last executing test programs: 8.907365777s ago: executing program 1 (id=893): syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040e06f40908"], 0xa) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 8.779498351s ago: executing program 1 (id=897): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) pipe2(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a0, 0x0, 0x2b8, 0x182, 0x0, 0x0, 0x1d8, 0x3a8, 0x3a8, 0x1d8, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec, 0x0, {0x0, 0xe0ffff00000000}}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xf7db, 'syz1\x00'}}}, {{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x2fc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time\x00', 0x26e1, 0x0) r2 = add_key$keyring(&(0x7f0000001400), &(0x7f0000001300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r3 = add_key$keyring(&(0x7f0000000140), &(0x7f0000001340)={'syz', 0x0}, 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r3) syz_usb_connect(0x0, 0x40, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0xb, 0xc7, 0x3, 0x40, 0x46d, 0x8c6, 0x33c2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x9a, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}]}]}}]}}]}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa303}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}}, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000000080)={0xc, {"a2e3ad214fc752f91b25470987f70e06d038e7ff7fc6e5539b3245078b089b3b083868060890e0878f0e1ac6e70a9b3368959b6c9a241b5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31350d095d0936cd3b78130daa61f8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d16993428807789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4040d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e17f907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c330600d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a9740600000000f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b303db4d7bec6b6a97dbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5, '\x00', r6, r8, 0x5, 0x3, 0x3, 0x0, @void, @value, @void, @value}, 0x48) msgget$private(0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x1, 0x2000) msgrcv(0x0, 0x0, 0x0, 0x1, 0x2000) msgsnd(0x0, &(0x7f0000000900)={0x1}, 0x8, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r8, 0xc01064c2, &(0x7f00000010c0)={0x0, 0x1, r8}) open(&(0x7f0000000000)='./file0\x00', 0x200000, 0xfd0c99a9ca8f4ab3) r9 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r9) keyctl$KEYCTL_MOVE(0x1e, r4, r9, r3, 0x1) close(0xffffffffffffffff) close(r1) 7.408871978s ago: executing program 3 (id=916): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x1, 0x0, 0x0, {[@mptcp=@mp_join={0x1e, 0x3, 0xa}, @nop]}}}}}}}, 0x0) 7.090864329s ago: executing program 3 (id=919): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000000000000000000000000000400000000", @ANYRES32=0x0, @ANYBLOB="00ffee0000ee"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 5.15105083s ago: executing program 1 (id=922): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000240)="0ccec6188b24bc638891bbf207e4", 0x7ffff000}, {0x0}], 0x2, 0x0, 0x0) 5.07911009s ago: executing program 3 (id=923): capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000000)) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @empty, @empty}}}}) 4.84094151s ago: executing program 3 (id=925): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x40, r1, 0x3, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x4}]}]}, 0x40}}, 0x0) 4.470747274s ago: executing program 1 (id=927): unshare(0x20000400) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4) 4.37520623s ago: executing program 3 (id=928): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) setitimer(0x2, &(0x7f0000000540)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 3.587029192s ago: executing program 1 (id=932): unshare(0x2040400) r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x1be) 3.27743487s ago: executing program 3 (id=935): ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) r0 = io_uring_setup(0x497c, &(0x7f0000000380)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv2(r1, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000280)=0x8) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(0xffffffffffffffff, 0x8) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) sendmsg(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)="02", 0x1}], 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet(r4, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x4}, 0x8) sendmmsg$inet6(r4, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001700)='y', 0x1}], 0x1}}], 0x1, 0x0) close(r4) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000740)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0xc}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [r0, r0, r3, r1, r4, r1]}}, @rights={{0x24, 0x1, 0x1, [r1, r0, r2, r2, r2, r3]}}], 0x9c}, 0x20008000) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x1, 0x1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f00000038c0), 0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x141102, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.103354611s ago: executing program 1 (id=936): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) ioctl$SNDCTL_TMR_START(r0, 0x5402) write$sequencer(r0, &(0x7f0000001240)=ANY=[@ANYBLOB="940368e4ff"], 0x10) 2.880747146s ago: executing program 2 (id=938): unshare(0x2040400) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, 0x0, 0x0) 2.379940706s ago: executing program 2 (id=941): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001840)=ANY=[@ANYBLOB="140000001a000dad"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000006c0)=""/119, 0x77}, {&(0x7f0000003b80)=""/120, 0x78}, {&(0x7f0000003c00)=""/4082, 0xff2}], 0x3}, 0x9}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x625}], 0x3, 0x0, 0x0) 2.217237319s ago: executing program 0 (id=942): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$peekuser(0x3, r0, 0x14) 2.090963536s ago: executing program 4 (id=943): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001500010300000000000000000a"], 0x14}}, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f00000005c0)=""/4099, 0x1003}], 0x1) 2.022069695s ago: executing program 2 (id=944): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x3c, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x3c}}, 0x0) 1.681808501s ago: executing program 0 (id=945): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x80, 0x20, 0x0, 0x0, 0x2, 0xff}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.681681401s ago: executing program 4 (id=946): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001980)={0xb, {"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", 0x1000}}, 0x1006) 1.634575692s ago: executing program 2 (id=947): r0 = mq_open(&(0x7f00000000c0)=',):\x00', 0x40, 0xf4, &(0x7f0000000100)={0xda, 0x4, 0x100, 0xfffffffffffffff2}) mq_timedreceive(r0, 0x0, 0x0, 0xb, &(0x7f0000000240)) lseek(r0, 0x0, 0x1) 1.20458571s ago: executing program 2 (id=948): r0 = syz_io_uring_setup(0xec8, &(0x7f0000000c00)={0x0, 0xfffffffc, 0x2, 0x0, 0x2f1}, &(0x7f0000000500)=0x0, &(0x7f0000000600)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x0, 0x10a5, 0x3, 0x0, 0x0) 1.193312311s ago: executing program 0 (id=949): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x13, 0x800, 0x1, 0x2, 0xd59f80, 0x4, 0x5, 0xb, 0x8, 0x5, 0x722, 0x200, 0x4, 0xa, 0x2b, 0x0, {0xffff945a, 0x1}, 0x3, 0xf1}}) 1.108222386s ago: executing program 4 (id=950): r0 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x77, 0x141301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x4004550d, 0x0) 901.762114ms ago: executing program 0 (id=951): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000080)='\r2', 0x2}]) 826.586524ms ago: executing program 4 (id=952): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000000206010100e5ff00000000000000000005000100070000000900020073797a30000000000c00078008000840000000d00500050002000000050004000000000012000300686173683a6e6574"], 0x58}}, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 553.821819ms ago: executing program 2 (id=953): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000240)={'wg0\x00'}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r1, &(0x7f0000000080), 0x2000011a) setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000000340), 0x4) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet(0x2b, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="120100006f8db40882057a003dc7010203010902240001000000000904000002fff14c00090503f4395ab9df98b7c302000000000009050d0300000000005553450febb8972ca222b182359c9954d75ab292e5efd7bf4c79dd7a9cc08ecec234957e0a575fa24029a8d5fa09da2e84ec120195303bb97a8a1dca4c39874b8d9de09de72f15403911cec772c020c39c10f683e7937c7a4083bfbc9ed5070e41"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f00000003c0)=0x4) gettid() fcntl$lock(r3, 0x26, &(0x7f0000000080)) fcntl$lock(r3, 0x6, &(0x7f0000000000)={0x0, 0x3, 0x2}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES8], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x8000) 503.401007ms ago: executing program 4 (id=954): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1}}}}}}]}, 0x48}, 0x1, 0x4801000000000000}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000002f80)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000090a0108000000000000000000000000080003400000003c08000540000000250900020073797a300000000008000a40000000000900010073797a310000000008000640ffffff000c000b"], 0x80}}, 0x0) 457.953289ms ago: executing program 0 (id=955): pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x3ff) fcntl$setstatus(r0, 0x4, 0x7c00) 16.937765ms ago: executing program 4 (id=956): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x3}}, 0x18) 0s ago: executing program 0 (id=957): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x80e85411) kernel console output (not intermixed with test programs): :50:50 [ 342.712096][ T8801] veth1_vlan: entered promiscuous mode [ 342.730731][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.740750][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.759317][ T57] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 342.770512][ T8801] veth0_macvtap: entered promiscuous mode [ 342.794136][ T8801] veth1_macvtap: entered promiscuous mode [ 342.822408][ T8801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.844106][ T8801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.864144][ T8801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.875488][ T8801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.888701][ T8801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.903065][ T8801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.914083][ T8801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.927258][ T8959] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 342.944640][ T57] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 342.946366][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 342.967751][ T57] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 342.977932][ T8801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.996887][ T57] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 343.006244][ T57] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.017862][ T8801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 343.030776][ T8801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.041221][ T8998] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 343.053450][ T57] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 343.063511][ T8801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.097032][ T8801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.119540][ T8801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.132036][ T8801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.142683][ T8959] usb 1-1: Using ep0 maxpacket: 8 [ 343.148964][ T8801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.175182][ T8959] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 343.193238][ T8959] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 343.197376][ T8801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.212235][ T8959] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 288 [ 343.224481][ T8959] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 343.224742][ T8801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.241537][ T8959] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 343.257245][ T8801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.267992][ T8801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.280562][ T8801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.285576][ T8959] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.291241][ T8801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.291269][ T8801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.291288][ T8801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.291303][ T8801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.291327][ T8801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.293325][ T8801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.366154][ T8801] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.375297][ T8801] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.384716][ T8801] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.393569][ T8801] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.440134][ T5233] usb 2-1: USB disconnect, device number 44 [ 343.522659][ T8959] usb 1-1: GET_CAPABILITIES returned 0 [ 343.536830][ T8959] usbtmc 1-1:16.0: can't read capabilities [ 343.542556][ T5285] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 343.595715][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.610737][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.653229][ T2583] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.661995][ T2583] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.707244][ T5285] usb 3-1: Using ep0 maxpacket: 16 [ 343.747197][ T5285] usb 3-1: config 0 has an invalid descriptor of length 232, skipping remainder of the config [ 343.764784][ T5285] usb 3-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 343.784716][ T5285] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.794782][ T5285] usb 3-1: Product: syz [ 343.802577][ T5285] usb 3-1: Manufacturer: syz [ 343.810731][ T5285] usb 3-1: SerialNumber: syz [ 343.827381][ T5285] usb 3-1: config 0 descriptor?? [ 343.893564][ T9000] usbtmc 1-1:16.0: stb usb_control_msg returned -32 [ 343.930309][ T9006] usbtmc 1-1:16.0: send_request_dev_dep_msg_in returned -71 [ 343.951093][ T8959] usb 1-1: USB disconnect, device number 40 [ 344.089206][ T5285] usb 3-1: USB disconnect, device number 16 [ 345.894076][ T1108] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.977330][ T9025] netlink: 56 bytes leftover after parsing attributes in process `syz.3.604'. [ 346.190320][ T1108] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.250185][ T5236] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 346.271138][ T5236] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 346.300035][ T5236] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 346.356733][ T5236] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 346.390572][ T5236] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 346.403591][ T5236] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 346.436581][ T1108] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.517775][ T5236] Bluetooth: hci0: command tx timeout [ 346.617315][ T5285] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 346.660099][ T1108] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.748038][ T9040] nftables ruleset with unbound set [ 346.777418][ T5285] usb 2-1: Using ep0 maxpacket: 32 [ 346.815023][ T5285] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=49.6b [ 346.832489][ T5285] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.888387][ T5285] usb 2-1: config 0 descriptor?? [ 346.941004][ T5285] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 347.066705][ T9039] chnl_net:caif_netlink_parms(): no params data found [ 347.192210][ T5287] usb 2-1: USB disconnect, device number 45 [ 347.200124][ T2583] usb 2-1: Failed to submit usb control message: -71 [ 347.217137][ T2583] usb 2-1: unable to send the bmi data to the device: -71 [ 347.227649][ T9057] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 347.234098][ T9057] PKCS7: Only support pkcs7_signedData type [ 347.249208][ T2583] usb 2-1: unable to get target info from device [ 347.306768][ T2583] usb 2-1: could not get target info (-71) [ 347.327454][ T8959] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 347.342870][ T2583] usb 2-1: could not probe fw (-71) [ 347.569201][ T8959] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.580394][ T8959] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.597402][ T8959] usb 5-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 347.607143][ T8959] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.628951][ T8959] usb 5-1: config 0 descriptor?? [ 347.764061][ T1108] bridge_slave_1: