last executing test programs: 6.26408595s ago: executing program 1 (id=514): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x68}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000100", @ANYRES32, @ANYBLOB="3c000200240001"], 0x58}, 0x1, 0xf000}, 0x0) sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002b000100000000000000001808"], 0x114}], 0x1}, 0x0) 5.93925236s ago: executing program 1 (id=516): unshare(0x20000400) r0 = inotify_init() fcntl$setstatus(r0, 0x4, 0x0) 5.808079702s ago: executing program 4 (id=519): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4000000010000d0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010065727370616e0000040002800a0001"], 0x40}}, 0x0) 5.734059312s ago: executing program 1 (id=520): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @local}}]}}}]}, 0x48}, 0x1, 0x2}, 0x0) 5.697213647s ago: executing program 4 (id=521): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x5f, 0x2a, 0xb4, 0x20, 0xc72, 0xd, 0x279b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdb, 0xa2, 0x92}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000840)={0x44, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 5.639761106s ago: executing program 1 (id=523): socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_setup(0x7194, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x10000, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x0, 0x30}, 0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x1}, 0x8) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f00000004c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000c80)="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", 0x34000, 0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 5.319525562s ago: executing program 0 (id=526): r0 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000820000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000280)='netlink_extack\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000240), &(0x7f00000003c0)=r7}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r3, 0x25, 0x2, @val=@tcx}, 0x40) syz_emit_ethernet(0x22, &(0x7f0000000300)=ANY=[], 0x0) 5.18849679s ago: executing program 0 (id=527): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_io_uring_setup(0x952, 0x0, &(0x7f0000000080), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0xc, 0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000008000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r2, &(0x7f0000000180)={0xffffffffffffffff, r5, 0xffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)=ANY=[@ANYBLOB="64000000190001000000000000f100001d0101004d0010804702dc742530435ef2028613769c6406beb8abb72a5e4fe2e9741ea8084a882667ca5e1b9e78af5407aa67be251a498aec403bb79ec3811231c5ff83af9c000000"], 0x64}}, 0x0) socket$packet(0x11, 0x3, 0x300) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="50000000100003040000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0], 0x50}}, 0x0) 5.020353026s ago: executing program 2 (id=528): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x0, 0x0, {}, [@IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x38}}, 0x0) 4.841969269s ago: executing program 3 (id=529): r0 = socket$inet6(0xa, 0x3, 0x0) connect$inet6(r0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0}, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new user:syz 000000000000000020'], 0x2a, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'trusted:', 'new '}, 0x1c, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 4.841729261s ago: executing program 2 (id=530): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'macsec0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r4], 0x54}}, 0x0) 3.957085708s ago: executing program 0 (id=531): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) r2 = dup3(r1, r0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x71, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x17) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000140)={r3, 0x0, 0xfffffffc}, 0x10) 3.950620345s ago: executing program 1 (id=532): socket$phonet_pipe(0x23, 0x5, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000020240), 0x10010) r1 = socket(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x11, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000003c00)=0x90) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r0, 0x0) 3.122131093s ago: executing program 2 (id=533): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x50, 0x2, 0x9, 0x201, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private0}}}]}]}, 0x50}}, 0x0) 2.949933187s ago: executing program 0 (id=534): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) shutdown(r2, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000680)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600004, 0x15) 2.88234389s ago: executing program 2 (id=535): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xddfdffdb}) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)) 2.862580062s ago: executing program 3 (id=536): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4188aea7, &(0x7f0000000040)) 2.072357428s ago: executing program 1 (id=537): syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0) 1.984732797s ago: executing program 0 (id=538): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000800)={0x2, 0x4e20, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000002f80)=[{{&(0x7f0000000840)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20040006) 1.94387189s ago: executing program 2 (id=539): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_FILS_CACHE_ID={0x6}]}, 0x28}}, 0x0) 1.854081349s ago: executing program 3 (id=540): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$ARCH_SHSTK_LOCK(0x1e, r0, 0x0, 0x5003) 1.828315788s ago: executing program 0 (id=541): sched_setattr(0x0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x20001439) r4 = dup(r2) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000540)="66b9720000400f32baf80c66b8cab3f08c66efbafc0ced66660f3802f80f0926de0f5bc0a3b8266bef0f011db80000b800008ec866b85fa8d1650f23d00f21f86635100000070f23f866b9b209000066b80000000066ba010000000f302ec1f471", 0x61}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.81901144s ago: executing program 2 (id=542): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) 1.678589746s ago: executing program 3 (id=543): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xe9) 1.598282417s ago: executing program 4 (id=544): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_route(0x10, 0x3, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, 0x0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x0, 0x8}, 0x48) r4 = creat(0x0, 0x0) fsetxattr$system_posix_acl(r4, &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0xfe44, 0x0) r5 = socket(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(r5, 0x0, 0x8, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002ac0)={&(0x7f0000000400)=@newqdisc={0x138, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x108, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x44001) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001000000018110000", @ANYRES32=r3, @ANYRES64=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 1.408072477s ago: executing program 4 (id=545): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000380)="0fae4d82b9790b00000f320f01cfb913080000b800c028b7ba65fbde750f300f3236673e0f01c5c4e3fd68395f66baf80cb804fb3285ef66bafc0c66b8b43f66ef0f22470f01c0", 0x47}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.270642223s ago: executing program 3 (id=546): r0 = socket$l2tp6(0xa, 0x2, 0x73) connect(r0, &(0x7f0000000000)=@generic={0x0, "a580f1724e779971ec8449b37f662c740dd6f32f4192451be94d20d79c1885f5affd021e978c1ba6d87d9bb35f8e73bbb763abcc60fba685174814fbdec7624b87f7ddc441cc67fdf1cb839bea4a7b3f9a0fc44711bdd6913b7381dea622ac79bc252f10f96b9b201e9e4a736d999a2cf671690e4a1b12da522173e13a5f"}, 0x80) 1.118178047s ago: executing program 4 (id=547): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004f00)=[{{0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x130}}], 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000040)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000640)={{@my=0x1}, @hyper, 0x0, 0x0, 0xe9b2, 0x20000000, 0x2}) 1.117862327s ago: executing program 3 (id=548): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000808000000000000000000850000006d000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) pipe2(0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000100), 0x0, 0x8) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r5, 0x7a9, &(0x7f00000000c0)={{@my=0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff8}) r6 = socket$inet6_dccp(0xa, 0x6, 0x0) unshare(0x20000400) shutdown(r6, 0x0) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000040)={0x0}) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) write$rfkill(r8, &(0x7f00000004c0)={0x0, 0x0, 0x3, 0x1}, 0x8) 0s ago: executing program 4 (id=549): r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x505}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000002c0), 0xa79, r2}, 0x38) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000540)=@buf={0x4d, &(0x7f00000004c0)="98085b56c753e1f3bca50d4a1571f5928290778bb2e6ebd4fbb592a43ce6fecddd3cf208db56905c0853a27a89e651f6ccb8a4ddd75f16d64f5526817ed494bf1c9cdc115bc303b90f6058e486"}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000040), &(0x7f0000000140)=r7}, 0x20) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0) write$P9_RSTATu(r8, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x239) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}, 0x1, 0x0, 0x0, 0x5}, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r9, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r9, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) setsockopt$inet_tcp_int(r9, 0x6, 0x25, &(0x7f00000001c0), 0x4) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r10, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', r11, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r12 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r12, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.89' (ED25519) to the list of known hosts. [ 52.286411][ T5200] cgroup: Unknown subsys name 'net' [ 52.426069][ T5200] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 53.782595][ T5200] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 56.109645][ T5222] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 56.118401][ T5222] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 56.126545][ T5222] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 56.135671][ T5222] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 56.137189][ T5229] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 56.144713][ T5222] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 56.152656][ T5229] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 56.158199][ T5222] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 56.165508][ T5229] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 56.179757][ T5229] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 56.187634][ T5229] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 56.194895][ T5222] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 56.195372][ T5229] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 56.211425][ T5229] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 56.218778][ T5222] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 56.226061][ T5231] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 56.226461][ T5229] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 56.233970][ T5231] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 56.243235][ T5229] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 56.248564][ T5231] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 56.255127][ T5233] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 56.268801][ T5229] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 56.278934][ T5233] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 56.288747][ T5231] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 56.308075][ T5231] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 56.318490][ T5231] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 56.330287][ T5222] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 56.353405][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 56.366639][ T5222] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 56.378483][ T4607] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 56.769471][ T5218] chnl_net:caif_netlink_parms(): no params data found [ 56.920677][ T5215] chnl_net:caif_netlink_parms(): no params data found [ 56.980649][ T5217] chnl_net:caif_netlink_parms(): no params data found [ 56.991681][ T5211] chnl_net:caif_netlink_parms(): no params data found [ 57.059339][ T5218] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.066670][ T5218] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.074236][ T5218] bridge_slave_0: entered allmulticast mode [ 57.081893][ T5218] bridge_slave_0: entered promiscuous mode [ 57.094443][ T5218] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.101760][ T5218] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.109097][ T5218] bridge_slave_1: entered allmulticast mode [ 57.116451][ T5218] bridge_slave_1: entered promiscuous mode [ 57.136909][ T5212] chnl_net:caif_netlink_parms(): no params data found [ 57.226388][ T5215] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.234396][ T5215] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.242342][ T5215] bridge_slave_0: entered allmulticast mode [ 57.251055][ T5215] bridge_slave_0: entered promiscuous mode [ 57.261397][ T5218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.272477][ T5218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.315788][ T5215] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.323061][ T5215] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.331002][ T5215] bridge_slave_1: entered allmulticast mode [ 57.337870][ T5215] bridge_slave_1: entered promiscuous mode [ 57.421758][ T5218] team0: Port device team_slave_0 added [ 57.429717][ T5218] team0: Port device team_slave_1 added [ 57.454598][ T5217] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.462125][ T5217] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.469459][ T5217] bridge_slave_0: entered allmulticast mode [ 57.476168][ T5217] bridge_slave_0: entered promiscuous mode [ 57.493998][ T5211] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.501188][ T5211] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.508504][ T5211] bridge_slave_0: entered allmulticast mode [ 57.515215][ T5211] bridge_slave_0: entered promiscuous mode [ 57.529575][ T5215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.542322][ T5215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.563134][ T5218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.570474][ T5218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.597625][ T5218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.609757][ T5217] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.616927][ T5217] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.624768][ T5217] bridge_slave_1: entered allmulticast mode [ 57.631652][ T5217] bridge_slave_1: