last executing test programs: 50.602577738s ago: executing program 2 (id=8901): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x400}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 50.030592872s ago: executing program 2 (id=8904): r0 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000080)='dirsync\x00', 0x0, r1) 49.545732146s ago: executing program 2 (id=8905): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x1c, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @local}}}}}}, 0x0) socket$igmp(0x2, 0x3, 0x2) close(0x4) 49.254006389s ago: executing program 2 (id=8906): r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{0x0}], 0x1) syz_usbip_server_init(0x1) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x8, @remote}, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r6, 0x0, {0x0, 0xff, 0x2}, 0x6621350e9d60fd79}, 0x18) connect$can_j1939(r5, &(0x7f0000000080)={0x1d, r6, 0x0, {0x1, 0xf0}, 0x1}, 0x18) sendmsg$can_j1939(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 48.255795147s ago: executing program 2 (id=8913): prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x348cf000) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x2}}}, 0x80, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x18}, 0xfc00) syz_open_dev$sndctrl(0x0, 0xab, 0x800) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0xfffffffc) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa0800060006000000d847c9d104fce81cbe48d4f3931648f8b321a982b64b2d7fb7e9e1eb297735fe1288b6df3544194cfd54a16d4f30d0dbfca0bd5e68ad3e32ce587a2922aeee643370cb8d65ca93a6c882666aaa6b1bb6caa237c4d9eec022d3cab7e9d1d35c1bb3ddff0d76bdd3526fbd55ac01784c1dc00d4243a07ce6a52b0820fd9b4cff9cfdab22ecb6223804170380f7b0a9bd4f11"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) 46.658758324s ago: executing program 2 (id=8921): fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x100007, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc044560f, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x4, 0x2, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2002) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x2, 0x4e24, @multicast2}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x23, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) 31.478922354s ago: executing program 32 (id=8921): fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x100007, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc044560f, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x4, 0x2, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2002) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x2, 0x4e24, @multicast2}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x23, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) 19.01242822s ago: executing program 0 (id=9050): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r5 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r5, 0x1000006) fcntl$addseals(r5, 0x409, 0x7) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0x0, 0x1000000}) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000001c0)={r5, 0x0, 0x0, 0x1000000}) 16.262688332s ago: executing program 0 (id=9060): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000180)={0x30, r2, 0xb97534d5fe9704cf, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 16.036142928s ago: executing program 0 (id=9062): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfa11, 0xffffffff}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f0000000080)='dirsync\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x2, &(0x7f00000006c0)=ANY=[@ANYBLOB="05000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) syz_emit_ethernet(0x6e, &(0x7f00000024c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb862b00fc020000000000000000000000000000fe8000000000000000000000000000aa67000000000000002100000000309078210600008fbab2e630c3e6a031fd2ad9265431d968f1028b8c7208bd"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x86, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffffff}, 0x1c, 0x0}}, {{&(0x7f0000000540)={0xa, 0x4e21, 0x8075, @dev={0xfe, 0x80, '\x00', 0x6}, 0x2}, 0x1c, &(0x7f0000000e00)=[{&(0x7f0000000ac0)='^', 0x1}], 0x1}}], 0x2, 0x40000c0) shutdown(0xffffffffffffffff, 0x1) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000300)={0x0, 0x5}, &(0x7f0000000340)=0x8) r3 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r3, 0xc0844123, &(0x7f0000002fc0)) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000000140)=0x5, 0x4) r4 = openat$nullb(0xffffffffffffff9c, 0x0, 0x2, 0x0) dup(r4) 13.885043714s ago: executing program 0 (id=9075): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_setup(0x6c34, &(0x7f00000001c0)={0x0, 0xa4b8, 0x100, 0x1, 0x34a}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) 13.290270831s ago: executing program 0 (id=9078): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, @NFT_MSG_NEWFLOWTABLE={0x1c, 0x16, 0xa, 0x700, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x74}, 0x1, 0x0, 0x0, 0x48000}, 0x4008000) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 13.038807598s ago: executing program 0 (id=9079): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$unix(0x1, 0x2, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r4, &(0x7f00000008c0)=[{&(0x7f0000000580)='`', 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) recvmmsg(r3, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) 5.344570603s ago: executing program 1 (id=9126): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 5.148845646s ago: executing program 1 (id=9127): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x20014804}, 0x9590f6cc3aa711f2) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfb, 0x4000}, 0xc) 4.790813645s ago: executing program 1 (id=9130): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x0, {0x0, 0xff, 0x2}, 0x6621350e9d60fd79}, 0x18) connect$can_j1939(r2, &(0x7f0000000080)={0x1d, r3, 0x0, {0x1, 0xf0}, 0x1}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.837477297s ago: executing program 5 (id=9133): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_setup(0x39e1, &(0x7f0000000bc0)={0x0, 0x49fd, 0x12, 0x400, 0x320}) 3.836841382s ago: executing program 3 (id=9134): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = timerfd_create(0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001640)=""/4107, 0x100b}], 0x1) 3.738517927s ago: executing program 4 (id=9136): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 3.678951024s ago: executing program 3 (id=9137): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000001000000fe8000000000000000000000000000bbac1414bb000000000000000000000000000004001000000002000020000000"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) 3.578465963s ago: executing program 4 (id=9138): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @multicast2, @private=0xa010101}}}], 0x20}}], 0x1, 0x44) 3.534435122s ago: executing program 4 (id=9139): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r0, 0x1, 0x3d, &(0x7f0000001400)=""/147, &(0x7f00000014c0)=0x93) 3.378317035s ago: executing program 3 (id=9140): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x9, @vifc_lcl_addr=@local, @rand_addr=0x64010100}, 0x10) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f00000008c0)=0x8, 0x4) 3.294426039s ago: executing program 4 (id=9141): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}}], 0x1, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg(r2, &(0x7f0000004a40)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000500)=""/144, 0x90}], 0x1}, 0x2}], 0x1, 0x40000001, 0x0) 3.294025103s ago: executing program 1 (id=9142): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) pipe(&(0x7f0000000000)) r1 = socket$inet6(0xa, 0x3, 0xc) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002ac0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000c80)="e6", 0x1}], 0x1}}], 0x2, 0xc8040) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r5 = socket$inet6(0xa, 0x3, 0xff) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, 0x0, &(0x7f0000000240)=0xff6d) 3.079990952s ago: executing program 3 (id=9143): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, 0x0, 0x0) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r5 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r5, 0x1000006) fcntl$addseals(r5, 0x409, 0x7) ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0x0, 0x1000000}) ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f00000001c0)={r5, 0x0, 0x0, 0x1000000}) 1.869096546s ago: executing program 4 (id=9144): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80", @ANYRES32=r1, @ANYRES8=r1], 0x44}}, 0x0) 1.651619544s ago: executing program 3 (id=9145): r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r0, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000090, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000002100)=""/4123, 0x101b}, {&(0x7f0000000d80)=""/261, 0x105}, {&(0x7f0000000180)=""/74, 0x4a}, {&(0x7f0000000280)=""/152, 0x98}, {&(0x7f00000006c0)=""/136, 0x88}, {&(0x7f0000000080)=""/174, 0xae}, {&(0x7f0000000500)=""/126, 0x7e}], 0x7}, 0x8010000}], 0x1, 0x10120, 0x0) 1.394837549s ago: executing program 5 (id=9146): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x44, 0x6, 0x390, 0x0, 0x260, 0x130, 0x130, 0x1c8, 0x360, 0x360, 0x130, 0x360, 0x360, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x33}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@broadcast, @private=0xa010101, 0x0, 0xffffff00, 'veth0_to_hsr\x00', 'vlan0\x00', {0x101}, {}, 0xc, 0x0, 0x16}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x98}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0xff, 0x0}, 0x0, 0xffffffff, 'lo\x00', 'nr0\x00', {}, {}, 0x0, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x4}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) 1.320346197s ago: executing program 5 (id=9147): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300030c0000002cbd7040fcdbdf25030009001d9f"], 0x60}, 0x1, 0x7}, 0x0) 1.225469504s ago: executing program 1 (id=9148): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'xfrm0\x00', {0x2, 0x4e20, @rand_addr=0x64010102}}) 1.134805986s ago: executing program 5 (id=9149): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2710, @hyper}, 0x10) 1.08567774s ago: executing program 5 (id=9150): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, 0x0, 0x0) fsetxattr$security_capability(r1, 0x0, 0x0, 0xfffffe04, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc1105518, &(0x7f0000000a40)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x18000, 0xfffffffffffffffc, 0x0, 0x2, 0x8000000000000001, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400020000000, 0x9, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x1c, 0x5, 0x3, 0x2, 0x4000000000002, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x5, 0x7ff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0xac18, 0x0, 0x0, 0x4000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, 0x1]}) 125.450927ms ago: executing program 3 (id=9151): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000340)=@req3={0x80000001, 0x6, 0x7fffffff, 0x1, 0x0, 0x3f, 0x7f}, 0x1c) 58.559495ms ago: executing program 4 (id=9152): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x28, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x84) 54.973213ms ago: executing program 1 (id=9153): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)}], 0x1}}], 0x1, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg(r2, &(0x7f0000004a40)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000500)=""/144, 0x90}], 0x1}, 0x2}], 0x1, 0x40000001, 0x0) 0s ago: executing program 5 (id=9154): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, 0x0, 0x0) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r5 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r5, 0x1000006) fcntl$addseals(r5, 0x409, 0x7) ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0x0, 0x1000000}) ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f00000001c0)={r5, 0x0, 0x0, 0x1000000}) kernel console output (not intermixed with test programs): 899][T19620] Bluetooth: hci0: command 0x0c1a tx timeout [ 2508.319508][T19620] Bluetooth: hci1: command 0x0c1a tx timeout [ 2508.887332][T19620] Bluetooth: hci2: command 0x0405 tx timeout [ 2508.896152][ T4248] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 2509.154557][ T4248] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2509.160902][ T4248] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2509.167187][ T4248] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2509.504058][ T4248] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2510.140052][ T4291] syzkaller0: entered promiscuous mode [ 2510.145668][ T4291] syzkaller0: entered allmulticast mode [ 2510.474852][ T4299] fuse: Bad value for 'fd' [ 2510.484087][ T4292] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2510.503696][ T4292] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2510.519206][ T4292] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2510.530209][ T4292] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2510.541486][ T4292] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2510.800850][ T4298] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8041'. [ 2512.639574][T19620] Bluetooth: hci1: command 0x0c1a tx timeout [ 2512.643873][ T5836] Bluetooth: hci3: command 0x040f tx timeout [ 2512.645724][T21259] Bluetooth: hci4: command 0x0419 tx timeout [ 2512.659665][T26928] Bluetooth: hci0: command 0x0c1a tx timeout [ 2512.659687][T19620] Bluetooth: hci2: command 0x0405 tx timeout [ 2515.457666][ T4298] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8041'. [ 2515.563234][ T4333] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2515.583889][ T4333] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2515.663922][ T4333] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2515.682095][ T4333] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2515.705580][ T4333] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2517.599822][T19620] Bluetooth: hci0: command 0x0c1a tx timeout [ 2517.605907][T21259] Bluetooth: hci2: command 0x0405 tx timeout [ 2517.689128][T19620] Bluetooth: hci4: command 0x0419 tx timeout [ 2517.759571][T19620] Bluetooth: hci1: command 0x0c1a tx timeout [ 2517.765585][T21259] Bluetooth: hci3: command 0x040f tx timeout [ 2520.409024][ T4399] syzkaller0: entered promiscuous mode [ 2520.414976][ T4399] syzkaller0: entered allmulticast mode [ 2520.581557][ T4397] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2520.598846][ T4397] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2520.606982][ T4397] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2520.619110][ T4397] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2520.625705][ T4397] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2522.645035][T21259] Bluetooth: hci1: command 0x0c1a tx timeout [ 2522.645259][T19620] Bluetooth: hci3: command 0x040f tx timeout [ 2522.657938][T19620] Bluetooth: hci4: command 0x0419 tx timeout [ 2522.657958][ T1540] Bluetooth: hci0: command 0x0c1a tx timeout [ 2522.666822][ T5836] Bluetooth: hci2: command 0x0405 tx timeout [ 2527.222141][ T4464] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2527.234164][ T4464] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2527.247174][ T4464] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2527.264630][ T4464] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2527.279589][ T4464] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2529.045489][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2529.052865][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2529.370267][T21259] Bluetooth: hci2: command 0x0405 tx timeout [ 2529.376309][T19620] Bluetooth: hci1: command 0x0c1a tx timeout [ 2529.382402][ T1540] Bluetooth: hci3: command 0x040f tx timeout [ 2529.388380][ T1540] Bluetooth: hci4: command 0x0419 tx timeout [ 2529.396520][ T1540] Bluetooth: hci0: command 0x0c1a tx timeout [ 2530.194126][ T4492] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2530.200702][ T4492] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2530.206929][ T4492] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2530.212989][ T4492] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2530.241142][ T4492] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2530.557260][ T4503] syzkaller0: entered promiscuous mode [ 2530.563112][ T4503] syzkaller0: entered allmulticast mode [ 2532.228219][ T5836] Bluetooth: hci2: command 0x0405 tx timeout [ 2532.239643][ T5836] Bluetooth: hci3: command 0x040f tx timeout [ 2532.239684][T19620] Bluetooth: hci4: command 0x0419 tx timeout [ 2532.245751][ T1540] Bluetooth: hci0: command 0x0c1a tx timeout [ 2532.319537][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout [ 2536.267669][ T4532] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2536.309960][ T4532] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2536.317876][ T4532] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2536.394417][ T4532] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2536.402245][ T4532] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2536.650179][ T4551] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2536.774930][ T4551] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2536.785663][ T4551] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2536.800029][ T4551] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2536.807920][ T4551] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2538.809500][ T1540] Bluetooth: hci2: command 0x0405 tx timeout [ 2538.815565][ T1540] Bluetooth: hci3: command 0x040f tx timeout [ 2538.821658][ T5836] Bluetooth: hci4: command 0x0419 tx timeout [ 2538.822363][T19620] Bluetooth: hci0: command 0x0c1a tx timeout [ 2538.879558][T19620] Bluetooth: hci1: command 0x0c1a tx timeout [ 2540.687423][ T4604] syzkaller0: entered promiscuous mode [ 2540.693062][ T4604] syzkaller0: entered allmulticast mode [ 2541.239673][ T4610] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2541.389906][ T4610] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2541.396126][ T4610] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2541.409711][ T4610] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2541.419744][ T4610] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2543.361952][T21259] Bluetooth: hci2: command 0x0405 tx timeout [ 2543.439833][T21259] Bluetooth: hci1: command 0x0c1a tx timeout [ 2543.439859][T19620] Bluetooth: hci3: command 0x040f tx timeout [ 2543.445879][T21259] Bluetooth: hci4: command 0x0419 tx timeout [ 2543.452230][T19620] Bluetooth: hci0: command 0x0c1a tx timeout [ 2548.076258][ T4638] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2548.083592][ T4638] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2548.099845][ T4638] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2548.246258][ T4638] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2548.301348][ T4638] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2549.057755][ T4689] syzkaller0: entered promiscuous mode [ 2549.071372][ T4689] syzkaller0: entered allmulticast mode [ 2550.199771][T21259] Bluetooth: hci4: command 0x0419 tx timeout [ 2550.205820][T21259] Bluetooth: hci0: command 0x0c1a tx timeout [ 2550.212541][T21259] Bluetooth: hci2: command 0x0405 tx timeout [ 2550.368999][ T1540] Bluetooth: hci3: command 0x040f tx timeout [ 2550.375147][T21259] Bluetooth: hci1: command 0x0c1a tx timeout [ 2551.544895][ T4706] binder: BINDER_SET_CONTEXT_MGR already set [ 2551.554124][ T4706] binder: 4704:4706 ioctl 4018620d 80000040 returned -16 [ 2553.947952][ T4735] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 2554.090368][ T4735] bridge0: port 2(bridge_slave_1) entered disabled state [ 2554.099055][ T4735] bridge0: port 1(bridge_slave_0) entered disabled state [ 2554.137971][ T4742] raw_sendmsg: syz.2.8148 forgot to set AF_INET. Fix it! [ 2554.548841][ T4759] binder: 4750:4759 ioctl 8008f512 0 returned -22 [ 2554.582786][ T4760] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2554.809531][T26322] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 2554.812009][ T4769] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8157'. [ 2554.878891][ T4753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2554.891955][ T4756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2554.999948][T26322] usb 2-1: Using ep0 maxpacket: 8 [ 2555.007293][T26322] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 2555.015756][T26322] usb 2-1: config 0 has no interface number 0 [ 2555.035985][T26322] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2555.066628][T26322] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2555.115640][T26322] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2555.147322][T26322] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2555.168795][T26322] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2555.187966][T26322] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2555.213611][T26322] usb 2-1: config 0 descriptor?? [ 2555.219545][T24127] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 2555.258926][T26322] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 2555.379490][T24127] usb 3-1: Using ep0 maxpacket: 8 [ 2555.396442][T24127] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 2555.406594][T24127] usb 3-1: config 0 has no interface number 0 [ 2555.412852][T24127] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2555.428411][T24127] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2555.466475][T24127] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2555.489488][T24127] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2555.551332][T24127] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2555.999118][T24127] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2556.012351][T24127] usb 3-1: config 0 descriptor?? [ 2556.057881][T24127] ldusb 3-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 2556.957533][ T4785] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8162'. [ 2556.970858][ T4785] netlink: 92 bytes leftover after parsing attributes in process `syz.0.8162'. [ 2557.471766][ T5892] usb 2-1: USB disconnect, device number 4 [ 2557.513806][ T4771] ldusb 2-1:0.55: Couldn't submit interrupt_in_urb -19 [ 2557.591294][T24127] usb 3-1: USB disconnect, device number 120 [ 2557.592167][ T5892] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 2557.752654][T24127] ldusb 3-1:0.55: LD USB Device #1 now disconnected [ 2557.864062][ T1540] Bluetooth: hci4: unexpected event for opcode 0x0c38 [ 2558.821468][ T1540] Bluetooth: hci1: Malformed Event: 0x02 [ 2560.636875][ T4841] binder: BINDER_SET_CONTEXT_MGR already set [ 2560.653247][ T4841] binder: 4840:4841 ioctl 4018620d 80000040 returned -16 [ 2560.666831][ T4841] binder: 4840:4841 ioctl c0306201 80000500 returned -11 [ 2560.675953][ T4841] binder: 4840:4841 ioctl c0306201 0 returned -14 [ 2560.787199][ T4844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8177'. [ 2560.823193][ T4844] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2561.478764][ T4856] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8181'. [ 2561.529129][ T4856] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8181'. [ 2561.905142][ T1540] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2562.062896][ T4871] kvm: requested 73752 ns i8254 timer period limited to 200000 ns [ 2562.129628][ T4871] kvm: requested 68723 ns i8254 timer period limited to 200000 ns [ 2562.141399][ T4871] kvm: requested 172647 ns i8254 timer period limited to 200000 ns [ 2562.322821][ T1540] Bluetooth: hci2: unexpected event 0x09 length: 11 > 3 [ 2562.331129][ T4871] kvm: requested 136609 ns i8254 timer period limited to 200000 ns [ 2562.391582][ T4871] kvm: requested 110628 ns i8254 timer period limited to 200000 ns [ 2562.518451][ T4871] kvm: requested 184381 ns i8254 timer period limited to 200000 ns [ 2562.529694][ T4871] kvm: requested 65371 ns i8254 timer period limited to 200000 ns [ 2562.544083][ T4871] kvm: requested 58666 ns i8254 timer period limited to 200000 ns [ 2562.649040][ T4871] kvm: requested 81295 ns i8254 timer period limited to 200000 ns [ 2562.657720][ T4871] kvm: requested 194438 ns i8254 timer period limited to 200000 ns [ 2562.913223][ T4895] ======================================================= [ 2562.913223][ T4895] WARNING: The mand mount option has been deprecated and [ 2562.913223][ T4895] and is ignored by this kernel. Remove the mand [ 2562.913223][ T4895] option from the mount to silence this warning. [ 2562.913223][ T4895] ======================================================= [ 2563.112167][ T4883] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2563.179749][ T4883] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2563.191600][ T4883] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2563.201106][ T4883] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2563.210091][ T4883] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2563.521371][ T3096] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 2563.645853][ T4902] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8197'. [ 2563.709550][ T3096] usb 4-1: Using ep0 maxpacket: 8 [ 2563.731892][ T3096] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 2563.769627][ T3096] usb 4-1: config 0 has no interface number 0 [ 2563.775810][ T3096] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2563.816271][ T3096] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2563.838374][ T3096] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2563.880022][ T3096] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2564.271897][ T3096] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2564.298400][ T3096] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2564.330153][ T3096] usb 4-1: config 0 descriptor?? [ 2564.393795][ T3096] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 2564.648175][ T1540] Bluetooth: hci2: command 0x0405 tx timeout [ 2565.199625][ T1540] Bluetooth: hci4: command 0x0419 tx timeout [ 2565.205859][ T1540] Bluetooth: hci0: command 0x0c1a tx timeout [ 2565.280068][ T1540] Bluetooth: hci3: command 0x040f tx timeout [ 2565.288880][T21259] Bluetooth: hci1: command 0x0c1a tx timeout [ 2565.777265][ T3265] usb 4-1: USB disconnect, device number 12 [ 2565.789312][ T3265] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 2567.450336][ T4953] tipc: Can't bind to reserved service type 2 [ 2567.457427][ T4953] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8211'. [ 2567.467920][ T4953] netlink: 277 bytes leftover after parsing attributes in process `syz.4.8211'. [ 2567.483068][ T4953] netlink: 277 bytes leftover after parsing attributes in process `syz.4.8211'. [ 2569.536572][ T4986] loop2: detected capacity change from 0 to 7 [ 2569.569712][ T4763] Dev loop2: unable to read RDB block 7 [ 2569.575359][ T4763] loop2: unable to read partition table [ 2569.612834][ T4763] loop2: partition table beyond EOD, truncated [ 2569.636585][ T4986] Dev loop2: unable to read RDB block 7 [ 2569.643357][ T4986] loop2: unable to read partition table [ 2569.649222][ T4986] loop2: partition table beyond EOD, truncated [ 2569.773807][ T4982] fuse: Bad value for 'fd' [ 2569.829606][ T4986] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2569.871501][ T4992] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 2570.230682][ T4996] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 2570.237483][ T4996] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2570.276209][ T30] audit: type=1326 audit(1761568853.495:2796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4997 comm="syz.3.8226" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 2570.375381][ T4996] vhci_hcd vhci_hcd.0: Device attached [ 2570.404677][ T30] audit: type=1326 audit(1761568853.495:2797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4997 comm="syz.3.8226" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 2570.503187][ T30] audit: type=1326 audit(1761568853.535:2798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4997 comm="syz.3.8226" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 2570.549990][ T4998] vhci_hcd: connection closed [ 2570.552872][ T7755] vhci_hcd: stop threads [ 2570.554611][ T30] audit: type=1326 audit(1761568853.535:2799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4997 comm="syz.3.8226" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 2570.558166][ T7755] vhci_hcd: release socket [ 2570.568023][ T30] audit: type=1326 audit(1761568853.555:2800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4997 comm="syz.3.8226" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 2570.591061][ T7755] vhci_hcd: disconnect device [ 2570.618074][ T3265] usb 38-1: SetAddress Request (2) to port 0 [ 2570.633774][ T3265] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 2570.656969][ T30] audit: type=1326 audit(1761568853.555:2801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4997 comm="syz.3.8226" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 2570.680565][ T3265] usb 38-1: enqueue for inactive port 0 [ 2570.686616][ T30] audit: type=1326 audit(1761568853.555:2802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4997 comm="syz.3.8226" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 2570.737963][ T30] audit: type=1326 audit(1761568853.565:2803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4997 comm="syz.3.8226" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 2570.798557][ T30] audit: type=1326 audit(1761568853.565:2804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4997 comm="syz.3.8226" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 2570.833330][ T30] audit: type=1326 audit(1761568853.565:2805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4997 comm="syz.3.8226" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 2571.070310][ T3265] usb usb38-port1: attempt power cycle [ 2571.800689][ T3265] usb usb38-port1: unable to enumerate USB device [ 2572.452663][ T5044] random: crng reseeded on system resumption [ 2573.739535][T24127] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 2573.879510][ T3265] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 2573.910443][T24127] usb 4-1: Using ep0 maxpacket: 8 [ 2573.919691][T24127] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 2573.934327][T24127] usb 4-1: config 0 has no interface number 0 [ 2573.955443][T24127] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2573.977187][T24127] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2574.004330][T24127] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2574.025993][T24127] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2574.069830][T24127] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2574.078903][T24127] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2574.087100][ T3265] usb 3-1: Using ep0 maxpacket: 8 [ 2574.109778][ T3265] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2574.119868][ T3265] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2574.137041][T24127] usb 4-1: config 0 descriptor?? [ 2574.146112][ T3265] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2574.161976][T24127] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 2574.174594][ T3265] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2574.203426][ T3265] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2574.221347][ T3265] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2574.447149][T24127] usb 4-1: USB disconnect, device number 13 [ 2574.448563][ T5065] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8244'. [ 2574.462409][ T3096] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 2574.481299][ T5059] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 2574.487856][ T5059] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2574.499667][T24127] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 2574.557220][ T5059] vhci_hcd vhci_hcd.0: Device attached [ 2574.608765][ T5067] vhci_hcd: connection closed [ 2574.610531][ T3265] usb 3-1: usb_control_msg returned -71 [ 2574.631049][T16060] vhci_hcd: stop threads [ 2574.635330][T16060] vhci_hcd: release socket [ 2574.642795][ T3096] usb 5-1: config 0 has no interfaces? [ 2574.649813][ T3265] usbtmc 3-1:16.0: can't read capabilities [ 2574.653254][ T3096] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2574.658268][T16060] vhci_hcd: disconnect device [ 2574.700018][ T3265] usb 3-1: USB disconnect, device number 121 [ 2574.703862][ T3096] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2574.749291][ T3096] usb 5-1: config 0 descriptor?? [ 2575.193810][ T3096] usb 5-1: USB disconnect, device number 4 [ 2576.329678][ T3265] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 2576.359899][ T5089] netlink: 'syz.2.8252': attribute type 1 has an invalid length. [ 2576.499534][ T3265] usb 2-1: Using ep0 maxpacket: 8 [ 2576.513653][ T3265] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2576.574622][ T3265] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2576.589579][ T3265] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 2576.609386][ T3265] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 2576.682307][ T3265] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2576.744780][ T3265] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2576.750021][T26322] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 2576.864809][ T3265] hub 2-1:1.0: bad descriptor, ignoring hub [ 2576.872519][ T3265] hub 2-1:1.0: probe with driver hub failed with error -5 [ 2576.880714][ T3265] cdc_wdm 2-1:1.0: skipping garbage [ 2576.886130][ T3265] cdc_wdm 2-1:1.0: skipping garbage [ 2576.897857][ T3265] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 2576.905047][ T3265] cdc_wdm 2-1:1.0: Unknown control protocol [ 2577.112158][ T3265] usb 2-1: USB disconnect, device number 5 [ 2577.146111][ T5101] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 2577.152661][ T5101] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2577.165658][T26322] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2577.183107][T26322] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2577.228398][ T5101] vhci_hcd vhci_hcd.0: Device attached [ 2577.240571][T26322] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2577.255880][T26322] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2577.267674][T26322] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2577.308577][T26322] usb 4-1: config 0 descriptor?? [ 2577.460126][ T5102] vhci_hcd: connection closed [ 2577.469011][ T7753] vhci_hcd: stop threads [ 2577.481275][ T7753] vhci_hcd: release socket [ 2577.485838][ T7753] vhci_hcd: disconnect device [ 2577.509583][ T5907] usb 38-1: enqueue for inactive port 0 [ 2577.742146][T26322] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 2577.784803][T26322] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 2577.809625][ T5112] binder: 5111:5112 ioctl c0306201 80000240 returned -14 [ 2577.865983][T26322] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 2577.910786][T26322] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 2577.955589][T26322] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 2577.979787][T26322] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 2577.997456][T26322] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 2578.010000][T26322] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 2578.012269][ T5907] usb usb38-port1: attempt power cycle [ 2578.028302][T26322] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 2578.046667][T26322] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 2578.109102][T26322] plantronics 0003:047F:FFFF.0028: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 2578.158240][T26322] usb 4-1: USB disconnect, device number 14 [ 2578.415034][ T5120] fido_id[5120]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 2578.706904][ T5907] usb usb38-port1: unable to enumerate USB device [ 2579.185653][ T5140] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8266'. [ 2580.400534][ T5172] netlink: 'syz.3.8273': attribute type 12 has an invalid length. [ 2580.482602][ T5174] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 2580.489161][ T5174] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2580.497333][ T5174] vhci_hcd vhci_hcd.0: Device attached [ 2580.706090][ T3265] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 2580.864645][ T5907] usb 38-1: SetAddress Request (10) to port 0 [ 2580.884426][ T5907] usb 38-1: new SuperSpeed USB device number 10 using vhci_hcd [ 2580.940120][ T3265] usb 4-1: Using ep0 maxpacket: 8 [ 2581.038919][ T3265] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 2581.088368][ T3265] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2581.148906][ T3265] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2581.295678][ T3265] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2581.458110][ T3265] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2581.482565][ T3265] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2581.494506][ T3265] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2581.827996][ T3265] usb 4-1: usb_control_msg returned -32 [ 2581.834439][ T3265] usbtmc 4-1:16.0: can't read capabilities [ 2582.207290][ T5210] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8284'. [ 2583.014848][ T5228] input: syz1 as /devices/virtual/input/input39 [ 2583.549932][T19878] usb 4-1: USB disconnect, device number 15 [ 2583.601250][T21259] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 2583.925767][ T5241] netlink: 'syz.0.8292': attribute type 10 has an invalid length. [ 2583.986173][ T5241] team0: Port device dummy0 added [ 2584.028271][ T5241] netlink: 'syz.0.8292': attribute type 10 has an invalid length. [ 2584.102500][ T5241] team0: Port device dummy0 removed [ 2584.142163][ T5241] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 2585.680507][ T5293] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8311'. [ 2585.797223][ T5302] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8314'. [ 2585.949574][ T3265] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 2586.115041][ T5310] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 2586.121592][ T5310] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2586.137490][ T3265] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2586.146805][ T5310] vhci_hcd vhci_hcd.0: Device attached [ 2586.148588][ T3265] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2586.176441][ T3265] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2586.194515][ T3265] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2586.204749][ T3265] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2586.216937][ T5311] vhci_hcd: connection closed [ 2586.217933][T29187] vhci_hcd: stop threads [ 2586.227058][T29187] vhci_hcd: release socket [ 2586.233746][T29187] vhci_hcd: disconnect device [ 2586.239562][ T3265] usb 4-1: config 0 descriptor?? [ 2586.593819][ T5317] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2586.658160][ T3265] hid_parser_main: 5 callbacks suppressed [ 2586.658182][ T3265] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 2586.766884][ T3265] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 2586.774656][ T3265] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 2586.784645][ T3265] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 2586.792558][ T3265] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 2586.801008][ T3265] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 2586.808391][ T3265] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 2586.819841][ T3265] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 2586.827245][ T3265] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 2586.834962][ T3265] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 2586.891648][ T3265] plantronics 0003:047F:FFFF.0029: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 2586.983217][ T3265] usb 4-1: USB disconnect, device number 16 [ 2587.175831][ T5324] fido_id[5324]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 2588.945006][ T5347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8325'. [ 2588.954614][ T5347] netlink: 'syz.2.8325': attribute type 5 has an invalid length. [ 2588.970337][ T5347] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8325'. [ 2588.993890][ T5347] geneve3: entered promiscuous mode [ 2589.005249][ T5347] geneve3: entered allmulticast mode [ 2589.014209][ T7763] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 256 - 0 [ 2589.035094][ T7763] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 256 - 0 [ 2589.107270][ T7763] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 256 - 0 [ 2589.197444][ T7763] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 256 - 0 [ 2590.089134][ T1540] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2590.101855][ T1540] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2590.110401][ T1540] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2590.118296][ T1540] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2590.127052][ T1540] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2590.482671][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.488970][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2590.607930][ T5366] chnl_net:caif_netlink_parms(): no params data found [ 2590.938951][ T5374] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2591.152696][ T5366] bridge0: port 1(bridge_slave_0) entered blocking state [ 2591.230196][ T5366] bridge0: port 1(bridge_slave_0) entered disabled state [ 2591.237567][ T5366] bridge_slave_0: entered allmulticast mode [ 2591.246507][ T5366] bridge_slave_0: entered promiscuous mode [ 2591.316343][ T5366] bridge0: port 2(bridge_slave_1) entered blocking state [ 2591.327618][ T5366] bridge0: port 2(bridge_slave_1) entered disabled state [ 2591.335963][ T5366] bridge_slave_1: entered allmulticast mode [ 2591.345392][ T5366] bridge_slave_1: entered promiscuous mode [ 2591.687581][ T5366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2591.744362][ T5366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2592.188582][T21259] Bluetooth: hci5: command tx timeout [ 2592.502098][ T5366] team0: Port device team_slave_0 added [ 2592.620501][ T5366] team0: Port device team_slave_1 added [ 2592.884469][ T5366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2592.944974][ T5366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2593.034591][ T5366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2593.049114][ T5366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2593.102374][ T5366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2593.160406][ T5366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2593.441904][ T5366] hsr_slave_0: entered promiscuous mode [ 2593.463964][ T5366] hsr_slave_1: entered promiscuous mode [ 2593.493542][ T5366] debugfs: 'hsr0' already exists in 'hsr' [ 2593.518350][ T5366] Cannot create hsr debugfs directory [ 2594.268306][T21259] Bluetooth: hci5: command tx timeout [ 2594.564566][ T5366] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2594.564689][ T5366] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 2594.677362][ T5366] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2594.714466][ T5366] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 2594.909172][ T5366] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2594.923748][ T5366] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 2595.073389][ T5366] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2595.089701][ T5366] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 2595.458562][ T5366] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2595.485299][ T5366] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2595.509054][ T5366] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2595.532789][ T5366] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2595.859870][ T5366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2595.939210][ T5366] 8021q: adding VLAN 0 to HW filter on device team0 [ 2596.082489][T16060] bridge0: port 1(bridge_slave_0) entered blocking state [ 2596.089666][T16060] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2596.128850][T16060] bridge0: port 2(bridge_slave_1) entered blocking state [ 2596.135995][T16060] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2596.237127][ T5366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2596.371790][T21259] Bluetooth: hci5: command tx timeout [ 2596.881874][ T5366] veth0_vlan: entered promiscuous mode [ 2596.895204][ T5366] veth1_vlan: entered promiscuous mode [ 2596.923092][ T5366] veth0_macvtap: entered promiscuous mode [ 2596.935051][ T5366] veth1_macvtap: entered promiscuous mode [ 2597.076437][ T5366] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2597.165760][ T5366] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2597.230669][ T7755] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2597.472662][ T7755] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2597.505676][ T7755] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2597.581053][ T7755] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2598.243817][T16060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2598.271748][T16060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2598.339556][ T7763] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2598.347420][ T7763] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2598.405768][T21259] Bluetooth: hci5: command tx timeout [ 2598.622120][ T5468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8354'. [ 2599.322225][ T5475] syzkaller0: entered promiscuous mode [ 2599.327793][ T5475] syzkaller0: entered allmulticast mode [ 2599.760602][ T3096] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 2600.254891][ T5478] geneve2: entered promiscuous mode [ 2600.260821][ T5478] geneve2: entered allmulticast mode [ 2600.640005][ T1540] Bluetooth: hci5: command 0x0405 tx timeout [ 2600.732070][ T3096] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2600.761302][ T3096] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2600.805029][ T3096] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 2600.835821][ T3096] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2600.853086][ T3096] usb 4-1: config 0 descriptor?? [ 2601.072444][ T3096] usbhid 4-1:0.0: can't add hid device: -22 [ 2601.081663][ T3096] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 2602.560907][T24127] usb 4-1: USB disconnect, device number 17 [ 2602.894188][ T5500] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 2602.900728][ T5500] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2602.914195][ T5500] vhci_hcd vhci_hcd.0: Device attached [ 2602.989121][ T5501] vhci_hcd: connection closed [ 2602.989378][ T7755] vhci_hcd: stop threads [ 2603.000963][ T7755] vhci_hcd: release socket [ 2603.005392][ T7755] vhci_hcd: disconnect device [ 2608.374785][ T5553] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2608.944184][ T5560] netlink: 300 bytes leftover after parsing attributes in process `syz.1.8376'. [ 2609.531316][T21259] Bluetooth: hci5: unexpected event for opcode 0x2041 [ 2609.700344][ T5582] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8382'. [ 2611.056807][ T5590] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2611.261235][ T5601] geneve2: entered promiscuous mode [ 2611.267794][ T5601] geneve2: entered allmulticast mode [ 2611.377074][ T5590] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2611.397640][ T5590] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2611.404372][ T5590] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2611.427789][ T5590] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2611.435623][ T5590] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 2611.510106][ T5590] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 2612.807659][ T5612] geneve2: entered promiscuous mode [ 2612.814445][ T5612] geneve2: entered allmulticast mode [ 2613.200365][T21259] Bluetooth: hci0: command 0x0c1a tx timeout [ 2613.440818][T21259] Bluetooth: hci5: command 0x0405 tx timeout [ 2613.447119][T21259] Bluetooth: hci1: command 0x0c1a tx timeout [ 2613.447854][T19620] Bluetooth: hci3: command 0x040f tx timeout [ 2613.472231][ T5836] Bluetooth: hci4: command 0x0419 tx timeout [ 2614.505568][ T3265] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 2614.610241][T19878] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 2614.721488][ T3265] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2614.733285][ T3265] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2614.743650][ T3265] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2614.757278][ T3265] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2614.766858][ T3265] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2614.792259][ T3265] usb 5-1: config 0 descriptor?? [ 2614.810212][T19878] usb 3-1: Using ep0 maxpacket: 32 [ 2614.844825][T19878] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 2614.853435][T19878] usb 3-1: config 0 has no interface number 0 [ 2614.862284][T19878] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2614.883823][T19878] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 2614.895052][T19878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2614.903781][T19878] usb 3-1: Product: syz [ 2614.908383][T19878] usb 3-1: Manufacturer: syz [ 2614.913714][T19878] usb 3-1: SerialNumber: syz [ 2614.979364][T19878] usb 3-1: config 0 descriptor?? [ 2615.024000][T19878] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 2615.112732][T19878] em28xx 3-1:0.132: Video interface 132 found: [ 2615.281098][ T3265] plantronics 0003:047F:FFFF.002A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 2615.532158][T21259] Bluetooth: hci5: command 0x0405 tx timeout [ 2616.225960][T19878] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 2616.324227][T19878] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 2616.481450][T19878] em28xx 3-1:0.132: board has no eeprom [ 2616.572388][ T5827] usb 5-1: reset high-speed USB device number 5 using dummy_hcd [ 2616.620248][T19878] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 2616.634437][T19878] em28xx 3-1:0.132: analog set to bulk mode. [ 2616.642584][ T5637] em28xx 3-1:0.132: Registering V4L2 extension [ 2616.760995][ T5827] usb 5-1: device descriptor read/64, error -32 [ 2616.770656][ T5637] em28xx 3-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 2616.790036][ T5637] em28xx 3-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 2616.805863][ T5637] em28xx 3-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 2616.820478][ T5637] em28xx 3-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 2616.918102][ T5653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8392'. [ 2616.951575][ T5637] em28xx 3-1:0.132: failed to trigger read from i2c address 0x84 (error=-5) [ 2616.961685][ T5637] em28xx 3-1:0.132: failed to trigger read from i2c address 0x86 (error=-5) [ 2616.976292][ T5637] em28xx 3-1:0.132: failed to trigger read from i2c address 0x94 (error=-5) [ 2617.029549][ T5637] em28xx 3-1:0.132: failed to trigger read from i2c address 0x96 (error=-5) [ 2617.056140][ T5649] usb 3-1: USB disconnect, device number 122 [ 2617.064219][ T5649] em28xx 3-1:0.132: Disconnecting em28xx [ 2617.321990][ T5637] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 2617.329346][ T5637] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 2617.661265][ T5637] em28xx 3-1:0.132: No AC97 audio processor [ 2617.677181][T21259] Bluetooth: hci5: command 0x0405 tx timeout [ 2617.861240][ T5637] usb 3-1: Decoder not found [ 2617.865877][ T5637] em28xx 3-1:0.132: failed to create media graph [ 2617.873304][ T3265] usb 5-1: USB disconnect, device number 5 [ 2618.030073][ T5668] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2618.234374][ T5668] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2618.307775][ T5637] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 2618.367807][ T5637] em28xx 3-1:0.132: Remote control support is not available for this card. [ 2618.393049][ T5649] em28xx 3-1:0.132: Closing input extension [ 2618.412893][ T5649] em28xx 3-1:0.132: Freeing device [ 2618.425648][ T5668] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2618.462835][ T5668] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2618.470089][ T5668] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2619.370283][ T3265] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 2619.402789][ T5689] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 2619.409328][ T5689] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2619.429617][ T5689] vhci_hcd vhci_hcd.0: Device attached [ 2619.471281][ T5690] vhci_hcd: connection closed [ 2619.473063][T28809] vhci_hcd: stop threads [ 2619.494751][T28809] vhci_hcd: release socket [ 2619.503684][T28809] vhci_hcd: disconnect device [ 2619.556596][ T3265] usb 4-1: Using ep0 maxpacket: 16 [ 2619.568102][ T3265] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2619.581962][ T3265] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2619.594293][ T3265] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2619.624450][ T3265] usb 4-1: Product: syz [ 2619.681862][ T3265] usb 4-1: Manufacturer: syz [ 2619.688221][ T3265] usb 4-1: SerialNumber: syz [ 2619.718331][ T3265] usb 4-1: config 0 descriptor?? [ 2619.812653][ T3265] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2619.822910][ T3265] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 2620.151074][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout [ 2620.325106][ T5836] Bluetooth: hci4: command 0x0419 tx timeout [ 2620.479580][ T5836] Bluetooth: hci3: command 0x040f tx timeout [ 2620.490247][ T5836] Bluetooth: hci5: command 0x0405 tx timeout [ 2620.497340][T21259] Bluetooth: hci1: command 0x0c1a tx timeout [ 2620.516987][ T3265] em28xx 4-1:0.0: chip ID is em2765 [ 2621.138695][ T3265] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 2621.147901][ T3265] em28xx 4-1:0.0: board has no eeprom [ 2621.165283][ T5727] block device autoloading is deprecated and will be removed. [ 2621.810790][ T3265] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2621.818808][ T3265] em28xx 4-1:0.0: dvb set to bulk mode. [ 2621.825660][ T5649] em28xx 4-1:0.0: Binding DVB extension [ 2621.916000][ T3265] usb 4-1: USB disconnect, device number 18 [ 2621.993567][ T3265] em28xx 4-1:0.0: Disconnecting em28xx [ 2622.363418][ T5649] em28xx 4-1:0.0: Registering input extension [ 2622.567802][ T3265] em28xx 4-1:0.0: Closing input extension [ 2622.587475][ T3265] em28xx 4-1:0.0: Freeing device [ 2624.427594][ T5772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8417'. [ 2624.438477][ T5772] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8417'. [ 2625.680992][ T5751] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 2625.686590][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout [ 2625.739113][ T5751] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2625.746807][ T5751] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2625.753478][ T5751] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2625.761562][ T5751] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2626.030042][ T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 2626.124134][T19878] hid_parser_main: 5 callbacks suppressed [ 2626.124153][T19878] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 2626.152394][ T5790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8422'. [ 2626.163583][T19878] hid-generic 0000:0000:0000.002B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2626.211034][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 2626.230836][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2626.243529][ T24] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 2626.255534][ T5790] binder_alloc: 5789: binder_alloc_buf size 65520 failed, no address space [ 2626.270554][ T5836] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 2626.282347][ T24] usb 2-1: can't read configurations, error -71 [ 2626.285374][ T5790] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 2627.724765][ T5804] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2627.743471][ T5804] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2627.760506][T21259] Bluetooth: hci3: command 0x040f tx timeout [ 2627.767241][ T5804] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2627.775103][ T5804] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2627.784672][ T5804] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2629.854325][T21259] Bluetooth: hci4: command 0x0419 tx timeout [ 2629.861485][T21259] Bluetooth: hci0: command 0x0c1a tx timeout [ 2629.867576][T21259] Bluetooth: hci5: command 0x0405 tx timeout [ 2629.874224][T21259] Bluetooth: hci1: command 0x0c1a tx timeout [ 2629.880744][T21259] Bluetooth: hci3: command 0x040f tx timeout [ 2631.979915][ T5867] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8436'. [ 2633.282821][ T5861] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 2633.289092][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout [ 2634.566722][ T5861] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2634.573211][ T5861] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2634.623514][ T5861] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2634.750392][ T5861] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2635.360125][ T5836] Bluetooth: hci4: command 0x0419 tx timeout [ 2635.533936][ T5919] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8452'. [ 2636.333768][ T5927] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2636.346714][ T5927] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2636.358241][ T5927] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2636.720570][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout [ 2636.794224][ T5927] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2636.800815][ T5836] Bluetooth: hci5: command 0x0405 tx timeout [ 2636.831161][ T5927] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2637.188500][ T5952] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 2637.195038][ T5952] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2637.215637][ T5952] vhci_hcd vhci_hcd.0: Device attached [ 2637.349929][ T5953] vhci_hcd: connection closed [ 2637.354062][ T5713] vhci_hcd: stop threads [ 2637.380546][ T5713] vhci_hcd: release socket [ 2637.397751][ T5713] vhci_hcd: disconnect device [ 2638.310649][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout [ 2638.400307][T21259] Bluetooth: hci4: command 0x0419 tx timeout [ 2638.406455][ T5836] Bluetooth: hci3: command 0x040f tx timeout [ 2638.801609][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout [ 2638.915448][ T5836] Bluetooth: hci5: command 0x0405 tx timeout [ 2640.520508][ T6000] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2640.537852][ T6000] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2640.571002][ T6000] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2640.599722][ T6000] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2640.620094][ T6000] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2642.228766][ T6021] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2642.238054][ T6021] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2642.249584][ T6021] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2642.260130][ T6021] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2642.266352][ T6021] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2644.422866][T21259] Bluetooth: hci5: command 0x0405 tx timeout [ 2644.429158][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout [ 2644.438536][ T1540] Bluetooth: hci3: command 0x040f tx timeout [ 2644.438587][T19620] Bluetooth: hci4: command 0x0419 tx timeout [ 2644.445532][T21259] Bluetooth: hci0: command 0x0c1a tx timeout [ 2645.538142][ T6074] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 2646.602575][ T6079] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2646.622853][ T6079] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2646.636370][ T6079] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2646.645889][ T6079] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2646.657279][ T6079] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2647.637518][ T6099] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8486'. [ 2648.070731][ T6097] netlink: 'syz.4.8484': attribute type 12 has an invalid length. [ 2648.804890][T21259] Bluetooth: hci4: command 0x0419 tx timeout [ 2648.815005][T21259] Bluetooth: hci5: command 0x0405 tx timeout [ 2648.822417][T26928] Bluetooth: hci3: command 0x040f tx timeout [ 2648.828528][ T1540] Bluetooth: hci0: command 0x0c1a tx timeout [ 2648.865421][T19620] Bluetooth: hci1: command 0x0c1a tx timeout [ 2650.535655][ T6128] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8494'. [ 2650.590134][ T6128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8494'. [ 2651.144476][ T6137] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 2651.642063][ T6135] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2651.673667][ T6135] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2651.683514][ T6135] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2651.692399][ T6135] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2651.712433][ T6135] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2651.924439][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2651.932512][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2652.783847][ T6157] syz_tun: entered allmulticast mode [ 2653.341153][ T6157] syz_tun: left allmulticast mode [ 2653.759877][T26928] Bluetooth: hci1: command 0x0c1a tx timeout [ 2653.759981][T19620] Bluetooth: hci3: command 0x040f tx timeout [ 2653.765948][T26928] Bluetooth: hci4: command 0x0419 tx timeout [ 2653.772619][T19620] Bluetooth: hci0: command 0x0c1a tx timeout [ 2653.778184][T21259] Bluetooth: hci5: command 0x0405 tx timeout [ 2653.926329][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 2653.926347][ T30] audit: type=1400 audit(1761568937.145:2840): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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luetooth: hci0: Opcode 0x0c1a failed: -4 [ 2655.286300][ T6189] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2655.293239][ T6189] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2655.300707][ T6189] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2655.307197][ T6189] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2655.690081][T19878] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 2655.979587][T19878] usb 3-1: Using ep0 maxpacket: 8 [ 2656.293826][T19878] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2656.329349][T19878] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2656.340271][T19878] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 2656.354318][T19878] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 2656.378670][T19878] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2656.412054][T19878] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2656.428655][T19878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2656.706758][ T6204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2656.738022][ T6204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2657.013141][T19878] usb 3-1: GET_CAPABILITIES returned 0 [ 2657.043212][T21259] Bluetooth: hci0: command 0x0c1a tx timeout [ 2657.064591][T19878] usbtmc 3-1:16.0: can't read capabilities [ 2657.218586][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2657.257440][T19878] usb 3-1: USB disconnect, device number 123 [ 2657.364968][T21259] Bluetooth: hci5: command 0x0405 tx timeout [ 2657.364995][T19620] Bluetooth: hci1: command 0x0c1a tx timeout [ 2657.372168][T21259] Bluetooth: hci3: command 0x040f tx timeout [ 2657.377078][T26928] Bluetooth: hci4: command 0x0419 tx timeout [ 2657.404587][ T6237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8530'. [ 2657.414338][ T6237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8530'. [ 2657.836846][T19620] Bluetooth: hci3: unexpected event for opcode 0x2012 [ 2660.610269][ T6255] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 