left allmulticast mode [ 347.770495][ T1108] bridge_slave_1: left promiscuous mode [ 347.820501][ T1108] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.906151][ T1108] bridge_slave_0: left allmulticast mode [ 347.964584][ T1108] bridge_slave_0: left promiscuous mode [ 348.036829][ T1108] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.529388][ T5236] Bluetooth: hci4: command tx timeout [ 348.604818][ T5287] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 348.830377][ T5287] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 348.853544][ T5287] usb 2-1: config 0 has too many interfaces: 92, using maximum allowed: 32 [ 348.884816][ T5287] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.934142][ T5287] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 92 [ 348.944900][ T8] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 348.972323][ T5287] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d6.01 [ 349.018100][ T5287] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.044484][ T5287] usb 2-1: config 0 descriptor?? [ 349.099763][ T8] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 349.111644][ T8] usb 1-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 349.166124][ T8] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 349.196280][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.223493][ T8] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 349.237470][ T8] usb 1-1: invalid MIDI out EP 0 [ 349.385475][ T8] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 349.579622][ T5286] usb 1-1: USB disconnect, device number 41 [ 349.973742][ T1108] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.026235][ T1108] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.063899][ T1108] bond0 (unregistering): Released all slaves [ 350.082603][ T9039] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.090253][ T9039] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.109679][ T9039] bridge_slave_0: entered allmulticast mode [ 350.119291][ T8959] usbhid 5-1:0.0: can't add hid device: -71 [ 350.124941][ T9039] bridge_slave_0: entered promiscuous mode [ 350.166251][ T8959] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 350.188257][ T9039] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.228069][ T8959] usb 5-1: USB disconnect, device number 32 [ 350.251684][ T9039] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.281382][ T9039] bridge_slave_1: entered allmulticast mode [ 350.308653][ T9039] bridge_slave_1: entered promiscuous mode [ 350.585326][ T9039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.598529][ T5236] Bluetooth: hci4: command tx timeout [ 350.598566][ T5238] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 350.613123][ T5238] Bluetooth: hci1: Injecting HCI hardware error event [ 350.622673][ T5236] Bluetooth: hci1: hardware error 0x00 [ 350.650076][ T9039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.862816][ T1108] hsr_slave_0: left promiscuous mode [ 350.876269][ T1108] hsr_slave_1: left promiscuous mode [ 350.885224][ T1108] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 350.899339][ T1108] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.914603][ T1108] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.926451][ T1108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.937147][ T5287] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 350.965107][ T1108] veth1_macvtap: left promiscuous mode [ 350.970973][ T1108] veth0_macvtap: left promiscuous mode [ 350.978358][ T1108] veth1_vlan: left promiscuous mode [ 350.983764][ T1108] veth0_vlan: left promiscuous mode [ 351.087128][ T5287] usb 5-1: Using ep0 maxpacket: 32 [ 351.100157][ T5287] usb 5-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice=e0.d8 [ 351.117613][ T5287] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.137272][ T5287] usb 5-1: config 0 descriptor?? [ 351.306147][ T9] usb 2-1: USB disconnect, device number 46 [ 351.745742][ T9108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.619'. [ 351.768059][ T9108] netlink: 20 bytes leftover after parsing attributes in process `syz.1.619'. [ 351.799464][ T9108] netlink: 60 bytes leftover after parsing attributes in process `syz.1.619'. [ 351.845105][ T9108] netlink: 35 bytes leftover after parsing attributes in process `syz.1.619'. [ 352.110833][ T9110] fuse: Bad value for 'fd' [ 352.314426][ T9110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.620'. [ 352.497484][ T1108] team0 (unregistering): Port device team_slave_1 removed [ 352.519512][ T5287] usb 5-1: string descriptor 0 read error: -71 [ 352.533331][ T5287] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input18 [ 352.569537][ T4670] bcm5974 5-1:0.0: could not read from device [ 352.576566][ T4670] bcm5974 5-1:0.0: could not read from device [ 352.653595][ T4670] bcm5974 5-1:0.0: could not read from device [ 352.661229][ T5287] usb 5-1: USB disconnect, device number 33 [ 352.687477][ T5238] Bluetooth: hci4: command tx timeout [ 352.693554][ T5236] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 352.710659][ T4670] bcm5974 5-1:0.0: could not read from device [ 352.820532][ T1108] team0 (unregistering): Port device team_slave_0 removed [ 353.573965][ T9124] netlink: 24 bytes leftover after parsing attributes in process `syz.4.623'. [ 354.151526][ T9039] team0: Port device team_slave_0 added [ 354.162871][ T9039] team0: Port device team_slave_1 added [ 354.181371][ T9124] bridge_slave_1: left allmulticast mode [ 354.191209][ T9124] bridge_slave_1: left promiscuous mode [ 354.197009][ T9124] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.239282][ T9124] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 354.541773][ T9039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.571151][ T9039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.597151][ C1] vkms_vblank_simulate: vblank timer overrun [ 354.647169][ T9039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.668764][ T9039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.686138][ T9039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.712593][ C1] vkms_vblank_simulate: vblank timer overrun [ 354.719490][ T9039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.737763][ T5287] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 354.770929][ T5236] Bluetooth: hci4: command tx timeout [ 354.916706][ T9039] hsr_slave_0: entered promiscuous mode [ 354.924117][ T9039] hsr_slave_1: entered promiscuous mode [ 354.937345][ T9039] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 354.945136][ T9039] Cannot create hsr debugfs directory [ 354.976429][ T5287] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 355.007184][ T5287] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 355.037109][ T5287] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 355.046225][ T5287] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.094668][ T5287] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 355.112611][ T5287] usb 5-1: invalid MIDI out EP 0 [ 355.254482][ T5287] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 355.259979][ T5930] udevd[5930]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 355.410930][ T5286] usb 5-1: USB disconnect, device number 34 [ 355.506711][ T9145] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 356.388562][ T2524] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.697691][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 356.738905][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 356.747942][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 356.773107][ T5238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 356.790678][ T5238] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 356.806038][ T5238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 356.909777][ T2524] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.040195][ T9039] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 357.111161][ T2524] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.184396][ T9039] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 357.237723][ T9039] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 357.306208][ T2524] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.357172][ T9039] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 358.007373][ T2524] bridge_slave_1: left allmulticast mode [ 358.023422][ T2524] bridge_slave_1: left promiscuous mode [ 358.047315][ T2524] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.093629][ T2524] bridge_slave_0: left allmulticast mode [ 358.115395][ T2524] bridge_slave_0: left promiscuous mode [ 358.127262][ T2524] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.349614][ T9199] raw_sendmsg: syz.4.634 forgot to set AF_INET. Fix it! [ 358.837882][ T5236] Bluetooth: hci1: command tx timeout [ 360.073364][ T2524] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 360.142022][ T2524] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 360.170178][ T9228] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 360.176740][ T9228] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 360.188175][ T9228] vhci_hcd vhci_hcd.0: Device attached [ 360.205648][ T2524] bond0 (unregistering): Released all slaves [ 360.206416][ T9229] usbip_core: unknown command [ 360.227155][ T9229] vhci_hcd: unknown pdu 3020988904 [ 360.247233][ T9229] usbip_core: unknown command [ 360.285140][ T63] vhci_hcd: stop threads [ 360.305557][ T63] vhci_hcd: release socket [ 360.330371][ T63] vhci_hcd: disconnect device [ 360.452892][ T9164] chnl_net:caif_netlink_parms(): no params data found [ 360.676224][ T9236] netlink: 4 bytes leftover after parsing attributes in process `syz.3.637'. [ 360.767292][ T5236] Bluetooth: hci2: unexpected cc 0x2007 length: 100 > 2 [ 360.785409][ T9235] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 360.792004][ T9235] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 360.799343][ T9039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.802940][ T9235] vhci_hcd vhci_hcd.0: Device attached [ 360.851909][ T9164] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.871190][ T9164] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.885975][ T9164] bridge_slave_0: entered allmulticast mode [ 360.906108][ T9164] bridge_slave_0: entered promiscuous mode [ 360.917612][ T5236] Bluetooth: hci1: command tx timeout [ 361.000076][ T9235] netlink: 20 bytes leftover after parsing attributes in process `syz.3.637'. [ 361.078043][ T5283] usb 16-1: SetAddress Request (2) to port 0 [ 361.090800][ T5283] usb 16-1: new SuperSpeed USB device number 2 using vhci_hcd [ 361.104700][ T9164] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.133533][ T9164] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.177275][ T9164] bridge_slave_1: entered allmulticast mode [ 361.207326][ T8] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 361.208316][ T9164] bridge_slave_1: entered promiscuous mode [ 361.232536][ T9244] vhci_hcd: connection reset by peer [ 361.271482][ T51] vhci_hcd: stop threads [ 361.275810][ T51] vhci_hcd: release socket [ 361.283093][ T51] vhci_hcd: disconnect device [ 361.325004][ T2524] hsr_slave_0: left promiscuous mode [ 361.336881][ T2524] hsr_slave_1: left promiscuous mode [ 361.354003][ T2524] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 361.372238][ T2524] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 361.387517][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 361.393641][ T2524] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 361.409977][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.419949][ T2524] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 361.429684][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.440149][ T8] usb 2-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 361.455474][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.461203][ T2524] veth1_macvtap: left promiscuous mode [ 361.470647][ T2524] veth0_macvtap: left promiscuous mode [ 361.472344][ T8] usb 2-1: config 0 descriptor?? [ 361.478301][ T2524] veth1_vlan: left promiscuous mode [ 361.496804][ T2524] veth0_vlan: left promiscuous mode [ 361.607239][ T9] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 361.736654][ T9247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.749047][ T9247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.760718][ T9247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.773637][ T9247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.808651][ T9] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 361.846293][ T9] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 361.871751][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 361.882489][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.915515][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 361.937930][ T9] usb 5-1: invalid MIDI out EP 0 [ 362.030555][ T9265] dccp_invalid_packet: P.Data Offset(0) too small [ 362.080051][ T5930] udevd[5930]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 362.122951][ T9] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 362.233764][ T57] usb 5-1: USB disconnect, device number 35 [ 362.516145][ T2524] team0 (unregistering): Port device team_slave_1 removed [ 362.582458][ T2524] team0 (unregistering): Port device team_slave_0 removed [ 362.997706][ T5236] Bluetooth: hci1: command tx timeout [ 363.237678][ T5285] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 363.274681][ T9039] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.313302][ T9267] netlink: 20 bytes leftover after parsing attributes in process `syz.3.640'. [ 363.345437][ T9164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.397121][ T5285] usb 5-1: Using ep0 maxpacket: 32 [ 363.402812][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.410085][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.437814][ T5285] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 363.458157][ T5285] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.482951][ T5285] usb 5-1: config 0 descriptor?? [ 363.499307][ T9164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.532335][ T5285] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 363.606125][ T9277] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 363.612978][ T9277] PKCS7: Only support pkcs7_signedData type [ 363.730995][ T9164] team0: Port device team_slave_0 added [ 363.755351][ T9164] team0: Port device team_slave_1 added [ 363.817574][ T1108] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.824758][ T1108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.862940][ T8] usbhid 2-1:0.0: can't add hid device: -71 [ 363.905356][ T8] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 363.978159][ T8] usb 2-1: USB disconnect, device number 47 [ 364.129472][ T9164] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 364.137651][ T9164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.177179][ T9286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 364.202621][ T5287] IPVS: starting estimator thread 0... [ 364.230591][ T9164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 364.283415][ T9164] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 364.316494][ T9164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.347281][ T9288] IPVS: using max 24 ests per chain, 57600 per kthread [ 364.481882][ T5285] gspca_vc032x: reg_w err -110 [ 364.498760][ T5285] gspca_vc032x: I2c Bus Busy Wait 00 [ 364.523073][ T5285] gspca_vc032x: I2c Bus Busy Wait 00 [ 364.530625][ T9164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 364.536238][ T5285] gspca_vc032x: I2c Bus Busy Wait 00 [ 364.548755][ T9291] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 364.568088][ T5285] gspca_vc032x: I2c Bus Busy Wait 00 [ 364.573532][ T5285] gspca_vc032x: I2c Bus Busy Wait 00 [ 364.618779][ T5285] gspca_vc032x: I2c Bus Busy Wait 00 [ 364.624151][ T5285] gspca_vc032x: I2c Bus Busy Wait 00 [ 364.625189][ T9295] netlink: 36 bytes leftover after parsing attributes in process `syz.1.643'. [ 364.660158][ T5285] gspca_vc032x: I2c Bus Busy Wait 00 [ 364.665625][ T5285] gspca_vc032x: I2c Bus Busy Wait 00 [ 364.689955][ T5285] gspca_vc032x: I2c Bus Busy Wait 00 [ 364.695329][ T5285] gspca_vc032x: I2c Bus Busy Wait 00 [ 364.709006][ T5285] gspca_vc032x: I2c Bus Busy Wait 00 [ 364.714473][ T5285] gspca_vc032x: I2c Bus Busy Wait 00 [ 364.721039][ T5285] gspca_vc032x: I2c Bus Busy Wait 00 [ 364.726505][ T5285] gspca_vc032x: I2c Bus Busy Wait 00 [ 364.765723][ T5285] gspca_vc032x: I2c Bus Busy Wait 00 [ 364.777114][ T5285] gspca_vc032x: I2c Bus Busy Wait 00 [ 364.783051][ T5285] gspca_vc032x: I2c Bus Busy Wait 00 [ 364.797669][ T5285] gspca_vc032x: Unknown sensor... [ 364.808119][ T5285] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 364.825296][ T9299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.644'. [ 364.847783][ T5236] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 364.853124][ T5285] usb 5-1: USB disconnect, device number 36 [ 364.858114][ T5236] Bluetooth: hci2: Injecting HCI hardware error event [ 364.872004][ T5236] Bluetooth: hci2: hardware error 0x00 [ 364.984059][ T9164] hsr_slave_0: entered promiscuous mode [ 364.993054][ T9164] hsr_slave_1: entered promiscuous mode [ 365.001153][ T9164] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 365.011243][ T9164] Cannot create hsr debugfs directory [ 365.077232][ T5238] Bluetooth: hci1: command tx timeout [ 365.232345][ T9305] pimreg: entered allmulticast mode [ 365.285901][ T9039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.534115][ T9039] veth0_vlan: entered promiscuous mode [ 365.642580][ T9039] veth1_vlan: entered promiscuous mode [ 365.932318][ T9320] batadv0: entered promiscuous mode [ 366.024641][ T9329] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 366.031975][ T9329] IPv6: NLM_F_CREATE should be set when creating new route [ 366.039302][ T9329] IPv6: NLM_F_CREATE should be set when creating new route [ 366.150656][ T9323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.197594][ T5283] usb 16-1: device descriptor read/8, error -110 [ 366.320228][ T9039] veth0_macvtap: entered promiscuous mode [ 366.394952][ T9039] veth1_macvtap: entered promiscuous mode [ 366.565921][ T9337] netlink: 'syz.4.650': attribute type 10 has an invalid length. [ 366.602645][ T5283] usb usb16-port1: attempt power cycle [ 366.630342][ T9337] team0: Failed to send options change via netlink (err -105) [ 366.641636][ T9337] team0: Port device netdevsim0 added [ 366.652432][ T9039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.684948][ T9039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.709979][ T9039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.732164][ T9039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.751328][ T9039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.766287][ T9039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.780708][ T9039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.794790][ T9039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.811027][ T9039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 366.831197][ T9339] netlink: 'syz.4.650': attribute type 10 has an invalid length. [ 366.842009][ T9339] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 366.865706][ T9339] team0: Failed to send options change via netlink (err -105) [ 366.873905][ T9339] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 366.887019][ T9339] team0: Port device netdevsim0 removed [ 366.900550][ T9339] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 366.917324][ T5236] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 366.978643][ T9039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.989757][ T9039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.000119][ T9039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.012366][ T9039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.022900][ T9039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.041984][ T9039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.053181][ T9039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.070477][ T9039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.083498][ T9039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.094963][ T9039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.105313][ T9039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.117945][ T9039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.138830][ T9039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.146271][ T9164] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 367.195771][ T9345] binder_alloc: 9343: binder_alloc_buf size -168 failed, no address space [ 367.205338][ T9345] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 367.216775][ T5283] usb usb16-port1: unable to enumerate USB device [ 367.235067][ T9345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.652'. [ 367.345400][ T2524] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.471373][ T9039] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.507868][ T9039] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.527313][ T9039] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.536178][ T9039] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.569969][ T9164] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 367.609462][ T9164] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 367.725577][ T2524] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.748060][ T9354] Context (ID=0x1) not attached to queue pair (handle=0x1:0x0) [ 367.770505][ T9354] netlink: 203452 bytes leftover after parsing attributes in process `syz.4.655'. [ 367.798888][ T9164] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 367.816187][ T9354] netlink: 'syz.4.655': attribute type 2 has an invalid length. [ 367.836342][ T9354] netlink: 8 bytes leftover after parsing attributes in process `syz.4.655'. [ 367.954971][ T5244] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 367.971967][ T5244] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 367.986083][ T2524] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.998932][ T5244] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 368.024196][ T5244] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 368.033344][ T5244] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 368.044162][ T5244] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 368.143714][ T9367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 368.204196][ T2524] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.253988][ T9369] wlan1: authenticate with 50:50:50:50:50:50 (local address=08:02:11:00:00:01) [ 368.317044][ T9369] wlan1: send auth to 50:50:50:50:50:50 (try 1/3) [ 368.325248][ T11] wlan1: send auth to 50:50:50:50:50:50 (try 2/3) [ 368.335476][ T11] wlan1: send auth to 50:50:50:50:50:50 (try 3/3) [ 368.373012][ T11] wlan1: authentication with 50:50:50:50:50:50 timed out [ 368.405448][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.447241][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.495229][ T9369] netlink: 36 bytes leftover after parsing attributes in process `syz.4.656'. [ 368.504433][ T9367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 368.515475][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.550523][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.608869][ T9164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.629661][ T9164] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.667892][ T9164] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 368.678599][ T9164] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 368.687553][ T5236] Bluetooth: hci5: command tx timeout [ 368.713645][ T9164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.754503][ T9164] veth0_vlan: entered promiscuous mode [ 368.812710][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.820038][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.834478][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.841720][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.885005][ T9164] veth1_vlan: entered promiscuous mode [ 369.003883][ T9164] veth0_macvtap: entered promiscuous mode [ 369.027374][ T9164] veth1_macvtap: entered promiscuous mode [ 369.036509][ T2524] bridge_slave_1: left allmulticast mode [ 369.042633][ T2524] bridge_slave_1: left promiscuous mode [ 369.048531][ T2524] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.066286][ T2524] bridge_slave_0: left allmulticast mode [ 369.074339][ T2524] bridge_slave_0: left promiscuous mode [ 369.081411][ T2524] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.267231][ T940] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 369.348191][ T9392] netlink: 'syz.3.657': attribute type 9 has an invalid length. [ 369.427422][ T940] usb 3-1: Using ep0 maxpacket: 8 [ 369.439680][ T940] usb 3-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice=b6.14 [ 369.454147][ T940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.507717][ T940] usb 3-1: selecting invalid altsetting 1 [ 369.523201][ T940] comedi comedi0: could not switch to alternate setting 1 [ 369.543380][ T940] usbduxfast 3-1:17.0: driver 'usbduxfast' failed to auto-configure device. [ 369.718074][ T2524] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 369.750009][ T2524] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 369.774161][ T2524] bond0 (unregistering): Released all slaves [ 369.834120][ T9397] tipc: Started in network mode [ 369.846886][ T9397] tipc: Node identity , cluster identity 4711 [ 369.854325][ T9397] tipc: Failed to set node id, please configure manually [ 369.862015][ T9397] tipc: Enabling of bearer rejected, failed to enable media [ 369.896523][ T9386] netlink: 'syz.2.605': attribute type 4 has an invalid length. [ 369.967151][ T57] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 370.045638][ T9365] chnl_net:caif_netlink_parms(): no params data found [ 370.129825][ T5236] Bluetooth: hci0: command tx timeout [ 370.136317][ T57] usb 5-1: Using ep0 maxpacket: 8 [ 370.145272][ T57] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 370.157777][ T57] usb 5-1: config 0 has no interface number 0 [ 370.164114][ T57] usb 5-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 370.172028][ T9] usb 3-1: USB disconnect, device number 17 [ 370.178621][ T57] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 370.192732][ T57] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.206425][ T57] usb 5-1: config 0 descriptor?? [ 370.215979][ T57] iowarrior 5-1:0.1: no interrupt-in endpoint found [ 370.326000][ T9412] batadv0: entered promiscuous mode [ 370.360300][ T9415] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 370.411056][ T9164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.464365][ T9164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.486763][ T9164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.488868][ T9397] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 370.507462][ T9164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.531142][ T9164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.543307][ T9164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.564800][ T9164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.580804][ T9164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.596647][ T9421] netlink: 16126 bytes leftover after parsing attributes in process `syz.4.658'. [ 370.612979][ T9164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.613023][ T9421] netlink: 39956 bytes leftover after parsing attributes in process `syz.4.658'. [ 370.633021][ T9164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.649453][ T9164] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.694897][ T9412] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 370.702242][ T9412] IPv6: NLM_F_CREATE should be set when creating new route [ 370.709530][ T9412] IPv6: NLM_F_CREATE should be set when creating new route [ 370.762577][ T57] usb 5-1: USB disconnect, device number 37 [ 370.783553][ T9164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.818852][ T9164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.832595][ T9164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.854820][ T9164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.877355][ T9164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.889258][ T9164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.899316][ T9164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.910258][ T9164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.925626][ T9164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.939715][ T9164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.950908][ T9164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.962041][ T9164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.972709][ T9164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.984582][ T9164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.012728][ T9164] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 371.077428][ T940] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 371.198111][ T9164] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.211097][ T9164] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.225594][ T9164] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.235533][ T940] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 371.247406][ T940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.261120][ T9164] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.306821][ T940] usb 3-1: config 0 descriptor?? [ 371.466513][ T2524] hsr_slave_0: left promiscuous mode [ 371.495531][ T2524] hsr_slave_1: left promiscuous mode [ 371.580219][ T2524] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 371.627708][ T2524] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 371.648639][ T2524] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 371.656128][ T2524] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 371.738014][ T2524] veth1_macvtap: left promiscuous mode [ 371.752272][ T2524] veth0_macvtap: left promiscuous mode [ 371.775735][ T2524] veth1_vlan: left promiscuous mode [ 371.789396][ T2524] veth0_vlan: left promiscuous mode [ 372.197911][ T5236] Bluetooth: hci0: command tx timeout [ 372.358396][ T940] ath6kl: Failed to submit usb control message: -110 [ 372.386180][ T940] ath6kl: unable to send the bmi data to the device: -110 [ 372.412277][ T940] ath6kl: Unable to send get target info: -110 [ 372.466418][ T940] ath6kl: Failed to init ath6kl core: -110 [ 372.486378][ T940] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 373.115268][ T2524] team0 (unregistering): Port device team_slave_1 removed [ 373.172960][ T2524] team0 (unregistering): Port device team_slave_0 removed [ 373.736421][ T5229] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 373.762675][ T5229] dvb_usb_az6027 4-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 373.805640][ T5229] usb 4-1: USB disconnect, device number 29 [ 374.056826][ T9365] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.064694][ T9365] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.072060][ T9365] bridge_slave_0: entered allmulticast mode [ 374.091749][ T9365] bridge_slave_0: entered promiscuous mode [ 374.103387][ T9365] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.110691][ T9365] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.119872][ T9365] bridge_slave_1: entered allmulticast mode [ 374.127250][ T9365] bridge_slave_1: entered promiscuous mode [ 374.142854][ T9424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.660'. [ 374.280134][ T5229] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 374.288081][ T5236] Bluetooth: hci0: command tx timeout [ 374.336279][ T9365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.376851][ T9365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.400896][ T5287] usb 3-1: USB disconnect, device number 18 [ 374.463461][ T5229] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 374.496759][ T5229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.512391][ T5229] usb 4-1: Product: syz [ 374.516614][ T5229] usb 4-1: Manufacturer: syz [ 374.533427][ T5229] usb 4-1: SerialNumber: syz [ 374.555770][ T5229] usb 4-1: config 0 descriptor?? [ 374.602959][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.620649][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.662543][ T9365] team0: Port device team_slave_0 added [ 374.690620][ T9365] team0: Port device team_slave_1 added [ 374.772459][ T5229] usb 4-1: ignoring: probably an ADSL modem [ 374.916119][ T9469] futex_wake_op: syz.4.668 tries to shift op by 32; fix this program [ 374.926040][ T9365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.951059][ T9365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.006526][ T9365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.023444][ T9365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.037066][ T9365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.063319][ C0] vkms_vblank_simulate: vblank timer overrun [ 375.074558][ T9365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.087962][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.103163][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.186336][ T5229] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 375.194299][ T57] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 375.210340][ T9365] hsr_slave_0: entered promiscuous mode [ 375.224804][ T9365] hsr_slave_1: entered promiscuous mode [ 375.258328][ T9365] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 375.275430][ T9365] Cannot create hsr debugfs directory [ 375.369466][ T57] usb 5-1: Using ep0 maxpacket: 16 [ 375.425041][ T57] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=9a.1d [ 375.429581][ T9462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.457120][ T57] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.465377][ T57] usb 5-1: Product: syz [ 375.489330][ T9462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.497257][ T57] usb 5-1: Manufacturer: syz [ 375.501908][ T57] usb 5-1: SerialNumber: syz [ 375.528364][ T57] usb 5-1: config 0 descriptor?? [ 375.547528][ T57] ims_pcu 5-1:0.0: Missing CDC union descriptor [ 375.576705][ T57] ims_pcu 5-1:0.0: probe with driver