last executing test programs: 2.711992164s ago: executing program 1 (id=504): write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000003c0)={'syz0\x00', {0x0, 0x0, 0x0, 0x400}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe00], [0x0, 0x698, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, 0x45c) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 2.571662639s ago: executing program 1 (id=516): syz_open_dev$radio(0x0, 0x0, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) pread64(r1, &(0x7f0000000180)=""/81, 0xfffffdb0, 0xe) 2.347925267s ago: executing program 1 (id=508): syz_emit_ethernet(0x82, &(0x7f0000000040)={@broadcast, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xc, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x4f17d77487ced52f, 0x0, @private=0xa010101, @dev, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x2f}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xc989}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote}, {@private=0xa010100}, {@broadcast, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}}]}]}}}}}}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) unshare(0x20000400) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') fstat64(r1, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000140)={0x2, 0x38, [0x1, 0x5, 0x8001, 0x75], &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2.186662361s ago: executing program 1 (id=510): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="1a", 0x1}, {&(0x7f0000000140)="fa791027e01b4d51411c754af98e6e4427d85564937fa989c20892b2cac8664dd5bc099f9664a3", 0x27}], 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006573bb08ac051992da610200000109021b000100000000090400000103b80000090581"], 0x0) 1.920021884s ago: executing program 0 (id=513): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000ebffff034d564b"]) 1.695478315s ago: executing program 3 (id=517): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x2, &(0x7f0000000100)="d60a294c93", 0x5) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000240)="c4", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000300)="06", 0x1}], 0x1) 1.579622221s ago: executing program 0 (id=518): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102394, 0x19045}], 0x1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_dev$usbfs(&(0x7f0000000100), 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x0, 0x1daf6}, 0x10) memfd_create(0x0, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x108) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="28000000080605000000000000000000000000000900020073797a31000099000500010007000000"], 0x28}}, 0x0) setsockopt$sock_int(r1, 0x1, 0x25, &(0x7f0000000340), 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000004480)=@newlink={0x48, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x48}}, 0x0) shutdown(r4, 0x0) syz_open_dev$video4linux(&(0x7f0000000280), 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = eventfd(0x0) set_mempolicy(0x4, 0x0, 0x0) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000280)={r7, 0x0, 0x0, r7}) write$eventfd(r7, &(0x7f0000000140)=0x7f, 0x8) 1.57939569s ago: executing program 2 (id=519): r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x12, r0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write(r0, &(0x7f0000004400)="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", 0x1000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000480)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0}, &(0x7f0000000000)=0x40) 1.43190247s ago: executing program 3 (id=520): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x2) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0x42, &(0x7f0000000380)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0xc, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 1.387525726s ago: executing program 2 (id=521): mmap(&(0x7f00000fc000/0x1000)=nil, 0x1000, 0x2000002, 0x4000932, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x46, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)) 1.319108353s ago: executing program 3 (id=522): openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x6a4e, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000400), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000080), &(0x7f0000000180)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r0, 0x381b, 0x0, 0x0, 0x0, 0x0) 1.14000653s ago: executing program 2 (id=523): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x38, r2, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x2}]}]}]}, 0x38}}, 0x0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)={0x20, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}]}, 0x20}}, 0x0) 1.11247791s ago: executing program 3 (id=524): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @loopback}], 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e20, 0x0, @loopback}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000002c80), &(0x7f00000061c0)=0x4) 1.108437034s ago: executing program 0 (id=525): unshare(0x22020600) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r0, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x2003, &(0x7f00000000c0), 0x20000000) 978.496064ms ago: executing program 0 (id=526): openat$vicodec0(0xffffff9c, &(0x7f0000000280), 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7fffffff}]}) r0 = socket$inet(0x2, 0x4000000805, 0x0) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000580)=""/103) 978.312966ms ago: executing program 2 (id=527): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, 0x0) 824.000849ms ago: executing program 4 (id=528): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c000701080000000000000007000000", @ANYRES32=r1, @ANYBLOB="e04f00000a000200aaaaaaaaaa0c"], 0x28}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000010000304000000000000000000007400", @ANYRES32=r3, @ANYBLOB="08000000000000000a000100"], 0x2c}}, 0x0) 778.868444ms ago: executing program 0 (id=529): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, 0x14) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000002c0)={r2, 0x1, 0x6, @local}, 0x10) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000040)={0x1, 'vlan0\x00', {}, 0x6}) 719.79109ms ago: executing program 4 (id=530): r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000300)="9b3981bfa7c776b4eb7356f59ba670512da56f522ea683e8e7f364c9f17c9783edaca9291b67df86e300dd048f07ad17fcd55ab283fbd905040ff251c8ec5a5be2ccb3e3", 0x44, 0x8000, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000a80)='5', 0x1, 0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x2, 0x0, 0x0) 648.01526ms ago: executing program 3 (id=531): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0x80000039f8, 0x4) sendto$inet6(r0, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000049c0)=[{{0x0, 0xffffffffffffff1e, 0x0, 0x0, &(0x7f00000014c0)=""/185, 0xb9}}], 0x1, 0x12030, 0x0) 638.820698ms ago: executing program 4 (id=532): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x56, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x0, 0x6}]}}}}}}}}, 0x0) 593.641181ms ago: executing program 1 (id=533): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_aout(r1, &(0x7f00000010c0)=ANY=[], 0x1a3) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={&(0x7f0000000040)="bc963e76ebc00bc0e2e92ff7c7dec255b8c66be4d54e8933e69a976b96e945724d6efb96dc3e8f8a2f75094ce9f61df63d553bf837c91b4053356705", 0x0, 0x0, 0x0}, 0x38) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 535.361846ms ago: executing program 4 (id=534): syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffe30) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) unshare(0x2040400) pselect6(0x40, &(0x7f0000000000)={0x3a}, 0x0, 0x0, 0x0, 0x0) 524.717662ms ago: executing program 2 (id=535): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102394, 0x19045}], 0x1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_dev$usbfs(&(0x7f0000000100), 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x0, 0x1daf6}, 0x10) memfd_create(0x0, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x108) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="28000000080605000000000000000000000000000900020073797a31000099000500010007000000"], 0x28}}, 0x0) setsockopt$sock_int(r1, 0x1, 0x25, &(0x7f0000000340), 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000004480)=@newlink={0x48, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x48}}, 0x0) shutdown(r4, 0x0) syz_open_dev$video4linux(&(0x7f0000000280), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r5 = eventfd(0x0) set_mempolicy(0x4, 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000280)={r5, 0x0, 0x0, r5}) write$eventfd(r5, &(0x7f0000000140)=0x7f, 0x8) 461.374277ms ago: executing program 4 (id=536): rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4010) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x2) 300.033822ms ago: executing program 3 (id=537): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @loopback}}}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000001300)='(/', 0x2) 299.883295ms ago: executing program 0 (id=538): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000003c0)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x10, 0x0, &(0x7f00000002c0)=[@request_death={0x400c6313}], 0x0, 0x0, 0x0}) 169.934174ms ago: executing program 4 (id=539): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) 69.109476ms ago: executing program 2 (id=540): r0 = openat$mixer(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = dup2(r0, r0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r1, 0x40044103, &(0x7f0000000040)=0xfffffffe) 0s ago: executing program 1 (id=541): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) io_uring_setup(0x30d3, &(0x7f0000000000)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) ioctl$SIOCSIFHWADDR(r0, 0x89f1, &(0x7f0000000900)={'ip6tnl0\x00', @random="0600002000"}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.101' (ED25519) to the list of known hosts. [ 59.829681][ T5222] cgroup: Unknown subsys name 'net' [ 59.941747][ T5222] cgroup: Unknown subsys name 'cpuset' [ 59.949997][ T5222] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 61.464720][ T5222] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 65.206401][ T5235] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 65.230780][ T5246] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 65.236493][ T5244] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 65.238685][ T5246] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 65.245889][ T5244] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 65.253875][ T5246] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 65.260863][ T5244] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 65.269092][ T5246] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 65.275476][ T5244] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 65.281387][ T5246] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 65.289285][ T5244] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 65.303337][ T5244] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 65.311207][ T5244] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 65.319449][ T5244] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 65.327476][ T5244] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 65.331416][ T5245] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 65.335639][ T5244] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 65.347669][ T5245] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 65.350041][ T5244] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 65.357548][ T5245] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 65.364189][ T5244] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 65.372577][ T5245] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 65.378091][ T5244] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 65.391577][ T5244] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 65.394749][ T5245] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 65.399085][ T5244] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 65.409203][ T5245] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 65.420243][ T5244] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 65.422142][ T5245] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 65.427751][ T5244] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 65.823465][ T5253] chnl_net:caif_netlink_parms(): no params data found [ 65.973293][ T5255] chnl_net:caif_netlink_parms(): no params data found [ 66.025649][ T5253] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.034196][ T5253] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.042219][ T5253] bridge_slave_0: entered allmulticast mode [ 66.049938][ T5253] bridge_slave_0: entered promiscuous mode [ 66.061357][ T5253] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.068519][ T5253] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.075706][ T5253] bridge_slave_1: entered allmulticast mode [ 66.082839][ T5253] bridge_slave_1: entered promiscuous mode [ 66.116580][ T5249] chnl_net:caif_netlink_parms(): no params data found [ 66.138978][ T5252] chnl_net:caif_netlink_parms(): no params data found [ 66.223019][ T5253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.235866][ T5253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.322362][ T5255] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.329734][ T5255] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.337653][ T5255] bridge_slave_0: entered allmulticast mode [ 66.344399][ T5255] bridge_slave_0: entered promiscuous mode [ 66.354094][ T5253] team0: Port device team_slave_0 added [ 66.363838][ T5250] chnl_net:caif_netlink_parms(): no params data found [ 66.396579][ T5255] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.404088][ T5255] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.411483][ T5255] bridge_slave_1: entered allmulticast mode [ 66.418644][ T5255] bridge_slave_1: entered promiscuous mode [ 66.429408][ T5253] team0: Port device team_slave_1 added [ 66.490537][ T5249] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.498023][ T5249] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.505241][ T5249] bridge_slave_0: entered allmulticast mode [ 66.512439][ T5249] bridge_slave_0: entered promiscuous mode [ 66.520675][ T5252] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.527914][ T5252] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.535109][ T5252] bridge_slave_0: entered allmulticast mode [ 66.542514][ T5252] bridge_slave_0: entered promiscuous mode [ 66.576862][ T5249] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.584248][ T5249] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.591661][ T5249] bridge_slave_1: entered allmulticast mode [ 66.598849][ T5249] bridge_slave_1: entered promiscuous mode [ 66.605336][ T5252] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.612666][ T5252] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.620224][ T5252] bridge_slave_1: entered allmulticast mode [ 66.626940][ T5252] bridge_slave_1: entered promiscuous mode [ 66.637539][ T5255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.648295][ T5253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.655310][ T5253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.681629][ T5253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.723774][ T5255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.743565][ T5253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.751695][ T5253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.778256][ T5253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.805427][ T5249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.816716][ T5252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.838761][ T5255] team0: Port device team_slave_0 added [ 66.876929][ T5249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.892813][ T5252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.905023][ T5255] team0: Port device team_slave_1 added [ 66.959044][ T5255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.966038][ T5255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.992123][ T5255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.041300][ T5255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.050610][ T5255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.076704][ T5255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.088546][ T5250] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.095648][ T5250] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.103003][ T5250] bridge_slave_0: entered allmulticast mode [ 67.109862][ T5250] bridge_slave_0: entered promiscuous mode [ 67.123387][ T5249] team0: Port device team_slave_0 added [ 67.131193][ T5249] team0: Port device team_slave_1 added [ 67.139186][ T5252] team0: Port device team_slave_0 added [ 67.149521][ T5253] hsr_slave_0: entered promiscuous mode [ 67.156005][ T5253] hsr_slave_1: entered promiscuous mode [ 67.178239][ T5250] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.185385][ T5250] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.193242][ T5250] bridge_slave_1: entered allmulticast mode [ 67.200361][ T5250] bridge_slave_1: entered promiscuous mode [ 67.225272][ T5252] team0: Port device team_slave_1 added [ 67.285893][ T5252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.293009][ T5252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.319098][ T5252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.349130][ T5250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.360469][ T5250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.371068][ T5249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.378158][ T5249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.404576][ T5249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.416479][ T5252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.423688][ T5252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.450136][ T5252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.458671][ T5237] Bluetooth: hci3: command tx timeout [ 67.488251][ T5249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.495241][ T5249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.522232][ T5237] Bluetooth: hci4: command tx timeout [ 67.522616][ T5249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.527994][ T54] Bluetooth: hci1: command tx timeout [ 67.528201][ T54] Bluetooth: hci2: command tx timeout [ 67.538656][ T5245] Bluetooth: hci0: command tx timeout [ 67.570067][ T5255] hsr_slave_0: entered promiscuous mode [ 67.576880][ T5255] hsr_slave_1: entered promiscuous mode [ 67.583910][ T5255] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.591853][ T5255] Cannot create hsr debugfs directory [ 67.619185][ T5252] hsr_slave_0: entered promiscuous mode [ 67.625576][ T5252] hsr_slave_1: entered promiscuous mode [ 67.632041][ T5252] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.640046][ T5252] Cannot create hsr debugfs directory [ 67.654895][ T5250] team0: Port device team_slave_0 added [ 67.663858][ T5250] team0: Port device team_slave_1 added [ 67.715633][ T5250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.722801][ T5250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.749148][ T5250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.797815][ T5250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.804893][ T5250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.835051][ T5250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.896032][ T5249] hsr_slave_0: entered promiscuous mode [ 67.902836][ T5249] hsr_slave_1: entered promiscuous mode [ 67.909230][ T5249] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.916802][ T5249] Cannot create hsr debugfs directory [ 67.994521][ T5250] hsr_slave_0: entered promiscuous mode [ 68.001326][ T5250] hsr_slave_1: entered promiscuous mode [ 68.012714][ T5250] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.020392][ T5250] Cannot create hsr debugfs directory [ 68.245498][ T5253] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.272928][ T5253] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.283377][ T5253] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.311005][ T5253] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.362679][ T5255] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.372298][ T5255] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.393210][ T5255] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.416683][ T5255] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.473267][ T5252] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.485642][ T5252] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.507986][ T5252] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.523358][ T5252] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.595901][ T5250] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.627851][ T5250] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.638465][ T5250] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.650476][ T5250] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.752011][ T5249] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.765972][ T5253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.788351][ T5249] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.814860][ T5249] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.839390][ T5249] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.863339][ T5255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.884096][ T5252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.899596][ T5253] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.931041][ T2525] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.938339][ T2525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.956497][ T2525] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.963697][ T2525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.974235][ T5252] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.999942][ T2525] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.007126][ T2525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.022256][ T5255] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.045266][ T2525] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.052503][ T2525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.096033][ T2525] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.103250][ T2525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.156869][ T1115] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.164065][ T1115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.211411][ T5250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.300004][ T5253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.319679][ T5250] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.350791][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.357983][ T1115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.386432][ T1115] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.393691][ T1115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.431701][ T5252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.471874][ T5255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.496137][ T5253] veth0_vlan: entered promiscuous mode [ 69.511333][ T5249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.518510][ T5245] Bluetooth: hci3: command tx timeout [ 69.573227][ T5253] veth1_vlan: entered promiscuous mode [ 69.598527][ T5245] Bluetooth: hci0: command tx timeout [ 69.601281][ T5237] Bluetooth: hci4: command tx timeout [ 69.603966][ T5245] Bluetooth: hci1: command tx timeout [ 69.610407][ T54] Bluetooth: hci2: command tx timeout [ 69.623027][ T5249] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.640888][ T5252] veth0_vlan: entered promiscuous mode [ 69.662605][ T2525] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.669747][ T2525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.682231][ T2525] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.689402][ T2525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.713846][ T5252] veth1_vlan: entered promiscuous mode [ 69.733672][ T5250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.804836][ T5253] veth0_macvtap: entered promiscuous mode [ 69.813139][ T5255] veth0_vlan: entered promiscuous mode [ 69.835103][ T5253] veth1_macvtap: entered promiscuous mode [ 69.863802][ T5252] veth0_macvtap: entered promiscuous mode [ 69.874973][ T5252] veth1_macvtap: entered promiscuous mode [ 69.891110][ T5250] veth0_vlan: entered promiscuous mode [ 69.926466][ T5255] veth1_vlan: entered promiscuous mode [ 69.945795][ T5250] veth1_vlan: entered promiscuous mode [ 69.956209][ T5252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.983750][ T5253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.995616][ T5253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.010996][ T5253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.029904][ T5249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.040958][ T5252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.066962][ T5252] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.076484][ T5252] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.096119][ T5252] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.104976][ T5252] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.133593][ T5253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.144137][ T5253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.155686][ T5253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.169128][ T5253] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.178713][ T5253] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.188053][ T5253] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.196779][ T5253] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.235189][ T5255] veth0_macvtap: entered promiscuous mode [ 70.246907][ T5255] veth1_macvtap: entered promiscuous mode [ 70.271364][ T5250] veth0_macvtap: entered promiscuous mode [ 70.282079][ T5250] veth1_macvtap: entered promiscuous mode [ 70.374748][ T5250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.386773][ T5250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.398073][ T5250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.412066][ T5250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.423735][ T5250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.464169][ T5255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.476467][ T5255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.488493][ T5255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.499351][ T5255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.509459][ T5255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.520283][ T5255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.531699][ T5255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.552183][ T5250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.566245][ T2525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.566385][ T5250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.574974][ T2525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.585484][ T5250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.603502][ T5250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.614537][ T5250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.629001][ T5249] veth0_vlan: entered promiscuous mode [ 70.653445][ T5255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.664963][ T5255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.675202][ T5255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.686535][ T5255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.696749][ T5255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.708299][ T5255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.720073][ T5255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.731949][ T5250] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.740840][ T5250] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.749741][ T5250] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.758856][ T5250] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.786672][ T5249] veth1_vlan: entered promiscuous mode [ 70.794438][ T2525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.805041][ T5255] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.805732][ T2525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.818924][ T5255] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.831449][ T5255] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.840434][ T5255] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.909921][ T2525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.925896][ T2525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.959048][ T1115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.966963][ T1115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.036811][ T1113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.058301][ T1113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.101312][ T5249] veth0_macvtap: entered promiscuous mode [ 71.115220][ T5252] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 71.151027][ T1115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.151856][ T5249] veth1_macvtap: entered promiscuous mode [ 71.159089][ T1115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.241847][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.261321][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.274413][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.294324][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.304331][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.321770][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.333545][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.365738][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.379269][ T5296] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 71.403951][ T5249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.426688][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.438430][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.446823][ T1119] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.451288][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.468144][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.479096][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.491404][ T1119] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.499628][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.510364][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.531066][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.553059][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.570873][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.584290][ T5249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.600333][ T54] Bluetooth: hci3: command tx timeout [ 71.609852][ T5249] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.614155][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.619812][ T5249] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.627277][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.634149][ T5249] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.651061][ T5249] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.678807][ T54] Bluetooth: hci4: command tx timeout [ 71.679146][ T5237] Bluetooth: hci1: command tx timeout [ 71.687448][ T54] Bluetooth: hci2: command tx timeout [ 71.689996][ T5237] Bluetooth: hci0: command tx timeout [ 71.819868][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.068737][ T2907] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.069238][ T5290] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 72.117180][ T2907] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.262109][ T1113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.295805][ T5290] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 72.312440][ T1113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.315217][ T5290] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.408283][ T5290] usb 4-1: config 0 descriptor?? [ 72.431681][ T5290] cp210x 4-1:0.0: cp210x converter detected [ 72.702853][ T5287] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 72.740276][ T5327] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.12'. [ 72.857933][ T5290] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 72.909799][ T5287] usb 5-1: Using ep0 maxpacket: 8 [ 72.932067][ T5287] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.943519][ T5287] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.967643][ T5287] usb 5-1: New USB device found, idVendor=05ac, idProduct=9219, bcdDevice=61.da [ 72.969649][ T5332] netlink: 'syz.0.13': attribute type 21 has an invalid length. [ 72.985435][ T5287] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 72.985466][ T5287] usb 5-1: Manufacturer: syz [ 72.995068][ T5332] netlink: 128 bytes leftover after parsing attributes in process `syz.0.13'. [ 73.001143][ T5287] usb 5-1: config 0 descriptor?? [ 73.013991][ T5332] netlink: 'syz.0.13': attribute type 4 has an invalid length. [ 73.024305][ T5287] appledisplay 5-1:0.0: Submitting URB failed [ 73.032015][ T5287] appledisplay 5-1:0.0: probe with driver appledisplay failed with error -5 [ 73.056396][ T5332] netlink: 'syz.0.13': attribute type 3 has an invalid length. [ 73.068400][ T5332] netlink: 3 bytes leftover after parsing attributes in process `syz.0.13'. [ 73.071185][ T5290] cp210x 4-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 73.098008][ T5290] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 73.128515][ T5332] netlink: 'syz.0.13': attribute type 21 has an invalid length. [ 73.136318][ T5332] netlink: 128 bytes leftover after parsing attributes in process `syz.0.13'. [ 73.145756][ T5332] netlink: 'syz.0.13': attribute type 4 has an invalid length. [ 73.153687][ T5332] netlink: 'syz.0.13': attribute type 5 has an invalid length. [ 73.161598][ T5332] netlink: 3 bytes leftover after parsing attributes in process `syz.0.13'. [ 73.218241][ T5290] usb 4-1: cp210x converter now attached to ttyUSB0 [ 73.245674][ T5290] usb 4-1: USB disconnect, device number 2 [ 73.289111][ T5290] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 73.297860][ T5290] cp210x 4-1:0.0: device disconnected [ 73.305602][ T5289] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 73.371206][ T5241] usb 5-1: USB disconnect, device number 2 [ 73.467535][ T5289] usb 2-1: Using ep0 maxpacket: 32 [ 73.478355][ T5289] usb 2-1: New USB device found, idVendor=257a, idProduct=260c, bcdDevice=a6.30 [ 73.488933][ T5289] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.505390][ T5289] usb 2-1: Product: syz [ 73.514077][ T5289] usb 2-1: Manufacturer: syz [ 73.533249][ T5289] usb 2-1: SerialNumber: syz [ 73.548851][ T5289] usb 2-1: config 0 descriptor?? [ 73.583834][ T5289] option 2-1:0.0: GSM modem (1-port) converter detected [ 73.678184][ T5237] Bluetooth: hci3: command tx timeout [ 73.759183][ T5237] Bluetooth: hci0: command tx timeout [ 73.764675][ T5237] Bluetooth: hci2: command tx timeout [ 73.770258][ T5245] Bluetooth: hci4: command tx timeout [ 73.811268][ T5233] usb 2-1: USB disconnect, device number 2 [ 73.846019][ T5233] option 2-1:0.0: device disconnected [ 73.851284][ T5339] kvm: kvm [5338]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x40 [ 74.030882][ T1119] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.077665][ T5241] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 74.144166][ T1119] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.227199][ T5241] usb 4-1: Using ep0 maxpacket: 16 [ 74.241755][ T5241] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.263337][ T5241] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.278842][ T1119] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.283532][ T5241] usb 4-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 74.325956][ T5241] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.356963][ T5241] usb 4-1: config 0 descriptor?? [ 74.568871][ T1119] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.687647][ T5245] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.704838][ T5245] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.719145][ T5245] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.728531][ T5245] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.736551][ T5245] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 74.744408][ T5245] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.802704][ T5241] playstation 0003:054C:05C4.0001: unknown main item tag 0x0 [ 74.817382][ T25] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 74.820418][ T5241] playstation 0003:054C:05C4.0001: unknown main item tag 0x0 [ 74.832494][ T5241] playstation 0003:054C:05C4.0001: unknown main item tag 0x0 [ 74.839990][ T5241] playstation 0003:054C:05C4.0001: unknown main item tag 0x0 [ 74.847493][ T5241] playstation 0003:054C:05C4.0001: unknown main item tag 0x0 [ 74.860014][ T5241] playstation 0003:054C:05C4.0001: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.3-1/input0 [ 74.973304][ T25] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 75.004190][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.011933][ T5241] playstation 0003:054C:05C4.0001: Invalid byte count transferred, expected 16 got 0 [ 75.031535][ T1119] bridge_slave_1: left allmulticast mode [ 75.034293][ T5241] playstation 0003:054C:05C4.0001: Failed to retrieve DualShock4 pairing info: -22 [ 75.039798][ T5288] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 75.055354][ T1119] bridge_slave_1: left promiscuous mode [ 75.064546][ T25] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 75.078862][ T1119] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.088819][ T25] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 75.098769][ T5241] playstation 0003:054C:05C4.0001: Failed to get MAC address from DualShock4 [ 75.112386][ T5241] playstation 0003:054C:05C4.0001: Failed to create dualshock4. [ 75.133416][ T5363] netlink: 16 bytes leftover after parsing attributes in process `syz.1.28'. [ 75.147715][ T25] usb 3-1: Manufacturer: syz [ 75.147880][ T5241] playstation 0003:054C:05C4.0001: probe with driver playstation failed with error -22 [ 75.164421][ T1119] bridge_slave_0: left allmulticast mode [ 75.170995][ T5363] dlm: non-version read from control device 95 [ 75.192197][ T25] usb 3-1: config 0 descriptor?? [ 75.204226][ T1119] bridge_slave_0: left promiscuous mode [ 75.240647][ T5288] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 75.249653][ T5288] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 75.261438][ T5288] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 75.272933][ T5288] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 75.285525][ T5288] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 75.299011][ T5288] usb 5-1: config 0 interface 0 has no altsetting 0 [ 75.304276][ T1119] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.310915][ T5288] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 75.334887][ T5288] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 75.352745][ T5288] usb 5-1: Product: syz [ 75.397412][ T5288] usb 5-1: Manufacturer: syz [ 75.421444][ T5288] usb 5-1: SerialNumber: syz [ 75.431031][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 75.449988][ T46] usb 4-1: USB disconnect, device number 3 [ 75.456023][ T25] rc_core: IR keymap rc-hauppauge not found [ 75.480289][ T25] Registered IR keymap rc-empty [ 75.506344][ T5288] usb 5-1: config 0 descriptor?? [ 75.555625][ T25] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 75.583673][ T5357] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 75.671382][ T5288] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 75.683194][ T25] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input5 [ 75.753924][ T5288] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 75.828217][ T25] usb 3-1: USB disconnect, device number 2 [ 75.953606][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.267365][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.277687][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.286267][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.295070][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.303937][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.454545][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 76.516900][ T5383] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 76.547804][ T5289] usb 5-1: USB disconnect, device number 3 [ 76.559864][ T5383] vhci_hcd: GetPortErrorCount req not supported for USB 2.0 roothub [ 76.573507][ T5289] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 76.641345][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.789315][ T5393] hub 9-0:1.0: USB hub found [ 76.797663][ T5245] Bluetooth: hci3: command tx timeout [ 76.806281][ T5393] hub 9-0:1.0: 8 ports detected [ 76.923516][ T1119] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.955382][ T1119] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.980097][ T1119] bond0 (unregistering): Released all slaves [ 77.287327][ T5245] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 77.295895][ T5245] Bluetooth: hci1: Injecting HCI hardware error event [ 77.304670][ T5245] Bluetooth: hci1: hardware error 0x00 [ 77.411966][ T5237] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 77.457650][ T5293] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 77.558249][ T5289] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 77.613532][ T5237] Bluetooth: hci4: ACL packet for unknown connection handle 203 [ 77.623923][ T5237] Bluetooth: hci4: Malformed Event: 0x02 [ 77.657145][ T5293] usb 2-1: Using ep0 maxpacket: 16 [ 77.667636][ T5293] usb 2-1: config 8 has an invalid interface number: 249 but max is 0 [ 77.676407][ T5293] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 77.689694][ T5293] usb 2-1: config 8 has no interface number 0 [ 77.695852][ T5293] usb 2-1: config 8 interface 249 altsetting 4 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 77.707528][ T5293] usb 2-1: config 8 interface 249 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 77.721265][ T5293] usb 2-1: config 8 interface 249 has no altsetting 0 [ 77.728234][ T5289] usb 4-1: Using ep0 maxpacket: 32 [ 77.735938][ T5359] chnl_net:caif_netlink_parms(): no params data found [ 77.752690][ T5289] usb 4-1: config 2 has an invalid interface number: 40 but max is 2 [ 77.779286][ T5293] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0078, bcdDevice=5d.c9 [ 77.829626][ T5289] usb 4-1: config 2 has an invalid interface number: 175 but max is 2 [ 77.839854][ T5293] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.880355][ T5293] usb 2-1: Manufacturer: 躌ቷ糐疄⩛匎ꯀ퓡ᦙ놗萸兒日㍽첣⭩崛៫ᅄ즆中㻎䤠㰻ﾤ稐⣾됕쾫룦閩簾ई욺荜烂⯫阅ꮾ鄣庍壇㔫盕갽鿓铜퓹ﭏ虈黻ጊ⡃䷦蘢ǔ㔤<仡昪륏瑒ʑ≒૎僸賚Ҿ鐺⻊稬栻熩⮛ [ 77.906164][ T5289] usb 4-1: config 2 has an invalid interface number: 130 but max is 2 [ 77.966675][ T5289] usb 4-1: config 2 has no interface number 0 [ 78.020911][ T5289] usb 4-1: config 2 has no interface number 1 [ 78.032811][ T5289] usb 4-1: config 2 has no interface number 2 [ 78.050365][ T5293] usb 2-1: SerialNumber: syz [ 78.055075][ T5289] usb 4-1: config 2 interface 40 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 78.069763][ T5289] usb 4-1: config 2 interface 175 altsetting 6 bulk endpoint 0xD has invalid maxpacket 32 [ 78.094399][ T5289] usb 4-1: config 2 interface 175 altsetting 6 has a duplicate endpoint with address 0x8, skipping [ 78.105253][ T5289] usb 4-1: config 2 interface 175 altsetting 6 has an endpoint descriptor with address 0x16, changing to 0x6 [ 78.117030][ T5289] usb 4-1: config 2 interface 175 altsetting 6 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 78.128064][ T5289] usb 4-1: config 2 interface 175 altsetting 6 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 78.139280][ T5289] usb 4-1: config 2 interface 175 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 78.154400][ T5289] usb 4-1: config 2 interface 175 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 78.209695][ T1119] hsr_slave_0: left promiscuous mode [ 78.241719][ T5289] usb 4-1: config 2 interface 130 altsetting 1 has a duplicate endpoint with address 0x8, skipping [ 78.252963][ T1119] hsr_slave_1: left promiscuous mode [ 78.282389][ T1119] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.302180][ T5403] netlink: 12 bytes leftover after parsing attributes in process `syz.1.33'. [ 78.317260][ T5289] usb 4-1: config 2 interface 130 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 78.347193][ T1119] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.358959][ T5425] netlink: 12 bytes leftover after parsing attributes in process `syz.1.33'. [ 78.368419][ T5289] usb 4-1: config 2 interface 130 altsetting 1 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 78.381001][ T1119] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.409064][ T5241] IPVS: starting estimator thread 0... [ 78.420002][ T5289] usb 4-1: config 2 interface 130 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 78.445294][ T1119] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.517298][ T5426] IPVS: using max 24 ests per chain, 57600 per kthread [ 78.530757][ T5289] usb 4-1: config 2 interface 40 has no altsetting 0 [ 78.551202][ T1119] veth1_macvtap: left promiscuous mode [ 78.552228][ T5289] usb 4-1: config 2 interface 175 has no altsetting 0 [ 78.587538][ T1119] veth0_macvtap: left promiscuous mode [ 78.593193][ T1119] veth1_vlan: left promiscuous mode [ 78.627914][ T5293] dvb-usb: found a 'Terratec Cinergy T USB XXS (HD)/ T3' in cold state, will try to load a firmware [ 78.647103][ T5289] usb 4-1: config 2 interface 130 has no altsetting 0 [ 78.655809][ T1119] veth0_vlan: left promiscuous mode [ 78.663453][ T5289] usb 4-1: Dual-Role OTG device on HNP port [ 78.751350][ T5289] usb 4-1: New USB device found, idVendor=06e1, idProduct=a155, bcdDevice=5d.cc [ 78.784634][ T5289] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.808603][ T5293] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 78.813367][ T5431] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.831254][ T5289] usb 4-1: Product: syz [ 78.835476][ T5289] usb 4-1: Manufacturer: syz [ 78.875455][ T5293] dib0700: firmware download failed at 7 with -71 [ 78.882025][ T5237] Bluetooth: hci3: command tx timeout [ 78.901426][ T5289] usb 4-1: SerialNumber: syz [ 78.923985][ T5293] usb 2-1: USB disconnect, device number 3 [ 79.440531][ T5245] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 79.634188][ T5289] radio-si470x 4-1:2.40: could not find interrupt in endpoint [ 79.657656][ T5289] radio-si470x 4-1:2.40: probe with driver radio-si470x failed with error -5 [ 79.688029][ T5289] usbhid 4-1:2.40: couldn't find an input interrupt endpoint [ 79.761683][ T5289] usb 4-1: USB disconnect, device number 4 [ 79.884218][ T5441] netlink: 12 bytes leftover after parsing attributes in process `syz.1.38'. [ 80.367265][ T1119] team0 (unregistering): Port device team_slave_1 removed [ 80.483775][ T1119] team0 (unregistering): Port device team_slave_0 removed [ 80.957928][ T5245] Bluetooth: hci3: command tx timeout [ 81.193925][ T5420] netlink: 24 bytes leftover after parsing attributes in process `syz.2.32'. [ 81.243872][ T5434] Zero length message leads to an empty skb [ 81.309942][ T5457] netlink: 4 bytes leftover after parsing attributes in process `syz.3.42'. [ 81.354782][ T5359] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.398076][ T5359] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.432216][ T5359] bridge_slave_0: entered allmulticast mode [ 81.452566][ T5359] bridge_slave_0: entered promiscuous mode [ 81.486730][ T5359] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.503985][ T5359] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.514316][ T5359] bridge_slave_1: entered allmulticast mode [ 81.529573][ T5359] bridge_slave_1: entered promiscuous mode [ 81.658860][ T5359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.693633][ T5359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.824622][ T5359] team0: Port device team_slave_0 added [ 81.843112][ T3414] cfg80211: failed to load regulatory.db [ 81.859642][ T5359] team0: Port device team_slave_1 added [ 82.000421][ T5359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.051783][ T5359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.169997][ T5359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.230321][ T5359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.345556][ T5359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.566403][ T5359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.039064][ T5245] Bluetooth: hci3: command tx timeout [ 83.585908][ T5359] hsr_slave_0: entered promiscuous mode [ 83.618135][ T5359] hsr_slave_1: entered promiscuous mode [ 83.639480][ T5359] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.652064][ T5359] Cannot create hsr debugfs directory [ 83.748036][ T3414] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 83.917312][ T3414] usb 4-1: Using ep0 maxpacket: 8 [ 83.945342][ T3414] usb 4-1: config 150 has an invalid interface number: 204 but max is 1 [ 83.971599][ T3414] usb 4-1: config 150 has no interface number 0 [ 83.997785][ T3414] usb 4-1: config 150 interface 204 has no altsetting 0 [ 84.005522][ T3414] usb 4-1: config 150 interface 1 has no altsetting 0 [ 84.039678][ T3414] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 84.057761][ T3414] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.096882][ T3414] usb 4-1: Product: syz [ 84.107129][ T3414] usb 4-1: Manufacturer: syz [ 84.111795][ T3414] usb 4-1: SerialNumber: syz [ 84.227190][ T5241] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 84.373571][ T3414] xr_serial 4-1:150.204: xr_serial converter detected [ 84.427103][ T5241] usb 3-1: Using ep0 maxpacket: 8 [ 84.443596][ T5241] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 84.470676][ T5241] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 84.514232][ T5241] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 84.570575][ T5241] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 84.594679][ T5241] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 84.615762][ T5241] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 84.627193][ T5241] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 84.666102][ T5241] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 84.697077][ T5241] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 84.729984][ T5241] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 84.787299][ T5241] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 84.794773][ T5241] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 84.856120][ T5241] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 84.896831][ T5241] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 84.952074][ T5241] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 84.963528][ T5359] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.988217][ T3414] xr_serial ttyUSB0: Failed to set reg 0x0d: -71 [ 85.010613][ T5359] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.015064][ T5241] usb 3-1: string descriptor 0 read error: -22 [ 85.024568][ T5241] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 85.024740][ T3414] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 85.044703][ T5241] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.057878][ T5241] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 85.089825][ T5359] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.161906][ T3414] usb 4-1: USB disconnect, device number 5 [ 85.173115][ T5359] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.175296][ T3414] xr_serial 4-1:150.204: device disconnected [ 85.348742][ T5537] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.365778][ T61] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.525796][ T61] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.719084][ T61] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.846130][ T5359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.943839][ T61] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.076708][ T5359] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.159433][ T5237] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.168820][ T5237] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.171777][ T2907] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.182968][ T2907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.200051][ T5237] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.209082][ T5237] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.225238][ T5237] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.252757][ T5237] Bluetooth: hci4: unexpected subevent 0x0e length: 244 > 15 [ 86.262843][ T5237] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.458005][ T2907] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.465154][ T2907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.645293][ T61] bridge_slave_1: left allmulticast mode [ 86.664689][ T61] bridge_slave_1: left promiscuous mode [ 86.696051][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.730211][ T61] bridge_slave_0: left allmulticast mode [ 86.748801][ T61] bridge_slave_0: left promiscuous mode [ 86.755773][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.397867][ T5291] usb 3-1: USB disconnect, device number 3 [ 87.839693][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.893246][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.951509][ T61] bond0 (unregistering): Released all slaves [ 88.255689][ T5359] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.407199][ T5245] Bluetooth: hci0: command tx timeout [ 88.544010][ T5359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.666736][ T5359] veth0_vlan: entered promiscuous mode [ 88.716025][ T5359] veth1_vlan: entered promiscuous mode [ 88.845643][ T5359] veth0_macvtap: entered promiscuous mode [ 88.899784][ T5359] veth1_macvtap: entered promiscuous mode [ 88.963601][ T5359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.037468][ T5359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.075594][ T5359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.151795][ T5359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.191313][ T5359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.247018][ T5359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.287037][ T5359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.314508][ T5359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.354089][ T5359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.411209][ T5359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.483664][ T5359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.515337][ T5359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.549570][ T5359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.617196][ T5359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.635943][ T5359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.656510][ T5359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.686661][ T5359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.716833][ T5359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.768563][ T5359] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.813583][ T5359] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.882720][ T5359] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.908429][ T5359] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.477358][ T5245] Bluetooth: hci0: command tx timeout [ 90.613299][ T1113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.635470][ T1113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.765275][ T61] hsr_slave_0: left promiscuous mode [ 90.773595][ T61] hsr_slave_1: left promiscuous mode [ 90.844726][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.853033][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.870259][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.877973][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.933206][ T61] veth1_macvtap: left promiscuous mode [ 90.953792][ T61] veth0_macvtap: left promiscuous mode [ 90.974198][ T61] veth1_vlan: left promiscuous mode [ 90.997240][ T61] veth0_vlan: left promiscuous mode [ 91.117990][ T5245] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 91.134119][ T5245] Bluetooth: hci4: Injecting HCI hardware error event [ 91.143043][ T5245] Bluetooth: hci4: hardware error 0x00 [ 92.372100][ T5678] netlink: 4 bytes leftover after parsing attributes in process `syz.4.77'. [ 92.560268][ T5237] Bluetooth: hci0: command tx timeout [ 