2660.616495][T19620] Bluetooth: hci0: command 0x0c1a tx timeout [ 2660.800627][ T6255] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2660.807962][ T6255] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2660.987891][ T6255] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2661.020819][ T6255] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2661.652556][ T6292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8546'. [ 2661.856053][ T6296] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 2661.862578][ T6296] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2661.957852][ T6296] vhci_hcd vhci_hcd.0: Device attached [ 2662.216488][T19878] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 2662.465972][ T6297] vhci_hcd: connection reset by peer [ 2662.538230][ T7757] vhci_hcd: stop threads [ 2662.547199][ T7757] vhci_hcd: release socket [ 2662.581927][ T7757] vhci_hcd: disconnect device [ 2662.720514][T19620] Bluetooth: hci4: command 0x0419 tx timeout [ 2662.919316][T19620] Bluetooth: hci3: command 0x040f tx timeout [ 2663.118196][T19620] Bluetooth: hci5: command 0x0405 tx timeout [ 2663.129572][T19620] Bluetooth: hci1: command 0x0c1a tx timeout [ 2663.389186][ T6315] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 2663.395722][ T6315] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2663.411038][ T6315] vhci_hcd vhci_hcd.0: Device attached [ 2663.447218][ T6316] vhci_hcd: connection closed [ 2663.447545][ T5717] vhci_hcd: stop threads [ 2663.457966][ T5717] vhci_hcd: release socket [ 2663.467630][ T5717] vhci_hcd: disconnect device [ 2664.630246][ T6338] kvm: pic: non byte write [ 2664.634766][ T6338] kvm: pic: non byte write [ 2664.640201][ T6338] kvm: pic: single mode not supported [ 2664.640217][ T6338] kvm: pic: level sensitive irq not supported [ 2664.652630][ T5827] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 2664.668670][ T6338] kvm: pic: non byte write [ 2664.680358][ T6338] kvm: pic: non byte write [ 2664.699607][ T6338] kvm: pic: level sensitive irq not supported [ 2664.699954][ T6338] kvm: pic: non byte write [ 2664.723134][ T6338] kvm: pic: non byte write [ 2664.849501][ T5827] usb 2-1: Using ep0 maxpacket: 8 [ 2664.863165][ T5827] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2664.889002][ T5827] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2664.920068][ T5827] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2664.934136][ T5827] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2665.187766][ T5827] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2665.210324][ T5827] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2665.277843][ T6352] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2665.297028][ T6352] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2665.303931][ T6352] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2665.327551][ T6352] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2665.334598][ T6352] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2665.443167][ T5827] usb 2-1: GET_CAPABILITIES returned 0 [ 2665.449937][ T5827] usbtmc 2-1:16.0: can't read capabilities [ 2665.658834][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2665.668012][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2665.677053][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2665.686088][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2665.695112][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2665.704137][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2665.713165][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2665.724053][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2665.733112][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2665.742146][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2665.751176][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2665.760204][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2665.769259][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2665.785085][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2665.794142][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2665.803169][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2665.857360][ T5827] usb 2-1: USB disconnect, device number 8 [ 2666.050281][ T6362] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 2666.056827][ T6362] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2666.124188][ T6362] vhci_hcd vhci_hcd.0: Device attached [ 2666.228824][ T6366] vhci_hcd: connection closed [ 2666.229112][T16060] vhci_hcd: stop threads [ 2666.246234][T16060] vhci_hcd: release socket [ 2666.252625][T16060] vhci_hcd: disconnect device [ 2666.302830][ T5827] vhci_hcd: vhci_device speed not set [ 2667.291571][T26928] Bluetooth: hci0: command 0x0c1a tx timeout [ 2667.359540][T19620] Bluetooth: hci3: command 0x040f tx timeout [ 2667.365579][T26928] Bluetooth: hci4: command 0x0419 tx timeout [ 2667.372057][T26928] Bluetooth: hci5: command 0x0405 tx timeout [ 2667.378088][T26928] Bluetooth: hci1: command 0x0c1a tx timeout [ 2667.430090][T19878] vhci_hcd: vhci_device speed not set [ 2670.052902][ T6420] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 2670.059448][ T6420] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2670.283078][ T6420] vhci_hcd vhci_hcd.0: Device attached [ 2670.380456][ T6421] vhci_hcd: connection closed [ 2670.388359][ T7763] vhci_hcd: stop threads [ 2670.418325][ T7763] vhci_hcd: release socket [ 2670.546394][ T7763] vhci_hcd: disconnect device [ 2671.869703][ T6454] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 2672.880059][ T6438] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 2672.886950][T21259] Bluetooth: hci0: command 0x0c1a tx timeout [ 2674.051675][ T6438] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2674.057909][ T6438] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2674.064627][ T6438] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2674.071475][ T6438] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2674.248777][ T6471] netlink: 356 bytes leftover after parsing attributes in process `syz.2.8598'. [ 2674.849730][ T6479] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2674.858453][ T6479] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2674.870165][ T6479] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2674.879575][ T6479] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2674.894372][ T6479] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2674.945702][ T6487] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 2674.952234][ T6487] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2674.964157][ T6487] vhci_hcd vhci_hcd.0: Device attached [ 2674.972757][ T6489] vhci_hcd: connection closed [ 2674.973031][ T7755] vhci_hcd: stop threads [ 2674.982452][ T7755] vhci_hcd: release socket [ 2674.988225][ T7755] vhci_hcd: disconnect device [ 2675.221463][ T6492] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 2677.064921][T19620] Bluetooth: hci1: command 0x0c1a tx timeout [ 2677.071304][T19620] Bluetooth: hci4: command 0x0419 tx timeout [ 2677.077284][T19620] Bluetooth: hci5: command 0x0405 tx timeout [ 2677.083668][T26928] Bluetooth: hci3: command 0x040f tx timeout [ 2677.130085][ T5175] vhci_hcd: connection reset by peer [ 2677.385509][ T7755] vhci_hcd: stop threads [ 2677.385531][ T7755] vhci_hcd: release socket [ 2677.387532][ T5907] usb 38-1: device descriptor read/8, error -110 [ 2677.387689][ T7755] vhci_hcd: disconnect device [ 2677.407355][T19620] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2677.408681][T19620] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2677.409380][T19620] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2677.450148][T19620] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2677.497991][T19620] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2677.706379][ T7763] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2677.725143][ T7763] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 2677.784353][ T5907] usb usb38-port1: attempt power cycle [ 2677.791250][ T7763] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 2677.860237][ T3265] vhci_hcd: vhci_device speed not set [ 2677.958910][ T7763] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2677.977955][ T7763] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 2677.990205][ T7763] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 2678.636376][ T6518] syzkaller0: entered promiscuous mode [ 2678.642568][ T6518] syzkaller0: entered allmulticast mode [ 2679.224052][ T7763] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2679.236985][ T7763] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 2679.387700][ T7763] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 2679.718350][T21259] Bluetooth: hci0: command tx timeout [ 2679.740106][ T5907] usb usb38-port1: unable to enumerate USB device [ 2681.762873][T21259] Bluetooth: hci0: command tx timeout [ 2683.065149][ T6515] chnl_net:caif_netlink_parms(): no params data found [ 2683.113865][ T7763] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2683.136152][ T7763] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 2683.148023][ T7763] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 2683.209232][ T6565] netlink: 356 bytes leftover after parsing attributes in process `syz.1.8619'. [ 2683.251605][ T6552] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2683.277209][ T6552] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2683.289246][ T6552] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2683.298612][ T6552] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2683.352633][ T6552] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2683.368430][ T6552] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 2683.378546][ T6552] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 2683.411772][ T6515] bridge0: port 1(bridge_slave_0) entered blocking state [ 2683.419148][ T6515] bridge0: port 1(bridge_slave_0) entered disabled state [ 2683.426484][ T6515] bridge_slave_0: entered allmulticast mode [ 2683.461490][ T6515] bridge_slave_0: entered promiscuous mode [ 2683.514381][ T6515] bridge0: port 2(bridge_slave_1) entered blocking state [ 2683.526599][ T6515] bridge0: port 2(bridge_slave_1) entered disabled state [ 2683.541938][ T6515] bridge_slave_1: entered allmulticast mode [ 2683.549389][ T6515] bridge_slave_1: entered promiscuous mode [ 2683.557351][ T6575] syz_tun: entered allmulticast mode [ 2683.564554][ T6575] syz_tun: left allmulticast mode [ 2683.686344][ T6515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2683.713155][ T6515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2683.935567][ T7763] bridge_slave_0: left allmulticast mode [ 2683.946880][ T7763] bridge_slave_0: left promiscuous mode [ 2683.966220][ T7763] bridge0: port 1(bridge_slave_0) entered disabled state [ 2684.413447][ T6592] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 2684.419975][ T6592] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2684.451084][ T6592] vhci_hcd vhci_hcd.0: Device attached [ 2684.603424][ T6594] vhci_hcd: connection closed [ 2684.603613][ T7755] vhci_hcd: stop threads [ 2684.617322][ T7755] vhci_hcd: release socket [ 2684.627485][ T7755] vhci_hcd: disconnect device [ 2684.809354][ T7763] bond1 (unregistering): (slave geneve2): Releasing backup interface [ 2684.894037][ T6607] netlink: 356 bytes leftover after parsing attributes in process `syz.3.8629'. [ 2684.944944][ T7763] bridge0 (unregistering): left allmulticast mode [ 2685.226165][ T6617] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 2685.232699][ T6617] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2685.273248][ T6617] vhci_hcd vhci_hcd.0: Device attached [ 2685.282038][T21259] Bluetooth: hci3: command 0x040f tx timeout [ 2685.288086][T21259] Bluetooth: hci4: command 0x0419 tx timeout [ 2685.360774][T19620] Bluetooth: hci5: command 0x0405 tx timeout [ 2685.360794][T21259] Bluetooth: hci1: command 0x0c1a tx timeout [ 2685.360821][T26928] Bluetooth: hci0: command 0x0419 tx timeout [ 2685.446420][ T7763] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2685.475255][ T7763] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2685.487376][ T7763] bond0 (unregistering): Released all slaves [ 2685.506467][ T7763] bond1 (unregistering): Released all slaves [ 2685.513079][ T5892] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 2685.538844][ T7763] bond2 (unregistering): Released all slaves [ 2685.550026][ T5907] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 2685.590323][ T6515] team0: Port device team_slave_0 added [ 2685.623084][ T6515] team0: Port device team_slave_1 added [ 2685.699679][ T5907] usb 5-1: Using ep0 maxpacket: 8 [ 2685.710210][ T5907] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2685.720872][ T6515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2685.727882][ T5907] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2685.738344][ T6515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2685.777408][ T5907] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2685.803795][ T5907] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2685.837464][ T6515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2685.885399][ T5907] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2685.903275][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2685.912175][ T6515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2685.919188][ T6515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2685.965498][ T6515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2686.027336][ T6618] vhci_hcd: connection reset by peer [ 2686.033529][ T7755] vhci_hcd: stop threads [ 2686.038307][ T7755] vhci_hcd: release socket [ 2686.043249][ T7755] vhci_hcd: disconnect device [ 2686.051437][ T6627] syz_tun: entered allmulticast mode [ 2686.057189][ T6627] syz_tun: left allmulticast mode [ 2686.167800][ T5907] usb 5-1: GET_CAPABILITIES returned 0 [ 2686.173614][ T5907] usbtmc 5-1:16.0: can't read capabilities [ 2686.431041][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2686.440141][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2686.449200][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2686.458254][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2686.467296][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2686.476336][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2686.511927][ T6515] hsr_slave_0: entered promiscuous mode [ 2686.525806][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805610b000: rx timeout, send abort [ 2686.536682][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88805610b000: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 2686.559380][ T6515] hsr_slave_1: entered promiscuous mode [ 2686.568309][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2686.581465][ T6515] debugfs: 'hsr0' already exists in 'hsr' [ 2686.587382][ T6515] Cannot create hsr debugfs directory [ 2686.614390][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2686.623512][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2686.632614][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2686.641705][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2686.654060][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2686.663178][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2686.672271][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2686.681373][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2686.692438][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 2686.705890][ T7763] hsr_slave_0: left promiscuous mode [ 2686.715837][ T7763] hsr_slave_1: left promiscuous mode [ 2686.723666][ T5907] usb 5-1: USB disconnect, device number 6 [ 2686.740607][ T7763] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2686.748226][ T7763] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2686.770866][ T7763] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2686.779171][ T7763] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2686.828632][ T7763] veth1_macvtap: left promiscuous mode [ 2686.837058][ T7763] veth0_macvtap: left promiscuous mode [ 2686.844143][ T7763] veth1_vlan: left promiscuous mode [ 2686.850490][ T7763] veth0_vlan: left promiscuous mode [ 2687.439655][T26928] Bluetooth: hci0: command 0x0419 tx timeout [ 2687.747605][ T7763] team0 (unregistering): Port device team_slave_1 removed [ 2687.788338][ T7763] team0 (unregistering): Port device team_slave_0 removed [ 2688.144274][ T6646] bridge0: port 1(syz_tun) entered blocking state [ 2688.151863][ T6646] bridge0: port 1(syz_tun) entered disabled state [ 2688.158537][ T6646] syz_tun: entered allmulticast mode [ 2688.167158][ T6646] syz_tun: entered promiscuous mode [ 2688.178294][ T6646] bridge0: port 1(syz_tun) entered blocking state [ 2688.185034][ T6646] bridge0: port 1(syz_tun) entered forwarding state [ 2688.538668][ T6669] netlink: 320 bytes leftover after parsing attributes in process `syz.1.8643'. [ 2688.569983][ T6669] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8643'. [ 2688.638437][ T6673] syz_tun: entered allmulticast mode [ 2688.659090][ T6673] syz_tun: left allmulticast mode [ 2688.854647][ T6679] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 2688.861183][ T6679] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2688.999535][ T6679] vhci_hcd vhci_hcd.0: Device attached [ 2689.250922][ T24] usb 41-1: new low-speed USB device number 4 using vhci_hcd [ 2689.524968][T26928] Bluetooth: hci0: command 0x0419 tx timeout [ 2689.642412][ T6682] vhci_hcd: connection reset by peer [ 2689.738820][T29187] vhci_hcd: stop threads [ 2689.781041][T29187] vhci_hcd: release socket [ 2689.785588][T29187] vhci_hcd: disconnect device [ 2689.967000][ T6515] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2689.981716][ T6515] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2690.023466][ T6515] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2690.038731][ T6515] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2690.251291][ T6515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2690.315379][ T6515] 8021q: adding VLAN 0 to HW filter on device team0 [ 2690.372885][ T7757] bridge0: port 1(bridge_slave_0) entered blocking state [ 2690.380108][ T7757] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2690.429322][T29187] bridge0: port 2(bridge_slave_1) entered blocking state [ 2690.436539][T29187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2690.630425][ T5892] vhci_hcd: vhci_device speed not set [ 2690.806926][ T6515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2690.882906][ T6515] veth0_vlan: entered promiscuous mode [ 2690.941312][ T6515] veth1_vlan: entered promiscuous mode [ 2691.042595][ T6515] veth0_macvtap: entered promiscuous mode [ 2691.073716][ T6515] veth1_macvtap: entered promiscuous mode [ 2691.125909][ T6739] netlink: 320 bytes leftover after parsing attributes in process `syz.3.8655'. [ 2691.134034][ T6515] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2691.165694][ T6739] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8655'. [ 2691.172145][ T6515] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2691.202889][ T6742] syz_tun: entered allmulticast mode [ 2691.221076][ T7763] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2691.238082][ T7763] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2691.251910][ T6742] syz_tun: left allmulticast mode [ 2691.266938][ T7763] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2691.297688][ T7763] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2691.546261][ T5717] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2691.581769][ T5717] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2691.600217][T26928] Bluetooth: hci0: command 0x0419 tx timeout [ 2691.945214][ T7755] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2691.985077][ T7755] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2692.096094][ T6767] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 2692.102639][ T6767] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2692.169956][ T6767] vhci_hcd vhci_hcd.0: Device attached [ 2692.451257][ T5649] usb 33-1: new low-speed USB device number 3 using vhci_hcd [ 2692.860615][ T6768] vhci_hcd: connection reset by peer [ 2692.890205][T29187] vhci_hcd: stop threads [ 2692.898924][ T6787] netlink: 'syz.1.8663': attribute type 10 has an invalid length. [ 2692.927637][T29187] vhci_hcd: release socket [ 2692.935729][T29187] vhci_hcd: disconnect device [ 2692.944530][ T6787] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 2693.431192][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888063136000: rx timeout, send abort [ 2693.440224][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff888063136000: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 2693.638423][ T6801] netlink: 320 bytes leftover after parsing attributes in process `syz.0.8667'. [ 2693.675036][ T6801] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8667'. [ 2694.395019][ T24] vhci_hcd: vhci_device speed not set [ 2694.897271][T26928] Bluetooth: hci4: command 0x0419 tx timeout [ 2694.903680][ T6784] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 2695.519016][ T6784] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2695.526325][ T6784] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2695.536693][ T6784] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2695.550919][ T6784] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2696.270619][ T6856] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 2696.277159][ T6856] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2696.344965][ T6856] vhci_hcd vhci_hcd.0: Device attached [ 2696.660071][ T3265] usb 41-1: new low-speed USB device number 5 using vhci_hcd [ 2696.946894][ T6858] vhci_hcd: connection reset by peer [ 2696.961109][T29187] vhci_hcd: stop threads [ 2696.965386][T29187] vhci_hcd: release socket [ 2696.980757][T29187] vhci_hcd: disconnect device [ 2697.120457][T26928] Bluetooth: hci3: command 0x040f tx timeout [ 2697.154662][ T6880] binder: 6873:6880 ioctl 8008f512 0 returned -22 [ 2697.631001][ T5649] vhci_hcd: vhci_device speed not set [ 2697.700087][T26928] Bluetooth: hci0: command 0x0419 tx timeout [ 2697.706244][T19620] Bluetooth: hci5: command 0x0405 tx timeout [ 2697.712187][T21259] Bluetooth: hci1: command 0x0c1a tx timeout [ 2700.394610][ T6925] netlink: 320 bytes leftover after parsing attributes in process `syz.3.8702'. [ 2701.754487][ T3265] vhci_hcd: vhci_device speed not set [ 2702.639053][ T6948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8701'. [ 2702.898906][ T6948] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2703.935526][ T6977] netlink: 'syz.3.8715': attribute type 4 has an invalid length. [ 2705.013774][ T6978] bridge0: port 1(syz_tun) entered disabled state [ 2705.126101][ T5907] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 2705.226405][ T6978] syz_tun (unregistering): left allmulticast mode [ 2705.234268][ T6978] syz_tun (unregistering): left promiscuous mode [ 2705.241789][ T6978] bridge0: port 1(syz_tun) entered disabled state [ 2705.506727][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2705.522725][ T6991] syzkaller0: entered promiscuous mode [ 2705.535038][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2705.546230][ T6991] syzkaller0: entered allmulticast mode [ 2705.555107][ T5907] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 2705.574003][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2705.587598][ T5907] usb 3-1: config 0 descriptor?? [ 2705.810105][ T5827] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 2706.006916][ T5907] cp2112 0003:10C4:EA90.002C: unknown main item tag 0x0 [ 2706.020691][ T5907] cp2112 0003:10C4:EA90.002C: unknown main item tag 0x0 [ 2706.027774][ T5907] cp2112 0003:10C4:EA90.002C: unknown main item tag 0x0 [ 2706.038434][ T5907] cp2112 0003:10C4:EA90.002C: unknown main item tag 0x0 [ 2706.053143][ T5907] cp2112 0003:10C4:EA90.002C: unknown main item tag 0x0 [ 2706.080817][ T5907] cp2112 0003:10C4:EA90.002C: unknown main item tag 0x0 [ 2706.125312][ T5827] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2706.140130][ T5827] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2706.157210][ T5907] cp2112 0003:10C4:EA90.002C: unknown main item tag 0x0 [ 2706.179121][ T5827] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 2706.188922][ T5907] cp2112 0003:10C4:EA90.002C: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 2706.214109][ T5827] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2706.281999][ T5827] usb 2-1: config 0 descriptor?? [ 2706.290689][ T5907] cp2112 0003:10C4:EA90.002C: Part Number: 0x00 Device Version: 0x00 [ 2706.385796][ T5827] usbhid 2-1:0.0: can't add hid device: -22 [ 2706.501304][ T5827] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 2706.894025][ T5907] cp2112 0003:10C4:EA90.002C: error reading lock byte: -71 [ 2706.904723][ T5907] usb 3-1: USB disconnect, device number 124 [ 2707.900732][ T3265] usb 2-1: USB disconnect, device number 9 [ 2708.390939][ T7014] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8731'. [ 2708.422591][ T7014] netlink: 277 bytes leftover after parsing attributes in process `syz.0.8731'. [ 2708.432085][ T7014] netlink: 277 bytes leftover after parsing attributes in process `syz.0.8731'. [ 2710.181250][ T30] audit: type=1326 audit(1761568993.405:2841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7029 comm="syz.0.8726" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94539 code=0x7ffc0000 [ 2710.597663][ T30] audit: type=1326 audit(1761568993.435:2842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7029 comm="syz.0.8726" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94539 code=0x7ffc0000 [ 2710.634270][ T30] audit: type=1326 audit(1761568993.435:2843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7029 comm="syz.0.8726" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94539 code=0x7ffc0000 [ 2710.661977][ T30] audit: type=1326 audit(1761568993.435:2844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7029 comm="syz.0.8726" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f94539 code=0x7ffc0000 [ 2710.685277][ T30] audit: type=1326 audit(1761568993.435:2845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7029 comm="syz.0.8726" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94539 code=0x7ffc0000 [ 2710.708053][ T30] audit: type=1326 audit(1761568993.435:2846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7029 comm="syz.0.8726" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94539 code=0x7ffc0000 [ 2710.732347][ T30] audit: type=1326 audit(1761568993.435:2847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7029 comm="syz.0.8726" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94539 code=0x7ffc0000 [ 2710.755380][ T30] audit: type=1326 audit(1761568993.435:2848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7029 comm="syz.0.8726" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94539 code=0x7ffc0000 [ 2710.779111][ T30] audit: type=1326 audit(1761568993.435:2849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7029 comm="syz.0.8726" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f94539 code=0x7ffc0000 [ 2710.810222][ T30] audit: type=1326 audit(1761568993.435:2850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7029 comm="syz.0.8726" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94539 code=0x7ffc0000 [ 2711.858055][ T7048] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8736'. [ 2712.754860][ T7051] netlink: 300 bytes leftover after parsing attributes in process `syz.4.8730'. [ 2713.367492][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2713.374090][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2713.507092][ T7028] kthread_run failed with err -4 [ 2713.760268][ T7057] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 2713.766809][ T7057] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2713.791957][ T7057] vhci_hcd vhci_hcd.0: Device attached [ 2713.998300][ T7069] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8737'. [ 2714.030130][ T5916] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 2714.048596][ T7069] netlink: 277 bytes leftover after parsing attributes in process `syz.2.8737'. [ 2714.068053][ T7069] netlink: 277 bytes leftover after parsing attributes in process `syz.2.8737'. [ 2714.548631][ T7060] vhci_hcd: connection reset by peer [ 2714.596010][ T7763] vhci_hcd: stop threads [ 2714.602059][ T7763] vhci_hcd: release socket [ 2714.607270][ T7763] vhci_hcd: disconnect device [ 2715.094506][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880565b0400: rx timeout, send abort [ 2715.103475][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff8880565b0400: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 2715.264075][ T7079] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8740'. [ 2716.017686][ T7094] lo: entered allmulticast mode [ 2716.027809][ T7094] lo: left allmulticast mode [ 2716.740821][ T7107] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8746'. [ 2717.156602][ T7113] netlink: 300 bytes leftover after parsing attributes in process `syz.4.8754'. [ 2718.670140][ T5907] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 2718.843232][ T5907] usb 3-1: Using ep0 maxpacket: 8 [ 2719.110145][ T5916] vhci_hcd: vhci_device speed not set [ 2719.260507][ T5907] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2719.260534][ T5907] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2719.260577][ T5907] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 2719.260604][ T5907] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 2719.260646][ T5907] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2719.260670][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2719.332312][ T5907] hub 3-1:1.0: bad descriptor, ignoring hub [ 2719.332342][ T5907] hub 3-1:1.0: probe with driver hub failed with error -5 [ 2719.333751][ T5907] cdc_wdm 3-1:1.0: skipping garbage [ 2719.333762][ T5907] cdc_wdm 3-1:1.0: skipping garbage [ 2719.336017][ T5907] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 2719.336037][ T5907] cdc_wdm 3-1:1.0: Unknown control protocol [ 2719.972245][ T24] usb 3-1: USB disconnect, device number 125 [ 2721.198546][ T7170] netlink: 300 bytes leftover after parsing attributes in process `syz.3.8773'. [ 2722.000523][ T7180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8775'. [ 2722.080519][ T7182] netlink: 277 bytes leftover after parsing attributes in process `syz.3.8775'. [ 2722.090365][ T7182] netlink: 277 bytes leftover after parsing attributes in process `syz.3.8775'. [ 2723.118087][ T7207] netlink: 300 bytes leftover after parsing attributes in process `syz.3.8786'. [ 2725.461094][ T5907] hid-generic 0003:0003:0000.002D: unknown main item tag 0x0 [ 2725.474273][ T5907] hid-generic 0003:0003:0000.002D: unknown main item tag 0x0 [ 2725.578451][ T5907] hid-generic 0003:0003:0000.002D: unknown main item tag 0x0 [ 2725.600638][ T5907] hid-generic 0003:0003:0000.002D: unknown main item tag 0x0 [ 2725.608830][ T5907] hid-generic 0003:0003:0000.002D: unknown main item tag 0x0 [ 2725.621329][ T5907] hid-generic 0003:0003:0000.002D: unknown main item tag 0x0 [ 2725.628903][ T5907] hid-generic 0003:0003:0000.002D: unknown main item tag 0x0 [ 2725.661337][ T5907] hid-generic 0003:0003:0000.002D: unknown main item tag 0x0 [ 2725.697087][ T5907] hid-generic 0003:0003:0000.002D: unknown main item tag 0x0 [ 2725.712726][ T5907] hid-generic 0003:0003:0000.002D: unknown main item tag 0x0 [ 2725.810734][ T5907] hid-generic 0003:0003:0000.002D: hidraw0: USB HID v0.00 Device [syz1] on syz1 [ 2725.826947][ T7233] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 2725.833488][ T7233] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2725.852651][ T7233] vhci_hcd vhci_hcd.0: Device attached [ 2726.297271][ T5916] usb 40-1: SetAddress Request (2) to port 0 [ 2726.421892][ T5916] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 2726.440543][ T7234] vhci_hcd: connection closed [ 