337.478372][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 3337.483414][ T30] ? __pfx_device_del+0x10/0x10 [ 3337.490288][ T30] ? __pfx_nfc_genl_device_removed+0x10/0x10 [ 3337.496396][ T30] rfkill_unregister+0xd0/0x230 [ 3337.501276][ T30] nfc_unregister_device+0x96/0x2a0 [ 3337.506573][ T30] virtual_ncidev_close+0x59/0x90 [ 3337.511703][ T30] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 3337.518393][ T30] __fput+0x24a/0x8a0 [ 3337.522414][ T30] task_work_run+0x24f/0x310 [ 3337.535070][ T30] ? __pfx_task_work_run+0x10/0x10 [ 3337.540302][ T30] ? syscall_exit_to_user_mode+0xa3/0x360 [ 3337.546598][ T30] syscall_exit_to_user_mode+0x168/0x360 [ 3337.552280][ T30] do_syscall_64+0x100/0x230 [ 3337.556939][ T30] ? clear_bhb_loop+0x35/0x90 [ 3337.561638][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3337.567738][ T30] RIP: 0033:0x7f846a175bd9 [ 3337.572164][ T30] RSP: 002b:00007ffce79c4308 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 3337.580668][ T30] RAX: 0000000000000000 RBX: 00007f846a305a60 RCX: 00007f846a175bd9 [ 3337.588738][ T30] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 3337.598740][ T30] RBP: 00007f846a305a60 R08: 0000000000000006 R09: 0000001de79c463f [ 3337.606886][ T30] R10: 00000000003ff638 R11: 0000000000000246 R12: 00000000003092b8 [ 3337.615021][ T30] R13: 0000000000000032 R14: 00007f846a305a60 R15: 00007ffce79c43f0 [ 3337.623137][ T30] [ 3337.627401][ T30] INFO: task syz.3.11333:16143 blocked for more than 143 seconds. [ 3337.635253][ T30] Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 3337.643401][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3337.652275][ T30] task:syz.3.11333 state:D stack:24672 pid:16143 tgid:16143 ppid:14421 flags:0x00000004 [ 3337.662513][ T30] Call Trace: [ 3337.665808][ T30] [ 3337.668822][ T30] __schedule+0x1796/0x49d0 [ 3337.673376][ T30] ? __pfx___schedule+0x10/0x10 [ 3337.678337][ T30] ? __pfx_lock_release+0x10/0x10 [ 3337.683385][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 3337.689254][ T30] ? schedule+0x90/0x320 [ 3337.693521][ T30] schedule+0x14b/0x320 [ 3337.697788][ T30] schedule_preempt_disabled+0x13/0x30 [ 3337.703265][ T30] __mutex_lock+0x6a4/0xd70 [ 3337.709915][ T30] ? __mutex_lock+0x527/0xd70 [ 3337.714662][ T30] ? rfkill_fop_release+0x4d/0x230 [ 3337.719847][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 3337.724894][ T30] rfkill_fop_release+0x4d/0x230 [ 3337.729904][ T30] ? __pfx_rfkill_fop_release+0x10/0x10 [ 3337.735465][ T30] __fput+0x24a/0x8a0 [ 3337.740418][ T30] task_work_run+0x24f/0x310 [ 3337.745037][ T30] ? __pfx_task_work_run+0x10/0x10 [ 3337.750318][ T30] ? syscall_exit_to_user_mode+0xa3/0x360 [ 3337.756136][ T30] syscall_exit_to_user_mode+0x168/0x360 [ 3337.761804][ T30] do_syscall_64+0x100/0x230 [ 3337.766760][ T30] ? clear_bhb_loop+0x35/0x90 [ 3337.771484][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3337.777481][ T30] RIP: 0033:0x7f6455575bd9 [ 3337.781927][ T30] RSP: 002b:00007ffce9a41d98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 3337.790493][ T30] RAX: 0000000000000000 RBX: 00007f6455705a60 RCX: 00007f6455575bd9 [ 3337.798566][ T30] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 3337.806656][ T30] RBP: 00007f6455705a60 R08: 0000000000000006 R09: 00000006e9a420cf [ 3337.814646][ T30] R10: 00000000005f5250 R11: 0000000000000246 R12: 00000000003093c9 [ 3337.824556][ T30] R13: 0000000000000032 R14: 00007f6455705a60 R15: 00007ffce9a41e80 [ 3337.832864][ T30] [ 3337.836028][ T30] INFO: task syz.3.11333:16145 blocked for more than 144 seconds. [ 3337.843847][ T30] Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 3337.852757][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3337.861562][ T30] task:syz.3.11333 state:D stack:22456 pid:16145 tgid:16143 ppid:14421 flags:0x00004006 [ 3337.871902][ T30] Call Trace: [ 3337.875206][ T30] [ 3337.878207][ T30] __schedule+0x1796/0x49d0 [ 3337.882755][ T30] ? __pfx___schedule+0x10/0x10 [ 3337.887706][ T30] ? __pfx_lock_release+0x10/0x10 [ 3337.892743][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 3337.898295][ T30] ? schedule+0x90/0x320 [ 3337.902556][ T30] schedule+0x14b/0x320 [ 3337.906793][ T30] schedule_preempt_disabled+0x13/0x30 [ 3337.912358][ T30] __mutex_lock+0x6a4/0xd70 [ 3337.917037][ T30] ? __mutex_lock+0x527/0xd70 [ 3337.921727][ T30] ? nfc_rfkill_set_block+0x50/0x310 [ 3337.929436][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 3337.934505][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 3337.939808][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 3337.945728][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 3337.952168][ T30] nfc_rfkill_set_block+0x50/0x310 [ 3337.958448][ T30] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 3337.964200][ T30] rfkill_set_block+0x1f1/0x440 [ 3337.969144][ T30] rfkill_fop_write+0x5bb/0x790 [ 3337.974023][ T30] ? __pfx_rfkill_fop_write+0x10/0x10 [ 3337.980186][ T30] ? bpf_lsm_file_permission+0x9/0x10 [ 3337.985569][ T30] ? rw_verify_area+0x1d2/0x6b0 [ 3337.990493][ T30] ? __pfx_rfkill_fop_write+0x10/0x10 [ 3337.995992][ T30] vfs_write+0x2a2/0xc90 [ 3338.000276][ T30] ? __pfx_vfs_write+0x10/0x10 [ 3338.005056][ T30] ? do_futex+0x33b/0x560 [ 3338.009621][ T30] ? __fget_files+0x29/0x470 [ 3338.014250][ T30] ? __fget_files+0x3f6/0x470 [ 3338.019043][ T30] ? __fget_files+0x29/0x470 [ 3338.023742][ T30] ksys_write+0x1a0/0x2c0 [ 3338.028154][ T30] ? __pfx_ksys_write+0x10/0x10 [ 3338.033028][ T30] ? do_syscall_64+0x100/0x230 [ 3338.039660][ T30] ? do_syscall_64+0xb6/0x230 [ 3338.044376][ T30] do_syscall_64+0xf3/0x230 [ 3338.048959][ T30] ? clear_bhb_loop+0x35/0x90 [ 3338.053657][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3338.059646][ T30] RIP: 0033:0x7f6455575bd9 [ 3338.064074][ T30] RSP: 002b:00007f64562fd048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3338.073533][ T30] RAX: ffffffffffffffda RBX: 00007f6455703f60 RCX: 00007f6455575bd9 [ 3338.081628][ T30] RDX: 0000000000000008 RSI: 00000000200004c0 RDI: 0000000000000003 [ 3338.089756][ T30] RBP: 00007f64555e4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 3338.097836][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3338.105831][ T30] R13: 000000000000000b R14: 00007f6455703f60 R15: 00007ffce9a41cb8 [ 3338.113946][ T30] [ 3338.117044][ T30] INFO: task syz-executor:16285 blocked for more than 144 seconds. [ 3338.125121][ T30] Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 3338.132877][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3338.141584][ T30] task:syz-executor state:D stack:26816 pid:16285 tgid:16285 ppid:1 flags:0x00004004 [ 3338.153562][ T30] Call Trace: [ 3338.156948][ T30] [ 3338.159919][ T30] __schedule+0x1796/0x49d0 [ 3338.164484][ T30] ? __pfx___schedule+0x10/0x10 [ 3338.169445][ T30] ? __pfx_lock_release+0x10/0x10 [ 3338.174479][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 3338.180068][ T30] ? schedule+0x90/0x320 [ 3338.184322][ T30] schedule+0x14b/0x320 [ 3338.189479][ T30] schedule_preempt_disabled+0x13/0x30 [ 3338.194988][ T30] __mutex_lock+0x6a4/0xd70 [ 3338.199696][ T30] ? __mutex_lock+0x527/0xd70 [ 3338.204397][ T30] ? rfkill_register+0x34/0x8c0 [ 3338.209332][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 3338.214380][ T30] ? __init_waitqueue_head+0xae/0x150 [ 3338.219839][ T30] ? device_initialize+0x266/0x460 [ 