92.816309][ T61] team0 (unregistering): Port device team_slave_1 removed [ 92.958685][ T61] team0 (unregistering): Port device team_slave_0 removed [ 93.177275][ T5697] mmap: syz.2.76 (5697) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 93.283554][ T5245] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 93.844856][ T5659] syz.2.76 (5659) used greatest stack depth: 18896 bytes left [ 94.017560][ T5553] chnl_net:caif_netlink_parms(): no params data found [ 94.121166][ T1119] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.162328][ T1119] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.560746][ T5553] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.577193][ T5241] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 94.591112][ T5553] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.629570][ T5553] bridge_slave_0: entered allmulticast mode [ 94.637368][ T5245] Bluetooth: hci0: command tx timeout [ 94.697416][ T5553] bridge_slave_0: entered promiscuous mode [ 94.772976][ T5553] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.782886][ T5241] usb 3-1: Using ep0 maxpacket: 16 [ 94.807248][ T5553] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.814530][ T5553] bridge_slave_1: entered allmulticast mode [ 94.847943][ T5241] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 94.863580][ T5701] syz.4.79 (5701): drop_caches: 2 [ 94.873575][ T5553] bridge_slave_1: entered promiscuous mode [ 94.882112][ T5241] usb 3-1: config 0 has no interface number 0 [ 94.892288][ T5241] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 94.980995][ T5553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.983920][ T5241] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 95.013503][ T61] IPVS: stop unused estimator thread 0... [ 95.021954][ T5241] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 95.046612][ T5241] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.061014][ T5553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.088331][ T5241] usb 3-1: Product: syz [ 95.107113][ T3414] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 95.113855][ T5241] usb 3-1: Manufacturer: syz [ 95.137159][ T5241] usb 3-1: SerialNumber: syz [ 95.158902][ T5241] usb 3-1: config 0 descriptor?? [ 95.180015][ T5705] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 95.194942][ T5705] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 95.201112][ T5553] team0: Port device team_slave_0 added [ 95.252618][ T5553] team0: Port device team_slave_1 added [ 95.334682][ T3414] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.347411][ T3414] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 95.357931][ T5553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.365008][ T5553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.406583][ T5553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.422464][ T3414] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 95.432156][ T3414] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 95.444209][ T3414] usb 4-1: SerialNumber: syz [ 95.446433][ T5705] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 95.453288][ T5553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.490661][ T5705] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 95.495419][ T5553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.585129][ T5553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.712075][ T3414] usb 4-1: 0:2 : does not exist [ 95.784890][ T3414] usb 4-1: USB disconnect, device number 6 [ 95.806106][ T5553] hsr_slave_0: entered promiscuous mode [ 95.815574][ T5553] hsr_slave_1: entered promiscuous mode [ 95.843360][ T5553] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.843930][ T5239] udevd[5239]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 95.852062][ T5553] Cannot create hsr debugfs directory [ 95.878144][ T5746] netlink: 'syz.4.87': attribute type 9 has an invalid length. [ 95.997919][ T5289] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 96.148025][ T5289] usb 1-1: Using ep0 maxpacket: 16 [ 96.155694][ T5289] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.186939][ T5289] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.201865][ T5241] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 96.213020][ T5289] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 96.247259][ T5241] asix 3-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 96.258328][ T5289] usb 1-1: config 0 interface 0 has no altsetting 0 [ 96.266043][ T5241] asix 3-1:0.251: probe with driver asix failed with error -71 [ 96.276317][ T5289] usb 1-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 96.291021][ T5241] usb 3-1: USB disconnect, device number 4 [ 96.297102][ T5289] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.329641][ T5289] usb 1-1: config 0 descriptor?? [ 96.667385][ T5288] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 96.745987][ T5553] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.753913][ T5289] hid-generic 0003:045E:05DA.0002: unknown main item tag 0x4 [ 96.777316][ T5553] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.783751][ T5289] hid-generic 0003:045E:05DA.0002: ignoring exceeding usage max [ 96.820971][ T5553] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.835565][ T5289] hid-generic 0003:045E:05DA.0002: unbalanced delimiter at end of report description [ 96.864840][ T5289] hid-generic 0003:045E:05DA.0002: probe with driver hid-generic failed with error -22 [ 96.865275][ T5553] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.883009][ T5288] usb 4-1: Using ep0 maxpacket: 16 [ 96.956499][ T5553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.964401][ T5290] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 96.978149][ T5553] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.990269][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.997488][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.054608][ T5288] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 97.062980][ T5288] usb 4-1: config 0 has no interface number 0 [ 97.069536][ T5288] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 97.085463][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.088158][ T5291] usb 1-1: USB disconnect, device number 2 [ 97.092667][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.133693][ T5288] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 97.150791][ T5288] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.159424][ T5288] usb 4-1: Product: syz [ 97.163641][ T5288] usb 4-1: Manufacturer: syz [ 97.169421][ T5288] usb 4-1: SerialNumber: syz [ 97.176192][ T5288] usb 4-1: config 0 descriptor?? [ 97.180172][ T5289] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 97.194920][ T5290] usb 5-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 97.205293][ T5290] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.238152][ T5290] usb 5-1: config 0 descriptor?? [ 97.274957][ T5553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.348957][ T5553] veth0_vlan: entered promiscuous mode [ 97.368742][ T5289] usb 3-1: Using ep0 maxpacket: 8 [ 97.390395][ T5289] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 97.407499][ T5553] veth1_vlan: entered promiscuous mode [ 97.413144][ T5289] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.436177][ T5289] usb 3-1: Product: syz [ 97.453566][ T5289] usb 3-1: Manufacturer: syz [ 97.471085][ T5289] usb 3-1: SerialNumber: syz [ 97.512428][ T5289] usb 3-1: config 0 descriptor?? [ 97.534601][ T5553] veth0_macvtap: entered promiscuous mode [ 97.572904][ T5553] veth1_macvtap: entered promiscuous mode [ 97.615292][ T5553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.634347][ T5553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.661052][ T5553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.710542][ T5553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.725814][ T5553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.737249][ T5553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.747804][ T5553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.761223][ T5553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.773571][ T5289] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 97.775526][ T5553] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.800623][ T5553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.811674][ T5553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.824738][ T5288] usbtouchscreen 4-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 97.844375][ T5553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.864736][ T5288] usb 4-1: USB disconnect, device number 7 [ 97.873964][ T5290] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 97.887266][ T5553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.891012][ T5290] asix 5-1:0.0: probe with driver asix failed with error -71 [ 97.910171][ T5553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.925811][ T5553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.937828][ T5553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.952740][ T5290] usb 5-1: USB disconnect, device number 4 [ 97.960408][ T5553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.970488][ T5233] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 98.014779][ T5553] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.034610][ T5553] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.044806][ T5553] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.055832][ T5553] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.069727][ T5553] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.135514][ T5233] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.164209][ T5233] usb 1-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 98.176014][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.184027][ T5233] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.193142][ T5233] usb 1-1: config 0 descriptor?? [ 98.201317][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.210207][ T5289] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 98.231842][ T5289] usb 3-1: USB disconnect, device number 5 [ 98.313090][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.324752][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.735741][ T5233] petalynx 0003:18B1:0037.0003: unknown main item tag 0xd [ 98.743715][ T5233] petalynx 0003:18B1:0037.0003: unexpected long global item [ 98.758135][ T5233] petalynx 0003:18B1:0037.0003: parse failed [ 98.764236][ T5233] petalynx 0003:18B1:0037.0003: probe with driver petalynx failed with error -22 [ 98.946252][ T5233] usb 1-1: USB disconnect, device number 3 [ 99.038052][ T5813] netlink: 'syz.2.98': attribute type 29 has an invalid length. [ 99.101623][ T5813] netlink: 'syz.2.98': attribute type 29 has an invalid length. [ 99.157945][ T8] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 99.168611][ T5816] tipc: Started in network mode [ 99.173885][ T5816] tipc: Node identity 5f5f2eaa, cluster identity 4711 [ 99.228210][ T5816] tipc: Enabling of bearer rejected, failed to enable media [ 99.344405][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.368855][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.378894][ T8] usb 4-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 99.388144][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.405891][ T8] usb 4-1: config 0 descriptor?? [ 99.875458][ T8] elo 0003:04E7:0030.0004: item fetching failed at offset 2/5 [ 99.883963][ T8] elo 0003:04E7:0030.0004: parse failed [ 99.887220][ T5288] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 99.889935][ T8] elo 0003:04E7:0030.0004: probe with driver elo failed with error -22 [ 99.906950][ T5241] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 100.078984][ T5241] usb 3-1: Using ep0 maxpacket: 8 [ 100.097366][ T5288] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.107836][ T5241] usb 3-1: config 150 has an invalid interface number: 204 but max is 0 [ 100.127943][ T5288] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.130636][ T5241] usb 3-1: config 150 has no interface number 0 [ 100.155825][ T5233] usb 4-1: USB disconnect, device number 8 [ 100.167556][ T5288] usb 5-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 100.176654][ T5288] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.179784][ T5241] usb 3-1: config 150 interface 204 has no altsetting 0 [ 100.203232][ T5288] usb 5-1: config 0 descriptor?? [ 100.219688][ T5241] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 100.243633][ T5241] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.266390][ T5241] usb 3-1: Product: syz [ 100.271309][ T5241] usb 3-1: Manufacturer: syz [ 100.275949][ T5241] usb 3-1: SerialNumber: syz [ 100.529291][ T5241] usb 3-1: USB disconnect, device number 6 [ 100.593783][ T5245] Bluetooth: Wrong link type (-71) [ 100.677919][ T5288] magicmouse 0003:05AC:0269.0005: hidraw0: USB HID v0.00 Device [HID 05ac:0269] on usb-dummy_hcd.4-1/input0 [ 100.892210][ T5288] usb 5-1: USB disconnect, device number 5 [ 101.087127][ T5241] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 101.227091][ T5289] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 101.242892][ T5241] usb 1-1: Using ep0 maxpacket: 16 [ 101.263270][ T5241] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.275479][ T5241] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.289005][ T5241] usb 1-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 101.298484][ T5241] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.314393][ T5241] usb 1-1: config 0 descriptor?? [ 101.410806][ T5289] usb 4-1: Using ep0 maxpacket: 16 [ 101.423596][ T5289] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.466959][ T5289] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.484909][ T5289] usb 4-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 101.496172][ T5289] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.511898][ T5885] netlink: 4 bytes leftover after parsing attributes in process `syz.2.127'. [ 101.522296][ T5289] usb 4-1: config 0 descriptor?? [ 101.679803][ T8] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 101.766684][ T5241] playstation 0003:054C:05C4.0006: unbalanced delimiter at end of report description [ 101.785435][ T5241] playstation 0003:054C:05C4.0006: Parse failed [ 101.791897][ T5241] playstation 0003:054C:05C4.0006: probe with driver playstation failed with error -22 [ 101.819346][ T5233] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 101.839590][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.866409][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.876558][ T8] usb 2-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 101.894200][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.907459][ T8] usb 2-1: config 0 descriptor?? [ 101.961357][ T5289] bigben 0003:146B:0902.0007: unexpected rdesc, please submit for review [ 101.997573][ T5233] usb 5-1: Using ep0 maxpacket: 16 [ 101.998461][ T5289] bigben 0003:146B:0902.0007: unbalanced collection at end of report description [ 102.006920][ T5233] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 102.037099][ T5233] usb 5-1: config 0 has no interface number 0 [ 102.055015][ T5233] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 102.056405][ T5293] usb 1-1: USB disconnect, device number 4 [ 102.077910][ T5289] bigben 0003:146B:0902.0007: parse failed [ 102.083902][ T5289] bigben 0003:146B:0902.0007: probe with driver bigben failed with error -22 [ 102.087037][ T5233] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 102.132406][ T5233] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 102.153475][ T5233] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 102.174946][ T5233] usb 5-1: Product: syz [ 102.179664][ T5233] usb 5-1: SerialNumber: syz [ 102.192854][ T5233] usb 5-1: config 0 descriptor?? [ 102.210862][ T5233] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 102.232759][ T5289] usb 4-1: USB disconnect, device number 9 [ 102.233547][ T5233] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input7 [ 102.357619][ T8] stadia 0003:18D1:9400.0008: hidraw0: USB HID v0.00 Device [HID 18d1:9400] on usb-dummy_hcd.1-1/input0 [ 102.369571][ T8] stadia 0003:18D1:9400.0008: no inputs found [ 102.375710][ T8] stadia 0003:18D1:9400.0008: force feedback init failed [ 102.471304][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 102.471525][ T5289] usb 5-1: USB disconnect, device number 6 [ 102.478587][ C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 102.508406][ T5289] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 102.570107][ T5233] usb 2-1: USB disconnect, device number 4 [ 103.730097][ T5930] sctp: [Deprecated]: syz.0.142 (pid 5930) Use of struct sctp_assoc_value in delayed_ack socket option. [ 103.730097][ T5930] Use struct sctp_sack_info instead [ 104.197343][ T5233] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 104.347097][ T3414] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 104.373344][ T5233] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 104.387123][ T5233] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.408338][ T5233] usb 5-1: config 0 descriptor?? [ 104.421553][ T5233] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 104.499417][ T3414] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 104.517124][ T3414] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 104.543565][ T3414] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 104.577141][ T3414] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.613062][ T5952] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 104.644148][ T3414] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 104.854209][ T5967] netlink: 428 bytes leftover after parsing attributes in process `syz.2.166'. [ 104.897108][ T5967] netlink: 32 bytes leftover after parsing attributes in process `syz.2.166'. [ 104.966253][ T5241] usb 1-1: USB disconnect, device number 5 [ 105.033817][ T5233] gspca_cpia1: usb_control_msg 01, error -71 [ 105.047303][ T5233] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 105.097046][ T5233] usb 5-1: USB disconnect, device number 7 [ 105.848191][ T5990] netlink: 160 bytes leftover after parsing attributes in process `syz.1.165'. [ 105.857633][ T5288] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 105.893464][ T5990] netlink: 160 bytes leftover after parsing attributes in process `syz.1.165'. [ 106.040836][ T5288] usb 3-1: Using ep0 maxpacket: 16 [ 106.065039][ T5288] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.076104][ T5288] usb 3-1: config 0 interface 0 has no altsetting 0 [ 106.083248][ T5288] usb 3-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 106.092614][ T5288] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.110477][ T5288] usb 3-1: config 0 descriptor?? [ 106.573835][ T5986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.634261][ T5986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.663961][ T5288] kye 0003:0458:0138.0009: unknown main item tag 0x0 [ 106.671466][ T5288] kye 0003:0458:0138.0009: unknown main item tag 0x0 [ 106.678663][ T5288] kye 0003:0458:0138.0009: unexpected long global item [ 106.686058][ T5288] kye 0003:0458:0138.0009: parse failed [ 106.721377][ T5288] kye 0003:0458:0138.0009: probe with driver kye failed with error -22 [ 106.810131][ T6028] tipc: Started in network mode [ 106.815067][ T6028] tipc: Node identity 4, cluster identity 4711 [ 106.821687][ T6028] tipc: Node number set to 4 [ 106.867966][ T5233] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 106.902412][ T46] usb 3-1: USB disconnect, device number 7 [ 107.029795][ T5233] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 107.062151][ T5233] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 107.097832][ T5233] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 107.106936][ T5233] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.153710][ T6023] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 107.169410][ T5233] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 107.465234][ T46] usb 4-1: USB disconnect, device number 10 [ 107.871606][ T6065] netlink: 4 bytes leftover after parsing attributes in process `syz.1.194'. [ 108.991685][ T6104] bridge0: entered promiscuous mode [ 109.026436][ T6104] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 109.181980][ T6108] netlink: 'syz.4.208': attribute type 3 has an invalid length. [ 109.205608][ T6108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.208'. [ 109.637390][ T5289] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 109.801145][ T5241] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 109.832035][ T5289] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 109.843676][ T5289] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 109.854028][ T5289] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 109.863433][ T5289] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.887674][ T6119] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 109.898361][ T5289] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 110.017108][ T5241] usb 4-1: Using ep0 maxpacket: 8 [ 110.023916][ T5241] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 110.041845][ T5241] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 110.076455][ T5241] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.136382][ T5241] usb 4-1: Product: syz [ 110.141276][ T5241] usb 4-1: Manufacturer: syz [ 110.146742][ T5241] usb 4-1: SerialNumber: syz [ 110.160793][ T5241] usb 4-1: config 0 descriptor?? [ 110.169816][ T5241] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 110.213468][ T5289] usb 3-1: USB disconnect, device number 8 [ 111.088204][ T5241] gspca_zc3xx: reg_w_i err -71 [ 111.187170][ T8] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 111.380102][ T8] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 111.426650][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 111.476763][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 111.498642][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 111.551004][ T8] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 111.584740][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.638747][ T8] usb 1-1: config 0 descriptor?? [ 111.680274][ T5241] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 111.704139][ T5241] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 111.751990][ T5241] usb 4-1: USB disconnect, device number 11 [ 112.073546][ T8] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 112.144983][ T8] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 112.237267][ T8] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 112.381798][ T8] usb 1-1: USB disconnect, device number 6 [ 112.823403][ T6177] syz.2.231 uses obsolete (PF_INET,SOCK_PACKET) [ 113.421089][ T5289] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 113.504949][ T6186] netlink: 'syz.2.235': attribute type 29 has an invalid length. [ 113.554237][ T6186] netlink: 'syz.2.235': attribute type 29 has an invalid length. [ 113.563390][ T5245] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 113.570831][ T6186] netlink: 'syz.2.235': attribute type 29 has an invalid length. [ 113.588499][ T6186] netlink: 'syz.2.235': attribute type 29 has an invalid length. [ 113.629176][ T5289] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.709680][ T5289] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.771668][ T5289] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 113.804698][ T5245] Bluetooth: hci2: ACL packet for unknown connection handle 203 [ 113.816876][ T5289] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 113.847072][ T5289] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.860996][ T5289] usb 2-1: config 0 descriptor?? [ 113.876420][ T5245] Bluetooth: hci2: Malformed Event: 0x02 [ 113.991591][ T30] audit: type=1326 audit(1728063118.592:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6195 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 114.057371][ T30] audit: type=1326 audit(1728063118.622:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6195 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 114.097481][ T30] audit: type=1326 audit(1728063118.622:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6195 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 114.178780][ T30] audit: type=1326 audit(1728063118.622:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6195 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 114.254142][ T30] audit: type=1326 audit(1728063118.622:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6195 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 114.287657][ T5289] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 114.306433][ T5289] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 114.315491][ T30] audit: type=1326 audit(1728063118.632:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6195 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=40000003 syscall=333 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 114.337417][ T8] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 114.347731][ T5289] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 114.361647][ T5289] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 114.376322][ T30] audit: type=1326 audit(1728063118.632:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6195 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 114.507205][ T30] audit: type=1326 audit(1728063118.632:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6195 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 114.537770][ T8] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 114.567247][ T5289] usb 2-1: USB disconnect, device number 5 [ 114.608350][ T8] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 114.738813][ T8] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 114.770199][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.806633][ T6198] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 114.836730][ T8] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 115.193692][ T5288] usb 5-1: USB disconnect, device number 8 [ 115.247122][ T46] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 115.412623][ T46] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 115.438937][ T46] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 115.453877][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 115.477528][ T46] usb 1-1: SerialNumber: syz [ 115.732747][ T6234] netlink: 'syz.3.251': attribute type 3 has an invalid length. [ 115.743978][ T6234] netlink: 'syz.3.251': attribute type 1 has an invalid length. [ 115.762608][ T6234] netlink: 130160 bytes leftover after parsing attributes in process `syz.3.251'. [ 115.961465][ T6242] [U] DEV/TTYS3 [ 115.965237][ T6242] [U] [ 115.967980][ T6242] [U] [ 115.970713][ T6242] [U] [ 115.975292][ T6242] [U] [ 115.978045][ T6242] [U] [ 115.980778][ T6242] [U] [ 115.983514][ T6242] [U] [ 116.015749][ T6242] [U] [ 116.018632][ T6242] [U] [ 116.021374][ T6242] [U] [ 116.060462][ T6241] [U] [ 116.201651][ T46] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 116.407181][ T5289] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 116.482915][ T937] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 116.602503][ T5289] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.605547][ T5233] usb 1-1: USB disconnect, device number 7 [ 116.682755][ T5233] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 116.702839][ T5289] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.752212][ T937] usb 2-1: Using ep0 maxpacket: 32 [ 116.792568][ T5289] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 116.811757][ T5289] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 116.821887][ T5289] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.830226][ T937] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 116.846483][ T937] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 116.871398][ T5289] usb 5-1: config 0 descriptor?? [ 116.876415][ T937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.909024][ T937] usb 2-1: Product: syz [ 116.919726][ T937] usb 2-1: Manufacturer: syz [ 116.924424][ T937] usb 2-1: SerialNumber: syz [ 116.941759][ T937] usb 2-1: config 0 descriptor?? [ 116.959238][ T6251] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 116.968130][ T937] hub 2-1:0.0: bad