2726.443500][T29187] vhci_hcd: stop threads [ 2726.448242][ T7235] fido_id[7235]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2726.517910][T29187] vhci_hcd: release socket [ 2726.542096][T29187] vhci_hcd: disconnect device [ 2727.684567][ T7262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8804'. [ 2727.858172][ T5717] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2728.013452][ T7262] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2728.082438][T19620] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2728.140131][T19620] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2728.150767][T19620] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2728.170321][T19620] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2728.180636][T19620] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2728.224022][ T7262] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2728.436444][ T5717] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2728.673169][ T5717] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2728.853271][ T5717] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2729.032453][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 2729.032469][ T30] audit: type=1326 audit(1761569012.255:2893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7301 comm="syz.0.8820" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94539 code=0x7ffc0000 [ 2729.066746][ T30] audit: type=1326 audit(1761569012.285:2894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7301 comm="syz.0.8820" exe="/root/syz-executor" sig=0 arch=40000003 syscall=42 compat=1 ip=0xf7f94539 code=0x7ffc0000 [ 2729.090323][ T30] audit: type=1326 audit(1761569012.285:2895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7301 comm="syz.0.8820" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94539 code=0x7ffc0000 [ 2729.112925][ T30] audit: type=1326 audit(1761569012.285:2896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7301 comm="syz.0.8820" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94539 code=0x7ffc0000 [ 2729.140975][ T30] audit: type=1326 audit(1761569012.285:2897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7301 comm="syz.0.8820" exe="/root/syz-executor" sig=0 arch=40000003 syscall=42 compat=1 ip=0xf7f94539 code=0x7ffc0000 [ 2729.163515][ T30] audit: type=1326 audit(1761569012.285:2898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7301 comm="syz.0.8820" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94539 code=0x7ffc0000 [ 2729.167076][ T7306] ªªªªªª: renamed from vlan0 (while UP) [ 2729.186200][ T30] audit: type=1326 audit(1761569012.285:2899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7301 comm="syz.0.8820" exe="/root/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7f94539 code=0x7ffc0000 [ 2729.186257][ T30] audit: type=1326 audit(1761569012.285:2900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7301 comm="syz.0.8820" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94539 code=0x7ffc0000 [ 2729.237762][ T30] audit: type=1326 audit(1761569012.285:2901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7301 comm="syz.0.8820" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f94539 code=0x7ffc0000 [ 2729.343875][ T30] audit: type=1326 audit(1761569012.285:2902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7301 comm="syz.0.8820" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94539 code=0x7ffc0000 [ 2729.546937][ T7275] chnl_net:caif_netlink_parms(): no params data found [ 2729.662625][ T5717] bridge_slave_1: left allmulticast mode [ 2729.675473][ T5717] bridge_slave_1: left promiscuous mode [ 2729.698251][ T5717] bridge0: port 2(bridge_slave_1) entered disabled state [ 2729.723461][ T5717] bridge_slave_0: left allmulticast mode [ 2729.729325][ T5717] bridge_slave_0: left promiscuous mode [ 2729.735792][ T5717] bridge0: port 1(bridge_slave_0) entered disabled state [ 2730.245897][T21259] Bluetooth: hci2: command tx timeout [ 2731.203606][ T7346] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8830'. [ 2731.214669][ T5717] bridge0 (unregistering): left allmulticast mode [ 2731.441398][T21259] Bluetooth: hci5: unexpected event for opcode 0x080d [ 2731.521049][ T5916] usb 40-1: device descriptor read/8, error -110 [ 2731.590742][ T5717] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2731.602932][ T5717] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2731.628650][ T5717] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 2731.638517][ T5717] bond0 (unregistering): Released all slaves [ 2731.921226][ T5916] usb usb40-port1: attempt power cycle [ 2731.968560][ T7364] netlink: 304 bytes leftover after parsing attributes in process `syz.0.8835'. [ 2732.153875][ T7346] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2732.168784][ T7346] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2732.216233][ T7346] bond0 (unregistering): Released all slaves [ 2732.323024][T21259] Bluetooth: hci2: command tx timeout [ 2732.622893][ T5916] usb usb40-port1: unable to enumerate USB device [ 2732.808708][ T7275] bridge0: port 1(bridge_slave_0) entered blocking state [ 2732.826214][ T7275] bridge0: port 1(bridge_slave_0) entered disabled state [ 2732.870171][ T7275] bridge_slave_0: entered allmulticast mode [ 2732.901962][ T7275] bridge_slave_0: entered promiscuous mode [ 2733.067452][ T7275] bridge0: port 2(bridge_slave_1) entered blocking state [ 2733.093460][ T7275] bridge0: port 2(bridge_slave_1) entered disabled state [ 2733.128340][ T7275] bridge_slave_1: entered allmulticast mode [ 2733.161105][ T7275] bridge_slave_1: entered promiscuous mode [ 2733.748566][ T7275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2734.378846][ T7391] IPv6: Can't replace route, no match found [ 2734.396704][ T7275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2734.406283][T21259] Bluetooth: hci2: command tx timeout [ 2734.524570][ T5717] hsr_slave_0: left promiscuous mode [ 2734.604872][ T5717] hsr_slave_1: left promiscuous mode [ 2734.630117][ T5717] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2734.650029][ T5717] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2734.678506][ T5717] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2734.688202][ T5717] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2734.718592][ T5717] veth1_macvtap: left promiscuous mode [ 2734.730678][ T5717] veth0_macvtap: left promiscuous mode [ 2734.742738][ T5717] veth1_vlan: left promiscuous mode [ 2734.765014][ T5717] veth0_vlan: left promiscuous mode [ 2735.520744][T21259] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 2735.530843][T21259] Bluetooth: hci5: Injecting HCI hardware error event [ 2735.539076][T21259] Bluetooth: hci5: hardware error 0x00 [ 2735.708750][ T7419] netlink: 304 bytes leftover after parsing attributes in process `syz.2.8845'. [ 2736.482622][T19620] Bluetooth: hci2: command tx timeout [ 2736.866701][ T5717] team0 (unregistering): Port device team_slave_1 removed [ 2737.058879][ T5717] team0 (unregistering): Port device team_slave_0 removed [ 2737.602022][T21259] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 2738.017445][ T7275] team0: Port device team_slave_0 added [ 2738.161322][ T7275] team0: Port device team_slave_1 added [ 2738.736175][ T7275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2738.840170][ T7275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2739.000279][ T7275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2739.032402][ T7275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2739.251956][ T7275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2739.323527][ T7275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2739.815607][ T7275] hsr_slave_0: entered promiscuous mode [ 2739.848204][ T7275] hsr_slave_1: entered promiscuous mode [ 2742.211651][ T7275] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2742.258366][ T7275] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2742.321047][ T7275] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2742.361717][ T7275] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2742.836796][ T7275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2743.094771][ T7275] 8021q: adding VLAN 0 to HW filter on device team0 [ 2743.117568][T28809] bridge0: port 1(bridge_slave_0) entered blocking state [ 2743.124770][T28809] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2743.173889][T28809] bridge0: port 2(bridge_slave_1) entered blocking state [ 2743.181080][T28809] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2743.326955][ T7275] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2743.733260][ T7275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2744.000853][ T7275] veth0_vlan: entered promiscuous mode [ 2744.044030][ T7275] veth1_vlan: entered promiscuous mode [ 2744.493760][ T7275] veth0_macvtap: entered promiscuous mode [ 2744.534076][ T7275] veth1_macvtap: entered promiscuous mode [ 2744.621161][ T7275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2744.665262][ T7275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2744.870068][ T5916] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 2744.900339][T16060] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2744.909213][T16060] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2744.948394][T16060] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2745.006838][T16060] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2745.029226][ T5916] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 2745.056570][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2745.154326][ T5916] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2745.190688][ T5916] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2745.215988][ T5916] usb 5-1: Manufacturer: syz [ 2745.238927][T28809] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2745.250981][ T5916] usb 5-1: config 0 descriptor?? [ 2745.267701][T28809] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2745.380851][T28809] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2745.429118][ T5916] rc_core: IR keymap rc-hauppauge not found [ 2745.430302][T28809] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2745.463315][ T5916] Registered IR keymap rc-empty [ 2745.497782][ T5916] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 2745.560331][ T5916] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input42 [ 2745.631847][ T5916] usb 5-1: USB disconnect, device number 7 [ 2745.782851][ T7587] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 2745.789407][ T7587] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2745.955347][ T7587] vhci_hcd vhci_hcd.0: Device attached [ 2746.153952][ T7598] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 2746.160491][ T7598] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2746.202347][ T7598] vhci_hcd vhci_hcd.0: Device attached [ 2746.352656][ T5916] usb 36-1: SetAddress Request (2) to port 0 [ 2746.359112][ T5916] usb 36-1: new SuperSpeed USB device number 2 using vhci_hcd [ 2746.440272][ T3096] usb 41-1: new low-speed USB device number 6 using vhci_hcd [ 2746.945795][ T7599] vhci_hcd: connection reset by peer [ 2746.966370][ T7763] vhci_hcd: stop threads [ 2746.971397][ T7763] vhci_hcd: release socket [ 2746.976629][ T7763] vhci_hcd: disconnect device [ 2747.269343][ T7620] syz_tun: entered allmulticast mode [ 2749.210028][ T7654] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 2749.216570][ T7654] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2749.286488][ T7654] vhci_hcd vhci_hcd.0: Device attached [ 2750.070967][ T7655] vhci_hcd: connection closed [ 2750.081222][ T5717] vhci_hcd: stop threads [ 2750.090909][ T5717] vhci_hcd: release socket [ 2750.096896][ T5717] vhci_hcd: disconnect device [ 2750.284059][ T7680] lo: entered allmulticast mode [ 2750.740454][ T7685] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 2750.746991][ T7685] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2750.765288][ T7685] vhci_hcd vhci_hcd.0: Device attached [ 2750.811867][ T7686] vhci_hcd: connection closed [ 2750.812074][ T5717] vhci_hcd: stop threads [ 2750.821783][ T5717] vhci_hcd: release socket [ 2750.853635][ T5717] vhci_hcd: disconnect device [ 2751.599645][ T3096] vhci_hcd: vhci_device speed not set [ 2752.572651][ T7713] syz_tun: entered allmulticast mode [ 2752.742877][ T7715] vhci_hcd vhci_hcd.0: port 0 already used [ 2753.333139][ T24] usb usb42-port1: attempt power cycle [ 2754.000777][ T24] usb usb42-port1: unable to enumerate USB device [ 2754.779581][ T24] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 2754.902755][ T7741] netlink: 356 bytes leftover after parsing attributes in process `syz.3.8924'. [ 2754.930044][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 2754.941965][ T24] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2754.960619][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2754.979481][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2754.989584][ T24] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2755.020012][ T24] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2755.039256][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2755.264802][ T7739] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 2755.271330][ T7739] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2755.288281][ T7739] vhci_hcd vhci_hcd.0: Device attached [ 2755.301549][ T7739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2755.318458][ T7739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2755.328353][ T7748] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 4 [ 2755.337206][ T24] usb 5-1: usb_control_msg returned -71 [ 2755.345945][T16060] vhci_hcd: stop threads [ 2755.350961][ T24] usbtmc 5-1:16.0: can't read capabilities [ 2755.443280][ T24] usb 5-1: USB disconnect, device number 8 [ 2755.637698][T16060] vhci_hcd: release socket [ 2755.644671][T16060] vhci_hcd: disconnect device [ 2755.700714][ T6748] usb 41-1: new low-speed USB device number 7 using vhci_hcd [ 2755.711962][ T6748] usb 41-1: enqueue for inactive port 0 [ 2755.800258][ T6748] vhci_hcd: vhci_device speed not set [ 2757.471237][ T7779] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8935'. [ 2757.501743][ T7779] netlink: 277 bytes leftover after parsing attributes in process `syz.0.8935'. [ 2757.539332][ T7779] netlink: 277 bytes leftover after parsing attributes in process `syz.0.8935'. [ 2758.154636][ T7782] netlink: 356 bytes leftover after parsing attributes in process `syz.0.8936'. [ 2760.295362][ T7812] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8947'. [ 2760.343434][ T7812] netlink: 277 bytes leftover after parsing attributes in process `syz.4.8947'. [ 2760.388982][ T7812] netlink: 277 bytes leftover after parsing attributes in process `syz.4.8947'. [ 2761.190180][T19878] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 2761.364768][T19878] usb 5-1: config 0 has no interfaces? [ 2761.374950][T19878] usb 5-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 2761.405229][T19878] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2761.452734][T19878] usb 5-1: config 0 descriptor?? [ 2761.677004][T21259] Bluetooth: hci1: unexpected event for opcode 0x2012 [ 2761.701766][T19878] usb 5-1: USB disconnect, device number 9 [ 2762.212011][ T7844] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8959'. [ 2762.265939][ T7844] netlink: 277 bytes leftover after parsing attributes in process `syz.0.8959'. [ 2762.326927][ T7844] netlink: 277 bytes leftover after parsing attributes in process `syz.0.8959'. [ 2763.028266][ T7859] netlink: 100 bytes leftover after parsing attributes in process `syz.1.8964'. [ 2764.036249][ T7879] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8972'. [ 2765.162628][ T7897] netlink: 356 bytes leftover after parsing attributes in process `syz.0.8979'. [ 2766.808900][ T7926] netlink: 356 bytes leftover after parsing attributes in process `syz.3.8991'. [ 2767.240903][T19878] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 2767.412244][T19878] usb 2-1: config 0 has no interfaces? [ 