3338.224982][ T30] rfkill_register+0x34/0x8c0 [ 3338.233212][ T30] hci_register_dev+0x407/0x8b0 [ 3338.238223][ T30] vhci_create_device+0x389/0x6d0 [ 3338.243283][ T30] vhci_write+0x3cb/0x480 [ 3338.247779][ T30] vfs_write+0xa72/0xc90 [ 3338.252057][ T30] ? __pfx_vhci_write+0x10/0x10 [ 3338.258759][ T30] ? __pfx_vfs_write+0x10/0x10 [ 3338.264131][ T30] ksys_write+0x1a0/0x2c0 [ 3338.268655][ T30] ? __pfx_ksys_write+0x10/0x10 [ 3338.273555][ T30] ? exc_page_fault+0x590/0x8c0 [ 3338.278502][ T30] ? do_syscall_64+0xb6/0x230 [ 3338.283208][ T30] do_syscall_64+0xf3/0x230 [ 3338.287851][ T30] ? clear_bhb_loop+0x35/0x90 [ 3338.292557][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3338.299348][ T30] RIP: 0033:0x7f5f5b574720 [ 3338.303786][ T30] RSP: 002b:00007ffeeadfb338 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 3338.312940][ T30] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f5f5b574720 [ 3338.321038][ T30] RDX: 0000000000000002 RSI: 00007ffeeadfb34a RDI: 00000000000000ca [ 3338.332528][ T30] RBP: 00007f5f5b704a18 R08: 0000000000000000 R09: 00007f5f5c23d6c0 [ 3338.341358][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000c [ 3338.349767][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000009 [ 3338.358194][ T30] [ 3338.361257][ T30] INFO: task syz-executor:16288 blocked for more than 144 seconds. [ 3338.369489][ T30] Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 3338.377515][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3338.386339][ T30] task:syz-executor state:D stack:26816 pid:16288 tgid:16288 ppid:1 flags:0x00004004 [ 3338.397047][ T30] Call Trace: [ 3338.400518][ T30] [ 3338.403469][ T30] __schedule+0x1796/0x49d0 [ 3338.411007][ T30] ? __pfx___schedule+0x10/0x10 [ 3338.415997][ T30] ? __pfx_lock_release+0x10/0x10 [ 3338.421139][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 3338.426992][ T30] ? schedule+0x90/0x320 [ 3338.438401][ T30] schedule+0x14b/0x320 [ 3338.442622][ T30] schedule_preempt_disabled+0x13/0x30 [ 3338.448430][ T30] __mutex_lock+0x6a4/0xd70 [ 3338.452974][ T30] ? __mutex_lock+0x527/0xd70 [ 3338.458352][ T30] ? rfkill_register+0x34/0x8c0 [ 3338.463238][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 3338.468693][ T30] ? __init_waitqueue_head+0xae/0x150 [ 3338.474095][ T30] ? device_initialize+0x266/0x460 [ 3338.480067][ T30] rfkill_register+0x34/0x8c0 [ 3338.484779][ T30] hci_register_dev+0x407/0x8b0 [ 3338.490363][ T30] vhci_create_device+0x389/0x6d0 [ 3338.495435][ T30] vhci_write+0x3cb/0x480 [ 3338.500055][ T30] vfs_write+0xa72/0xc90 [ 3338.504349][ T30] ? __pfx_vhci_write+0x10/0x10 [ 3338.509627][ T30] ? __pfx_vfs_write+0x10/0x10 [ 3338.514465][ T30] ksys_write+0x1a0/0x2c0 [ 3338.525975][ T30] ? __pfx_ksys_write+0x10/0x10 [ 3338.530905][ T30] ? exc_page_fault+0x590/0x8c0 [ 3338.535793][ T30] ? do_syscall_64+0xb6/0x230 [ 3338.556047][ T30] do_syscall_64+0xf3/0x230 [ 3338.560620][ T30] ? clear_bhb_loop+0x35/0x90 [ 3338.565334][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3338.596514][ T30] RIP: 0033:0x7fa840b74720 [ 3338.600993][ T30] RSP: 002b:00007ffe916e0a48 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 3338.615903][ T30] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fa840b74720 [ 3338.623921][ T30] RDX: 0000000000000002 RSI: 00007ffe916e0a5a RDI: 00000000000000ca [ 3338.658124][ T30] RBP: 00007fa840d04a18 R08: 0000000000000000 R09: 00007fa84183d6c0 [ 3338.675929][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000c [ 3338.683946][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000009 [ 3338.706405][ T30] [ 3338.709511][ T30] [ 3338.709511][ T30] Showing all locks held in the system: [ 3338.726483][ T30] 1 lock