ims_pcu failed with error -22 [ 375.668402][ T5229] usb 4-1: USB disconnect, device number 30 [ 376.194735][ T9365] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 376.235484][ T9365] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 376.283289][ T9365] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 376.324958][ T9365] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 376.359147][ T5236] Bluetooth: hci0: command tx timeout [ 376.514270][ T9499] random: crng reseeded on system resumption [ 376.840980][ T9365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.906681][ T9365] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.979543][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.986833][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.035709][ T2583] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.042878][ T2583] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.279888][ T9365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.429057][ T9365] veth0_vlan: entered promiscuous mode [ 377.486481][ T9365] veth1_vlan: entered promiscuous mode [ 377.590438][ T5287] usb 5-1: USB disconnect, device number 38 [ 377.660161][ T8] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 377.701072][ T9365] veth0_macvtap: entered promiscuous mode [ 377.747151][ T9365] veth1_macvtap: entered promiscuous mode [ 377.803599][ T9365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.868357][ T8] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 377.900510][ T8] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 377.947144][ T8] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 377.997170][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.033202][ T9509] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 378.060571][ T8] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 378.197575][ T9365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.213491][ T9365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.248503][ T9365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.278904][ T9365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.311170][ T9365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.332298][ T9365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.363422][ T9365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.378459][ T29] audit: type=1326 audit(1728434223.869:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9526 comm="syz.4.672" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f6f579 code=0x0 [ 378.443949][ T9365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.475113][ T9365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.567138][ T9365] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.603437][ T9530] warning: `syz.4.672' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 378.661082][ T5283] usb 4-1: USB disconnect, device number 31 [ 378.706898][ T9365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.795787][ T9365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.841902][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.852862][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.866397][ T9365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.954216][ T9365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.018920][ T9365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.041898][ T9365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.070799][ T9365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.097037][ T9365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.135742][ T9365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.178613][ T9365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.207233][ T9365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.239702][ T9365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.268479][ T9365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.292717][ T9365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.305607][ T9365] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 379.470232][ T9557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.675'. [ 379.774762][ T9365] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.813635][ T9365] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.842294][ T9365] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.853016][ T9365] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.935081][ T9569] netlink: 12 bytes leftover after parsing attributes in process `syz.4.675'. [ 379.949694][ T9569] geneve2: entered promiscuous mode [ 380.156711][ T9548] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 380.251095][ T9548] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 380.364743][ T2583] bridge_slave_1: left allmulticast mode [ 380.377181][ T2583] bridge_slave_1: left promiscuous mode [ 380.383082][ T2583] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.550361][ T2583] bridge_slave_0: left allmulticast mode [ 380.579353][ T2583] bridge_slave_0: left promiscuous mode [ 380.605696][ T2583] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.760861][ T2583] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 381.775841][ T2583] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 381.790903][ T2583] bond0 (unregistering): Released all slaves [ 381.811863][ T9576] netlink: 36 bytes leftover after parsing attributes in process `syz.3.678'. [ 382.051992][ T9548] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 382.079802][ T9548] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 382.152918][ T9548] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 382.161958][ T9548] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 382.178508][ T9548] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 382.190256][ T9548] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 382.218983][ T9548] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 382.230851][ T9548] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 382.775588][ T9635] netlink: 4 bytes leftover after parsing attributes in process `syz.2.683'. [ 382.794865][ T2524] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.830071][ T2524] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.952240][ T2583] hsr_slave_0: left promiscuous mode [ 382.985178][ T2583] hsr_slave_1: left promiscuous mode [ 383.177655][ T2583] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.225980][ T2583] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.304840][ T5285] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 383.342614][ T2583] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.354439][ T2583] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.457614][ T2583] veth1_macvtap: left promiscuous mode [ 383.492979][ T2583] veth0_macvtap: left promiscuous mode [ 383.577159][ T5285] usb 1-1: Using ep0 maxpacket: 8 [ 383.584906][ T5285] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 383.598777][ T5285] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 383.601370][ T2583] veth1_vlan: left promiscuous mode [ 383.658337][ T2583] veth0_vlan: left promiscuous mode [ 383.672837][ T5285] usb 1-1: config 1 has no interface number 1 [ 383.699727][ T5285] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 383.756369][ T5285] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 383.769231][ T5285] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.777789][ T5285] usb 1-1: Product: syz [ 383.782013][ T5285] usb 1-1: Manufacturer: syz [ 383.795176][ T5285] usb 1-1: SerialNumber: syz [ 384.095673][ T9641] netlink: 72 bytes leftover after parsing attributes in process `syz.0.685'. [ 384.147612][ T5229] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 384.175494][ T5285] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 384.220649][ T5285] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 384.339276][ T5229] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 384.357055][ T5229] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 384.377690][ T5229] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 384.410446][ T5229] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.463473][ T9665] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 384.487969][ T5229] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 384.520493][ T5285] usb 1-1: USB disconnect, device number 42 [ 385.039162][ T5285] usb 3-1: USB disconnect, device number 19 [ 385.221728][ T9682] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.688'. [ 385.520871][ T9] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 385.697097][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 385.703966][ T2583] team0 (unregistering): Port device team_slave_1 removed [ 385.712037][ T9] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 385.721588][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 385.745342][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 385.755609][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 385.768367][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 385.782171][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 385.792857][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.834856][ T2583] team0 (unregistering): Port device team_slave_0 removed [ 386.016817][ T9] usb 1-1: usb_control_msg returned -32 [ 386.025556][ T9] usbtmc 1-1:16.0: can't read capabilities [ 386.422756][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.441326][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.737783][ T9690] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 386.764369][ T9690] vhci_hcd: GetPortErrorCount req not supported for USB 2.0 roothub [ 386.764925][ T5229] usb 1-1: USB disconnect, device number 43 [ 386.779557][ T9682] usbtmc 1-1:16.0: usb_control_msg returned -71 [ 387.184387][ T9] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 387.427142][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 387.468329][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 387.604136][ T9] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 387.737699][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.829721][ T9] usb 2-1: config 0 descriptor?? [ 388.224664][ T9692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.458794][ T9692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.589133][ T9692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.627257][ T9692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.733571][ T9734] netlink: 36 bytes leftover after parsing attributes in process `syz.4.697'. [ 388.871912][ T29] audit: type=1326 audit(1728434234.369:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9728 comm="syz.4.697" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6f579 code=0x7fc00000 [ 388.895376][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 388.901679][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 388.950916][ T9] usb 2-1: USB disconnect, device number 48 [ 389.387250][ T8] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 389.468726][ T29] audit: type=1326 audit(1728434234.959:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9751 comm="syz.0.698" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f41579 code=0x0 [ 389.578512][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.606794][ T29] audit: type=1326 audit(1728434234.989:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9728 comm="syz.4.697" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f6f579 code=0x7fc00000 [ 389.649929][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 389.682759][ T8] usb 4-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 389.979674][ T29] audit: type=1326 audit(1728434234.989:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9728 comm="syz.4.697" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6f579 code=0x7fc00000 [ 389.989855][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.003132][ T29] audit: type=1326 audit(1728434234.989:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9728 comm="syz.4.697" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6f579 code=0x7fc00000 [ 390.032254][ T29] audit: type=1326 audit(1728434234.989:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9728 comm="syz.4.697" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6f579 code=0x7fc00000 [ 390.054709][ T29] audit: type=1326 audit(1728434234.989:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9728 comm="syz.4.697" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6f579 code=0x7fc00000 [ 390.078452][ T29] audit: type=1326 audit(1728434234.989:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9728 comm="syz.4.697" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6f579 code=0x7fc00000 [ 390.096651][ T8] usb 4-1: config 0 descriptor?? [ 390.100852][ T29] audit: type=1326 audit(1728434234.989:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9728 comm="syz.4.697" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6f579 code=0x7fc00000 [ 390.136085][ T29] audit: type=1326 audit(1728434234.989:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9728 comm="syz.4.697" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6f579 code=0x7fc00000 [ 390.492989][ T9760] netlink: 36 bytes leftover after parsing attributes in process `syz.1.700'. [ 390.905961][ T57] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 391.050170][ T9773] syz.4.701 uses obsolete (PF_INET,SOCK_PACKET) [ 391.110059][ T57] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 391.122562][ T57] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 391.132692][ T57] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 391.141907][ T57] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.155627][ T9769] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 391.168462][ T57] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 391.199529][ T9776] vlan2: entered allmulticast mode [ 391.343203][ T5229] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 391.428417][ T9773] syzkaller1: entered promiscuous mode [ 391.439602][ T9773] syzkaller1: entered allmulticast mode [ 391.567309][ T5229] usb 2-1: Using ep0 maxpacket: 8 [ 391.574263][ T5229] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.585502][ T5229] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 391.595503][ T5229] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 391.617476][ T5229] usb 2-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.00 [ 391.627155][ T5229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.641861][ T5229] usb 2-1: config 0 descriptor?? [ 391.827050][ T5283] usb 1-1: USB disconnect, device number 44 [ 392.002504][ T9775] veth0_vlan: entered allmulticast mode [ 392.160170][ T5229] elecom 0003:056E:00FF.0008: unknown main item tag 0x0 [ 392.188451][ T5229] elecom 0003:056E:00FF.0008: unknown main item tag 0x0 [ 392.252906][ T5229] elecom 0003:056E:00FF.0008: hidraw0: USB HID v0.00 Device [HID 056e:00ff] on usb-dummy_hcd.1-1/input0 [ 392.445712][ T9785] netlink: 12 bytes leftover after parsing attributes in process `syz.2.705'. [ 392.498293][ T9775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.498764][ T9785] input: syz0 as /devices/virtual/input/input19 [ 392.556886][ T9775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.603294][ T8] usbhid 4-1:0.0: can't add hid device: -71 [ 392.615890][ T8] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 392.644879][ T5285] usb 2-1: USB disconnect, device number 49 [ 392.677359][ T8] usb 4-1: USB disconnect, device number 32 [ 392.697083][ T5229] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 392.767870][ T9789] loop9: detected capacity change from 0 to 7 [ 392.783448][ T9789] Dev loop9: unable to read RDB block 7 [ 392.793514][ T9789] loop9: unable to read partition table [ 392.800186][ T9789] loop9: partition table beyond EOD, truncated [ 392.806460][ T9789] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 392.822103][ T9789] IPv6: Can't replace route, no match found [ 392.879506][ T5229] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 392.895056][ T5229] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.924195][ T5229] usb 5-1: config 0 descriptor?? [ 392.932106][ T5229] cp210x 5-1:0.0: cp210x converter detected [ 393.007456][ T940] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 393.176271][ T940] usb 1-1: Using ep0 maxpacket: 32 [ 393.192443][ T940] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 393.223504][ T940] usb 1-1: config 0 has no interfaces? [ 393.250583][ T940] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 393.273799][ T940] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.289926][ T5283] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 393.299264][ T940] usb 1-1: config 0 descriptor?? [ 393.346814][ T5229] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -121 [ 393.488104][ T5283] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 393.517180][ T5283] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 393.582025][ T5283] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 393.617891][ T5283] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.641089][ T9793] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 