entered promiscuous mode [ 57.638292][ T5211] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.645529][ T5211] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.653414][ T5211] bridge_slave_1: entered allmulticast mode [ 57.660384][ T5211] bridge_slave_1: entered promiscuous mode [ 57.712922][ T5218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.720161][ T5218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.747249][ T5218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.784517][ T5212] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.792024][ T5212] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.799592][ T5212] bridge_slave_0: entered allmulticast mode [ 57.806335][ T5212] bridge_slave_0: entered promiscuous mode [ 57.815097][ T5212] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.822575][ T5212] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.830538][ T5212] bridge_slave_1: entered allmulticast mode [ 57.837260][ T5212] bridge_slave_1: entered promiscuous mode [ 57.846491][ T5215] team0: Port device team_slave_0 added [ 57.854425][ T5215] team0: Port device team_slave_1 added [ 57.883241][ T5217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.947533][ T5217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.975423][ T5211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.986668][ T5211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.006407][ T5215] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.014560][ T5215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.040549][ T5215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.053543][ T5215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.060719][ T5215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.086721][ T5215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.141315][ T5212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.169058][ T5218] hsr_slave_0: entered promiscuous mode [ 58.175644][ T5218] hsr_slave_1: entered promiscuous mode [ 58.186563][ T5217] team0: Port device team_slave_0 added [ 58.197180][ T5217] team0: Port device team_slave_1 added [ 58.206047][ T5211] team0: Port device team_slave_0 added [ 58.214183][ T5212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.249257][ T5215] hsr_slave_0: entered promiscuous mode [ 58.255555][ T5215] hsr_slave_1: entered promiscuous mode [ 58.261885][ T5215] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.269841][ T5215] Cannot create hsr debugfs directory [ 58.295510][ T5211] team0: Port device team_slave_1 added [ 58.334141][ T5217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.341219][ T5217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.367804][ T5217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.379678][ T4607] Bluetooth: hci2: command tx timeout [ 58.379783][ T54] Bluetooth: hci4: command tx timeout [ 58.397045][ T5225] Bluetooth: hci1: command tx timeout [ 58.406497][ T5212] team0: Port device team_slave_0 added [ 58.415301][ T5212] team0: Port device team_slave_1 added [ 58.426361][ T5217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.433632][ T5217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.452321][ T5225] Bluetooth: hci3: command tx timeout [ 58.459766][ T54] Bluetooth: hci0: command tx timeout [ 58.465462][ T5217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.486730][ T5211] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.493983][ T5211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.519928][ T5211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.533368][ T5211] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.540697][ T5211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.566769][ T5211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.632004][ T5212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.639393][ T5212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.666236][ T5212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.683270][ T5212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.690702][ T5212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.717154][ T5212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.834091][ T5217] hsr_slave_0: entered promiscuous mode [ 58.841253][ T5217] hsr_slave_1: entered promiscuous mode [ 58.847334][ T5217] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.856315][ T5217] Cannot create hsr debugfs directory [ 58.865043][ T5211] hsr_slave_0: entered promiscuous mode [ 58.871442][ T5211] hsr_slave_1: entered promiscuous mode [ 58.877525][ T5211] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.887774][ T5211] Cannot create hsr debugfs directory [ 58.967325][ T5212] hsr_slave_0: entered promiscuous mode [ 58.973634][ T5212] hsr_slave_1: entered promiscuous mode [ 58.981020][ T5212] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.988868][ T5212] Cannot create hsr debugfs directory [ 59.244251][ T5218] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.291379][ T5218] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.336386][ T5218] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.347722][ T5218] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.405080][ T5215] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.429073][ T5215] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.451178][ T5215] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 59.463487][ T5215] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 59.554948][ T5217] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 59.566922][ T5217] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 59.583268][ T5217] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 59.596325][ T5217] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 59.685222][ T5211] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 59.705010][ T5211] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 59.715593][ T5211] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.727856][ T5211] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 59.785585][ T5212] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 59.818393][ T5212] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 59.847867][ T5212] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 59.859160][ T5212] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 59.901631][ T5218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.943366][ T5215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.990286][ T5218] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.024632][ T5264] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.031983][ T5264] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.043083][ T5264] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.050553][ T5264] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.077700][ T5215] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.101008][ T5211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.166988][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.174173][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.183579][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.190692][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.225076][ T5211] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.251106][ T5266] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.258273][ T5266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.280500][ T5217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.331356][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.338537][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.387675][ T5217] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.401115][ T5212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.430630][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.437884][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.458150][ T54] Bluetooth: hci2: command tx timeout [ 60.460481][ T5225] Bluetooth: hci1: command tx timeout [ 60.463581][ T54] Bluetooth: hci4: command tx timeout [ 60.511745][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.519008][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.530159][ T54] Bluetooth: hci3: command tx timeout [ 60.530724][ T4607] Bluetooth: hci0: command tx timeout [ 60.556837][ T5212] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.679798][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.686968][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.735199][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.742948][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.832314][ T5215] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.845329][ T5218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.945780][ T5212] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.057816][ T5211] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.096017][ T5218] veth0_vlan: entered promiscuous mode [ 61.157201][ T5218] veth1_vlan: entered promiscuous mode [ 61.244556][ T5211] veth0_vlan: entered promiscuous mode [ 61.290201][ T5218] veth0_macvtap: entered promiscuous mode [ 61.307709][ T5218] veth1_macvtap: entered promiscuous mode [ 61.334991][ T5211] veth1_vlan: entered promiscuous mode [ 61.379163][ T5218] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.415715][ T5218] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.443955][ T5217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.467761][ T5218] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.476956][ T5218] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.486179][ T5218] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.496019][ T5218] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.510213][ T5212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.544683][ T5215] veth0_vlan: entered promiscuous mode [ 61.553614][ T5211] veth0_macvtap: entered promiscuous mode [ 61.570831][ T5211] veth1_macvtap: entered promiscuous mode [ 61.628200][ T5215] veth1_vlan: entered promiscuous mode [ 61.634900][ T5211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.646230][ T5211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.659518][ T5211] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.674743][ T5211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.685969][ T5211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.699750][ T5211] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.733722][ T5211] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.744231][ T5211] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.753118][ T5211] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.762615][ T5211] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.775023][ T5217] veth0_vlan: entered promiscuous mode [ 61.870395][ T5212] veth0_vlan: entered promiscuous mode [ 61.913947][ T5217] veth1_vlan: entered promiscuous mode [ 61.957520][ T5215] veth0_macvtap: entered promiscuous mode [ 61.959941][ T4326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.972602][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.983979][ T4326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.992818][ T5212] veth1_vlan: entered promiscuous mode [ 62.001736][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.043102][ T5215] veth1_macvtap: entered promiscuous mode [ 62.056731][ T5217] veth0_macvtap: entered promiscuous mode [ 62.082553][ T5217] veth1_macvtap: entered promiscuous mode [ 62.104482][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.114574][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.162449][ T5217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.173978][ T1060] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.174134][ T5217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.187545][ T1060] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.192644][ T5217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.210293][ T5217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.223501][ T5217] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.242037][ T5217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.256652][ T5217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.267142][ T5217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.279230][ T5217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.292295][ T5217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.314786][ T5212] veth0_macvtap: entered promiscuous mode [ 62.323391][ T5215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.340596][ T5215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.354816][ T5215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.365656][ T5215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.375914][ T5215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.387757][ T5215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.401830][ T5215] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.411558][ T5217] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.421573][ T5217] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.430719][ T5217] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.441166][ T5217] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.455369][ T5212] veth1_macvtap: entered promiscuous mode [ 62.473118][ T5215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.490157][ T5215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.502821][ T5215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.518330][ T5215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.528869][ T4607] Bluetooth: hci1: command tx timeout [ 62.530682][ T54] Bluetooth: hci2: command tx timeout [ 62.540169][ T4607] Bluetooth: hci4: command tx timeout [ 62.543088][ T5215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.563302][ T5215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.575303][ T5215] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.608650][ T4607] Bluetooth: hci3: command tx timeout [ 62.609093][ T54] Bluetooth: hci0: command tx timeout [ 62.685896][ T5215] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.728245][ T5215] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.736992][ T5215] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.770671][ T5215] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.812069][ T5304] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 62.837188][ T5305] netlink: 'syz.0.7': attribute type 3 has an invalid length. [ 62.849993][ T5305] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.7'. [ 62.879152][ T5212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.908005][ T5212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.929979][ T5212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.967523][ T5212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.987221][ T5212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.006603][ T5212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.017084][ T5212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.027848][ T5212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.041136][ T5212] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.097712][ T5212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.109823][ T5212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.121984][ T5212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.132711][ T5212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.143041][ T5212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.154388][ T5212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.164312][ T5212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.178046][ T5212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.190326][ T5212] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.225334][ T2540] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.228257][ T5212] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.241999][ T2540] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.246900][ T5212] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.264160][ T5212] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.274775][ T5212] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.432649][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.451120][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.460809][ T1060] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.468717][ T1060] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.536457][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.557084][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.574424][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.596313][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.679095][ T5269] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 63.681886][ T2540] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.710025][ T2540] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.909686][ T5269] usb 2-1: Using ep0 maxpacket: 8 [ 63.958678][ T5269] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.003566][ T5269] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.030856][ T5269] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 64.046501][ T5269] usb 2-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 64.081293][ T5269] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.125634][ T5323] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 64.154845][ T5269] usb 2-1: config 0 descriptor?? [ 64.422042][ T5313] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 64.649121][ T4607] Bluetooth: hci1: command tx timeout [ 64.654610][ T5225] Bluetooth: hci2: command tx timeout [ 64.660623][ T54] Bluetooth: hci4: command tx timeout [ 64.689785][ T54] Bluetooth: hci0: command tx timeout [ 64.695955][ T5225] Bluetooth: hci3: command tx timeout [ 64.757369][ T5269] hid-steam 0003:28DE:1102.0001: unknown main item tag 0x0 [ 64.769464][ T5269] hid-steam 0003:28DE:1102.0001: : USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0 [ 64.863622][ T5269] hid-steam 0003:28DE:1102.0001: Steam Controller 'XXXXXXXXXX' connected [ 64.938115][ T58] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 65.224884][ T5313] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 65.234645][ T58] usb 3-1: Using ep0 maxpacket: 8 [ 65.396505][ T5269] input: Steam Controller as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28DE:1102.0001/input/input5 [ 65.408492][ T5313] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.421802][ T5313] usb 1-1: Product: syz [ 65.431378][ T5313] usb 1-1: Manufacturer: syz [ 65.436061][ T5313] usb 1-1: SerialNumber: syz [ 65.469610][ T58] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 65.506229][ T5313] usb 1-1: config 0 descriptor?? [ 65.529772][ T58] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 65.561929][ T5269] hid-steam 0003:28DE:1102.0002: unknown main item tag 0x0 [ 65.600286][ T58] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 65.620222][ T5269] hid-steam 0003:28DE:1102.0002: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0 [ 65.635665][ T58] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 65.646821][ T58] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 65.686266][ T5269] usb 2-1: USB disconnect, device number 2 [ 65.695388][ T58] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 65.757995][ T58] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.847019][ T5269] hid-steam 0003:28DE:1102.0001: Steam Controller 'XXXXXXXXXX' disconnected [ 66.042330][ T5313] usb 1-1: Firmware: major: 15, minor: 97, hardware type: UNKNOWN (127) [ 66.063459][ T58] usb 3-1: usb_control_msg returned -32 [ 66.071975][ T58] usbtmc 3-1:16.0: can't read capabilities [ 66.246846][ T5313] usb 1-1: Read permanent extended address 00:00:00:00:00:00:00:04 from device [ 66.270295][ T5313] usb 1-1: atusb_probe: initialization failed, error = -524 [ 66.281986][ T5352] vlan2: entered promiscuous mode [ 66.287194][ T5352] vlan2: entered allmulticast mode [ 66.288138][ T5313] atusb 1-1:0.0: probe with driver atusb failed with error -524 [ 66.308500][ T5264] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 66.328221][ T5267] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 66.422048][ T5356] netlink: 'syz.1.20': attribute type 7 has an invalid length. [ 66.435827][ T5356] netlink: 'syz.1.20': attribute type 5 has an invalid length. [ 66.445900][ T5356] netlink: 17 bytes leftover after parsing attributes in process `syz.1.20'. [ 66.482796][ T5355] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 66.502443][ T5264] usb 4-1: Using ep0 maxpacket: 16 [ 66.519601][ T3145] usb 3-1: USB disconnect, device number 2 [ 66.533246][ T5267] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.544551][ T5264] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 66.579443][ T5220] usb 1-1: USB disconnect, device number 2 [ 66.587047][ T5264] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 66.596990][ T5267] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.615293][ T5267] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 66.629356][ T5267] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.638431][ T5264] usb 4-1: New USB device found, idVendor=06cd, idProduct=0110, bcdDevice=53.f0 [ 66.647502][ T5264] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.661564][ T5267] usb 5-1: config 0 descriptor?? [ 66.666752][ T5264] usb 4-1: Product: syz [ 66.675706][ T5264] usb 4-1: Manufacturer: syz [ 66.684184][ T5264] usb 4-1: SerialNumber: syz [ 66.860646][ T5264] usb 4-1: config 0 descriptor?? [ 66.870388][ T5264] keyspan 4-1:0.0: Keyspan 2 port adapter converter detected [ 66.888184][ T5264] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 87 [ 66.897299][ T5264] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81 [ 66.906164][ T5264] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 66.914002][ T5264] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 66.921660][ T5264] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 85 [ 66.931934][ T5264] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 5 [ 67.371387][ T5264] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 67.535326][ T5347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.570537][ T5347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.590380][ T5264] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 83 [ 67.598841][ T5264] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 3 [ 67.606537][ T5264] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 4 [ 67.614567][ T5264] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 86 [ 67.623965][ T5264] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 6 [ 67.638278][ T5264] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 67.653240][ T5347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.673336][ T5264] usb 4-1: USB disconnect, device number 2 [ 67.691401][ T5347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.715246][ T5264] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 68.675535][ T5264] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 68.705491][ T5264] keyspan 4-1:0.0: device disconnected [ 69.429354][ T5264] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 69.471472][ T5395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.32'. [ 69.523823][ T5396] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 69.537348][ T5396] x_tables: unsorted underflow at hook 4 [ 69.619594][ T5264] usb 1-1: Using ep0 maxpacket: 32 [ 69.666662][ T5264] usb 1-1: unable to get BOS descriptor or descriptor too short [ 69.693594][ T5264] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 69.750151][ T5400] syz.3.34[5400] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.750301][ T5400] syz.3.34[5400] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.757067][ T5264] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 70.035831][ T5264] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 70.053138][ T5264] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 70.173210][ T5267] usbhid 5-1:0.0: can't add hid device: -71 [ 70.409996][ T5264] usb 1-1: SerialNumber: syz [ 70.650664][ T5267] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 70.735357][ T5385] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 70.747113][ T5267] usb 5-1: USB disconnect, device number 2 [ 70.922214][ T5413] netlink: 20 bytes leftover after parsing attributes in process `syz.4.37'. [ 71.006669][ T5413] bridge_slave_1: left allmulticast mode [ 71.036819][ T5413] bridge_slave_1: left promiscuous mode [ 71.049537][ T5385] binder: Bad value for 'stats' [ 71.069463][ T5413] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.139242][ T5385] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 71.548633][ T5266] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 71.668159][ T5385] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 71.859691][ T1258] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.869353][ T5266] usb 5-1: Using ep0 maxpacket: 32 [ 71.895050][ T1258] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.002026][ T5432] Zero length message leads to an empty skb [ 72.028136][ T5266] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 72.107094][ T5266] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.139960][ T5266] usb 5-1: config 0 descriptor?? [ 72.150973][ T5266] gspca_main: sq930x-2.14.0 probing 041e:403c [ 72.194122][ T5264] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 72.238560][ T5264] usb 1-1: USB disconnect, device number 3 [ 72.876322][ T5448] netlink: 8 bytes leftover after parsing attributes in process `syz.3.47'. [ 72.885352][ T5448] netlink: 24 bytes leftover after parsing attributes in process `syz.3.47'. [ 72.899126][ T5448] gtp0: entered promiscuous mode [ 72.905288][ T5448] gtp0: entered allmulticast mode [ 74.058330][ T54] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 74.067628][ T54] Bluetooth: hci0: Injecting HCI hardware error event [ 74.079119][ T54] Bluetooth: hci0: hardware error 0x00 [ 74.246689][ T5266] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 74.268116][ T5266] sq930x 5-1:0.0: probe with driver sq930x failed with error -71 [ 74.292920][ T5266] usb 5-1: USB disconnect, device number 3 [ 75.246668][ T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!! [ 75.256459][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 75.378544][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 75.443438][ T5471] syz.2.55 uses obsolete (PF_INET,SOCK_PACKET) [ 75.454372][ T5471] syzkaller1: entered promiscuous mode [ 75.462018][ T5471] syzkaller1: entered allmulticast mode [ 75.528428][ T5474] netlink: 'syz.4.57': attribute type 1 has an invalid length. [ 75.536218][ T5474] netlink: 'syz.4.57': attribute type 4 has an invalid length. [ 75.551255][ T5474] netlink: 15334 bytes leftover after parsing attributes in process `syz.4.57'. [ 75.653270][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 75.665080][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 75.678891][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 75.842103][ T5476] ALSA: mixer_oss: invalid OSS volume '' [ 76.808263][ T54] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 76.957229][ T25] cfg80211: failed to load regulatory.db [ 77.489048][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 77.512273][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 77.521696][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.838792][ T5512] capability: warning: `syz.1.68' uses 32-bit capabilities (legacy support in use) [ 78.403066][ T5510] xt_CONNSECMARK: invalid mode: 0 [ 78.963523][ T54] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 78.970405][ T54] Bluetooth: Wrong link type (-22) [ 78.977050][ T54] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 78.985994][ T54] Bluetooth: Wrong link type (-22) [ 78.992541][ T54] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 79.000029][ T54] Bluetooth: Wrong link type (-22) [ 79.006626][ T54] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 79.014837][ T54] Bluetooth: Wrong link type (-22) [ 79.021510][ T54] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 79.029076][ T54] Bluetooth: Wrong link type (-22) [ 79.753101][ T5546] netlink: 68 bytes leftover after parsing attributes in process `syz.4.76'. [ 79.818087][ T5266] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 79.942134][ T29] audit: type=1326 audit(1723162944.078:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5549 comm="syz.0.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3346b779f9 code=0x7ffc0000 [ 80.055322][ T5266] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.291571][ T5266] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 80.400174][ T29] audit: type=1326 audit(1723162944.168:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5549 comm="syz.0.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3346b779f9 code=0x7ffc0000 [ 80.490081][ T29] audit: type=1326 audit(1723162944.198:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5549 comm="syz.0.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3346b779f9 code=0x7ffc0000 [ 80.512322][ T5266] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 80.529314][ T5266] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 80.530067][ T29] audit: type=1326 audit(1723162944.208:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5549 comm="syz.0.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3346b779f9 code=0x7ffc0000 [ 80.537503][ T5266] usb 4-1: SerialNumber: syz [ 80.628019][ T5555] xt_TPROXY: Can be used only with -p tcp or -p udp [ 80.644414][ T29] audit: type=1326 audit(1723162944.208:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5549 comm="syz.0.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3346b779f9 code=0x7ffc0000 [ 80.752682][ T29] audit: type=1326 audit(1723162944.258:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5549 comm="syz.0.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3346b779f9 code=0x7ffc0000 [ 80.974856][ T29] audit: type=1326 audit(1723162944.308:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5549 comm="syz.0.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3346b779f9 code=0x7ffc0000 [ 81.025891][ T5266] usb 4-1: 0:2 : does not exist [ 81.033620][ T5266] usb 4-1: unit 5 not found! [ 81.045363][ T29] audit: type=1326 audit(1723162944.308:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5549 comm="syz.0.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3346b779f9 code=0x7ffc0000 [ 81.059871][ T5266] usb 4-1: USB disconnect, device number 3 [ 81.194564][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 81.204037][ T29] audit: type=1326 audit(1723162944.388:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5549 comm="syz.0.