held by khungtaskd/30: [ 3338.731426][ T30] #0: ffffffff8e333f20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 3338.745281][ T30] 1 lock held by syslogd/4516: [ 3338.768024][ T30] #0: ffff8880b943e758 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 3338.785993][ T30] 2 locks held by getty/4840: [ 3338.790737][ T30] #0: ffff88802b28a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 3338.815974][ T30] #1: ffffc90002f0e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 3338.826817][ T30] 3 locks held by kworker/0:1/23404: [ 3338.832767][ T30] 1 lock held by syz-executor/15272: [ 3338.838620][ T30] #0: ffffffff8f8a91e8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xd0/0x230 [ 3338.866072][ T30] 3 locks held by kworker/0:0/15836: [ 3338.871398][ T30] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 3338.895969][ T30] #1: ffffc90004327d00 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 3338.926070][ T30] #2: ffffffff8f8a91e8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 3338.937664][ T30] 2 locks held by syz.4.11331/16133: [ 3338.942960][ T30] #0: ffff888070535100 (&dev->mutex){....}-{3:3}, at: nfc_unregister_device+0x63/0x2a0 [ 3338.952812][ T30] #1: ffffffff8f8a91e8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xd0/0x230 [ 3338.963053][ T30] 1 lock held by syz.3.11333/16143: [ 3338.968485][ T30] #0: ffffffff8f8a91e8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_release+0x4d/0x230 [ 3338.978789][ T30] 2 locks held by syz.3.11333/16145: [ 3338.984093][ T30] #0: ffffffff8f8a91e8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1a9/0x790 [ 3338.994330][ T30] #1: ffff888070535100 (&dev->mutex){....}-{3:3}, at: nfc_rfkill_set_block+0x50/0x310 [ 3339.006190][ T30] 2 locks held by syz-executor/16285: [ 3339.011600][ T30] #0: ffff88804dd23118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x6d0 [ 3339.021751][ T30] #1: ffffffff8f8a91e8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x34/0x8c0 [ 3339.031772][ T30] 2 locks held by syz-executor/16288: [ 3339.037249][ T30] #0: ffff88804dd27918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x6d0 [ 3339.047574][ T30] #1: ffffffff8f8a91e8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x34/0x8c0 [ 3339.057637][ T30] 2 locks held by syz-executor/16883: [ 3339.063022][ T30] #0: ffff88806b78e118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x6d0 [ 3339.073143][ T30] #1: ffffffff8f8a91e8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x34/0x8c0 [ 3339.083189][ T30] 2 locks held by syz.1.11701/17116: [ 3339.088600][ T30] #0: ffffffff8eb1d248 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5c/0x390 [ 3339.097202][ T30] #1: ffffffff8f8a91e8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_open+0x131/0x850 [ 3339.108215][ T30] 1 lock held by syz.2.11719/17155: [ 3339.113431][ T30] #0: ffffffff8eb1d248 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5c/0x390 [ 3339.123372][ T30] 1 lock held by syz-executor/17158: [ 3339.129268][ T30] #0: ffffffff8eb1d248 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5c/0x390 [ 3339.138032][ T30] 1 lock held by syz-executor/17160: [ 3339.143332][ T30] #0: ffffffff8eb1d248 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5c/0x390 [ 3339.152134][ T30] 1 lock held by syz-executor/17163: [ 3339.157829][ T30] #0: ffffffff8eb1d248 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5c/0x390 [ 3339.166541][ T30] 1 lock held by syz-executor/17164: [ 3339.171841][ T30] #0: ffffffff8eb1d248 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5c/0x390 [ 3339.180684][ T30] 1 lock held by syz-executor/17166: [ 3339.186168][ T30] #0: ffffffff8eb1d248 