393.681345][ T5283] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 393.969216][ T5229] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 393.999768][ T5229] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 394.013592][ T5229] usb 5-1: cp210x converter now attached to ttyUSB0 [ 394.033012][ T5229] usb 5-1: USB disconnect, device number 39 [ 394.062916][ T5229] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 394.106086][ T5229] cp210x 5-1:0.0: device disconnected [ 394.189099][ T5285] usb 4-1: USB disconnect, device number 33 [ 394.191147][ T9809] netlink: 12 bytes leftover after parsing attributes in process `syz.1.713'. [ 394.205540][ T9809] netlink: 12 bytes leftover after parsing attributes in process `syz.1.713'. [ 394.216042][ T9809] netlink: 12 bytes leftover after parsing attributes in process `syz.1.713'. [ 394.321313][ T9809] netlink: 'syz.1.713': attribute type 1 has an invalid length. [ 394.436633][ T9817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.714'. [ 394.474577][ T9817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.714'. [ 394.523470][ T9817] sch_tbf: burst 480 is lower than device veth1_to_bridge mtu (1514) ! [ 395.077925][ T9822] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 395.189865][ T9824] netlink: 'syz.3.716': attribute type 10 has an invalid length. [ 395.215321][ T9824] team0: Failed to send options change via netlink (err -105) [ 395.246511][ T9824] team0: Port device netdevsim0 added [ 395.278653][ T9826] netlink: 'syz.3.716': attribute type 10 has an invalid length. [ 395.290887][ T9826] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 395.379061][ T9826] team0: Failed to send options change via netlink (err -105) [ 395.423443][ T9826] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 395.450653][ T9826] team0: Port device netdevsim0 removed [ 395.475777][ T9826] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 395.890516][ T5283] usb 1-1: USB disconnect, device number 45 [ 396.143246][ T9850] netlink: 4 bytes leftover after parsing attributes in process `syz.4.722'. [ 396.262989][ T9850] netlink: 12 bytes leftover after parsing attributes in process `syz.4.722'. [ 396.294733][ T9850] netlink: 12 bytes leftover after parsing attributes in process `syz.4.722'. [ 396.305492][ T9850] netlink: 20 bytes leftover after parsing attributes in process `syz.4.722'. [ 396.319326][ T9839] netlink: 'syz.1.719': attribute type 10 has an invalid length. [ 396.327461][ T9839] bridge0: port 3(netdevsim0) entered blocking state [ 396.334523][ T9839] bridge0: port 3(netdevsim0) entered disabled state [ 396.339776][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 396.339799][ T29] audit: type=1326 audit(1728434241.839:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9846 comm="syz.4.722" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f6f579 code=0x0 [ 396.371270][ T9839] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 396.383585][ T9839] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 396.402344][ T9839] bridge0: port 3(netdevsim0) entered blocking state [ 396.409232][ T9839] bridge0: port 3(netdevsim0) entered forwarding state [ 397.309951][ T9876] netlink: 16 bytes leftover after parsing attributes in process `syz.1.725'. [ 397.327823][ T9876] dlm: non-version read from control device 95 [ 397.908002][ T9886] xt_limit: Overflow, try lower: 0/0 [ 398.473038][ T9898] TCP: TCP_TX_DELAY enabled [ 398.497186][ T57] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 398.792215][ T57] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 398.814328][ T57] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 398.824452][ T57] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 398.833698][ T57] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.918877][ T9892] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 398.950740][ T57] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 399.416005][ T9913] tipc: Started in network mode [ 399.428119][ T57] usb 4-1: USB disconnect, device number 34 [ 399.498104][ T9913] tipc: Node identity ac1414aa, cluster identity 4711 [ 399.544122][ T940] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 399.564115][ T9913] tipc: New replicast peer: 100.1.1.1 [ 399.578360][ T9913] tipc: Enabled bearer , priority 10 [ 399.818854][ T940] usb 5-1: New USB device found, idVendor=046d, idProduct=08c6, bcdDevice=33.c2 [ 399.828280][ T940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.838782][ T940] usb 5-1: config 0 descriptor?? [ 399.876035][ T940] usb 5-1: unknown interface protocol 0x9a, assuming v1 [ 399.890007][ T940] usb 5-1: cannot find UAC_HEADER [ 399.943835][ T940] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 400.028263][ T29] audit: type=1326 audit(1728434245.529:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9917 comm="syz.1.736" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x0 [ 400.170352][ T9910] macvlan2: entered promiscuous mode [ 400.175718][ T9910] mac80211_hwsim hwsim79 wlan1: entered promiscuous mode [ 400.218074][ T9910] macvlan2: entered allmulticast mode [ 400.223829][ T9910] mac80211_hwsim hwsim79 wlan1: entered allmulticast mode [ 400.265232][ T9910] mac80211_hwsim hwsim79 wlan1: left allmulticast mode [ 400.274789][ T9910] mac80211_hwsim hwsim79 wlan1: left promiscuous mode [ 400.434969][ T9928] netlink: 4 bytes leftover after parsing attributes in process `syz.3.737'. [ 400.438564][ T9928] netlink: 4 bytes leftover after parsing attributes in process `syz.3.737'. [ 400.579659][ T57] tipc: Node number set to 2886997162 [ 401.297079][ T5285] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 401.505667][ T5285] usb 3-1: Using ep0 maxpacket: 16 [ 401.560258][ T5285] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 401.590641][ T5285] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 401.625517][ T5285] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 401.647061][ T5285] usb 3-1: config 1 has no interface number 1 [ 401.659516][ T5285] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 401.674014][ T5285] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 401.740467][ T5285] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 401.764760][ T5285] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.795170][ T5285] usb 3-1: Product: syz [ 401.803674][ T5285] usb 3-1: Manufacturer: syz [ 401.814423][ T5285] usb 3-1: SerialNumber: syz [ 402.106070][ T5285] usb 3-1: USB disconnect, device number 20 [ 402.166882][ T5930] udevd[5930]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 402.283097][ T940] usb 5-1: USB disconnect, device number 40 [ 402.797441][ T8] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 403.025983][ T8] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 403.045718][ T8] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 403.069351][ T8] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 403.091849][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.120049][ T9946] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 403.138851][ T8] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 403.562912][ T5285] usb 5-1: USB disconnect, device number 41 [ 403.597037][ T57] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 403.768636][ T57] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 403.777648][ T57] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 403.788161][ T57] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 403.807089][ T57] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 403.823068][ T57] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 403.833728][ T57] usb 1-1: New USB device strings: Mfr=1, Product=226, SerialNumber=216 [ 403.842511][ T57] usb 1-1: Product: syz [ 403.846694][ T57] usb 1-1: Manufacturer: syz [ 403.867734][ T57] usb 1-1: SerialNumber: syz [ 403.935842][ T57] cdc_ncm 1-1:1.0: skipping garbage [ 403.945121][ T57] cdc_ncm 1-1:1.0: invalid descriptor buffer length [ 403.955279][ T57] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 403.975837][ T9959] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 403.991567][ T57] cdc_ncm 1-1:1.0: bind() failure [ 404.166627][ T5286] usb 1-1: USB disconnect, device number 46 [ 404.988513][ T9971] random: crng reseeded on system resumption [ 405.207168][ T57] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 405.357721][ T57] usb 1-1: Using ep0 maxpacket: 16 [ 405.364811][ T57] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 405.388689][ T57] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 405.400459][ T9967] veth0_vlan: left promiscuous mode [ 405.426737][ T9967] veth0_vlan: entered promiscuous mode [ 405.441043][ T57] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 405.460007][ T57] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.469030][ T57] usb 1-1: Product: syz [ 405.473315][ T57] usb 1-1: Manufacturer: syz [ 405.483437][ T57] usb 1-1: SerialNumber: syz [ 405.492767][ T57] usb 1-1: config 0 descriptor?? [ 405.503872][ T57] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 405.527075][ T57] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 405.772036][ T9982] batadv0: entered promiscuous mode [ 405.796123][ T9982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 405.846133][ T9982] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 405.853454][ T9982] IPv6: NLM_F_CREATE should be set when creating new route [ 405.860816][ T9982] IPv6: NLM_F_CREATE should be set when creating new route [ 405.868589][ T5285] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 406.027122][ T5285] usb 3-1: Using ep0 maxpacket: 8 [ 406.027243][ T5286] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 406.034228][ T5285] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 406.052587][ T5285] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 406.062302][ T5285] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 406.078762][ T5285] usb 3-1: SerialNumber: syz [ 406.103066][ T5285] usb 3-1: config 0 descriptor?? [ 406.123483][ T5285] usb 3-1: Found UVC 0.00 device (05ac:8501) [ 406.128659][ T57] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 406.138001][ T57] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 406.145033][ T5285] usb 3-1: No valid video chain found. [ 406.220854][ T9989] : entered promiscuous mode [ 406.237695][ T5286] usb 4-1: Using ep0 maxpacket: 32 [ 406.252219][ T5286] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 406.281611][ T5286] usb 4-1: New USB device found, idVendor=2013, idProduct=0248, bcdDevice=75.43 [ 406.297068][ T5286] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.306335][ T5286] usb 4-1: Product: syz [ 406.312741][ T5286] usb 4-1: Manufacturer: syz [ 406.318107][ T5286] usb 4-1: SerialNumber: syz [ 406.335430][ T5286] usb 4-1: config 0 descriptor?? [ 406.381720][ T5229] usb 3-1: USB disconnect, device number 21 [ 406.562439][ T5286] dvb-usb: found a 'Pinnacle PCTV 282e' in cold state, will try to load a firmware [ 406.588062][ T5286] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 406.596436][ T5286] dib0700: firmware download failed at 7 with -22 [ 406.629131][ T5286] usb 4-1: USB disconnect, device number 35 [ 406.872770][ T57] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 406.888603][ T57] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 406.902926][ T57] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 406.918750][ T57] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 406.939002][ T57] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 406.964307][ T57] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 407.317231][ T8] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 407.397313][ T5229] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 407.477201][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 407.520712][ T8] usb 2-1: config 0 has an invalid interface number: 249 but max is 0 [ 407.538495][ T8] usb 2-1: config 0 has an invalid interface number: 43 but max is 0 [ 407.552087][T10009] futex_wake_op: syz.3.762 tries to shift op by 32; fix this program [ 407.567596][ T8] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 407.576615][ T8] usb 2-1: config 0 has no interface number 0 [ 407.593963][ T5229] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 407.622357][ T5229] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 407.640958][ T8] usb 2-1: config 0 has no interface number 1 [ 407.641507][ T5229] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 407.667205][ T8] usb 2-1: config 0 interface 249 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 407.688156][ T8] usb 2-1: config 0 interface 249 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 407.706651][ T5229] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.719880][ T8] usb 2-1: too many endpoints for config 0 interface 43 altsetting 115: 249, using maximum allowed: 30 [ 407.727836][T10006] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 407.739827][ T8] usb 2-1: config 0 interface 43 altsetting 115 has 1 endpoint descriptor, different from the interface descriptor's value: 249 [ 407.773860][ T8] usb 2-1: config 0 interface 249 has no altsetting 0 [ 407.777699][ T5229] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 407.799268][ T8] usb 2-1: config 0 interface 43 has no altsetting 0 [ 407.817267][ T8] usb 2-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=a5.06 [ 407.833405][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.847126][ T940] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 407.882141][ T8] usb 2-1: Product: syz [ 407.895299][ T8] usb 2-1: Manufacturer: syz [ 407.914180][ T8] usb 2-1: SerialNumber: syz [ 407.942472][ T8] usb 2-1: config 0 descriptor?? [ 408.019021][ T940] usb 4-1: Using ep0 maxpacket: 16 [ 408.052895][ T940] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=9a.1d [ 408.076783][ T940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.092429][ T940] usb 4-1: Product: syz [ 408.109684][ T940] usb 4-1: Manufacturer: syz [ 408.128451][ T940] usb 4-1: SerialNumber: syz [ 408.169372][ T940] usb 4-1: config 0 descriptor?? [ 408.206024][ T8] ljca 2-1:0.249: bulk endpoints not found [ 408.253689][ T940] ims_pcu 4-1:0.0: Missing CDC union descriptor [ 408.318754][ T8] ljca 2-1:0.43: bulk endpoints not found [ 408.327439][ T940] ims_pcu 4-1:0.0: probe with driver ims_pcu failed with error -22 [ 408.377129][ T8] usb 2-1: USB disconnect, device number 50 [ 408.449278][ T57] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 408.484823][ T940] usb 3-1: USB disconnect, device number 22 [ 408.505534][ T57] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 408.574969][ T57] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 408.598455][ T57] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 408.616668][ T57] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 409.365327][ T57] usb 1-1: USB disconnect, device number 47 [ 409.555226][T10024] netlink: 4 bytes leftover after parsing attributes in process `syz.4.768'. [ 409.661987][T10028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.766'. [ 409.722311][T10032] netlink: 12 bytes leftover after parsing attributes in process `syz.0.766'. [ 409.766798][T10032] netlink: 12 bytes leftover after parsing attributes in process `syz.0.766'. [ 409.797474][T10032] netlink: 20 bytes leftover after parsing attributes in process `syz.0.766'. [ 409.816121][ T29] audit: type=1326 audit(1728434255.309:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10025 comm="syz.0.766" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f41579 code=0x0 [ 410.174850][T10043] syzkaller1: entered promiscuous mode [ 410.194432][T10043] syzkaller1: entered allmulticast mode [ 410.461805][ T8] usb 4-1: USB disconnect, device number 36 [ 410.520733][ T29] audit: type=1326 audit(1728434255.979:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10044 comm="syz.2.773" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x0 [ 411.408243][ T8] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 411.475538][ T57] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 411.618884][ T8] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 411.627342][ T8] usb 4-1: config 0 has no interface number 0 [ 411.648815][ T8] usb 4-1: New USB device found, idVendor=2639, idProduct=0012, bcdDevice=65.b5 [ 411.659547][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.677511][ T8] usb 4-1: Product: syz [ 411.681746][ T8] usb 4-1: Manufacturer: syz [ 411.686378][ T8] usb 4-1: SerialNumber: syz [ 411.697520][ T57] usb 1-1: Using ep0 maxpacket: 8 [ 411.708422][ T8] usb 4-1: config 0 descriptor?? [ 411.714588][ T57] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 411.727553][ T8] xsens_mt 4-1:0.1: xsens_mt converter detected [ 411.744419][ T8] usb 4-1: xsens_mt converter now attached to ttyUSB0 [ 411.747690][ T2583] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.768668][ T57] usb 1-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 411.797158][ T57] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.821525][ T57] usb 1-1: Product: syz [ 411.836069][ T5229] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 