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f3346b779f9 code=0x7ffc0000 [ 81.385918][ T29] audit: type=1326 audit(1723162944.388:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5549 comm="syz.0.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3346b779f9 code=0x7ffc0000 [ 81.828457][ T5566] Cannot find add_set index 0 as target [ 85.366149][ T5591] process 'syz.0.91' launched './file0' with NULL argv: empty string added [ 85.666912][ T5599] netlink: 'syz.3.93': attribute type 4 has an invalid length. [ 86.421779][ T5599] syz.3.93 (5599) used greatest stack depth: 18992 bytes left [ 86.868131][ T5269] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 87.060654][ T5269] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.079440][ T5269] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 87.098181][ T25] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 87.099435][ T5269] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.131592][ T5269] usb 5-1: config 0 descriptor?? [ 87.154484][ T5269] pwc: Askey VC010 type 2 USB webcam detected. [ 87.310345][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 87.352689][ T25] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 87.363769][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.803469][ T25] usb 1-1: config 0 descriptor?? [ 88.188525][ T5269] pwc: send_video_command error -71 [ 88.193772][ T5269] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 88.213066][ T5269] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 88.258388][ T5269] usb 5-1: USB disconnect, device number 4 [ 88.658298][ T5314] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 88.828188][ T5269] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 88.858221][ T5314] usb 4-1: Using ep0 maxpacket: 32 [ 88.880530][ T5314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.905440][ T5314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.916204][ T5314] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 88.931720][ T5314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.949338][ T5314] usb 4-1: config 0 descriptor?? [ 88.964342][ T5314] hub 4-1:0.0: USB hub found [ 89.040708][ T5269] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.058158][ T5269] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 89.078407][ T5269] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.118376][ T5269] usb 5-1: config 0 descriptor?? [ 89.127295][ T5269] pwc: Askey VC010 type 2 USB webcam detected. [ 89.199123][ T5314] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 89.375988][ T5656] bond0: Error: Cannot enslave bond to itself. [ 89.411743][ T5314] usbhid 4-1:0.0: can't add hid device: -71 [ 89.423064][ T5314] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 89.493941][ T5314] usb 4-1: USB disconnect, device number 4 [ 89.560476][ T5269] pwc: recv_control_msg error -32 req 02 val 2b00 [ 89.577304][ T5269] pwc: recv_control_msg error -32 req 02 val 2700 [ 89.595891][ T5269] pwc: recv_control_msg error -32 req 02 val 2c00 [ 89.610643][ T5269] pwc: recv_control_msg error -32 req 04 val 1000 [ 89.628513][ T5269] pwc: recv_control_msg error -32 req 04 val 1300 [ 89.647880][ T5269] pwc: recv_control_msg error -32 req 04 val 1400 [ 89.661339][ T5269] pwc: recv_control_msg error -32 req 02 val 2000 [ 89.670734][ T5269] pwc: recv_control_msg error -32 req 02 val 2100 [ 89.690743][ T5269] pwc: recv_control_msg error -32 req 04 val 1500 [ 89.705534][ T5269] pwc: recv_control_msg error -32 req 02 val 2500 [ 89.722506][ T5269] pwc: recv_control_msg error -32 req 02 val 2400 [ 89.746785][ T5269] pwc: recv_control_msg error -32 req 02 val 2600 [ 89.757211][ T5269] pwc: recv_control_msg error -32 req 02 val 2900 [ 89.918350][ T5664] dlm: no locking on control device [ 90.010841][ T5269] pwc: recv_control_msg error -71 req 04 val 1100 [ 90.018581][ T5269] pwc: recv_control_msg error -71 req 04 val 1200 [ 90.033572][ T5269] pwc: Registered as video71. [ 90.048596][ T5269] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input8 [ 90.098138][ T5314] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 90.132526][ T5269] usb 5-1: USB disconnect, device number 5 [ 90.149839][ T25] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x8001: -71 [ 90.175139][ T25] asix 1-1:0.0: probe with driver asix failed with error -71 [ 90.197633][ T25] usb 1-1: USB disconnect, device number 4 [ 90.288374][ T5314] usb 2-1: Using ep0 maxpacket: 8 [ 90.341884][ T5314] usb 2-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 90.407620][ T5314] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.451902][ T5314] usb 2-1: Product: syz [ 90.457611][ T5314] usb 2-1: Manufacturer: syz [ 90.464563][ T5314] usb 2-1: SerialNumber: syz [ 90.483758][ T5314] usb 2-1: config 0 descriptor?? [ 90.799896][ T5675] can: request_module (can-proto-0) failed. [ 91.225980][ T5314] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 91.374432][ T5314] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 91.410623][ T5314] dib0700: firmware download failed at 7 with -22 [ 91.459719][ T5314] usb 2-1: USB disconnect, device number 3 [ 92.035710][ T5709] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-xor(2) [ 93.021872][ T5266] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 94.134781][ T5266] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.335332][ T5266] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 94.378743][ T5266] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 94.394956][ T5266] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.436523][ T5266] usb 4-1: Product: syz [ 94.461273][ T5266] usb 4-1: Manufacturer: syz [ 94.476734][ T5266] usb 4-1: SerialNumber: syz [ 94.732663][ T5710] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 95.368153][ T58] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 95.386994][ T5710] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 95.598729][ T58] usb 1-1: Using ep0 maxpacket: 8 [ 95.603994][ T5266] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 95.620872][ T5266] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 95.638394][ T5267] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 95.638937][ T58] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.668724][ T5266] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 95.681387][ T58] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 95.692824][ T58] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.701115][ T58] usb 1-1: Product: syz [ 95.705581][ T58] usb 1-1: Manufacturer: syz [ 95.710629][ T58] usb 1-1: SerialNumber: syz [ 95.828136][ T5267] usb 5-1: Using ep0 maxpacket: 32 [ 95.836104][ T5266] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 95.844958][ T5267] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.864981][ T5267] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.865078][ T5266] usb 4-1: USB disconnect, device number 5 [ 95.875515][ T5267] usb 5-1: New USB device found, idVendor=2133, idProduct=0018, bcdDevice= 0.00 [ 95.904279][ T5267] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.909011][ T5266] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 95.963069][ T5267] usb 5-1: config 0 descriptor?? [ 96.044732][ T5269] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 96.264322][ T5269] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.300027][ T5269] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 96.345066][ T5269] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.382962][ T5269] usb 2-1: config 0 descriptor?? [ 96.394606][ T5269] pwc: Askey VC010 type 2 USB webcam detected. [ 96.436617][ T5267] viewsonic 0003:2133:0018.0003: hidraw0: USB HID v0.00 Device [HID 2133:0018] on usb-dummy_hcd.4-1/input0 [ 96.600725][ T5269] pwc: send_video_command error -71 [ 96.606888][ T5269] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 96.614895][ T5269] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 96.629102][ T5269] usb 2-1: USB disconnect, device number 4 [ 96.684556][ T5264] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 96.727030][ T5267] usb 5-1: USB disconnect, device number 6 [ 96.960965][ T5264] usb 3-1: Using ep0 maxpacket: 8 [ 97.272578][ T58] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 97.302503][ T58] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 97.456344][ T58] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 97.675656][ T58] cdc_ncm 1-1:1.0: setting tx_max = 184 [ 97.686317][ T5264] usb 3-1: config 0 has an invalid interface number: 7 but max is 0 [ 97.709152][ T5264] usb 3-1: config 0 has no interface number 0 [ 97.728829][ T58] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 97.728897][ T5264] usb 3-1: config 0 interface 7 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 97.808989][ T58] usb 1-1: USB disconnect, device number 5 [ 97.812612][ T5264] usb 3-1: config 0 interface 7 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 97.815733][ T58] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 97.845052][ T5264] usb 3-1: config 0 interface 7 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 97.880055][ T5264] usb 3-1: New USB device found, idVendor=0f3d, idProduct=68a3, bcdDevice=14.f8 [ 97.897852][ T5264] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.933917][ T5264] usb 3-1: Product: syz [ 97.947495][ T5264] usb 3-1: Manufacturer: syz [ 97.969476][ T5264] usb 3-1: SerialNumber: syz [ 97.992481][ T5264] usb 3-1: config 0 descriptor?? [ 98.017298][ T5264] usb 3-1: Error in usbnet_get_endpoints (-22) [ 98.078101][ T5267] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 98.195073][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 98.195089][ T29] audit: type=1326 audit(1723162962.418:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5773 comm="syz.3.151" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f14b2b779f9 code=0x0 [ 98.270684][ T5267] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.281361][ T5267] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 98.293711][ T5267] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.320773][ T5267] usb 2-1: config 0 descriptor?? [ 98.348613][ T5267] pwc: Askey VC010 type 2 USB webcam detected. [ 98.393314][ T3145] usb 3-1: USB disconnect, device number 3 [ 98.751996][ T5267] pwc: recv_control_msg error -32 req 02 val 2b00 [ 98.803720][ T5267] pwc: recv_control_msg error -32 req 02 val 2700 [ 98.824868][ T5267] pwc: recv_control_msg error -32 req 02 val 2c00 [ 99.035090][ T5267] pwc: recv_control_msg error -71 req 04 val 1300 [ 99.055388][ T5267] pwc: recv_control_msg error -71 req 04 val 1400 [ 99.188385][ T5267] pwc: recv_control_msg error -71 req 02 val 2000 [ 99.519608][ T5267] pwc: recv_control_msg error -71 req 02 val 2100 [ 99.578283][ T5267] pwc: recv_control_msg error -71 req 04 val 1500 [ 99.638475][ T5267] pwc: recv_control_msg error -71 req 02 val 2500 [ 99.678404][ T5267] pwc: recv_control_msg error -71 req 02 val 2400 [ 99.693542][ T5267] pwc: recv_control_msg error -71 req 02 val 2600 [ 99.747736][ T5267] pwc: recv_control_msg error -71 req 02 val 2900 [ 99.755186][ T5267] pwc: recv_control_msg error -71 req 02 val 2800 [ 99.762431][ T5267] pwc: recv_control_msg error -71 req 04 val 1100 [ 99.776256][ T5267] pwc: recv_control_msg error -71 req 04 val 1200 [ 99.800399][ T5267] pwc: Registered as video71. [ 99.839747][ T5267] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input9 [ 100.008589][ T5267] usb 2-1: USB disconnect, device number 5 [ 100.368003][ T5278] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 100.598121][ T58] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 100.622463][ T5809] netlink: 'syz.1.162': attribute type 3 has an invalid length. [ 100.638056][ T5278] usb 3-1: Using ep0 maxpacket: 8 [ 100.639735][ T5809] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.162'. [ 100.656312][ T5278] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 100.673576][ T5278] usb 3-1: config 0 has no interface number 0 [ 100.698085][ T5278] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 100.712852][ T5278] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 100.722139][ T5278] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.743457][ T5278] usb 3-1: config 0 descriptor?? [ 100.760978][ T5269] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 100.768846][ T5278] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 100.819880][ T58] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.835881][ T58] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.845777][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880787b7000: rx timeout, send abort [ 100.873413][ T58] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 100.883820][ T58] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.895559][ T58] usb 1-1: config 0 descriptor?? [ 101.148542][ T5269] usb 5-1: Using ep0 maxpacket: 8 [ 101.346599][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880787b7000: abort rx timeout. Force session deactivation [ 102.792092][ T58] usb 1-1: language id specifier not provided by device, defaulting to English [ 102.816855][ T5269] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 102.831960][ T5269] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 102.843969][ T5269] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 102.873140][ T5269] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.959196][ T5269] usb 5-1: can't set config #32, error -71 [ 103.050120][ T5264] usb 3-1: USB disconnect, device number 4 [ 103.058292][ T5269] usb 5-1: USB disconnect, device number 7 [ 103.082577][ T5264] iowarrior 3-1:0.1: I/O-Warror #0 now disconnected [ 103.481591][ T29] audit: type=1804 audit(1723162967.678:54): pid=5828 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.167" name="/newroot/43/bus/bus" dev="overlay" ino=249 res=1 errno=0 [ 103.542045][ T58] uclogic 0003:256C:006D.0004: failed retrieving string descriptor #100: -71 [ 103.623878][ T58] uclogic 0003:256C:006D.0004: failed retrieving pen parameters: -71 [ 103.758999][ T58] uclogic 0003:256C:006D.0004: failed probing pen v1 parameters: -71 [ 104.102726][ T58] uclogic 0003:256C:006D.0004: failed probing parameters: -71 [ 104.128139][ T58] uclogic 0003:256C:006D.0004: probe with driver uclogic failed with error -71 [ 104.199069][ T58] usb 1-1: USB disconnect, device number 6 [ 104.258107][ T5266] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 104.489737][ T5266] usb 4-1: Using ep0 maxpacket: 8 [ 104.510986][ T5266] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 104.572323][ T5266] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.614211][ T5266] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 104.636425][ T5266] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 104.709329][ T5266] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 104.750180][ T5266] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 104.759925][ T5266] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.768469][ T5266] usb 4-1: Product: syz [ 104.772749][ T5266] usb 4-1: Manufacturer: syz [ 104.777363][ T5266] usb 4-1: SerialNumber: syz [ 105.169232][ T5266] usb 4-1: 0:2 : does not exist [ 105.312502][ T5266] usb 4-1: USB disconnect, device number 6 [ 105.676195][ T5341] udevd[5341]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 107.000307][ T5266] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 107.499380][ T3145] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 108.059354][ T5266] usb 1-1: Using ep0 maxpacket: 32 [ 108.093229][ T5266] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 108.105390][ T5266] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.113732][ T5266] usb 1-1: Product: syz [ 108.122775][ T5266] usb 1-1: Manufacturer: syz [ 108.137465][ T5266] usb 1-1: SerialNumber: syz [ 108.163206][ T5266] usb 1-1: config 0 descriptor?? [ 108.181632][ T5266] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 108.188570][ T3145] usb 4-1: Using ep0 maxpacket: 16 [ 108.202607][ T3145] usb 4-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.225067][ T3145] usb 4-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.240426][ T3145] usb 4-1: config 0 interface 0 has no altsetting 0 [ 108.247346][ T3145] usb 4-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00 [ 108.257274][ T3145] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.283095][ T3145] usb 4-1: config 0 descriptor?? [ 108.298225][ T5314] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 108.484658][ T5889] kvm: emulating exchange as write [ 108.509930][ T5314] usb 3-1: Using ep0 maxpacket: 32 [ 108.531555][ T5314] usb 3-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e [ 108.554213][ T5314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.598167][ T5314] usb 3-1: config 0 descriptor?? [ 108.638724][ T5314] usb 3-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state [ 108.673344][ T5314] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 108.695607][ T5314] dvbdev: DVB: registering new adapter (HCW 126xxx) [ 108.710936][ T5314] usb 3-1: media controller created [ 108.770552][ T5314] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 108.850351][ T5314] usb 3-1: selecting invalid altsetting 1 [ 108.858411][ T3145] kye 0003:0458:500F.0005: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 108.879402][ T5314] set interface failed [ 108.879836][ T5314] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 108.929468][ T3145] kye 0003:0458:500F.0005: hidraw0: USB HID vff.fd Device [HID 0458:500f] on usb-dummy_hcd.3-1/input0 [ 108.940813][ T5314] error writing reg: 0xff, val: 0x00 [ 108.971043][ T3145] kye 0003:0458:500F.0005: tablet-enabling feature report not found [ 109.059958][ T5266] gspca_ov534_9: reg_w failed -71 [ 109.062233][ T3145] kye 0003:0458:500F.0005: tablet enabling failed [ 109.077857][ T5314] dvb_usb_mxl111sf 3-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 109.109279][ T3145] usb 4-1: USB disconnect, device number 7 [ 109.130256][ T5314] usb 3-1: USB disconnect, device number 5 [ 109.528044][ T5266] gspca_ov534_9: Unknown sensor 0000 [ 109.528132][ T5266] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 109.575493][ T5266] usb 1-1: USB disconnect, device number 7 [ 110.098113][ T5266] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 110.318123][ T3145] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 110.327331][ T5266] usb 1-1: config 0 has an invalid interface number: 186 but max is 1 [ 110.347472][ T5266] usb 1-1: config 0 has no interface number 1 [ 110.373602][ T5266] usb 1-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=e5.83 [ 110.388115][ T5266] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.407353][ T5266] usb 1-1: Product: syz [ 110.417402][ T5266] usb 1-1: Manufacturer: syz [ 110.439029][ T5266] usb 1-1: SerialNumber: syz [ 110.450285][ T5266] usb 1-1: config 0 descriptor?? [ 110.465604][ T5266] hub 1-1:0.186: bad descriptor, ignoring hub [ 110.482847][ T5266] hub 1-1:0.186: probe with driver hub failed with error -5 [ 110.518481][ T3145] usb 4-1: Using ep0 maxpacket: 32 [ 110.536384][ T3145] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.576210][ T3145] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.588449][ T5314] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 110.603127][ T3145] usb 4-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 110.614259][ T3145] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.657172][ T3145] usb 4-1: config 0 descriptor?? [ 110.848176][ T5314] usb 3-1: Using ep0 maxpacket: 8 [ 110.865966][ T5314] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 110.894792][ T5314] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 110.931068][ T5314] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 110.958080][ T5314] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 110.984163][ T5314] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 110.988504][ T5267] usb 1-1: USB disconnect, device number 8 [ 111.022976][ T5314] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 111.074312][ T5314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.158764][ T3145] logitech 0003:046D:CA04.0006: hidraw0: USB HID v0.00 Device [HID 046d:ca04] on usb-dummy_hcd.3-1/input0 [ 111.213628][ T3145] logitech 0003:046D:CA04.0006: no inputs found [ 111.340223][ T5314] usb 3-1: usb_control_msg returned -32 [ 111.358769][ T5314] usbtmc 3-1:16.0: can't read capabilities [ 111.451629][ T5267] usb 4-1: USB disconnect, device number 8 [ 115.046747][ T5267] usb 3-1: USB disconnect, device number 6 [ 115.613069][ T5941] binder: 5930:5941 ioctl c0306201 20000680 returned -11 [ 116.222006][ T5950] netlink: 12 bytes leftover after parsing attributes in process `syz.2.205'. [ 116.274349][ T5950] netlink: 'syz.2.205': attribute type 30 has an invalid length. [ 116.538782][ T5957] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0002 with DS=0xe [ 116.964495][ T5969] Bluetooth: MGMT ver 1.23 [ 119.178150][ T5264] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 119.359539][ T5264] usb 1-1: Using ep0 maxpacket: 32 [ 119.388665][ T5264] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.402211][ T5264] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.420065][ T5264] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 119.447346][ T5264] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.495260][ T5264] usb 1-1: config 0 descriptor?? [ 119.510794][ T5264] hub 1-1:0.0: USB hub found [ 119.628070][ T5314] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 119.721745][ T5264] hub 1-1:0.0: 1 port detected [ 119.825964][ T6022] warning: `syz.4.227' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 119.942656][ T5264] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 119.995580][ T5264] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 120.176407][ T5264] usbhid 1-1:0.0: can't add hid device: -71 [ 120.242921][ T5264] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 120.431854][ T5264] usb 1-1: USB disconnect, device number 9 [ 120.619368][ T5314] usb 3-1: Using ep0 maxpacket: 8 [ 120.652232][ T5314] usb 3-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 120.674606][ T5314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.687795][ T5314] usb 3-1: Product: syz [ 120.692131][ T5269] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 120.700174][ T5314] usb 3-1: Manufacturer: syz [ 120.704805][ T5314] usb 3-1: SerialNumber: syz [ 120.718910][ T5314] usb 3-1: config 0 descriptor?? [ 120.888105][ T5269] usb 2-1: Using ep0 maxpacket: 32 [ 120.896801][ T5269] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 120.910896][ T5269] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 120.923923][ T5269] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 120.938152][ T5266] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 120.967700][ T5269] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 120.979085][ T5269] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.987141][ T5269] usb 2-1: Product: syz [ 120.991497][ T5269] usb 2-1: Manufacturer: 䙡 [ 120.996143][ T5269] usb 2-1: SerialNumber: syz [ 121.038139][ T5264] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 121.163889][ T5266] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.222109][ T5266] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.248247][ T5266] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 121.259502][ T5264] usb 1-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=9f.d4 [ 121.280230][ T5266] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.288647][ T5266] usb 5-1: Product: syz [ 121.292869][ T5266] usb 5-1: Manufacturer: syz [ 121.300532][ T5266] usb 5-1: SerialNumber: syz [ 121.302578][ T5264] usb 1-1: New USB device strings: Mfr=188, Product=0, SerialNumber=0 [ 121.327468][ T5264] usb 1-1: Manufacturer: syz [ 121.338420][ T5314] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 121.353786][ T5264] usb 1-1: config 0 descriptor?? [ 121.356786][ T5314] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 121.367498][ T5314] dib0700: firmware download failed at 7 with -22 [ 121.395639][ T5314] usb 3-1: USB disconnect, device number 7 [ 121.504806][ T5269] usb 2-1: 0:2 : does not exist [ 121.571661][ T5269] usb 2-1: USB disconnect, device number 6 [ 121.826753][ T5917] udevd[5917]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 121.982775][ T5264] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 122.926425][ T6040] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nbd3": -EINTR [ 122.979534][ T5264] gs_usb 1-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 122.998177][ T5266] cdc_ncm 5-1:1.0: bind() failure [ 123.018933][ T5266] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 123.057824][ T5266] cdc_ncm 5-1:1.1: bind() failure [ 123.106783][ T5264] gs_usb 1-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 123.123134][ T5264] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71 [ 123.139551][ T5264] usb 1-1: USB disconnect, device number 10 [ 123.307629][ T6027] netlink: 2 bytes leftover after parsing attributes in process `syz.4.230'. [ 126.028369][ T6027] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.127267][ T5269] usb 5-1: USB disconnect, device number 8 [ 128.525241][ T6083] netlink: 'syz.3.247': attribute type 10 has an invalid length. [ 128.538101][ T58] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 128.557752][ T6083] geneve0: entered promiscuous mode [ 128.599051][ T6083] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 128.776894][ T58] usb 2-1: config 0 has no interfaces? [ 128.788318][ T58] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 128.797607][ T58] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.805902][ T58] usb 2-1: Product: syz [ 128.808527][ T5264] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 128.818007][ T58] usb 2-1: Manufacturer: syz [ 128.818031][ T58] usb 2-1: SerialNumber: syz [ 128.829664][ T58] usb 2-1: config 0 descriptor?? [ 129.034124][ T5264] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 34, using maximum allowed: 30 [ 129.046142][ T5264] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.056636][ T5269] usb 2-1: USB disconnect, device number 7 [ 129.071862][ T5264] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.099126][ T5264] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 129.121308][ T5264] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 129.135901][ T5264] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.151273][ T5264] usb 3-1: config 0 descriptor?? [ 129.405964][ T6100] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 129.691390][ T5264] wacom 0003:056A:0331.0007: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.2-1/input0 [ 129.832971][ T5264] usb 3-1: USB disconnect, device number 8 [ 129.918951][ T5269] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 130.049574][ T3145] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 130.148303][ T5269] usb 4-1: Using ep0 maxpacket: 8 [ 130.160879][ T5269] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 130.193846][ T5269] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.218943][ T5269] usb 4-1: config 0 descriptor?? [ 130.248167][ T3145] usb 2-1: Using ep0 maxpacket: 8 [ 130.260108][ T3145] usb 2-1: config 0 has no interfaces? [ 130.266857][ T3145] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 130.300158][ T3145] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.338823][ T3145] usb 2-1: config 0 descriptor?? [ 130.708099][ T3145] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 130.825593][ T6135] netlink: 28 bytes leftover after parsing attributes in process `syz.0.268'. [ 130.834994][ T6135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.268'. [ 130.850766][ T5269] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 130.853578][ T6135] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 130.869548][ T5269] asix 4-1:0.0: probe with driver asix failed with error -71 [ 130.877628][ T6135] batadv_slave_1: entered promiscuous mode [ 130.884001][ T5269] usb 4-1: USB disconnect, device number 9 [ 130.898147][ T3145] usb 5-1: Using ep0 maxpacket: 16 [ 130.916515][ T3145] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.936992][ T3145] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.964067][ T3145] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 130.987345][ T3145] usb 5-1: config 0 interface 0 has no altsetting 0 [ 130.994479][ T3145] usb 5-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 131.003960][ T3145] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.015078][ T6139] tipc: Started in network mode [ 131.021575][ T3145] usb 5-1: config 0 descriptor?? [ 131.036491][ T6139] tipc: Node identity ac1414aa, cluster identity 4711 [ 131.047067][ T6139] tipc: Enabled bearer , priority 10 [ 131.454034][ T3145] hid (null): usage index exceeded [ 131.481555][ T3145] hid-generic 0003:045E:05DA.0008: ignoring exceeding usage max [ 131.500181][ T3145] hid-generic 0003:045E:05DA.0008: usage index exceeded [ 131.507177][ T3145] hid-generic 0003:045E:05DA.0008: item 0 4 2 0 parsing failed [ 131.552154][ T3145] hid-generic 0003:045E:05DA.0008: probe with driver hid-generic failed with error -22 [ 131.772854][ T6122] kernel profiling enabled (shift: 9) [ 131.799880][ T6122] netlink: 12 bytes leftover after parsing attributes in process `syz.4.262'. [ 131.899026][ T58] usb 5-1: USB disconnect, device number 9 [ 131.917360][ T6158] netlink: 124 bytes leftover after parsing attributes in process `syz.2.274'. [ 131.928686][ T6158] netlink: 124 bytes leftover after parsing attributes in process `syz.2.274'. [ 132.040180][ T5269] tipc: Node number set to 2886997162 [ 132.359602][ T6166] netlink: 12 bytes leftover after parsing attributes in process `syz.2.277'. [ 132.751372][ T3145] usb 2-1: USB disconnect, device number 8 [ 132.808077][ T5267] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 132.988043][ T5267] usb 3-1: Using ep0 maxpacket: 32 [ 133.035004][ T5267] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.060623][ T5267] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.088066][ T5267] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 133.097148][ T5267] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.148435][ T5267] hub 3-1:4.0: USB hub found [ 133.318530][ T1258] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.335517][ T1258] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.364061][ T5267] hub 3-1:4.0: config failed, hub has too many ports! (err -19) [ 133.381574][ T6192] capability: warning: `syz.0.287' uses deprecated v2 capabilities in a way that may be insecure [ 134.317082][ T5269] usb 3-1: USB disconnect, device number 9 [ 134.782999][ T5267] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 135.001397][ T5267] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.032613][ T5267] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.064838][ T5267] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 135.089700][ T5267] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.119123][ T5267] usb 5-1: config 0 descriptor?? [ 135.328445][ T5269] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 135.346055][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 135.518135][ T5269] usb 3-1: Using ep0 maxpacket: 16 [ 135.541999][ T5269] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.544947][ T5267] appleir 0003:05AC:8241.0009: item fetching failed at offset 5/7 [ 135.555150][ T5269] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.571716][ T6245] evm: overlay not supported [ 135.578388][ T5267] appleir 0003:05AC:8241.0009: parse failed [ 135.583478][ T29] audit: type=1804 audit(1723162999.798:55): pid=6245 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.303" name="/newroot/64/bus/file0" dev="overlay" ino=354 res=1 errno=0 [ 135.591115][ T5267] appleir 0003:05AC:8241.0009: probe with driver appleir failed with error -22 [ 135.620082][ T5269] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 135.632730][ T5269] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.645714][ T5269] usb 3-1: config 0 descriptor?? [ 135.847785][ T5267] usb 5-1: USB disconnect, device number 10 [ 136.081876][ T6228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.090839][ T6228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.103334][ T5269] hid (null): unknown global tag 0xd [ 136.109040][ T5269] hid (null): unknown global tag 0xd [ 136.114493][ T5269] hid (null): report_id 40203 is invalid [ 136.120524][ T5269] hid (null): invalid report_size -1862471209 [ 136.126694][ T5269] hid (null): invalid report_size -1217885453 [ 136.134483][ T5269] hid (null): unknown global tag 0x36 [ 136.303400][ T5269] usb 3-1: string descriptor 0 read error: -71 [ 136.308302][ T5264] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 136.338384][ T5269] usb 3-1: Max retries (5) exceeded reading string descriptor 200 [ 136.346414][ T5269] letsketch 0003:6161:4D15.000A: probe with driver letsketch failed with error -32 [ 136.365919][ T5269] usb 3-1: USB disconnect, device number 10 [ 136.501924][ T5264] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.514444][ T5264] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 136.527454][ T5264] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 136.542766][ T5264] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.551786][ T5267] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 136.569587][ T5264] usb 2-1: config 0 descriptor?? [ 136.738533][ T5267] usb 1-1: Using ep0 maxpacket: 32 [ 136.750677][ T5267] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.761423][ T5267] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 136.787320][ T5267] usb 1-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=a7.c0 [ 136.798414][ T5267] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.806561][ T5267] usb 1-1: Product: syz [ 136.811683][ T5267] usb 1-1: Manufacturer: syz [ 136.816418][ T5267] usb 1-1: SerialNumber: syz [ 136.826779][ T5267] usb 1-1: config 0 descriptor?? [ 136.849908][ T5267] qmi_wwan 1-1:0.0: probe with driver qmi_wwan failed with error -22 [ 137.165946][ T58] usb 1-1: USB disconnect, device number 11 [ 137.169832][ T5264] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 137.208428][ T5264] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 137.954899][ T6284] Illegal XDP return value 4294967274 on prog (id 46) dev N/A, expect packet loss! [ 138.045598][ T5264] usb 2-1: USB disconnect, device number 9 [ 138.398143][ T58] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 138.573291][ T29] audit: type=1326 audit(1723163002.798:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6290 comm="syz.4.323" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1925d779f9 code=0x0 [ 138.632060][ T58] usb 4-1: Using ep0 maxpacket: 32 [ 138.649892][ T58] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 138.677876][ T58] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 138.702949][ T58] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 138.731938][ T58] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 138.753636][ T58] usb 4-1: config 0 interface 0 has no altsetting 0 [ 138.797161][ T58] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 138.814378][ T58] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 138.829369][ T58] usb 4-1: Product: syz [ 138.833580][ T58] usb 4-1: Manufacturer: syz [ 138.839799][ T58] usb 4-1: SerialNumber: syz [ 138.854321][ T58] usb 4-1: config 0 descriptor?? [ 138.873672][ T58] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 138.916410][ T58] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 139.158819][ T29] audit: type=1326 audit(1723163003.388:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6287 comm="syz.3.322" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f14b2b779f9 code=0x0 [ 139.267453][ T5314] usb 4-1: USB disconnect, device number 10 [ 139.283657][ T5314] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 140.057695][ T6289] netlink: 2036 bytes leftover after parsing attributes in process `syz.0.321'. [ 140.068512][ T6289] netlink: 24 bytes leftover after parsing attributes in process `syz.0.321'. [ 143.208861][ T58] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 143.289140][ T6365] kvm_intel: kvm [6364]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x1 [ 143.378093][ T29] audit: type=1400 audit(1723163007.598:58): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=6372 comm="syz.2.348" dest=20002 netif=wpan0 [ 143.428269][ T58] usb 1-1: Using ep0 maxpacket: 8 [ 143.442654][ T58] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 143.466830][ T58] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 143.480375][ T58] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 143.495331][ T58] usb 1-1: New USB device found, idVendor=05da, idProduct=0099, bcdDevice=d5.82 [ 143.504847][ T58] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.516594][ T58] usb 1-1: Product: syz [ 143.520953][ T58] usb 1-1: Manufacturer: syz [ 143.525840][ T58] usb 1-1: SerialNumber: syz [ 143.543163][ T58] usb 1-1: config 0 descriptor?? [ 143.558353][ T58] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 2 is not bulk. [ 143.568652][ T58] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 10 is not bulk. [ 143.579693][ T58] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 15 is not bulk. [ 143.591129][ T58] microtek usb (rev 0.4.3): couldn't find two input bulk endpoints. Bailing out. [ 143.798143][ T5264] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 143.801834][ T58] usb 1-1: USB disconnect, device number 12 [ 143.988674][ T5264] usb 3-1: Using ep0 maxpacket: 8 [ 143.998993][ T5264] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.023524][ T5264] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 144.036577][ T5264] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.045795][ T5264] usb 3-1: Product: syz [ 144.050742][ T5264] usb 3-1: Manufacturer: syz [ 144.056103][ T5264] usb 3-1: SerialNumber: syz [ 144.111068][ T6396] netlink: 'syz.4.357': attribute type 10 has an invalid length. [ 144.153613][ T6396] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 144.458647][ T5267] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 144.498067][ T58] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 144.672591][ T5267] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.688259][ T58] usb 2-1: Using ep0 maxpacket: 16 [ 144.694501][ T5267] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.715277][ T5267] usb 4-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 144.721053][ T58] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.737761][ T5267] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.753320][ T5267] usb 4-1: config 0 descriptor?? [ 144.758131][ T58] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 144.777862][ T58] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 144.797841][ T58] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.842748][ T58] usb 2-1: config 0 descriptor?? [ 145.111088][ T5264] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 145.118257][ T5264] cdc_ncm 3-1:1.0: setting tx_max = 184 [ 145.276765][ T5267] uclogic 0003:2179:0053.000C: interface is invalid, ignoring [ 145.317006][ T58] microsoft 0003:045E:07DA.000D: No inputs registered, leaving [ 145.340676][ T58] microsoft 0003:045E:07DA.000D: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 145.373872][ T58] microsoft 0003:045E:07DA.000D: no inputs found [ 145.380813][ T58] microsoft 0003:045E:07DA.000D: could not initialize ff, continuing anyway [ 145.548321][ T5267] usb 4-1: USB disconnect, device number 11 [ 145.568470][ T5264] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 145.619513][ T5264] usb 3-1: USB disconnect, device number 11 [ 145.634240][ T5264] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 145.685175][ T6428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.711056][ T6428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.861603][ T58] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 145.932982][ T6434] netlink: 48 bytes leftover after parsing attributes in process `syz.0.372'. [ 146.001962][ T5278] usb 2-1: USB disconnect, device number 10 [ 146.068084][ T58] usb 5-1: Using ep0 maxpacket: 8 [ 146.080324][ T58] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 146.103602][ T58] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 146.113353][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.151516][ T58] usb 5-1: config 0 descriptor?? [ 146.387512][ T58] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 146.488462][ T5269] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 146.538095][ T5264] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 146.688102][ T5269] usb 4-1: Using ep0 maxpacket: 16 [ 146.701689][ T5269] usb 4-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 146.714128][ T5269] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.723126][ T5269] usb 4-1: Product: syz [ 146.732143][ T5269] usb 4-1: Manufacturer: syz [ 146.738564][ T5264] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.749577][ T5269] usb 4-1: SerialNumber: syz [ 146.766203][ T5269] usb 4-1: config 0 descriptor?? [ 146.778055][ T5264] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.790336][ T54] Bluetooth: hci1: unexpected subevent 0x0e length: 244 > 15 [ 146.799404][ T5264] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 146.954833][ T5264] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 146.981041][ T5264] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.640217][ T5269] peak_usb 4-1:0.0: PEAK-System PCAN-Chip USB v169 fw v83.176.175 (1 channels) [ 147.690165][ T5269] peak_usb 4-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 147.931847][ T5264] usb 3-1: config 0 descriptor?? [ 147.951755][ T5269] peak_usb 4-1:0.0: unable to tell PCAN-Chip USB driver is loaded (err -71) [ 148.084164][ T5269] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -71 [ 148.138647][ T5269] usb 4-1: USB disconnect, device number 12 [ 148.383598][ T5264] acrux 0003:1A34:0802.000E: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.2-1/input0 [ 148.415441][ T5264] acrux 0003:1A34:0802.000E: no inputs found [ 148.424864][ T5264] acrux 0003:1A34:0802.000E: Failed to enable force feedback support, error: -19 [ 148.528186][ T5220] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 148.740059][ T5220] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.758145][ T5220] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.781063][ T5220] usb 2-1: New USB device found, idVendor=056a, idProduct=033c, bcdDevice= 0.00 [ 148.790305][ T5220] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.817503][ T5220] usb 2-1: config 0 descriptor?? [ 148.878106][ T5269] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 150.027617][ T5220] wacom 0003:056A:033C.000F: Unknown device_type for 'HID 056a:033c'. Assuming pen. [ 150.079194][ T5264] usb 3-1: reset high-speed USB device number 12 using dummy_hcd [ 150.131230][ T5220] wacom 0003:056A:033C.000F: hidraw1: USB HID v0.00 Device [HID 056a:033c] on usb-dummy_hcd.1-1/input0 [ 150.173707][ T5220] input: Wacom Intuos PT S 2 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:033C.000F/input/input14 [ 150.303360][ T5220] usb 2-1: USB disconnect, device number 11 [ 150.374005][ T5269] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 150.385221][ T5269] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.398004][ T5269] usb 4-1: Product: syz [ 150.402213][ T5269] usb 4-1: Manufacturer: syz [ 150.406828][ T5269] usb 4-1: SerialNumber: syz [ 150.440919][ T5269] usb 4-1: config 0 descriptor?? [ 150.456767][ T5269] ch341 4-1:0.0: ch341-uart converter detected [ 150.857628][ T6492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.940386][ T25] usb 3-1: USB disconnect, device number 12 [ 151.009573][ T54] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 151.018697][ T54] Bluetooth: hci1: Injecting HCI hardware error event [ 151.029373][ T54] Bluetooth: hci1: hardware error 0x00 [ 151.749077][ T5269] usb 4-1: ch341-uart converter now attached to ttyUSB0 [ 151.884846][ T6521] netlink: 24 bytes leftover after parsing attributes in process `syz.4.404'. [ 151.908356][ T6521] netlink: 40 bytes leftover after parsing attributes in process `syz.4.404'. [ 151.978955][ T58] usb 4-1: USB disconnect, device number 13 [ 152.008082][ T25] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 152.008282][ T58] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 152.053412][ T58] ch341 4-1:0.0: device disconnected [ 152.220099][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 152.230198][ T25] usb 3-1: config 0 has an invalid interface number: 107 but max is 0 [ 152.248251][ T25] usb 3-1: config 0 has no interface number 0 [ 152.265661][ T25] usb 3-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 152.299947][ T25] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 152.309725][ T25] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 152.319899][ T25] usb 3-1: Product: syz [ 152.324227][ T25] usb 3-1: Manufacturer: syz [ 152.331171][ T25] usb 3-1: SerialNumber: syz [ 152.339482][ T25] usb 3-1: config 0 descriptor?? [ 152.348085][ T25] keyspan 3-1:0.107: Keyspan 4 port adapter converter detected [ 152.356170][ T25] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 81 [ 152.367367][ T25] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 1 [ 152.380068][ T25] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 152.393241][ T25] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 2 [ 152.404606][ T25] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 152.420036][ T25] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 4 [ 152.448689][ T25] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 