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5c/0x390 [ 3339.194656][ T30] 1 lock held by syz-executor/17168: [ 3339.200247][ T30] #0: ffffffff8eb1d248 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5c/0x390 [ 3339.209244][ T30] 1 lock held by syz-executor/17170: [ 3339.214552][ T30] #0: ffffffff8eb1d248 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5c/0x390 [ 3339.225303][ T30] 1 lock held by syz-executor/17173: [ 3339.231881][ T30] #0: ffffffff8eb1d248 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5c/0x390 [ 3339.240793][ T30] 1 lock held by syz-executor/17174: [ 3339.246298][ T30] #0: ffffffff8eb1d248 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5c/0x390 [ 3339.254811][ T30] [ 3339.257435][ T30] ============================================= [ 3339.257435][ T30] [ 3339.265974][ T30] NMI backtrace for cpu 1 [ 3339.270315][ T30] CPU: 1 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 3339.280221][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 3339.290389][ T30] Call Trace: [ 3339.293774][ T30] [ 3339.296739][ T30] dump_stack_lvl+0x241/0x360 [ 3339.301465][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3339.306700][ T30] ? __pfx__printk+0x10/0x10 [ 3339.311308][ T30] ? vprintk_emit+0x631/0x770 [ 3339.316002][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 3339.321050][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 3339.326006][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 3339.331476][ T30] ? _printk+0xd5/0x120 [ 3339.335648][ T30] ? __pfx__printk+0x10/0x10 [ 3339.340259][ T30] ? __wake_up_klogd+0xcc/0x110 [ 3339.345154][ T30] ? __pfx__printk+0x10/0x10 [ 3339.349858][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 3339.355506][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 3339.361508][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 3339.367492][ T30] watchdog+0xfde/0x1020 [ 3339.371737][ T30] ? watchdog+0x1ea/0x1020 [ 3339.376152][ T30] ? __pfx_watchdog+0x10/0x10 [ 3339.380819][ T30] kthread+0x2f0/0x390 [ 3339.384881][ T30] ? __pfx_watchdog+0x10/0x10 [ 3339.389548][ T30] ? __pfx_kthread+0x10/0x10 [ 3339.394157][ T30] ret_from_fork+0x4b/0x80 [ 3339.398668][ T30] ? __pfx_kthread+0x10/0x10 [ 3339.403277][ T30] ret_from_fork_asm+0x1a/0x30 [ 3339.408060][ T30] [ 3339.412326][ T30] Sending NMI from CPU 1 to CPUs 0: [ 3339.417753][ C0] NMI backtrace for cpu 0 [ 3339.417766][ C0] CPU: 0 PID: 63 Comm: kworker/u8:5 Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 3339.417786][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 3339.417797][ C0] Workqueue: bat_events batadv_nc_worker [ 3339.417823][ C0] RIP: 0010:__lock_acquire+0x96b/0x1fd0 [ 3339.417844][ C0] Code: 81 c3 c6 00 00 00 48 89 d8 48 c1 e8 03 0f b6 04 10 84 c0 0f 85 a5 00 00 00 80 3b 02 74 30 49 ff c6 48 8b 44 24 40 0f b6 04 10 <84> c0 75 6a 48 8b 04 24 48 63 00 49 83 c7 28 49 83 c5 28 41 ff c4 [ 3339.417859][ C0] RSP: 0018:ffffc900015f78f0 EFLAGS: 00000002 [ 3339.417873][ C0] RAX: 0000000000000000 RBX: ffffffff92caba80 RCX: ffffffff8172758e [ 3339.417886][ C0] RDX: dffffc0000000000 RSI: 0000000000000008 RDI: ffffffff92f71658 [ 3339.417897][ C0] RBP: 0000000000000000 R08: ffffffff92f7165f R09: 1ffffffff25ee2cb [ 3339.417910][ C0] R10: dffffc0000000000 R11: fffffbfff25ee2cc R12: 0000000000000000 [ 3339.417922][ C0] R13: ffff888018330b00 R14: 0000000000000001 R15: ffff888018330b00 [ 3339.417934][ C0] FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 3339.417948][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3339.417961][ C0] CR2: 00007fddbed22665 CR3: 000000000e132000 CR4: 00000000003506f0 [ 3339.417981][ C0] DR0: 