411.857068][ T57] usb 1-1: Manufacturer: syz [ 411.862063][ T57] usb 1-1: SerialNumber: syz [ 411.873395][ T57] usb 1-1: config 0 descriptor?? [ 411.890028][ T57] cdc_phonet 1-1:0.0: skipping garbage [ 411.895602][ T57] cdc_phonet 1-1:0.0: probe with driver cdc_phonet failed with error -22 [ 411.938742][ T57] usb 4-1: USB disconnect, device number 37 [ 411.968088][ T57] xsens_mt ttyUSB0: xsens_mt converter now disconnected from ttyUSB0 [ 412.015716][ T57] xsens_mt 4-1:0.1: device disconnected [ 412.042633][ T2583] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.056588][ T5229] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 412.068211][ T5229] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 412.097038][ T5229] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 412.144291][ T5233] usb 1-1: USB disconnect, device number 48 [ 412.154131][ T5229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.183998][T10065] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 412.201016][ T5229] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 412.305137][ T2583] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.485665][ T2583] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.544200][ T5244] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 412.579171][ T5244] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 412.629540][ T5244] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 412.657235][ T5244] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 412.668214][ T5244] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 412.682953][ T5244] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 412.758904][ T5233] usb 2-1: USB disconnect, device number 51 [ 413.206369][ T2583] bridge_slave_1: left allmulticast mode [ 413.216142][ T2583] bridge_slave_1: left promiscuous mode [ 413.222156][ T2583] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.382079][ T2583] bridge_slave_0: left allmulticast mode [ 413.398831][ T2583] bridge_slave_0: left promiscuous mode [ 413.412078][ T2583] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.768872][ T5244] Bluetooth: hci4: command tx timeout [ 414.849083][T10122] xt_limit: Overflow, try lower: 0/0 [ 415.397065][ T5229] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 415.474949][ T2583] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 415.571107][ T5229] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 415.581165][ T5229] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.601719][ T2583] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 415.621945][ T5229] usb 5-1: Product: syz [ 415.635743][ T2583] bond0 (unregistering): Released all slaves [ 415.640270][ T5229] usb 5-1: Manufacturer: syz [ 415.717715][T10118] syzkaller1: entered promiscuous mode [ 415.723763][T10118] syzkaller1: entered allmulticast mode [ 415.738641][ T5229] usb 5-1: SerialNumber: syz [ 415.777531][ T5229] usb 5-1: config 0 descriptor?? [ 415.819295][ T5229] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 415.893932][ T5229] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 415.907772][ T5229] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 415.917902][ T5229] usb 5-1: media controller created [ 415.937512][ T5229] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 416.106259][ T5229] DVB: Unable to find symbol mt352_attach() [ 416.163067][ T2583] tipc: Disabling bearer [ 416.179949][ T2583] tipc: Left network mode [ 416.248909][ T5229] DVB: Unable to find symbol nxt6000_attach() [ 416.257293][ T5229] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 416.278835][T10071] chnl_net:caif_netlink_parms(): no params data found [ 416.320643][ T5229] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input21 [ 416.359665][ T5229] dvb-usb: schedule remote query interval to 1000 msecs. [ 416.391915][ T5229] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 416.433026][ T5229] dvb-usb: bulk message failed: -22 (7/0) [ 416.457189][ T5229] dvb-usb: bulk message failed: -22 (7/0) [ 416.512018][ T5229] usb 5-1: USB disconnect, device number 42 [ 416.670561][T10071] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.696265][ T5229] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 416.709597][T10071] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.729150][T10071] bridge_slave_0: entered allmulticast mode [ 416.780104][T10071] bridge_slave_0: entered promiscuous mode [ 416.837117][ T5244] Bluetooth: hci4: command tx timeout [ 416.964174][T10071] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.997157][T10071] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.015353][T10071] bridge_slave_1: entered allmulticast mode [ 417.058438][T10071] bridge_slave_1: entered promiscuous mode [ 417.223957][T10174] netlink: 4 bytes leftover after parsing attributes in process `syz.1.804'. [ 417.427624][ T2583] hsr_slave_0: left promiscuous mode [ 417.435883][ T2583] hsr_slave_1: left promiscuous mode [ 417.559426][ T2583] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 417.608268][ T2583] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 417.673825][ T2583] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.681661][ T2583] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 417.959180][ T2583] veth1_macvtap: left promiscuous mode [ 417.964794][ T2583] veth0_macvtap: left promiscuous mode [ 417.998457][ T2583] veth1_vlan: left promiscuous mode [ 418.014135][ T2583] veth0_vlan: left promiscuous mode [ 418.387668][ T8] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 418.568326][ T29] audit: type=1326 audit(1728434264.049:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10199 comm="syz.3.813" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 418.590691][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 418.596051][ T29] audit: type=1326 audit(1728434264.069:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10199 comm="syz.3.813" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 418.623072][ T8] usb 2-1: config 0 has an invalid interface number: 181 but max is 0 [ 418.648319][ T8] usb 2-1: config 0 has no interface number 0 [ 418.654939][ T29] audit: type=1326 audit(1728434264.069:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10199 comm="syz.3.813" exe="/root/syz-executor" sig=0 arch=40000003 syscall=277 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 418.681079][ T8] usb 2-1: New USB device found, idVendor=04cb, idProduct=0121, bcdDevice=2e.e6 [ 418.712249][T10202] netlink: 4 bytes leftover after parsing attributes in process `syz.3.814'. [ 418.725379][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.737041][ T29] audit: type=1326 audit(1728434264.069:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10199 comm="syz.3.813" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 418.744070][ T8] usb 2-1: Product: syz [ 418.759408][ C1] vkms_vblank_simulate: vblank timer overrun [ 418.773643][ T29] audit: type=1326 audit(1728434264.069:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10199 comm="syz.3.813" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 418.795633][ C1] vkms_vblank_simulate: vblank timer overrun [ 418.796692][ T8] usb 2-1: Manufacturer: syz [ 418.828752][ T8] usb 2-1: SerialNumber: syz [ 418.859405][ T8] usb 2-1: config 0 descriptor?? [ 418.879624][ T8] gspca_main: finepix-2.14.0 probing 04cb:0121 [ 418.917988][ T5244] Bluetooth: hci4: command tx timeout [ 419.250101][T10210] netlink: 4 bytes leftover after parsing attributes in process `syz.3.817'. [ 419.261850][T10208] xt_limit: Overflow, try lower: 0/0 [ 419.472782][T10215] netlink: 24 bytes leftover after parsing attributes in process `syz.3.818'. [ 419.510080][T10216] sctp: [Deprecated]: syz.1.810 (pid 10216) Use of struct sctp_assoc_value in delayed_ack socket option. [ 419.510080][T10216] Use struct sctp_sack_info instead [ 419.715852][ T8] usb 2-1: USB disconnect, device number 52 [ 420.078445][ T2583] team0 (unregistering): Port device team_slave_1 removed [ 420.180203][ T2583] team0 (unregistering): Port device team_slave_0 removed [ 420.547321][ T5229] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 420.729995][ T5229] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 420.744605][ T5229] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 420.760681][ T5229] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 420.770992][ T5229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.788846][T10233] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 420.799901][ T5229] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 420.945550][ T8] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 421.007136][ T5244] Bluetooth: hci4: command tx timeout [ 421.150696][ T8] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 421.192244][ T8] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 421.213992][ T8] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 421.258750][ T5229] usb 1-1: USB disconnect, device number 49 [ 421.261196][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.332612][T10238] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 421.368426][ T8] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 421.521825][T10071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.557853][T10071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.779325][T10071] team0: Port device team_slave_0 added [ 421.786887][T10071] team0: Port device team_slave_1 added [ 421.893395][T10071] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.908328][T10071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.909896][ T5233] usb 2-1: USB disconnect, device number 53 [ 421.944990][T10071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 422.002077][T10071] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 422.047432][T10071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.133557][T10071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.303758][T10258] netlink: 'syz.0.832': attribute type 10 has an invalid length. [ 422.333929][T10258] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.341438][T10258] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.376533][T10258] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.383718][T10258] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.391255][T10258] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.398468][T10258] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.420104][T10258] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 422.440366][T10071] hsr_slave_0: entered promiscuous mode [ 422.463300][T10071] hsr_slave_1: entered promiscuous mode [ 422.471391][T10071] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 422.512832][T10071] Cannot create hsr debugfs directory [ 423.136455][T10284] netlink: 4 bytes leftover after parsing attributes in process `syz.4.837'. [ 423.337208][T10283] netlink: 16 bytes leftover after parsing attributes in process `syz.3.838'. [ 423.807210][ T8] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 423.970989][ T8] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 423.985866][ T8] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 424.005444][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.063585][ T8] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 424.179182][T10299] geneve2: entered promiscuous mode [ 424.532592][T10071] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 424.549455][T10071] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 424.571449][T10071] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 424.608670][T10071] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 424.637384][ T940] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 424.778408][ T5287] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 424.791450][T10071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.810774][ T940] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 424.844631][ T940] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 424.857685][ T940] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 424.857999][T10071] 8021q: adding VLAN 0 to HW filter on device team0 [ 424.868719][ T940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.902649][T10306] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 424.939192][ T2583] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.946383][ T2583] bridge0: port 1(bridge_slave_0) entered forwarding state [ 424.963338][ T940] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 424.990984][ T5287] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 425.025899][ T2583] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.033160][ T2583] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.057893][ T5287] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 425.117960][ T5287] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 425.158213][ T8] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 425.184679][ T5287] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.280918][T10308] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 425.345070][ T5287] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 425.360231][ T8] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 425.414332][ T8] stv0680 4-1:4.0: last error: 0, command = 0x0 [ 425.572252][ T8] usb 4-1: USB disconnect, device number 38 [ 425.665665][ T9] usb 1-1: USB disconnect, device number 50 [ 425.720449][T10071] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 425.765678][ T5287] usb 2-1: USB disconnect, device number 54 [ 425.790103][T10324] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 425.797356][T10324] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 425.869635][T10071] veth0_vlan: entered promiscuous mode [ 425.980072][T10071] veth1_vlan: entered promiscuous mode [ 426.015720][T10071] veth0_macvtap: entered promiscuous mode [ 426.027826][T10071] veth1_macvtap: entered promiscuous mode [ 426.045803][T10071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.056599][T10071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.066876][T10071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.078272][T10071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.088258][T10071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.098836][T10071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.108819][T10071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.119649][T10071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.131309][T10071] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.143267][T10071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.153839][T10071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.163756][T10071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.174966][T10071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.185258][T10071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.196051][T10071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.206380][T10071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.217012][T10071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.226864][T10071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.237551][T10071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.247999][T10071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.258575][T10071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.269999][T10071] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.365692][T10338] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 426.403440][T10340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 426.423479][T10071] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.437370][T10071] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.446496][T10071] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.466775][T10071] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.812178][ T1105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.850536][ T2524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.869475][ T1105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.887149][ T2524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.380957][T10378] veth0_vlan: left allmulticast mode [ 427.402107][T10370] futex_wake_op: syz.2.785 tries to shift op by 32; fix this program [ 427.667090][ T5233] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 427.818438][T10391] xt_CT: You must specify a L4 protocol and not use inversions on it [ 427.968383][ T5233] usb 3-1: Using ep0 maxpacket: 16 [ 427.984374][ T5233] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=9a.1d [ 428.014421][ T5233] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.038624][ T5233] usb 3-1: Product: syz [ 428.042860][ T5233] usb 3-1: Manufacturer: syz [ 428.069693][ T5233] usb 3-1: SerialNumber: syz [ 428.097047][ T5283] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 428.116163][ T5233] usb 3-1: config 0 descriptor?? [ 428.166485][ T5233] ims_pcu 3-1:0.0: Missing CDC union descriptor [ 428.172925][ T5233] ims_pcu 3-1:0.0: probe with driver ims_pcu failed with error -22 [ 428.338203][ T57] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 428.346129][ T5283] usb 4-1: Using ep0 maxpacket: 8 [ 