152.470708][ T25] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 6 [ 152.514768][ T25] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 152.579242][ T25] usb 3-1: USB disconnect, device number 13 [ 152.611098][ T25] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 152.686381][ T25] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 152.746873][ T25] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 152.760008][ T6532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.773476][ T25] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 152.791262][ T25] keyspan 3-1:0.107: device disconnected [ 152.802690][ T6532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.091345][ T54] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 153.568254][ T5220] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 153.720285][ T58] usb 5-1: USB disconnect, device number 11 [ 153.767888][ T58] iowarrior 5-1:0.0: I/O-Warror #0 now disconnected [ 153.791778][ T5220] usb 1-1: Using ep0 maxpacket: 8 [ 153.821167][ T5220] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 153.857480][ T5220] usb 1-1: New USB device found, idVendor=10cf, idProduct=8062, bcdDevice=f0.04 [ 153.893735][ T5220] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.954512][ T5220] usb 1-1: config 0 descriptor?? [ 154.003744][ T5220] vmk80xx 1-1:0.0: driver 'vmk80xx' failed to auto-configure device. [ 154.266384][ T6574] trusted_key: syz.2.422 sent an empty control message without MSG_MORE. [ 154.314502][ T5264] usb 1-1: USB disconnect, device number 13 [ 154.479026][ T5220] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 154.691915][ T5220] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 154.731155][ T5220] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 154.754553][ T5220] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 154.798128][ T5220] usb 5-1: config 0 interface 0 has no altsetting 0 [ 154.825446][ T5220] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 154.848748][ T29] audit: type=1326 audit(1723163019.068:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6584 comm="syz.3.427" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f14b2b779f9 code=0x0 [ 154.888208][ T5220] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 154.908964][ T5220] usb 5-1: config 0 interface 0 has no altsetting 0 [ 154.950844][ T5220] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 155.092537][ T5269] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 155.169003][ T54] Bluetooth: hci1: Opcode 0x206c failed: -110 [ 155.176441][ T5220] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 155.189577][ T5220] usb 5-1: config 0 interface 0 has no altsetting 0 [ 155.199367][ T5220] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 155.218455][ T5220] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 155.345978][ T6591] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 155.368316][ T5220] usb 5-1: config 0 interface 0 has no altsetting 0 [ 155.386616][ T5220] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 155.398247][ T5220] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 155.654820][ T5220] usb 5-1: config 0 interface 0 has no altsetting 0 [ 155.817909][ T5220] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 155.892607][ T5220] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 155.914946][ T5220] usb 5-1: config 0 interface 0 has no altsetting 0 [ 155.914957][ T5269] usb 3-1: Using ep0 maxpacket: 32 [ 155.916689][ T5220] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 155.965104][ T5269] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 155.975526][ T5220] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 156.003184][ T5269] usb 3-1: config 0 has no interface number 0 [ 156.008058][ T5220] usb 5-1: config 0 interface 0 has no altsetting 0 [ 156.021111][ T5269] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.037787][ T5269] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.038379][ T5220] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 156.062300][ T5220] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 156.088069][ T5220] usb 5-1: config 0 interface 0 has no altsetting 0 [ 156.093514][ T5269] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 156.109544][ T5269] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.124252][ T5220] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 156.147628][ T5269] usb 3-1: config 0 descriptor?? [ 156.166908][ T5220] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 156.178391][ T5220] usb 5-1: Product: syz [ 156.184296][ T5220] usb 5-1: Manufacturer: syz [ 156.206210][ T5220] usb 5-1: SerialNumber: syz [ 156.219700][ T5220] usb 5-1: config 0 descriptor?? [ 156.241536][ T5220] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 156.735985][ C1] usb 5-1: yurex_control_callback - control failed: -71 [ 156.737816][ T5278] usb 5-1: USB disconnect, device number 12 [ 156.856781][ T5269] input: HID 28bd:0094 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0094.0010/input/input17 [ 156.925671][ T5278] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 157.141645][ T5269] uclogic 0003:28BD:0094.0010: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.2-1/input1 [ 157.202547][ T5269] usb 3-1: USB disconnect, device number 14 [ 157.249363][ T54] Bluetooth: hci1: Opcode 0x2046 failed: -110 [ 157.588071][ T5278] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 157.959421][ T5278] usb 4-1: Using ep0 maxpacket: 32 [ 157.969281][ T5278] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.983295][ T5278] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.996394][ T5278] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 158.173699][ T5278] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.456147][ T5278] hub 4-1:4.0: USB hub found [ 158.742893][ T5278] hub 4-1:4.0: 2 ports detected [ 159.432991][ T5266] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 159.658222][ T5266] usb 5-1: Using ep0 maxpacket: 16 [ 159.676348][ T5266] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.695597][ T5266] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.729672][ T5266] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 159.768079][ T5266] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 159.805706][ T5266] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.847822][ T5266] usb 5-1: config 0 descriptor?? [ 160.055897][ T5269] hub 4-1:4.0: activate --> -90 [ 160.189389][ T6679] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 160.208677][ T6679] overlayfs: failed to set xattr on upper [ 160.214554][ T6679] overlayfs: ...falling back to redirect_dir=nofollow. [ 160.228207][ T6679] overlayfs: ...falling back to metacopy=off. [ 160.237293][ T6679] overlayfs: ...falling back to index=off. [ 160.249224][ T6679] overlayfs: ...falling back to uuid=null. [ 160.286222][ T5266] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 160.315654][ T5266] microsoft 0003:045E:07DA.0011: ignoring exceeding usage max [ 160.378335][ T5266] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0011/input/input18 [ 160.398057][ T5269] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 160.491787][ T5266] microsoft 0003:045E:07DA.0011: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 160.558950][ T5266] usb 5-1: USB disconnect, device number 13 [ 160.609645][ T5370] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xe5 [ 160.630053][ T5269] usb 2-1: Using ep0 maxpacket: 8 [ 160.668389][ T5269] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 160.718848][ T5269] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.727252][ T5269] usb 2-1: Product: syz [ 160.740153][ T5269] usb 2-1: Manufacturer: syz [ 160.745495][ T5269] usb 2-1: SerialNumber: syz [ 160.761643][ T5269] usb 2-1: config 0 descriptor?? [ 160.775051][ T5269] gspca_main: se401-2.14.0 probing 047d:5003 [ 160.854362][ T6699] ax25_connect(): syz.2.467 uses autobind, please contact jreuter@yaina.de [ 161.069041][ T5278] usb 4-1-port1: cannot reset (err = -71) [ 161.069482][ T5220] usb 4-1: USB disconnect, device number 14 [ 161.076745][ T5278] usb 4-1-port1: Cannot enable. Maybe the USB cable is bad? [ 161.077362][ T5278] usb 4-1-port1: attempt power cycle [ 161.699106][ T5269] usb 2-1: reset high-speed USB device number 12 using dummy_hcd [ 162.203697][ T5266] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 162.472838][ T5266] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.615583][ T5266] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 162.784999][ T5266] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 162.868721][ T5266] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 162.900847][ T5269] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 162.912519][ T5266] usb 4-1: SerialNumber: syz [ 162.956612][ T5269] se401 2-1:0.0: probe with driver se401 failed with error -71 [ 163.010409][ T5269] usb 2-1: USB disconnect, device number 12 [ 163.204383][ T5266] usb 4-1: 0:2 : does not exist [ 163.227482][ T5266] usb 4-1: unit 255 not found! [ 163.242039][ T5266] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 163.248919][ T54] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 163.260707][ T54] Bluetooth: hci3: Injecting HCI hardware error event [ 163.269891][ T54] Bluetooth: hci3: hardware error 0x00 [ 163.271601][ T5266] usb 4-1: 5:0: cannot get min/max values for control 6 (id 5) [ 163.338246][ T5266] usb 4-1: 5:0: cannot get min/max values for control 9 (id 5) [ 163.473094][ T5266] usb 4-1: USB disconnect, device number 19 [ 163.600121][ T6752] Dead loop on virtual device ip6_vti0, fix it urgently! [ 163.623961][ T6752] Dead loop on virtual device ip6_vti0, fix it urgently! [ 163.654264][ T6752] Dead loop on virtual device ip6_vti0, fix it urgently! [ 163.662791][ T6752] Dead loop on virtual device ip6_vti0, fix it urgently! [ 163.671775][ T6752] Dead loop on virtual device ip6_vti0, fix it urgently! [ 163.680453][ T6752] Dead loop on virtual device ip6_vti0, fix it urgently! [ 163.742209][ T29] audit: type=1326 audit(1723163027.968:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6756 comm="syz.0.490" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3346b779f9 code=0x0 [ 163.768150][ C0] vkms_vblank_simulate: vblank timer overrun [ 163.782249][ T5917] udevd[5917]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 163.898176][ T5220] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 163.986781][ T6764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.493'. [ 164.098151][ T5220] usb 2-1: Using ep0 maxpacket: 32 [ 164.112604][ T5220] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 164.115751][ T29] audit: type=1804 audit(1723163028.338:61): pid=6769 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.2.494" name="/newroot/97/file0" dev="fuse" ino=1 res=1 errno=0 [ 164.123908][ T5220] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.176415][ T5220] usb 2-1: Product: syz [ 164.190095][ T5220] usb 2-1: Manufacturer: syz [ 164.195333][ T5220] usb 2-1: SerialNumber: syz [ 164.206421][ T5220] usb 2-1: config 0 descriptor?? [ 164.221240][ T5220] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 164.238263][ T5267] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 164.453476][ T5267] usb 4-1: New USB device found, idVendor=59cc, idProduct=980d, bcdDevice=b4.8e [ 164.467637][ T5267] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.490844][ T5267] usb 4-1: config 0 descriptor?? [ 165.331568][ T54] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 165.368155][ T5267] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 165.570100][ T5267] usb 3-1: Using ep0 maxpacket: 8 [ 165.592942][ T5267] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.612076][ T5267] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 165.640244][ T5269] usb 4-1: USB disconnect, device number 20 [ 165.646368][ T5267] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 165.699286][ T5267] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 165.728150][ T5267] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 165.788822][ T5267] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 165.817365][ T5267] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 165.844790][ T5267] usb 3-1: Product: syz [ 165.857164][ T5267] usb 3-1: Manufacturer: syz [ 165.867920][ T5267] usb 3-1: SerialNumber: syz [ 165.901557][ T5267] usb 3-1: config 0 descriptor?? [ 166.169281][ T5267] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 166.180351][ T5267] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 166.184988][ T6792] netlink: 8 bytes leftover after parsing attributes in process `syz.0.501'. [ 166.395467][ T5267] radio-si470x 3-1:0.0: software version 0, hardware version 0 [ 166.437851][ T5267] radio-si470x 3-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 166.467739][ T5267] radio-si470x 3-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 166.578096][ T5267] radio-si470x 3-1:0.0: submitting int urb failed (-90) [ 166.791970][ C1] hrtimer: interrupt took 151286 ns [ 167.119878][ T5220] gspca_stk1135: reg_w 0x351 err -71 [ 167.151495][ T5220] gspca_stk1135: serial bus timeout: status=0x00 [ 167.169612][ T5220] gspca_stk1135: Sensor write failed [ 167.176762][ T5220] gspca_stk1135: serial bus timeout: status=0x00 [ 167.196319][ T5220] gspca_stk1135: Sensor write failed [ 167.205622][ T5220] gspca_stk1135: serial bus timeout: status=0x00 [ 167.213869][ T5220] gspca_stk1135: Sensor read failed [ 167.220855][ T5220] gspca_stk1135: serial bus timeout: status=0x00 [ 167.261009][ T5220] gspca_stk1135: Sensor read failed [ 167.273753][ T5220] gspca_stk1135: Detected sensor type unknown (0x0) [ 167.307175][ T5220] gspca_stk1135: serial bus timeout: status=0x00 [ 167.329034][ T5220] gspca_stk1135: Sensor read failed [ 167.334339][ T5220] gspca_stk1135: serial bus timeout: status=0x00 [ 167.374081][ T5220] gspca_stk1135: Sensor read failed [ 167.383253][ T5220] gspca_stk1135: serial bus timeout: status=0x00 [ 167.400938][ T5220] gspca_stk1135: Sensor write failed [ 167.406350][ T5220] gspca_stk1135: serial bus timeout: status=0x00 [ 167.415977][ T5220] gspca_stk1135: Sensor write failed [ 167.424194][ T5220] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 167.450977][ T5220] usb 2-1: USB disconnect, device number 13 [ 167.509051][ T3145] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 167.731293][ T3145] usb 1-1: Using ep0 maxpacket: 16 [ 167.771057][ T3145] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA5, changing to 0x85 [ 167.788537][ T3145] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 167.799792][ T5267] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 167.815658][ T3145] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 167.833631][ T5267] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 167.845724][ T3145] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 167.865276][ T3145] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.908763][ T5267] usb 3-1: USB disconnect, device number 15 [ 167.928896][ T3145] usb 1-1: Product: syz [ 167.934148][ T3145] usb 1-1: Manufacturer: syz [ 167.978107][ T3145] usb 1-1: SerialNumber: syz [ 168.025666][ T3145] usb 1-1: config 0 descriptor?? [ 168.117033][ T3145] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input19 [ 168.263534][ T6824] netlink: 'syz.1.514': attribute type 1 has an invalid length. [ 168.288471][ T6824] netlink: 168 bytes leftover after parsing attributes in process `syz.1.514'. [ 168.325258][ T6824] netlink: 'syz.1.514': attribute type 1 has an invalid length. [ 168.379220][ T6824] netlink: 20 bytes leftover after parsing attributes in process `syz.1.514'. [ 168.412295][ T5267] usb 1-1: USB disconnect, device number 14 [ 168.760114][ T6835] netlink: 48 bytes leftover after parsing attributes in process `syz.2.518'. [ 169.088500][ T5267] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 169.298972][ T5267] usb 5-1: Using ep0 maxpacket: 32 [ 169.311586][ T5267] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 169.322101][ T5267] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.331308][ T5267] usb 5-1: Product: syz [ 169.336258][ T5267] usb 5-1: Manufacturer: syz [ 169.342573][ T5267] usb 5-1: SerialNumber: syz [ 169.575502][ T5267] usb 5-1: config 0 descriptor?? [ 169.757794][ T6860] netlink: 48 bytes leftover after parsing attributes in process `syz.0.527'. [ 170.598717][ T6869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.530'. [ 170.613906][ T6869] macsec0: entered promiscuous mode [ 171.324215][ T5267] peak_usb 5-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 171.363098][ T5267] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 171.396619][ T5267] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 171.455345][ T6876] netlink: 'syz.2.533': attribute type 2 has an invalid length. [ 171.477433][ T6876] netlink: 'syz.2.533': attribute type 1 has an invalid length. [ 171.493735][ T5267] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -22 [ 171.547466][ T5267] usb 5-1: USB disconnect, device number 14 [ 171.727857][ T6886] mmap: syz.0.534 (6886) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 172.758113][ T5266] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 172.904871][ T6907] sp0: Synchronizing with TNC [ 172.934056][ T6908] sp0: Found TNC [ 172.978186][ T5266] usb 2-1: Using ep0 maxpacket: 16 [ 172.985202][ T6904] [U] è` [ 173.002790][ T5266] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 173.028039][ T5266] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 173.094517][ T5266] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 173.141145][ T5266] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 173.181267][ T5266] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 173.205714][ T5266] usb 2-1: config 0 has no interface number 0 [ 173.228030][ T5266] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 173.269992][ T5266] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 173.298477][ T5266] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 173.532638][ T5266] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 173.555747][ T5266] usb 2-1: config 0 interface 125 has no altsetting 0 [ 173.566170][ T5266] usb 2-1: config 0 interface 125 has no altsetting 2 [ 174.346272][ T5266] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 174.347492][ T6922] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 174.365479][ T6922] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 174.408450][ T6922] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 174.417580][ T6922] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 174.427556][ T5266] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.427585][ T5266] usb 2-1: Product: syz [ 174.427601][ T5266] usb 2-1: Manufacturer: syz [ 174.427615][ T5266] usb 2-1: SerialNumber: syz [ 174.439097][ T5266] usb 2-1: config 0 descriptor?? [ 174.485325][ T6922] ------------[ cut here ]------------ [ 174.491053][ T6922] WARNING: CPU: 1 PID: 6922 at kernel/kcov.c:871 kcov_remote_start+0x542/0x7d0 [ 174.501415][ T6922] Modules linked in: [ 174.505391][ T6922] CPU: 1 UID: 0 PID: 6922 Comm: syz.3.548 Not tainted 6.11.0-rc2-syzkaller-00042-gcf6d429eb656 #0 [ 174.516173][ T6922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 174.526360][ T6922] RIP: 0010:kcov_remote_start+0x542/0x7d0 [ 174.532264][ T6922] Code: 4c 89 ff be 03 00 00 00 e8 6b 3f 14 03 e9 04 fb ff ff e8 d1 b5 19 0a 41 f7 c6 00 02 00 00 0f 84 f2 fa ff ff e9 7f fc ff ff 90 <0f> 0b 90 e8 f6 d2 19 0a 89 c0 48 c7 c7 c8 d4 02 00 48 03 3c c5 40 [ 174.552167][ T6922] RSP: 0018:ffffc900045ef2b0 EFLAGS: 00010002 [ 174.558343][ T6922] RAX: 0000000080000200 RBX: ffff888027b1bc00 RCX: 0000000000000002 [ 174.566584][ T6922] RDX: dffffc0000000000 RSI: ffffffff8beae6e0 RDI: ffffffff8c3f8b40 [ 174.574824][ T6922] RBP: 0000000000000000 R08: ffffffff934ee86f R09: 1ffffffff269dd0d [ 174.582984][ T6922] R10: dffffc0000000000 R11: fffffbfff269dd0e R12: ffffffff81937ff7 [ 174.590974][ T6922] R13: ffff888063ba3140 R14: 0000000000000246 R15: ffff8880b932d4c8 [ 174.599114][ T6922] FS: 00007f14b38c56c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 174.608125][ T6922] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 174.614726][ T6922] CR2: 0000000020078000 CR3: 0000000072ccc000 CR4: 00000000003526f0 [ 174.622976][ T6922] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 174.631091][ T6922] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 174.640540][ T6922] Call Trace: [ 174.644529][ T6922] [ 174.647541][ T6922] ? __warn+0x163/0x4e0 [ 174.651694][ T6922] ? kcov_remote_start+0x542/0x7d0 [ 174.656797][ T6922] ? report_bug+0x2b3/0x500 [ 174.661378][ T6922] ? kcov_remote_start+0x542/0x7d0 [ 174.666484][ T6922] ? handle_bug+0x3e/0x70 [ 174.670912][ T6922] ? exc_invalid_op+0x1a/0x50 [ 174.675593][ T6922] ? asm_exc_invalid_op+0x1a/0x20 [ 174.680607][ T6922] ? kcov_remote_start+0x97/0x7d0 [ 174.686094][ T6922] ? kcov_remote_start+0x542/0x7d0 [ 174.691245][ T6922] ? mark_lock+0x9a/0x350 [ 174.696219][ T6922] ieee80211_rx_list+0x799/0x3780 [ 174.701693][ T6922] ? __lock_acquire+0x137a/0x2040 [ 174.707040][ T6922] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 174.712539][ T6922] ? __pfx_lock_acquire+0x10/0x10 [ 174.717696][ T6922] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 174.724587][ T6922] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 174.731282][ T6922] ? ieee80211_rx_napi+0xd6/0x3c0 [ 174.736340][ T6922] ieee80211_rx_napi+0x18a/0x3c0 [ 174.742155][ T6922] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 174.749094][ T6922] ? __local_bh_disable_ip+0x179/0x220 [ 174.754643][ T6922] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 174.760736][ T6922] ? skb_dequeue+0x113/0x150 [ 174.767071][ T6922] ieee80211_handle_queued_frames+0xe7/0x1e0 [ 174.774457][ T6922] ? ieee80211_stop_device+0x2a/0xf0 [ 174.780215][ T6922] ieee80211_stop_device+0x3f/0xf0 [ 174.787235][ T6922] ieee80211_do_stop+0x1917/0x1f40 [ 174.793068][ T6922] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 174.799403][ T6922] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 174.806088][ T6922] ? wiphy_work_cancel+0x1f0/0x3e0 [ 174.811205][ T6922] ieee80211_stop+0x436/0x4a0 [ 174.816270][ T6922] ? __pfx_ieee80211_stop+0x10/0x10 [ 174.821583][ T6922] __dev_close_many+0x219/0x300 [ 174.828227][ T6922] ? __pfx___dev_close_many+0x10/0x10 [ 174.834441][ T6922] ? __mutex_trylock_common+0x183/0x2e0 [ 174.840895][ T6922] ? __pfx___might_resched+0x10/0x10 [ 174.848119][ T6922] dev_close_many+0x24e/0x4c0 [ 174.853160][ T6922] ? rcu_is_watching+0x15/0xb0 [ 174.858100][ T6922] ? __pfx_dev_close_many+0x10/0x10 [ 174.863828][ T6922] ? trace_contention_end+0x3c/0x120 [ 174.869229][ T6922] ? __mutex_lock+0x2ef/0xd70 [ 174.875145][ T6922] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 174.881592][ T6922] dev_close+0x1c0/0x2c0 [ 174.885902][ T6922] ? cfg80211_rfkill_set_block+0x1e/0x50 [ 174.892247][ T6922] ? __pfx_dev_close+0x10/0x10 [ 174.897111][ T6922] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 174.903379][ T6922] cfg80211_shutdown_all_interfaces+0xbb/0x1d0 [ 174.909592][ T6922] cfg80211_rfkill_set_block+0x2d/0x50 [ 174.915233][ T6922] ? __pfx_cfg80211_rfkill_set_block+0x10/0x10 [ 174.921666][ T6922] rfkill_set_block+0x1f1/0x440 [ 174.927348][ T6922] rfkill_fop_write+0x5bb/0x790 [ 174.932213][ T6922] ? __pfx_rfkill_fop_write+0x10/0x10 [ 174.937876][ T6922] ? bpf_lsm_file_permission+0x9/0x10 [ 174.943533][ T6922] ? rw_verify_area+0x1d2/0x6b0 [ 174.948648][ T6922] ? __pfx_rfkill_fop_write+0x10/0x10 [ 174.954283][ T6922] vfs_write+0x2a2/0xc90 [ 174.958630][ T6922] ? __pfx_vfs_write+0x10/0x10 [ 174.963384][ T6922] ? do_futex+0x33b/0x560 [ 174.968255][ T6922] ? __pfx_do_futex+0x10/0x10 [ 174.973130][ T6922] ksys_write+0x1a0/0x2c0 [ 174.978875][ T6922] ? __pfx_ksys_write+0x10/0x10 [ 174.983870][ T6922] ? do_syscall_64+0x100/0x230 [ 174.988655][ T6922] ? do_syscall_64+0xb6/0x230 [ 174.993577][ T6922] do_syscall_64+0xf3/0x230 [ 174.998886][ T6922] ? clear_bhb_loop+0x35/0x90 [ 175.003602][ T6922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.009956][ T6922] RIP: 0033:0x7f14b2b779f9 [ 175.014556][ T6922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.034771][ T6922] RSP: 002b:00007f14b38c5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 175.044220][ T6922] RAX: ffffffffffffffda RBX: 00007f14b2d06130 RCX: 00007f14b2b779f9 [ 175.052471][ T6922] RDX: 0000000000000008 RSI: 00000000200004c0 RDI: 000000000000000b [ 175.060447][ T6922] RBP: 00007f14b2be58ee R08: 0000000000000000 R09: 0000000000000000 [ 175.068784][ T6922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.076779][ T6922] R13: 0000000000000000 R14: 00007f14b2d06130 R15: 00007ffe807b41f8 [ 175.085070][ T6922] [ 175.088098][ T6922] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 175.095430][ T6922] CPU: 1 UID: 0 PID: 6922 Comm: syz.3.548 Not tainted 6.11.0-rc2-syzkaller-00042-gcf6d429eb656 #0 [ 175.106204][ T6922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 175.116609][ T6922] Call Trace: [ 175.120272][ T6922] [ 175.125045][ T6922] dump_stack_lvl+0x241/0x360 [ 175.129937][ T6922] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.135243][ T6922] ? __pfx__printk+0x10/0x10 [ 175.140379][ T6922] ? _printk+0xd5/0x120 [ 175.144554][ T6922] ? vscnprintf+0x5d/0x90 [ 175.149681][ T6922] panic+0x349/0x860 [ 175.154728][ T6922] ? __warn+0x172/0x4e0 [ 175.159961][ T6922] ? __pfx_panic+0x10/0x10 [ 175.165518][ T6922] ? show_trace_log_lvl+0x4e6/0x520 [ 175.172152][ T6922] __warn+0x346/0x4e0 [ 175.176259][ T6922] ? kcov_remote_start+0x542/0x7d0 [ 175.181625][ T6922] report_bug+0x2b3/0x500 [ 175.186153][ T6922] ? kcov_remote_start+0x542/0x7d0 [ 175.191451][ T6922] handle_bug+0x3e/0x70 [ 175.196562][ T6922] exc_invalid_op+0x1a/0x50 [ 175.201153][ T6922] asm_exc_invalid_op+0x1a/0x20 [ 175.206450][ T6922] RIP: 0010:kcov_remote_start+0x542/0x7d0 [ 175.212204][ T6922] Code: 4c 89 ff be 03 00 00 00 e8 6b 3f 14 03 e9 04 fb ff ff e8 d1 b5 19 0a 41 f7 c6 00 02 00 00 0f 84 f2 fa ff ff e9 7f fc ff ff 90 <0f> 0b 90 e8 f6 d2 19 0a 89 c0 48 c7 c7 c8 d4 02 00 48 03 3c c5 40 [ 175.232419][ T6922] RSP: 0018:ffffc900045ef2b0 EFLAGS: 00010002 [ 175.238919][ T6922] RAX: 0000000080000200 RBX: ffff888027b1bc00 RCX: 0000000000000002 [ 175.247231][ T6922] RDX: dffffc0000000000 RSI: ffffffff8beae6e0 RDI: ffffffff8c3f8b40 [ 175.255805][ T6922] RBP: 0000000000000000 R08: ffffffff934ee86f R09: 1ffffffff269dd0d [ 175.263874][ T6922] R10: dffffc0000000000 R11: fffffbfff269dd0e R12: ffffffff81937ff7 [ 175.272314][ T6922] R13: ffff888063ba3140 R14: 0000000000000246 R15: ffff8880b932d4c8 [ 175.280474][ T6922] ? kcov_remote_start+0x97/0x7d0 [ 175.286202][ T6922] ? mark_lock+0x9a/0x350 [ 175.290561][ T6922] ieee80211_rx_list+0x799/0x3780 [ 175.296387][ T6922] ? __lock_acquire+0x137a/0x2040 [ 175.301596][ T6922] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 175.307118][ T6922] ? __pfx_lock_acquire+0x10/0x10 [ 175.312151][ T6922] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 175.319368][ T6922] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 175.326342][ T6922] ? ieee80211_rx_napi+0xd6/0x3c0 [ 175.332068][ T6922] ieee80211_rx_napi+0x18a/0x3c0 [ 175.337353][ T6922] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 175.344748][ T6922] ? __local_bh_disable_ip+0x179/0x220 [ 175.350215][ T6922] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 175.356820][ T6922] ? skb_dequeue+0x113/0x150 [ 175.361420][ T6922] ieee80211_handle_queued_frames+0xe7/0x1e0 [ 175.368874][ T6922] ? ieee80211_stop_device+0x2a/0xf0 [ 175.374161][ T6922] ieee80211_stop_device+0x3f/0xf0 [ 175.379273][ T6922] ieee80211_do_stop+0x1917/0x1f40 [ 175.384427][ T6922] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 175.390175][ T6922] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 175.396954][ T6922] ? wiphy_work_cancel+0x1f0/0x3e0 [ 175.402176][ T6922] ieee80211_stop+0x436/0x4a0 [ 175.407142][ T6922] ? __pfx_ieee80211_stop+0x10/0x10 [ 175.412445][ T6922] __dev_close_many+0x219/0x300 [ 175.417426][ T6922] ? __pfx___dev_close_many+0x10/0x10 [ 175.423336][ T6922] ? __mutex_trylock_common+0x183/0x2e0 [ 175.430833][ T6922] ? __pfx___might_resched+0x10/0x10 [ 175.436242][ T6922] dev_close_many+0x24e/0x4c0 [ 175.441298][ T6922] ? rcu_is_watching+0x15/0xb0 [ 175.447099][ T6922] ? __pfx_dev_close_many+0x10/0x10 [ 175.452462][ T6922] ? trace_contention_end+0x3c/0x120 [ 175.457929][ T6922] ? __mutex_lock+0x2ef/0xd70 [ 175.464416][ T6922] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 175.473484][ T6922] dev_close+0x1c0/0x2c0 [ 175.478094][ T6922] ? cfg80211_rfkill_set_block+0x1e/0x50 [ 175.484626][ T6922] ? __pfx_dev_close+0x10/0x10 [ 175.490185][ T6922] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 175.497336][ T6922] cfg80211_shutdown_all_interfaces+0xbb/0x1d0 [ 175.504045][ T6922] cfg80211_rfkill_set_block+0x2d/0x50 [ 175.509784][ T6922] ? __pfx_cfg80211_rfkill_set_block+0x10/0x10 [ 175.516810][ T6922] rfkill_set_block+0x1f1/0x440 [ 175.522038][ T6922] rfkill_fop_write+0x5bb/0x790 [ 175.528238][ T6922] ? __pfx_rfkill_fop_write+0x10/0x10 [ 175.535026][ T6922] ? bpf_lsm_file_permission+0x9/0x10 [ 175.541379][ T6922] ? rw_verify_area+0x1d2/0x6b0 [ 175.546509][ T6922] ? __pfx_rfkill_fop_write+0x10/0x10 [ 175.553298][ T6922] vfs_write+0x2a2/0xc90 [ 175.557560][ T6922] ? __pfx_vfs_write+0x10/0x10 [ 175.562412][ T6922] ? do_futex+0x33b/0x560 [ 175.569296][ T6922] ? __pfx_do_futex+0x10/0x10 [ 175.574032][ T6922] ksys_write+0x1a0/0x2c0 [ 175.578473][ T6922] ? __pfx_ksys_write+0x10/0x10 [ 175.583966][ T6922] ? do_syscall_64+0x100/0x230 [ 175.589900][ T6922] ? do_syscall_64+0xb6/0x230 [ 175.596164][ T6922] do_syscall_64+0xf3/0x230 [ 175.601721][ T6922] ? clear_bhb_loop+0x35/0x90 [ 175.607022][ T6922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.613740][ T6922] RIP: 0033:0x7f14b2b779f9 [ 175.618176][ T6922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.640657][ T6922] RSP: 002b:00007f14b38c5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 175.649849][ T6922] RAX: ffffffffffffffda RBX: 00007f14b2d06130 RCX: 00007f14b2b779f9 [ 175.658010][ T6922] RDX: 0000000000000008 RSI: 00000000200004c0 RDI: 000000000000000b [ 175.667472][ T6922] RBP: 00007f14b2be58ee R08: 0000000000000000 R09: 0000000000000000 [ 175.675981][ T6922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.684601][ T6922] R13: 0000000000000000 R14: 00007f14b2d06130 R15: 00007ffe807b41f8 [ 175.694434][ T6922] [ 175.698217][ T6922] Kernel Offset: disabled [ 175.702811][ T6922] Rebooting in 86400 seconds..