00000000d88e6000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3339.417991][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 3339.418002][ C0] Call Trace: [ 3339.418009][ C0] [ 3339.418017][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 3339.418035][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 3339.418054][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 3339.418079][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 3339.418098][ C0] ? nmi_handle+0x14f/0x5a0 [ 3339.418122][ C0] ? nmi_handle+0x2a/0x5a0 [ 3339.418146][ C0] ? __lock_acquire+0x96b/0x1fd0 [ 3339.418162][ C0] ? default_do_nmi+0x63/0x160 [ 3339.418180][ C0] ? exc_nmi+0x123/0x1f0 [ 3339.418198][ C0] ? end_repeat_nmi+0xf/0x53 [ 3339.418224][ C0] ? __lock_acquire+0x86e/0x1fd0 [ 3339.418241][ C0] ? __lock_acquire+0x96b/0x1fd0 [ 3339.418259][ C0] ? __lock_acquire+0x96b/0x1fd0 [ 3339.418276][ C0] ? __lock_acquire+0x96b/0x1fd0 [ 3339.418293][ C0] [ 3339.418299][ C0] [ 3339.418313][ C0] lock_acquire+0x1ed/0x550 [ 3339.418328][ C0] ? batadv_nc_worker+0xcb/0x610 [ 3339.418352][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 3339.418370][ C0] ? batadv_nc_worker+0xcb/0x610 [ 3339.418390][ C0] ? __pfx_lock_release+0x10/0x10 [ 3339.418408][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 3339.418429][ C0] batadv_nc_worker+0xec/0x610 [ 3339.418449][ C0] ? batadv_nc_worker+0xcb/0x610 [ 3339.418468][ C0] ? batadv_nc_worker+0xcb/0x610 [ 3339.418489][ C0] ? process_scheduled_works+0x945/0x1830 [ 3339.418506][ C0] process_scheduled_works+0xa2c/0x1830 [ 3339.418535][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 3339.418555][ C0] ? assign_work+0x364/0x3d0 [ 3339.418573][ C0] worker_thread+0x86d/0xd50 [ 3339.418597][ C0] ? __kthread_parkme+0x169/0x1d0 [ 3339.418616][ C0] ? __pfx_worker_thread+0x10/0x10 [ 3339.418633][ C0] kthread+0x2f0/0x390 [ 3339.418651][ C0] ? __pfx_worker_thread+0x10/0x10 [ 3339.418668][ C0] ? __pfx_kthread+0x10/0x10 [ 3339.418687][ C0] ret_from_fork+0x4b/0x80 [ 3339.418708][ C0] ? __pfx_kthread+0x10/0x10 [ 3339.418727][ C0] ret_from_fork_asm+0x1a/0x30 [ 3339.418755][ C0] [ 3339.422652][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 3339.761355][ T30] CPU: 1 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 3339.771244][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 3339.781292][ T30] Call Trace: [ 3339.784561][ T30] [ 3339.787482][ T30] dump_stack_lvl+0x241/0x360 [ 3339.792159][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3339.797350][ T30] ? __pfx__printk+0x10/0x10 [ 3339.801953][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 3339.807961][ T30] ? vscnprintf+0x5d/0x90 [ 3339.812301][ T30] panic+0x349/0x860 [ 3339.816200][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 3339.822346][ T30] ? __pfx_panic+0x10/0x10 [ 3339.826756][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 3339.832121][ T30] ? __irq_work_queue_local+0x137/0x410 [ 3339.837657][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 3339.843016][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 3339.849180][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 3339.855343][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 3339.861493][ T30] watchdog+0x101d/0x1020 [ 3339.865818][ T30] ? watchdog+0x1ea/0x1020 [ 3339.870244][ T30] ? __pfx_watchdog+0x10/0x10 [ 3339.874911][ T30] kthread+0x2f0/0x390 [ 3339.878977][ T30] ? __pfx_watchdog+0x10/0x10 [ 3339.883642][ T30] ? __pfx_kthread+0x10/0x10 [ 3339.888227][ T30] ret_from_fork+0x4b/0x80 [ 3339.892634][ T30] ? __pfx_kthread+0x10/0x10 [ 3339.897218][ T30] ret_from_fork_asm+0x1a/0x30 [ 3339.901983][ T30] [ 3339.905222][ T30] Kernel Offset: disabled [ 3339.909555][ T30] Rebooting in 86400 seconds..