428.365834][ T5283] usb 4-1: config 0 has an invalid interface number: 181 but max is 0 [ 428.374634][ T5283] usb 4-1: config 0 has no interface number 0 [ 428.389876][ T5283] usb 4-1: New USB device found, idVendor=04cb, idProduct=0121, bcdDevice=2e.e6 [ 428.399790][ T5283] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.448870][ T5283] usb 4-1: Product: syz [ 428.471480][ T5283] usb 4-1: Manufacturer: syz [ 428.503901][ T57] usb 1-1: New USB device found, idVendor=046d, idProduct=08c6, bcdDevice=33.c2 [ 428.516400][ T5283] usb 4-1: SerialNumber: syz [ 428.540162][ T57] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.551750][ T5283] usb 4-1: config 0 descriptor?? [ 428.578418][ T5283] gspca_main: finepix-2.14.0 probing 04cb:0121 [ 428.603112][ T57] usb 1-1: config 0 descriptor?? [ 428.858083][T10398] macvlan2: entered promiscuous mode [ 428.888831][T10398] mac80211_hwsim hwsim83 wlan1: entered promiscuous mode [ 428.905055][T10398] macvlan2: entered allmulticast mode [ 428.911022][T10398] mac80211_hwsim hwsim83 wlan1: entered allmulticast mode [ 428.964296][T10398] mac80211_hwsim hwsim83 wlan1: left allmulticast mode [ 428.964332][T10398] mac80211_hwsim hwsim83 wlan1: left promiscuous mode [ 429.044647][T10421] sctp: [Deprecated]: syz.3.855 (pid 10421) Use of struct sctp_assoc_value in delayed_ack socket option. [ 429.044647][T10421] Use struct sctp_sack_info instead [ 429.316449][ T5286] usb 4-1: USB disconnect, device number 39 [ 430.184582][ T8] usb 3-1: USB disconnect, device number 23 [ 430.521467][T10441] netlink: 'syz.2.873': attribute type 11 has an invalid length. [ 430.673121][T10445] netlink: 'syz.2.875': attribute type 13 has an invalid length. [ 430.702001][T10445] macvtap0: entered allmulticast mode [ 430.711208][T10445] veth0_macvtap: entered allmulticast mode [ 430.722462][T10445] macvtap0: refused to change device tx_queue_len [ 431.356471][T10478] program syz.0.891 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 431.977112][ T5283] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 432.097103][T10507] netlink: 'syz.2.904': attribute type 11 has an invalid length. [ 432.137717][ T5283] usb 5-1: Using ep0 maxpacket: 32 [ 432.150680][ T5283] usb 5-1: New USB device found, idVendor=0cde, idProduct=0023, bcdDevice=21.32 [ 432.160024][ T5283] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.187625][ T5283] usb 5-1: Product: syz [ 432.191879][ T5283] usb 5-1: Manufacturer: syz [ 432.196516][ T5283] usb 5-1: SerialNumber: syz [ 432.218281][ T5283] usb 5-1: config 0 descriptor?? [ 432.568766][T10518] netlink: 'syz.2.908': attribute type 29 has an invalid length. [ 432.607177][T10518] netlink: 'syz.2.908': attribute type 29 has an invalid length. [ 433.848180][ T5283] usb 5-1: reset high-speed USB device number 43 using dummy_hcd [ 435.307916][ T8] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 435.497386][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 435.514564][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 435.570728][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 435.587506][ T8] usb 3-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 435.607723][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.628739][ T8] usb 3-1: config 0 descriptor?? [ 436.085980][ T8] input: HID 041e:3100 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:041E:3100.0009/input/input22 [ 436.206387][T10557] openvswitch: netlink: Duplicate or invalid key (type 0). [ 436.239714][T10557] openvswitch: netlink: Actions may not be safe on all matching packets [ 436.278004][ T8] creative-sb0540 0003:041E:3100.0009: input,hidraw0: USB HID v0.00 Device [HID 041e:3100] on usb-dummy_hcd.2-1/input0 [ 436.356561][ T8] usb 3-1: USB disconnect, device number 24 [ 437.757219][ T8] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 438.012519][ T8] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 438.078295][ T8] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 438.134170][ T8] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 438.187098][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.256852][T10579] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 439.370642][T10612] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 440.337463][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.343951][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.437139][ T5285] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 457.456916][ C1] sched: DL replenish lagged too much [ 463.097136][ T5285] usb 3-1: Using ep0 maxpacket: 8 [ 463.760737][ T5285] usb 3-1: device descriptor read/all, error -71 [ 466.924264][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 466.935368][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 466.944903][ T5238] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 466.954389][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 466.962707][ T5238] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 466.971415][ T5238] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 466.988948][ T5238] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 466.997241][ T5238] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 467.005344][ T5238] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 467.048709][T10636] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 467.078471][T10636] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 467.110191][T10636] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 467.297165][ T5244] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 467.309498][ T5244] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 467.318780][ T5244] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 467.330012][ T5244] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 467.338217][ T5244] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 467.348249][ T5244] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 467.516611][T10636] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 467.529633][T10636] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 467.540297][T10636] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 467.549948][T10636] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 467.557916][T10636] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 467.565316][T10636] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 467.715458][ T5244] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 467.737622][ T5244] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 467.748052][ T5244] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 467.756255][ T5244] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 467.764850][ T5244] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 467.772718][ T5244] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 469.077217][ T5244] Bluetooth: hci0: command tx timeout [ 469.157284][ T5244] Bluetooth: hci1: command tx timeout [ 469.477235][ T5244] Bluetooth: hci2: command tx timeout [ 469.637172][ T5244] Bluetooth: hci4: command tx timeout [ 469.799418][ T5244] Bluetooth: hci5: command tx timeout [ 471.159620][ T5244] Bluetooth: hci0: command tx timeout [ 471.237345][ T5244] Bluetooth: hci1: command tx timeout [ 471.557266][ T5244] Bluetooth: hci2: command tx timeout [ 471.717214][ T5244] Bluetooth: hci4: command tx timeout [ 471.877268][ T5244] Bluetooth: hci5: command tx timeout [ 473.239660][ T5244] Bluetooth: hci0: command tx timeout [ 473.317454][ T5244] Bluetooth: hci1: command tx timeout [ 473.637212][ T5244] Bluetooth: hci2: command tx timeout [ 473.797355][ T5244] Bluetooth: hci4: command tx timeout [ 473.957193][ T5244] Bluetooth: hci5: command tx timeout [ 475.317118][ T5244] Bluetooth: hci0: command tx timeout [ 475.397285][ T5244] Bluetooth: hci1: command tx timeout [ 475.717138][ T5244] Bluetooth: hci2: command tx timeout [ 475.877150][ T5244] Bluetooth: hci4: command tx timeout [ 476.043003][ T5244] Bluetooth: hci5: command tx timeout [ 492.558994][ T4685] udevd[4685]: worker [5930] /devices/platform/dummy_hcd.4/usb5/5-1 is taking a long time [ 501.729151][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.735580][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.885268][ T57] usb 1-1: unknown interface protocol 0x9a, assuming v1 [ 503.914585][ T57] usb 1-1: cannot find UAC_HEADER [ 526.257899][T10636] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 526.271065][T10636] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 526.279995][T10636] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 526.288718][T10636] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 526.310037][T10636] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 526.318328][T10636] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 526.513945][ T5244] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 526.535717][ T5244] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 526.545432][ T5244] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 526.554089][ T5244] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 526.562338][ T5244] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 526.572125][ T5244] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 526.593053][ T5236] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 526.621531][ T5236] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 526.630569][ T5236] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 526.643480][ T5236] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 526.651582][ T5236] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 526.669908][T10636] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 526.807816][T10636] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 526.827657][T10636] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 526.836252][T10636] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 526.847160][T10636] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 526.855091][T10636] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 526.864673][T10636] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 527.027620][ T5236] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 527.038450][ T5236] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 527.050426][ T5236] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 527.059226][ T5236] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 527.075992][ T5236] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 527.088365][ T5236] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 528.357197][ T5236] Bluetooth: hci6: command tx timeout [ 528.757224][ T5236] Bluetooth: hci7: command tx timeout [ 528.764219][ T5236] Bluetooth: hci8: command tx timeout [ 528.917302][ T5236] Bluetooth: hci9: command tx timeout [ 529.157499][ T5236] Bluetooth: hci10: command tx timeout [ 530.437218][ T5236] Bluetooth: hci6: command tx timeout [ 530.837224][ T5236] Bluetooth: hci8: command tx timeout [ 530.842720][ T5236] Bluetooth: hci7: command tx timeout [ 530.997162][ T5236] Bluetooth: hci9: command tx timeout [ 531.237401][ T5236] Bluetooth: hci10: command tx timeout [ 532.517927][ T5236] Bluetooth: hci6: command tx timeout [ 532.917110][T10636] Bluetooth: hci8: command tx timeout [ 532.923605][ T5236] Bluetooth: hci7: command tx timeout [ 533.078602][ T5236] Bluetooth: hci9: command tx timeout [ 533.317220][ T5236] Bluetooth: hci10: command tx timeout [ 534.597099][ T5236] Bluetooth: hci6: command tx timeout [ 534.997746][T10636] Bluetooth: hci7: command tx timeout [ 535.003248][ T5244] Bluetooth: hci8: command tx timeout [ 535.157317][ T5236] Bluetooth: hci9: command tx timeout [ 535.397348][ T5236] Bluetooth: hci10: command tx timeout [ 563.165781][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.172331][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 587.377817][T10636] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 587.397708][T10636] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 587.410024][T10636] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 587.420524][T10636] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 587.431865][T10636] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 587.439907][T10636] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 587.646289][ T5236] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 587.658836][ T5236] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 587.667921][ T5236] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 587.676118][ T5236] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 587.706508][ T5236] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 587.717551][ T5236] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 587.858278][ T5244] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 587.866753][T10635] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 587.882880][ T5244] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 587.891620][ T5244] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 587.902017][ T5244] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 587.914365][ T5244] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 587.921945][ T5244] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 587.932122][ T5244] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 587.941788][ T5244] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 587.949604][ T5244] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 587.961568][ T5244] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 587.971101][ T5244] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 588.204899][ T5244] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 588.216324][ T5244] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 588.227266][ T5244] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 588.241196][ T5244] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 588.249936][ T5244] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 588.257988][ T5244] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 589.477426][T10680] Bluetooth: hci11: command tx timeout [ 589.797102][T10680] Bluetooth: hci12: command tx timeout [ 590.047040][T10680] Bluetooth: hci13: command tx timeout [ 590.054148][T10680] Bluetooth: hci14: command tx timeout [ 590.357260][T10681] Bluetooth: hci15: command tx timeout [ 590.858487][T10681] Bluetooth: hci0: command 0x0406 tx timeout [ 590.864771][T10679] Bluetooth: hci1: command 0x0406 tx timeout [ 590.893503][T10681] Bluetooth: hci4: command 0x0406 tx timeout [ 590.917140][T10682] Bluetooth: hci5: command 0x0406 tx timeout [ 590.923225][T10682] Bluetooth: hci2: command 0x0406 tx timeout [ 591.557411][ T5238] Bluetooth: hci11: command tx timeout [ 591.878765][ T5238] Bluetooth: hci12: command tx timeout [ 592.117313][T10636] Bluetooth: hci13: command tx timeout [ 592.124671][ T5238] Bluetooth: hci14: command tx timeout [ 592.437257][ T5238] Bluetooth: hci15: command tx timeout [ 593.637451][ T5238] Bluetooth: hci11: command tx timeout [ 593.957217][ T5238] Bluetooth: hci12: command tx timeout [ 594.197239][ T5238] Bluetooth: hci14: command tx timeout [ 594.202816][T10636] Bluetooth: hci13: command tx timeout [ 594.517448][T10636] Bluetooth: hci15: command tx timeout [ 595.717371][T10636] Bluetooth: hci11: command tx timeout [ 596.037182][T10636] Bluetooth: hci12: command tx timeout [ 596.278686][ T5238] Bluetooth: hci14: command tx timeout [ 596.287024][T10636] Bluetooth: hci13: command tx timeout [ 596.597210][T10636] Bluetooth: hci15: command tx timeout [ 598.357186][ T30] INFO: task kworker/0:0:8 blocked for more than 143 seconds. [ 598.364734][ T30] Not tainted 6.12.0-rc2-syzkaller-00050-g5b7c893ed5ed #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 598.406906][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 598.451619][ T30] task:kworker/0:0 state:D stack:18776 pid:8 tgid:8 ppid:2 flags:0x00004000 [ 598.559526][ T30] Workqueue: usb_hub_wq hub_event [ 598.564765][ T30] Call Trace: [ 598.616378][ T30] [ 598.622114][ T30] __schedule+0x1895/0x4b30 [ 598.626726][ T30] ? __pfx___schedule+0x10/0x10 [ 598.640084][ T30] ? __pfx_lock_release+0x10/0x10 [ 598.645198][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 598.657138][ T30] ? kthread_data+0x52/0xd0 [ 598.661729][ T30] ? schedule+0x90/0x320 [ 598.666024][ T30] ? wq_worker_sleeping+0x66/0x240 [ 598.682761][ T30] ? schedule+0x90/0x320 [ 598.693694][ T30] schedule+0x14b/0x320 [ 598.701892][ T30] schedule_preempt_disabled+0x13/0x30 [ 598.715864][ T30] __mutex_lock+0x6a7/0xd70 [ 598.725454][ T30] ? __mutex_lock+0x52a/0xd70 [ 598.736362][ T30] ? usb_audio_probe+0x417/0x2100 [ 598.744438][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 598.755722][ T30] ? mark_lock+0x9a/0x360 [ 598.764678][ T30] usb_audio_probe+0x417/0x2100 [ 598.775851][ T30] ? __pfx_usb_audio_probe+0x10/0x10 [ 598.784502][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 598.796592][ T30] ? pm_runtime_enable+0x1c2/0x2d0 [ 598.803432][ T30] usb_probe_interface+0x645/0xbb0 [ 598.817555][ T30] ? __pfx_usb_probe_interface+0x10/0x10 [ 598.823263][ T30] really_probe+0x2b8/0xad0 [ 598.838836][ T30] __driver_probe_device+0x1a2/0x390 [ 598.844207][ T30] driver_probe_device+0x50/0x430 [ 