descriptor, ignoring hub [ 116.974149][ T937] hub 2-1:0.0: probe with driver hub failed with error -5 [ 117.070729][ T937] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input9 [ 117.295289][ T5233] usb 2-1: USB disconnect, device number 6 [ 117.295297][ C0] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 117.317663][ T5289] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 117.325203][ T5289] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 117.333350][ T5289] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 117.349102][ T5289] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 117.595525][ T5233] usb 5-1: USB disconnect, device number 9 [ 118.045885][ T6311] netlink: 'syz.2.271': attribute type 29 has an invalid length. [ 118.057989][ T6311] netlink: 'syz.2.271': attribute type 29 has an invalid length. [ 118.068830][ T6311] netlink: 'syz.2.271': attribute type 29 has an invalid length. [ 118.078042][ T6311] netlink: 'syz.2.271': attribute type 29 has an invalid length. [ 118.237173][ T5233] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 118.426430][ T5233] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 118.461086][ T5233] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 118.573524][ T5233] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 118.761183][ T5233] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.806926][ T6306] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 118.872119][ T5233] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 119.207379][ T5289] usb 2-1: USB disconnect, device number 7 [ 120.111165][ T6359] vlan2: entered allmulticast mode [ 120.118064][ T6359] bond0: entered allmulticast mode [ 120.123322][ T6359] bond_slave_0: entered allmulticast mode [ 120.129271][ T6359] bond_slave_1: entered allmulticast mode [ 120.143634][ T6359] bond0: left allmulticast mode [ 120.148702][ T6359] bond_slave_0: left allmulticast mode [ 120.154221][ T6359] bond_slave_1: left allmulticast mode [ 120.497692][ T6374] tipc: Started in network mode [ 120.512899][ T6374] tipc: Node identity 5f00000000004c3a0000400000000001, cluster identity 4711 [ 120.532670][ T6374] tipc: Enabling of bearer rejected, failed to enable media [ 122.367949][ T46] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 122.567756][ T3414] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 122.606279][ T46] usb 3-1: config 0 has an invalid interface number: 18 but max is 0 [ 122.615789][ T46] usb 3-1: config 0 has no interface number 0 [ 122.622262][ T46] usb 3-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.633362][ T46] usb 3-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.651898][ T46] usb 3-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 122.661130][ T46] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 122.691220][ T46] usb 3-1: Manufacturer: syz [ 122.708399][ T46] usb 3-1: config 0 descriptor?? [ 122.787135][ T3414] usb 5-1: Using ep0 maxpacket: 16 [ 122.842992][ T3414] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=a2.43 [ 122.852817][ T3414] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.884157][ T3414] usb 5-1: Product: syz [ 122.900693][ T3414] usb 5-1: Manufacturer: syz [ 122.905396][ T3414] usb 5-1: SerialNumber: syz [ 122.932332][ T3414] usb 5-1: config 0 descriptor?? [ 122.950775][ T6455] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 123.206833][ T46] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.18/0003:054C:03D5.000D/input/input10 [ 123.317708][ T46] sony 0003:054C:03D5.000D: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.2-1/input18 [ 123.371163][ T6440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.437396][ T6440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.453877][ T3414] usb 5-1: Cannot retrieve CPort count: -110 [ 123.473237][ T8] usb 3-1: USB disconnect, device number 9 [ 123.508457][ T3414] usb 5-1: Cannot retrieve CPort count: -110 [ 123.531572][ T3414] es2_ap_driver 5-1:0.0: probe with driver es2_ap_driver failed with error -110 [ 123.584892][ T3414] usb 5-1: USB disconnect, device number 10 [ 124.862183][ T46] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 125.026433][ T46] usb 1-1: Using ep0 maxpacket: 32 [ 125.046269][ T46] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 125.065399][ T46] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 125.113185][ T46] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 125.127959][ T46] usb 1-1: config 1 has no interface number 0 [ 125.134214][ T46] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 125.145803][ T46] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 125.203606][ T6534] kvm: user requested TSC rate below hardware speed [ 125.229319][ T46] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 125.277124][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.346668][ T46] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 125.927822][ T46] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 126.241781][ T5289] usb 1-1: USB disconnect, device number 8 [ 126.265523][ T5289] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 127.337125][ T5291] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 127.519636][ T5291] usb 5-1: Using ep0 maxpacket: 8 [ 127.548584][ T5291] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 127.561286][ T46] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 127.574176][ T5291] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 26056, setting to 1024 [ 127.606741][ T5291] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 127.628922][ T5291] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 127.642775][ T5291] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 127.653035][ T5291] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 127.693130][ T5291] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8d.58 [ 127.712710][ T5291] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.742441][ T5291] usb 5-1: config 0 descriptor?? [ 127.767914][ T46] usb 3-1: Using ep0 maxpacket: 32 [ 127.787714][ T6604] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 127.789082][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.833771][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.865459][ T5245] Bluetooth: hci5: urb ffff88807906ee00 submission failed (90) [ 127.878289][ T46] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 127.904988][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.931429][ T46] usb 3-1: config 0 descriptor?? [ 128.124986][ T5291] usb 5-1: USB disconnect, device number 11 [ 128.355044][ T46] ft260 0003:0403:6030.000E: unknown main item tag 0x0 [ 128.552171][ T46] ft260 0003:0403:6030.000E: chip code: 0000 0000 [ 128.758619][ T46] ft260 0003:0403:6030.000E: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 128.980998][ T46] ft260 0003:0403:6030.000E: failed to retrieve status: -71, no wakeup [ 129.007414][ T46] ft260 0003:0403:6030.000E: failed to retrieve status: -71 [ 129.033578][ T46] ft260 0003:0403:6030.000E: failed to reset I2C controller: -71 [ 129.073903][ T46] usb 3-1: USB disconnect, device number 10 [ 129.785328][ T46] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 129.951648][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.965028][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.023386][ T46] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 130.064496][ T46] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 130.081426][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.110746][ T46] usb 2-1: config 0 descriptor?? [ 130.124764][ T6691] batadv_slave_1: entered promiscuous mode [ 130.136068][ T6689] batadv_slave_1: left promiscuous mode [ 130.540547][ T6704] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.403'. [ 130.577366][ T6704] openvswitch: netlink: Key type 29 is not supported [ 130.598516][ T46] plantronics 0003:047F:FFFF.000F: ignoring exceeding usage max [ 130.631996][ T46] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 130.661516][ T46] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 131.668903][ T6739] syzkaller1: entered promiscuous mode [ 131.674454][ T6739] syzkaller1: entered allmulticast mode [ 132.016295][ T6749] geneve3: entered promiscuous mode [ 132.048139][ T6749] geneve3: entered allmulticast mode [ 132.075837][ T6755] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.119820][ T6757] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.127106][ T6757] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.429462][ T5291] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 132.555018][ T6770] netlink: 4 bytes leftover after parsing attributes in process `syz.3.427'. [ 132.598032][ T5291] usb 5-1: Using ep0 maxpacket: 16 [ 132.612771][ T5291] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.644930][ T5291] usb 5-1: config 0 interface 0 has no altsetting 0 [ 132.653205][ T5291] usb 5-1: New USB device found, idVendor=0738, idProduct=1705, bcdDevice= 0.00 [ 132.662908][ T5291] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.675274][ T5291] usb 5-1: config 0 descriptor?? [ 132.696474][ T6774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.429'. [ 132.717977][ T8] usb 2-1: USB disconnect, device number 8 [ 132.890708][ T6780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.432'. [ 132.926854][ T6780] netlink: 104 bytes leftover after parsing attributes in process `syz.0.432'. [ 132.942936][ T6780] netlink: 104 bytes leftover after parsing attributes in process `syz.0.432'. [ 133.040891][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.047675][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.080321][ T5291] usbhid 5-1:0.0: can't add hid device: -71 [ 133.100285][ T5291] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 133.148569][ T5291] usb 5-1: USB disconnect, device number 12 [ 133.440335][ T8] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 133.671115][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.707408][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.733758][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 133.796774][ T8] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 133.817443][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.835087][ T8] usb 3-1: config 0 descriptor?? [ 133.877096][ T46] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 134.059552][ T46] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 134.080956][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.121854][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.162796][ T46] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 134.178757][ T6820] syzkaller1: entered promiscuous mode [ 134.184273][ T6820] syzkaller1: entered allmulticast mode [ 134.193472][ T46] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 134.212171][ T46] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 134.256897][ T46] usb 2-1: Manufacturer: syz [ 134.275412][ T46] usb 2-1: config 0 descriptor?? [ 134.305278][ T8] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 134.358910][ T8] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 134.404583][ T8] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 134.722434][ T46] appleir 0003:05AC:8243.0011: unknown main item tag 0x0 [ 134.731175][ T46] appleir 0003:05AC:8243.0011: No inputs registered, leaving [ 134.777957][ T46] appleir 0003:05AC:8243.0011: hiddev1,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 135.457158][ T46] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 135.627100][ T46] usb 5-1: Using ep0 maxpacket: 32 [ 135.644805][ T46] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 135.673053][ T46] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 135.687970][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.703662][ T46] usb 5-1: Product: syz [ 135.710634][ T46] usb 5-1: Manufacturer: syz [ 135.715286][ T46] usb 5-1: SerialNumber: syz [ 135.743295][ T46] usb 5-1: config 0 descriptor?? [ 135.757514][ T6847] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 135.776310][ T46] hub 5-1:0.0: bad descriptor, ignoring hub [ 135.782517][ T46] hub 5-1:0.0: probe with driver hub failed with error -5 [ 135.796934][ T46] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input11 [ 136.069327][ T5289] usb 5-1: USB disconnect, device number 13 [ 136.069499][ C1] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 136.413481][ T937] usb 3-1: USB disconnect, device number 11 [ 136.694674][ T6886] [U] DEV/TTYS3 [ 136.698236][ T6886] [U] [ 136.700976][ T6886] [U] [ 136.703718][ T6886] [U] [ 136.728598][ T6886] [U] [ 136.731336][ T6886] [U] [ 136.734033][ T6886] [U] [ 136.736728][ T6886] [U] [ 136.783655][ T6886] [U] [ 136.786437][ T6886] [U] [ 136.789224][ T6886] [U] [ 136.823267][ T5288] usb 2-1: USB disconnect, device number 9 [ 136.839653][ T6885] [U] [ 137.066224][ T46] hid-generic FFFE:2000:0000.0012: unknown main item tag 0x0 [ 137.074019][ T46] hid-generic FFFE:2000:0000.0012: unknown main item tag 0x0 [ 137.082285][ T46] hid-generic FFFE:2000:0000.0012: unknown main item tag 0x0 [ 137.090901][ T46] hid-generic FFFE:2000:0000.0012: unknown main item tag 0x0 [ 137.098739][ T46] hid-generic FFFE:2000:0000.0012: unknown main item tag 0x0 [ 137.106179][ T46] hid-generic FFFE:2000:0000.0012: unknown main item tag 0x0 [ 137.113947][ T46] hid-generic FFFE:2000:0000.0012: unknown main item tag 0x0 [ 137.121541][ T46] hid-generic FFFE:2000:0000.0012: unknown main item tag 0x0 [ 137.129063][ T46] hid-generic FFFE:2000:0000.0012: unknown main item tag 0x0 [ 137.136508][ T46] hid-generic FFFE:2000:0000.0012: unknown main item tag 0x0 [ 137.144027][ T46] hid-generic FFFE:2000:0000.0012: unknown main item tag 0x0 [ 137.151541][ T46] hid-generic FFFE:2000:0000.0012: unknown main item tag 0x0 [ 137.159070][ T46] hid-generic FFFE:2000:0000.0012: unknown main item tag 0x0 [ 137.166504][ T46] hid-generic FFFE:2000:0000.0012: unknown main item tag 0x0 [ 137.174182][ T46] hid-generic FFFE:2000:0000.0012: unknown main item tag 0x0 [ 137.182402][ T46] hid-generic FFFE:2000:0000.0012: unknown main item tag 0x0 [ 137.190627][ T46] hid-generic FFFE:2000:0000.0012: unknown main item tag 0x0 [ 137.198383][ T46] hid-generic FFFE:2000:0000.0012: unknown main item tag 0x0 [ 137.205823][ T46] hid-generic FFFE:2000:0000.0012: unknown main item tag 0x0 [ 137.213889][ T46] hid-generic FFFE:2000:0000.0012: unknown main item tag 0x0 [ 137.221528][ T46] hid-generic FFFE:2000:0000.0012: unknown main item tag 0x0 [ 137.229052][ T46] hid-generic FFFE:2000:0000.0012: unknown main item tag 0x0 [ 137.236479][ T46] hid-generic FFFE:2000:0000.0012: unknown main item tag 0x0 [ 137.244020][ T46] hid-generic FFFE:2000:0000.0012: unknown main item tag 0x0 [ 137.251550][ T46] hid-generic FFFE:2000:0000.0012: unknown main item tag 0x0 [ 137.259141][ T46] hid-generic FFFE:2000:0000.0012: unknown main item tag 0x0 [ 137.266681][ T46] hid-generic FFFE:2000:0000.0012: unknown main item tag 0x0 [ 137.289534][ T46] hid-generic FFFE:2000:0000.0012: hidraw0: HID v0.00 Device [syz0] on syz0 [ 137.371878][ T6908] veth0_to_bridge: entered promiscuous mode [ 137.380290][ T6905] veth0_to_bridge: left promiscuous mode [ 137.983410][ T6937] [U] DEV/TTYS3 [ 137.986975][ T6937] [U] [ 137.989712][ T6937] [U] [ 137.992434][ T6937] [U] [ 138.037700][ T6937] [U] [ 138.040481][ T6937] [U] [ 138.043220][ T6937] [U] [ 138.045959][ T6937] [U] [ 138.049524][ T6937] [U] [ 138.052274][ T6937] [U] [ 138.055018][ T6937] [U] [ 138.136829][ T6933] [U] [ 140.227223][ T46] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 140.314701][ T7015] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 140.379610][ T46] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 140.397952][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 140.445238][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 140.496512][ T46] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 140.528574][ T46] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 140.538113][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.566710][ T46] usb 5-1: config 0 descriptor?? [ 140.582926][ T7006] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 140.826949][ T7034] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 141.008294][ T46] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 141.017141][ T8] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 141.032191][ T46] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 141.053784][ T46] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 141.075735][ T46] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 141.097100][ T46] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 141.107574][ T46] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 141.137676][ T46] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 141.164980][ T46] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 141.217975][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 141.228850][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.269125][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.285190][ T46] usb 5-1: USB disconnect, device number 14 [ 141.310583][ T8] usb 2-1: New USB device found, idVendor=05ac, idProduct=9219, bcdDevice=61.da [ 141.325702][ T8] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 141.350937][ T8] usb 2-1: Manufacturer: syz [ 141.376098][ T8] usb 2-1: config 0 descriptor?? [ 141.405004][ T8] appledisplay 2-1:0.0: Submitting URB failed [ 141.452347][ T8] appledisplay 2-1:0.0: probe with driver appledisplay failed with error -5 [ 141.634471][ T46] usb 2-1: USB disconnect, device number 10 [ 141.765001][ T7062] tipc: Cannot configure node identity twice [ 141.950179][ T7067] sctp: [Deprecated]: syz.3.524 (pid 7067) Use of int in max_burst socket option. [ 141.950179][ T7067] Use struct sctp_assoc_value instead [ 142.033440][ T7074] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.110360][ T7077] vlan0: entered promiscuous mode [ 142.211437][ T7081] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 142.351317][ T7077] vlan0 (unregistering): left promiscuous mode [ 142.421299][ T7089] loop0: detected capacity change from 0 to 7 [ 142.435709][ T7089] Dev loop0: unable to read RDB block 7 [ 142.453101][ T7089] loop0: AHDI p1 p2 [ 142.470319][ T7089] loop0: partition table partially beyond EOD, truncated [ 142.491478][ T30] audit: type=1326 audit(1728063147.092:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7090 comm="syz.4.536" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 142.522362][ T7089] loop0: p1 start 6514546 is beyond EOD, truncated [ 142.532765][ T30] audit: type=1326 audit(1728063147.092:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7090 comm="syz.4.536" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 142.593815][ T30] audit: type=1326 audit(1728063147.122:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7090 comm="syz.4.536" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 142.623026][ T30] audit: type=1326 audit(1728063147.122:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7090 comm="syz.4.536" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 142.649453][ T30] audit: type=1326 audit(1728063147.122:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7090 comm="syz.4.536" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 142.680629][ T30] audit: type=1326 audit(1728063147.122:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7090 comm="syz.4.536" exe="/root/syz-executor" sig=0 arch=40000003 syscall=333 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 142.705072][ T30] audit: type=1326 audit(1728063147.122:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7090 comm="syz.4.536" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 142.732668][ T30] audit: type=1326 audit(1728063147.122:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7090 comm="syz.4.536" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 142.788951][ T46] ================================================================== [ 142.797067][ T46] BUG: KASAN: slab-use-after-free in __list_del_entry_valid_or_report+0x2f/0x140 [ 142.806246][ T46] Read of size 8 at addr ffff88805ff78a08 by task kworker/1:1/46 [ 142.813992][ T46] [ 142.816348][ T46] CPU: 1 UID: 0 PID: 46 Comm: kworker/1:1 Not tainted 6.12.0-rc1-syzkaller-00125-g0c559323bbaa #0 [ 142.826981][ T46] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 142.837074][ T46] Workqueue: events binder_deferred_func [ 142.842759][ T46] Call Trace: [ 142.846155][ T46] [ 142.849111][ T46] dump_stack_lvl+0x241/0x360 [ 142.853841][ T46] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.859070][ T46] ? __pfx__printk+0x10/0x10 [ 142.863705][ T46] ? _printk+0xd5/0x120 [ 142.867903][ T46] ? __virt_addr_valid+0x183/0x530 [ 142.873041][ T46] ? __virt_addr_valid+0x183/0x530 [ 142.878184][ T46] print_report+0x169/0x550 [ 142.882719][ T46] ? __virt_addr_valid+0x183/0x530 [ 142.887876][ T46] ? __virt_addr_valid+0x183/0x530 [ 142.893016][ T46] ? __virt_addr_valid+0x45f/0x530 [ 142.898152][ T46] ? __phys_addr+0xba/0x170 [ 142.902682][ T46] ? __list_del_entry_valid_or_report+0x2f/0x140 [ 142.909051][ T46] kasan_report+0x143/0x180 [ 142.913604][ T46] ? __list_del_entry_valid_or_report+0x2f/0x140 [ 142.919998][ T46] __list_del_entry_valid_or_report+0x2f/0x140 [ 142.926211][ T46] binder_release_work+0xc7/0x480 [ 142.931280][ T46] binder_deferred_func+0x1275/0x1460 [ 142.936696][ T46] ? process_scheduled_works+0x976/0x1850 [ 142.942469][ T46] process_scheduled_works+0xa63/0x1850 [ 142.948080][ T46] ? __pfx_process_scheduled_works+0x10/0x10 [ 142.954115][ T46] ? assign_work+0x364/0x3d0 [ 142.958757][ T46] worker_thread+0x870/0xd30 [ 142.963400][ T46] ? __kthread_parkme+0x169/0x1d0 [ 142.968471][ T46] ? __pfx_worker_thread+0x10/0x10 [ 142.973620][ T46] kthread+0x2f0/0x390 [ 142.977723][ T46] ? __pfx_worker_thread+0x10/0x10 [ 142.982893][ T46] ? __pfx_kthread+0x10/0x10 [ 142.987524][ T46] ret_from_fork+0x4b/0x80 [ 142.992074][ T46] ? __pfx_kthread+0x10/0x10 [ 142.996703][ T46] ret_from_fork_asm+0x1a/0x30 [ 143.001517][ T46] [ 143.004558][ T46] [ 143.006909][ T46] Allocated by task 7095: [ 143.011252][ T46] kasan_save_track+0x3f/0x80 [ 143.015958][ T46] __kasan_kmalloc+0x98/0xb0 [ 143.020580][ T46] __kmalloc_cache_noprof+0x19c/0x2c0 [ 143.025992][ T46] binder_ioctl_write_read+0xe7f/0xb560 [ 143.031577][ T46] binder_ioctl+0x436/0x1cc0 [ 143.036200][ T46] __se_compat_sys_ioctl+0x510/0xc90 [ 143.041516][ T46] __do_fast_syscall_32+0xb4/0x110 [ 143.046650][ T46] do_fast_syscall_32+0x34/0x80 [ 143.051525][ T46] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 143.057879][ T46] [ 143.060217][ T46] Freed by task 46: [ 143.064034][ T46] kasan_save_track+0x3f/0x80 [ 143.068718][ T46] kasan_save_free_info+0x40/0x50 [ 143.073754][ T46] __kasan_slab_free+0x59/0x70 [ 143.078518][ T46] kfree+0x1a0/0x440 [ 143.082418][ T46] binder_deferred_func+0x11df/0x1460 [ 143.087809][ T46] process_scheduled_works+0xa63/0x1850 [ 143.093363][ T46] worker_thread+0x870/0xd30 [ 143.097963][ T46] kthread+0x2f0/0x390 [ 143.102043][ T46] ret_from_fork+0x4b/0x80 [ 143.106485][ T46] ret_from_fork_asm+0x1a/0x30 [ 143.111280][ T46] [ 143.113600][ T46] The buggy address belongs to the object at ffff88805ff78a00 [ 143.113600][ T46] which belongs to the cache kmalloc-64 of size 64 [ 143.127484][ T46] The buggy address is located 8 bytes inside of [ 143.127484][ T46] freed 64-byte region [ffff88805ff78a00, ffff88805ff78a40) [ 143.141022][ T46] [ 143.143345][ T46] The buggy address belongs to the physical page: [ 143.149760][ T46] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5ff78 [ 143.158520][ T46] ksm flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 143.165982][ T46] page_type: f5(slab) [ 143.169967][ T46] raw: 00fff00000000000 ffff88801ac418c0 ffffea000078e500 dead000000000003 [ 143.178554][ T46] raw: 0000000000000000 0000000080200020 00000001f5000000 0000000000000000 [ 143.187137][ T46] page dumped because: kasan: bad access detected [ 143.193560][ T46] page_owner tracks the page as allocated [ 143.199305][ T46] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5249, tgid 5249 (syz-executor), ts 67016698509, free_ts 19913685946 [ 143.218583][ T46] post_alloc_hook+0x1f3/0x230 [ 143.223369][ T46] get_page_from_freelist+0x3045/0x3190 [ 143.228921][ T46] __alloc_pages_noprof+0x256/0x6c0 [ 143.234126][ T46] alloc_pages_mpol_noprof+0x3e8/0x680 [ 143.239591][ T46] alloc_slab_page+0x6a/0x120 [ 143.244270][ T46] allocate_slab+0x5a/0x2f0 [ 143.248778][ T46] ___slab_alloc+0xcd1/0x14b0 [ 143.253464][ T46] __slab_alloc+0x58/0xa0 [ 143.257805][ T46] __kmalloc_cache_noprof+0x1d5/0x2c0 [ 143.263187][ T46] ipv6_add_dev+0x510/0x1220 [ 143.267786][ T46] addrconf_notify+0x6a7/0x1020 [ 143.272646][ T46] notifier_call_chain+0x19f/0x3e0 [ 143.277765][ T46] register_netdevice+0x167f/0x1b00 [ 143.282964][ T46] veth_newlink+0x62b/0xce0 [ 143.287468][ T46] rtnl_newlink+0x1591/0x20a0 [ 143.292146][ T46] rtnetlink_rcv_msg+0x73f/0xcf0 [ 143.297094][ T46] page last free pid 1 tgid 1 stack trace: [ 143.302915][ T46] free_unref_page+0xcfb/0xf20 [ 143.307689][ T46] free_contig_range+0x152/0x550 [ 143.312653][ T46] destroy_args+0x8a/0x840 [ 143.317075][ T46] debug_vm_pgtable+0x4be/0x550 [ 143.321942][ T46] do_one_initcall+0x248/0x880 [ 143.326724][ T46] do_initcall_level+0x157/0x210 [ 143.331671][ T46] do_initcalls+0x3f/0x80 [ 143.336004][ T46] kernel_init_freeable+0x435/0x5d0 [ 143.341206][ T46] kernel_init+0x1d/0x2b0 [ 143.345541][ T46] ret_from_fork+0x4b/0x80 [ 143.349967][ T46] ret_from_fork_asm+0x1a/0x30 [ 143.354736][ T46] [ 143.357059][ T46] Memory state around the buggy address: [ 143.362687][ T46] ffff88805ff78900: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 143.370755][ T46] ffff88805ff78980: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 143.378904][ T46] >ffff88805ff78a00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 143.386962][ T46] ^ [ 143.391296][ T46] ffff88805ff78a80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 143.399459][ T46] ffff88805ff78b00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 143.407518][ T46] ================================================================== [ 143.416781][ T46] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 143.424020][ T46] CPU: 1 UID: 0 PID: 46 Comm: kworker/1:1 Not tainted 6.12.0-rc1-syzkaller-00125-g0c559323bbaa #0 [ 143.434630][ T46] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 143.444702][ T46] Workqueue: events binder_deferred_func [ 143.450361][ T46] Call Trace: [ 143.453644][ T46] [ 143.456577][ T46] dump_stack_lvl+0x241/0x360 [ 143.461264][ T46] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.466493][ T46] ? __pfx__printk+0x10/0x10 [ 143.471110][ T46] ? vscnprintf+0x5d/0x90 [ 143.475450][ T46] panic+0x349/0x880 [ 143.479359][ T46] ? check_panic_on_warn+0x21/0xb0 [ 143.484503][ T46] ? __pfx_panic+0x10/0x10 [ 143.488935][ T46] ? mark_lock+0x9a/0x360 [ 143.493641][ T46] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 143.499546][ T46] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 143.505540][ T46] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 143.511890][ T46] ? print_report+0x502/0x550 [ 143.516579][ T46] check_panic_on_warn+0x86/0xb0 [ 143.521611][ T46] ? __list_del_entry_valid_or_report+0x2f/0x140 [ 143.528048][ T46] end_report+0x77/0x160 [ 143.532306][ T46] kasan_report+0x154/0x180 [ 143.536829][ T46] ? __list_del_entry_valid_or_report+0x2f/0x140 [ 143.543173][ T46] __list_del_entry_valid_or_report+0x2f/0x140 [ 143.549349][ T46] binder_release_work+0xc7/0x480 [ 143.554385][ T46] binder_deferred_func+0x1275/0x1460 [ 143.559765][ T46] ? process_scheduled_works+0x976/0x1850 [ 143.565496][ T46] process_scheduled_works+0xa63/0x1850 [ 143.571065][ T46] ? __pfx_process_scheduled_works+0x10/0x10 [ 143.577064][ T46] ? assign_work+0x364/0x3d0 [ 143.581670][ T46] worker_thread+0x870/0xd30 [ 143.586296][ T46] ? __kthread_parkme+0x169/0x1d0 [ 143.591335][ T46] ? __pfx_worker_thread+0x10/0x10 [ 143.596460][ T46] kthread+0x2f0/0x390 [ 143.600536][ T46] ? __pfx_worker_thread+0x10/0x10 [ 143.605659][ T46] ? __pfx_kthread+0x10/0x10 [ 143.610254][ T46] ret_from_fork+0x4b/0x80 [ 143.614686][ T46] ? __pfx_kthread+0x10/0x10 [ 143.619298][ T46] ret_from_fork_asm+0x1a/0x30 [ 143.624104][ T46] [ 143.627401][ T46] Kernel Offset: disabled [ 143.631813][ T46] Rebooting in 86400 seconds..