598.859930][ T30] __device_attach_driver+0x2d6/0x530 [ 598.865588][ T30] bus_for_each_drv+0x24e/0x2e0 [ 598.875704][ T30] ? __pfx___device_attach_driver+0x10/0x10 [ 598.886126][ T30] ? __pfx_bus_for_each_drv+0x10/0x10 [ 598.897076][ T30] __device_attach+0x333/0x520 [ 598.904317][ T30] ? __pfx_lock_release+0x10/0x10 [ 598.916192][ T30] ? __pfx___device_attach+0x10/0x10 [ 598.925582][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 598.937127][ T30] bus_probe_device+0x189/0x260 [ 598.942073][ T30] device_add+0x856/0xbf0 [ 598.946469][ T30] usb_set_configuration+0x1976/0x1fb0 [ 598.963711][ T30] usb_generic_driver_probe+0x88/0x140 [ 598.971985][ T30] usb_probe_device+0x1b8/0x380 [ 598.983158][ T30] ? __pfx_usb_probe_device+0x10/0x10 [ 598.993708][ T30] really_probe+0x2b8/0xad0 [ 599.008043][ T30] __driver_probe_device+0x1a2/0x390 [ 599.013420][ T30] driver_probe_device+0x50/0x430 [ 599.031002][ T30] __device_attach_driver+0x2d6/0x530 [ 599.036464][ T30] bus_for_each_drv+0x24e/0x2e0 [ 599.051938][ T30] ? __pfx___device_attach_driver+0x10/0x10 [ 599.062872][ T30] ? __pfx_bus_for_each_drv+0x10/0x10 [ 599.074561][ T30] __device_attach+0x333/0x520 [ 599.083190][ T30] ? __pfx___device_attach+0x10/0x10 [ 599.095262][ T30] bus_probe_device+0x189/0x260 [ 599.104434][ T30] device_add+0x856/0xbf0 [ 599.112432][ T30] usb_new_device+0x104a/0x19a0 [ 599.122918][ T30] ? __pfx_usb_new_device+0x10/0x10 [ 599.131312][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 599.136611][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 599.146961][ T30] hub_event+0x2d6d/0x5150 [ 599.151512][ T30] ? __pfx_hub_event+0x10/0x10 [ 599.156343][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 599.174279][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 599.185420][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 599.196277][ T30] ? process_scheduled_works+0x976/0x1850 [ 599.206876][ T30] process_scheduled_works+0xa63/0x1850 [ 599.212958][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 599.226930][ T30] ? assign_work+0x364/0x3d0 [ 599.231605][ T30] worker_thread+0x870/0xd30 [ 599.236269][ T30] ? __kthread_parkme+0x169/0x1d0 [ 599.251191][ T30] ? __pfx_worker_thread+0x10/0x10 [ 599.256401][ T30] kthread+0x2f0/0x390 [ 599.264743][ T30] ? __pfx_worker_thread+0x10/0x10 [ 599.276466][ T30] ? __pfx_kthread+0x10/0x10 [ 599.286978][ T30] ret_from_fork+0x4b/0x80 [ 599.291484][ T30] ? __pfx_kthread+0x10/0x10 [ 599.302063][ T30] ret_from_fork_asm+0x1a/0x30 [ 599.309849][ T30] [ 599.313146][ T30] [ 599.313146][ T30] Showing all locks held in the system: [ 599.334991][ T30] 6 locks held by kworker/0:0/8: [ 599.340163][ T30] #0: ffff888144ecc548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 599.360993][ T30] #1: ffffc900000d7d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 599.377164][ T30] #2: ffff888145786190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 599.386181][ T30] #3: ffff8880206ae190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 599.407109][ T30] #4: ffff888079120160 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 599.416470][ T30] #5: ffffffff8fc605c8 (register_mutex#6){+.+.}-{3:3}, at: usb_audio_probe+0x417/0x2100 [ 599.440883][ T30] 1 lock held by khungtaskd/30: [ 599.445816][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 599.462888][ T30] 9 locks held by kworker/1:1/57: [ 599.472645][ T30] 7 locks held by kworker/u8:4/63: [ 599.494329][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 599.510704][ T30] #1: ffffc900015e7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 599.532349][ T30] #2: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 599.544847][ T30] #3: ffff8880560220e8 (&dev->mutex){....}-{3:3}, at: devlink_pernet_pre_exit+0x13b/0x440 [ 599.561982][ T30] #4: ffff88806b36a250 (&devlink->lock_key#40){+.+.}-{3:3}, at: devlink_pernet_pre_exit+0x14d/0x440 [ 599.577528][ T30] #5: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 599.586536][ T30] #6: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 599.606237][ T30] 3 locks held by kworker/u8:7/2524: [ 599.613351][ T30] #0: ffff88814b756148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 599.634082][ T30] #1: ffffc90008a87d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 599.659976][ T30] #2: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 599.676988][ T30] 3 locks held by kworker/u8:8/2583: [ 599.682337][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 599.704628][ T30] #1: ffffc90008ab7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 599.717377][ T30] #2: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 599.726656][ T30] 2 locks held by getty/4982: [ 599.742011][ T30] #0: ffff88814bc7c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 599.759131][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 599.777177][ T30] 3 locks held by kworker/1:4/5233: [ 599.782431][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 599.807019][ T30] #1: ffffc90003e27d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 599.827422][ T30] #2: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 599.846645][ T30] 9 locks held by kworker/1:6/5283: [ 599.853485][ T30] 3 locks held by kworker/0:4/5285: [ 599.866230][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 599.886881][ T30] #1: ffffc900041a7d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 599.908593][ T30] #2: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 599.926912][ T30] 4 locks held by udevd/5930: [ 599.931752][ T30] #0: ffff8880260d7790 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xb4/0xd70 [ 599.949076][ T30] #1: ffff88807c2c2888 (&of->mutex#2){+.+.}-{3:3}, at: kernfs_seq_start+0x53/0x3b0 [ 599.970453][ T30] #2: ffff88805f2bcd28 (kn->active#30){++++}-{0:0}, at: kernfs_seq_start+0x72/0x3b0 [ 599.986482][ T30] #3: ffff88807b027190 (&dev->mutex){....}-{3:3}, at: manufacturer_show+0x26/0xa0 [ 600.003061][ T30] 4 locks held by kworker/1:8/8959: [ 600.016482][ T30] 2 locks held by syz.4.633/9177: [ 600.024755][ T30] #0: ffff88807c813208 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 600.041557][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: ipv6_sock_ac_close+0xc9/0x130 [ 600.066613][ T30] 2 locks held by syz-executor/10637: [ 600.072469][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 600.087002][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 600.096622][ T30] 2 locks held by syz-executor/10638: [ 600.112419][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 600.134138][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: setup_net+0x602/0x9e0 [ 600.146166][ T30] 2 locks held by syz-executor/10640: [ 600.156753][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 600.166349][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 600.185691][ T30] 2 locks held by syz-executor/10642: [ 600.191710][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 600.210708][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 600.234356][ T30] 2 locks held by syz-executor/10644: [ 600.244484][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 600.259195][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 600.274226][ T30] 2 locks held by syz-executor/10655: [ 600.285005][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 600.296990][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 600.315170][ T30] 2 locks held by syz-executor/10658: [ 600.321397][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 600.342462][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 600.358079][ T30] 2 locks held by syz-executor/10659: [ 600.363516][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 600.383154][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 600.395024][ T30] 2 locks held by syz-executor/10661: [ 600.407057][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 600.416575][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 600.435790][ T30] 2 locks held by syz-executor/10663: [ 600.445460][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 600.464533][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 600.476735][ T30] 2 locks held by syz-executor/10670: [ 600.489694][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 600.504413][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 600.520784][ T30] 2 locks held by syz-executor/10672: [ 600.526652][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 600.542042][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 600.564230][ T30] 2 locks held by syz-executor/10675: [ 600.572210][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 600.590945][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 600.606567][ T30] 2 locks held by syz-executor/10676: [ 600.616979][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 600.632274][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 600.646698][ T30] 2 locks held by syz-executor/10678: [ 600.660967][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 600.680784][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 600.697193][ T30] [ 600.699574][ T30] ============================================= [ 600.699574][ T30] [ 600.716336][ T30] NMI backtrace for cpu 0 [ 600.720726][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00050-g5b7c893ed5ed #0 [ 600.731358][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 600.741538][ T30] Call Trace: [ 600.744851][ T30] [ 600.747817][ T30] dump_stack_lvl+0x241/0x360 [ 600.752540][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 600.757794][ T30] ? __pfx__printk+0x10/0x10 [ 600.762444][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 600.767436][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 600.772939][ T30] ? _printk+0xd5/0x120 [ 600.777171][ T30] ? __pfx__printk+0x10/0x10 [ 600.781810][ T30] ? __wake_up_klogd+0xcc/0x110 [ 600.786707][ T30] ? __pfx__printk+0x10/0x10 [ 600.791356][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 600.796434][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 600.802474][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 600.808507][ T30] watchdog+0xff4/0x1040 [ 600.812799][ T30] ? watchdog+0x1ea/0x1040 [ 600.817279][ T30] ? __pfx_watchdog+0x10/0x10 [ 600.822000][ T30] kthread+0x2f0/0x390 [ 600.826115][ T30] ? __pfx_watchdog+0x10/0x10 [ 600.830837][ T30] ? __pfx_kthread+0x10/0x10 [ 600.835501][ T30] ret_from_fork+0x4b/0x80 [ 600.839966][ T30] ? __pfx_kthread+0x10/0x10 [ 600.844594][ T30] ret_from_fork_asm+0x1a/0x30 [ 600.849431][ T30] [ 600.853277][ T30] Sending NMI from CPU 0 to CPUs 1: [ 600.858699][ C1] NMI backtrace for cpu 1 [ 600.858713][ C1] CPU: 1 UID: 0 PID: 8959 Comm: kworker/1:8 Not tainted 6.12.0-rc2-syzkaller-00050-g5b7c893ed5ed #0 [ 600.858736][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 600.858749][ C1] Workqueue: events_power_efficient neigh_periodic_work [ 600.858785][ C1] RIP: 0010:memset_orig+0x46/0xb0 [ 600.858808][ C1] Code: 41 83 e1 07 75 70 48 89 d1 48 c1 e9 06 74 35 0f 1f 44 00 00 48 ff c9 48 89 07 48 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 <48> 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d8 0f 1f 84 00 [ 600.858826][ C1] RSP: 0000:ffffc90000a18838 EFLAGS: 00000202 [ 600.858842][ C1] RAX: 0000000000000000 RBX: ffff888049385788 RCX: 0000000000000001 [ 600.858856][ C1] RDX: 0000000000000200 RSI: 0000000000000000 RDI: ffffc90000a189c0 [ 600.858870][ C1] RBP: ffffc90000a18a68 R08: dffffc0000000000 R09: 0000000000000000 [ 600.858884][ C1] R10: ffffc90000a18840 R11: fffffbfff2858b18 R12: ffff88801ac41780 [ 600.858899][ C1] R13: ffff888049385780 R14: 0000000000000000 R15: ffffc90000a18840 [ 600.858914][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 600.858930][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 600.858945][ C1] CR2: 00000000f5714da4 CR3: 000000000e734000 CR4: 00000000003526f0 [ 600.858963][ C1] Call Trace: [ 600.858970][ C1] [ 600.858978][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 600.859002][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 600.859034][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 600.859057][ C1] ? nmi_handle+0x2a/0x5a0 [ 600.859085][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 600.859111][ C1] ? nmi_handle+0x14f/0x5a0 [ 600.859131][ C1] ? nmi_handle+0x2a/0x5a0 [ 600.859151][ C1] ? memset_orig+0x46/0xb0 [ 600.859170][ C1] ? default_do_nmi+0x63/0x160 [ 600.859194][ C1] ? exc_nmi+0x123/0x1f0 [ 600.859222][ C1] ? end_repeat_nmi+0xf/0x53 [ 600.859247][ C1] ? memset_orig+0x46/0xb0 [ 600.859266][ C1] ? memset_orig+0x46/0xb0 [ 600.859286][ C1] ? memset_orig+0x46/0xb0 [ 600.859306][ C1] [ 600.859312][ C1] [ 600.859319][ C1] kasan_save_track+0x30/0x80 [ 600.859361][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 600.859391][ C1] kasan_save_free_info+0x40/0x50 [ 600.859418][ C1] __kasan_slab_free+0x59/0x70 [ 600.859437][ C1] ? ref_tracker_free+0x4ef/0x7e0 [ 600.859457][ C1] kfree+0x1a0/0x440 [ 600.859481][ C1] ? ref_tracker_free+0x4ef/0x7e0 [ 600.859502][ C1] ref_tracker_free+0x4ef/0x7e0 [ 600.859521][ C1] ? __pfx_ref_tracker_free+0x10/0x10 [ 600.859540][ C1] ? dst_destroy+0x171/0x460 [ 600.859557][ C1] ? rcu_core+0xaaa/0x17a0 [ 600.859577][ C1] ? handle_softirqs+0x2c5/0x980 [ 600.859601][ C1] ? do_softirq+0x11b/0x1e0 [ 600.859625][ C1] ? __local_bh_enable_ip+0x1bb/0x200 [ 600.859649][ C1] ? neigh_periodic_work+0xb35/0xd50 [ 600.859672][ C1] ? process_scheduled_works+0xa63/0x1850 [ 600.859698][ C1] ? worker_thread+0x870/0xd30 [ 600.859723][ C1] ? kthread+0x2f0/0x390 [ 600.859740][ C1] ? ret_from_fork+0x4b/0x80 [ 600.859768][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 600.859797][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 600.859825][ C1] ? __pfx_ipv4_dst_destroy+0x10/0x10 [ 600.859855][ C1] dst_destroy+0x171/0x460 [ 600.859874][ C1] ? rcu_core+0xa37/0x17a0 [ 600.859892][ C1] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 600.859911][ C1] rcu_core+0xaaa/0x17a0 [ 600.859937][ C1] ? __pfx_rcu_core+0x10/0x10 [ 600.859959][ C1] ? rcu_is_watching+0x15/0xb0 [ 600.859981][ C1] ? tasklet_action_common+0x420/0x4d0 [ 600.860012][ C1] ? __pfx_tasklet_action_common+0x10/0x10 [ 600.860046][ C1] handle_softirqs+0x2c5/0x980 [ 600.860074][ C1] ? do_softirq+0x11b/0x1e0 [ 600.860099][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 600.860126][ C1] ? rcu_is_watching+0x15/0xb0 [ 600.860148][ C1] do_softirq+0x11b/0x1e0 [ 600.860172][ C1] [ 600.860178][ C1] [ 600.860186][ C1] ? __pfx_do_softirq+0x10/0x10 [ 600.860216][ C1] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 600.860246][ C1] ? rcu_is_watching+0x15/0xb0 [ 600.860268][ C1] __local_bh_enable_ip+0x1bb/0x200 [ 600.860294][ C1] ? neigh_periodic_work+0xb35/0xd50 [ 600.860317][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 600.860342][ C1] ? neigh_destroy+0x423/0x580 [ 600.860367][ C1] neigh_periodic_work+0xb35/0xd50 [ 600.860395][ C1] ? process_scheduled_works+0x976/0x1850 [ 600.860421][ C1] process_scheduled_works+0xa63/0x1850 [ 600.860461][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 600.860492][ C1] ? assign_work+0x364/0x3d0 [ 600.860519][ C1] worker_thread+0x870/0xd30 [ 600.860550][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 600.860579][ C1] ? __kthread_parkme+0x169/0x1d0 [ 600.860608][ C1] ? __pfx_worker_thread+0x10/0x10 [ 600.860634][ C1] kthread+0x2f0/0x390 [ 600.860652][ C1] ? __pfx_worker_thread+0x10/0x10 [ 600.860678][ C1] ? __pfx_kthread+0x10/0x10 [ 600.860697][ C1] ret_from_fork+0x4b/0x80 [ 600.860723][ C1] ? __pfx_kthread+0x10/0x10 [ 600.860741][ C1] ret_from_fork_asm+0x1a/0x30 [ 600.860774][ C1] [ 601.388918][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 601.395873][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00050-g5b7c893ed5ed #0 [ 601.406421][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 601.416606][ T30] Call Trace: [ 601.419919][ T30] [ 601.422883][ T30] dump_stack_lvl+0x241/0x360 [ 601.427608][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 601.432845][ T30] ? __pfx__printk+0x10/0x10 [ 601.437572][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 601.443610][ T30] ? vscnprintf+0x5d/0x90 [ 601.448419][ T30] panic+0x349/0x880 [ 601.452367][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 601.458570][ T30] ? __pfx_panic+0x10/0x10 [ 601.463033][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 601.468454][ T30] ? __irq_work_queue_local+0x137/0x410 [ 601.474048][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 601.479497][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 601.485820][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 601.492021][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 601.498227][ T30] watchdog+0x1033/0x1040 [ 601.502609][ T30] ? watchdog+0x1ea/0x1040 [ 601.507081][ T30] ? __pfx_watchdog+0x10/0x10 [ 601.511813][ T30] kthread+0x2f0/0x390 [ 601.515920][ T30] ? __pfx_watchdog+0x10/0x10 [ 601.520649][ T30] ? __pfx_kthread+0x10/0x10 [ 601.525277][ T30] ret_from_fork+0x4b/0x80 [ 601.529762][ T30] ? __pfx_kthread+0x10/0x10 [ 601.534392][ T30] ret_from_fork_asm+0x1a/0x30 [ 601.539221][ T30] [ 601.542703][ T30] Kernel Offset: disabled [ 601.547081][ T30] Rebooting in 86400 seconds..