2767.421659][T19878] usb 2-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 2767.437368][T19878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 2767.467195][T19878] usb 2-1: Product: syz [ 2767.520477][T19878] usb 2-1: Manufacturer: syz [ 2767.531026][T19878] usb 2-1: SerialNumber: syz [ 2767.542191][T19878] usb 2-1: config 0 descriptor?? [ 2767.983667][ T7931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2768.019891][ T7931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2768.046331][T19878] usb 2-1: USB disconnect, device number 10 [ 2768.062191][T21259] Bluetooth: hci2: Malformed LE Event: 0x02 [ 2768.989131][ T7963] random: crng reseeded on system resumption [ 2769.271486][T19620] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2769.289979][T19620] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2769.306171][T19620] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2769.314934][T19620] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2769.327398][T19620] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2770.088548][ T7971] chnl_net:caif_netlink_parms(): no params data found [ 2771.131921][ T7971] bridge0: port 1(bridge_slave_0) entered blocking state [ 2771.175010][ T7971] bridge0: port 1(bridge_slave_0) entered disabled state [ 2771.190289][ T7971] bridge_slave_0: entered allmulticast mode [ 2771.208355][ T7971] bridge_slave_0: entered promiscuous mode [ 2771.226605][ T7971] bridge0: port 2(bridge_slave_1) entered blocking state [ 2771.247813][ T7971] bridge0: port 2(bridge_slave_1) entered disabled state [ 2771.278442][ T7971] bridge_slave_1: entered allmulticast mode [ 2771.309642][ T7971] bridge_slave_1: entered promiscuous mode [ 2771.370842][T19620] Bluetooth: hci4: command tx timeout [ 2771.544294][ T7971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2771.580906][ T7971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2771.804531][ T7971] team0: Port device team_slave_0 added [ 2771.834057][ T7971] team0: Port device team_slave_1 added [ 2772.047363][ T7971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2772.069633][ T7971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2772.095542][ C0] vkms_vblank_simulate: vblank timer overrun [ 2772.195978][ T7971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2772.302093][ T7971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2772.334504][ T7971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2772.360425][ C0] vkms_vblank_simulate: vblank timer overrun [ 2772.448264][ T7971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2772.925983][ T7971] hsr_slave_0: entered promiscuous mode [ 2772.944287][ T7971] hsr_slave_1: entered promiscuous mode [ 2773.349013][ T7971] debugfs: 'hsr0' already exists in 'hsr' [ 2773.356802][ T7971] Cannot create hsr debugfs directory [ 2773.440386][T19620] Bluetooth: hci4: command tx timeout [ 2774.291488][T16060] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2774.297437][ T8030] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9024'. [ 2774.361417][ T8030] netlink: 277 bytes leftover after parsing attributes in process `syz.0.9024'. [ 2774.392010][ T8030] netlink: 277 bytes leftover after parsing attributes in process `syz.0.9024'. [ 2774.594828][T16060] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2774.913650][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2774.920431][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2775.165437][T16060] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2775.460361][T16060] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2775.521841][T19620] Bluetooth: hci4: command tx timeout [ 2775.567959][ T7971] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2775.605235][ T7971] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2775.627583][ T8035] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9026'. [ 2775.637443][ T8035] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9026'. [ 2775.641732][ T7971] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2775.757260][ T7971] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2776.041332][T16060] bridge_slave_1: left allmulticast mode [ 2776.061809][T16060] bridge_slave_1: left promiscuous mode [ 2776.067622][T16060] bridge0: port 2(bridge_slave_1) entered disabled state [ 2776.116721][T16060] bridge_slave_0: left allmulticast mode [ 2776.141810][T16060] bridge_slave_0: left promiscuous mode [ 2776.147635][T16060] bridge0: port 1(bridge_slave_0) entered disabled state [ 2777.609071][T19620] Bluetooth: hci4: command tx timeout [ 2777.920239][T16060] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2777.959248][T16060] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2778.012401][T16060] bond0 (unregistering): Released all slaves [ 2778.576420][ T7971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2778.663895][ T7971] 8021q: adding VLAN 0 to HW filter on device team0 [ 2778.798306][T16060] hsr_slave_0: left promiscuous mode [ 2778.812394][T16060] hsr_slave_1: left promiscuous mode [ 2778.833280][T16060] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2778.850001][T16060] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2778.872950][T16060] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2778.890030][T16060] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2779.006300][T16060] veth1_macvtap: left promiscuous mode [ 2779.049244][T16060] veth0_macvtap: left promiscuous mode [ 2779.068680][T16060] veth1_vlan: left promiscuous mode [ 2779.074746][T16060] veth0_vlan: left promiscuous mode [ 2779.897983][T16060] team0 (unregistering): Port device team_slave_1 removed [ 2779.940520][T16060] team0 (unregistering): Port device team_slave_0 removed [ 2780.338216][T16060] lo (unregistering): left allmulticast mode [ 2780.407475][T28809] bridge0: port 1(bridge_slave_0) entered blocking state [ 2780.414634][T28809] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2780.464700][T28809] bridge0: port 2(bridge_slave_1) entered blocking state [ 2780.471854][T28809] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2780.657607][ T7971] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2780.835548][ T7971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2780.908211][ T7971] veth0_vlan: entered promiscuous mode [ 2781.257603][ T7971] veth1_vlan: entered promiscuous mode [ 2781.503247][ T7971] veth0_macvtap: entered promiscuous mode [ 2781.533731][ T7971] veth1_macvtap: entered promiscuous mode [ 2781.583176][ T7971] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2781.794182][ T7971] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2781.882266][ T7763] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2781.969580][ T7763] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2782.354792][ T7763] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2782.403539][ T7763] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2782.895124][ T7755] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2782.914307][ T7755] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2783.072247][ T7755] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2783.119271][ T7755] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2788.354517][ T8271] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2790.367767][ T8309] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9103'. [ 2790.417402][T21259] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2790.436742][T21259] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2790.448095][T21259] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2790.458906][T21259] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2790.468372][T21259] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2790.844123][ T7763] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2790.870387][ T7763] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 2791.891856][ T7763] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2791.980058][ T7763] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 2792.361652][ T7763] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2792.402956][ T7763] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 2792.560070][T19620] Bluetooth: hci0: command tx timeout [ 2792.802438][ T7763] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2792.854616][ T7763] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 2793.509153][ T8314] chnl_net:caif_netlink_parms(): no params data found [ 2793.665219][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880654d0800: rx timeout, send abort [ 2793.675227][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff8880654d0800: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 2794.376347][ T8385] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9125'. [ 2794.411476][ T8385] netlink: 277 bytes leftover after parsing attributes in process `syz.5.9125'. [ 2794.440355][ T8385] netlink: 277 bytes leftover after parsing attributes in process `syz.5.9125'. [ 2794.645997][T19620] Bluetooth: hci0: command tx timeout [ 2795.993262][ T7763] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2796.013624][ T7763] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2796.034307][ T7763] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 2796.063659][ T7763] bond0 (unregistering): Released all slaves [ 2796.105837][ T7763] bond1 (unregistering): Released all slaves [ 2796.140462][ T8421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9137'. [ 2796.168553][ T8421] netlink: 277 bytes leftover after parsing attributes in process `syz.3.9137'. [ 2796.197692][ T8421] netlink: 277 bytes leftover after parsing attributes in process `syz.3.9137'. [ 2796.228054][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880550af000: rx timeout, send abort [ 2796.236797][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff8880550af000: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 2796.498822][ T8434] syz_tun: left allmulticast mode [ 2796.543106][ T8314] bridge0: port 1(bridge_slave_0) entered blocking state [ 2796.565436][ T8314] bridge0: port 1(bridge_slave_0) entered disabled state [ 2796.592273][ T8314] bridge_slave_0: entered allmulticast mode [ 2796.617354][ T8314] bridge_slave_0: entered promiscuous mode [ 2796.720042][T19620] Bluetooth: hci0: command tx timeout [ 2796.752399][ T8314] bridge0: port 2(bridge_slave_1) entered blocking state [ 2796.849890][ T8314] bridge0: port 2(bridge_slave_1) entered disabled state [ 2796.874915][ T8314] bridge_slave_1: entered allmulticast mode [ 2796.918637][ T8314] bridge_slave_1: entered promiscuous mode [ 2797.067837][ T7763] hsr_slave_0: left promiscuous mode [ 2797.079377][ T7763] hsr_slave_1: left promiscuous mode [ 2797.087299][ T7763] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2797.106524][ T7763] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2797.125954][ T7763] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2797.139249][ T7763] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2797.794391][ T7763] veth1_macvtap: left promiscuous mode [ 2797.800669][ T7763] veth0_macvtap: left promiscuous mode [ 2797.806352][ T7763] veth1_vlan: left promiscuous mode [ 2797.811975][ T7763] veth0_vlan: left promiscuous mode [ 2798.801262][T19620] Bluetooth: hci0: command tx timeout [ 2798.887179][ T7763] team0 (unregistering): Port device team_slave_1 removed [ 2798.941571][ T7763] team0 (unregistering): Port device team_slave_0 removed [ 2799.464413][ T8314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2799.497828][ T8314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2799.693416][ T8314] team0: Port device team_slave_0 added [ 2799.725697][ T8314] team0: Port device team_slave_1 added [ 2799.866011][ T8314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2799.877960][ T8314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2799.916061][ T8314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2799.976312][ T8314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2799.984626][ T8314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2800.046669][ T8314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2800.114867][ T8314] hsr_slave_0: entered promiscuous mode [ 2800.138116][ T8314] hsr_slave_1: entered promiscuous mode [ 2800.147709][ T8314] debugfs: 'hsr0' already exists in 'hsr' [ 2800.160116][ T8314] Cannot create hsr debugfs directory [ 2801.882175][ T8314] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2801.903795][ T8314] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2801.936947][ T8314] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2801.953899][ T8314] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2802.093133][ T8314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2802.119274][ T8314] 8021q: adding VLAN 0 to HW filter on device team0 [ 2802.137860][T28809] bridge0: port 1(bridge_slave_0) entered blocking state [ 2802.145063][T28809] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2802.175809][T28809] bridge0: port 2(bridge_slave_1) entered blocking state [ 2802.183006][T28809] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2802.265758][ T8314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2802.332436][ T8314] veth0_vlan: entered promiscuous mode [ 2802.349321][ T8314] veth1_vlan: entered promiscuous mode [ 2802.386845][ T8314] veth0_macvtap: entered promiscuous mode [ 2802.398185][ T8314] veth1_macvtap: entered promiscuous mode [ 2802.430852][ T8314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2802.448155][ T8314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2802.471585][ T7755] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2802.481489][ T7755] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2802.507864][ T7755] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2802.535898][ T7755] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2802.602572][ T7755] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2802.620042][ T7755] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2802.658580][ T7757] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2802.667798][ T7757] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2836.253013][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2836.259363][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2853.679719][T21259] Bluetooth: hci2: command 0x0406 tx timeout [ 2894.639606][T19620] Bluetooth: hci4: command 0x0406 tx timeout [ 2897.683420][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2897.689909][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2914.970083][ T31] INFO: task kworker/1:6:5916 blocked for more than 143 seconds. [ 2914.978113][ T31] Not tainted syzkaller #0 [ 2914.983223][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2914.998672][ T31] task:kworker/1:6 state:D stack:19480 pid:5916 tgid:5916 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 2915.010827][ T31] Workqueue: usb_hub_wq hub_event [ 2915.015888][ T31] Call Trace: [ 2915.019151][ T31] [ 2915.022172][ T31] __schedule+0x1798/0x4cc0 [ 2915.026710][ T31] ? __pfx___schedule+0x10/0x10 [ 2915.031642][ T31] ? schedule+0x91/0x360 [ 2915.035899][ T31] schedule+0x165/0x360 [ 2915.040215][ T31] usb_kill_urb+0x1be/0x2d0 [ 2915.044736][ T31] ? __pfx_usb_kill_urb+0x10/0x10 [ 2915.055126][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2915.062594][ T31] usb_start_wait_urb+0x18c/0x4c0 [ 2915.067650][ T31] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 2915.073252][ T31] ? usb_alloc_urb+0x46/0x150 [ 2915.077938][ T31] usb_control_msg+0x232/0x3e0 [ 2915.082820][ T31] hub_port_init+0x11e4/0x2800 [ 2915.087595][ T31] hub_event+0x2532/0x4a20 [ 2915.092110][ T31] ? __pfx_hub_event+0x10/0x10 [ 2915.096872][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2915.102701][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2915.107901][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2915.113665][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2915.119385][ T31] process_scheduled_works+0xae1/0x17b0 [ 2915.125045][T19620] Bluetooth: hci0: command 0x0406 tx timeout [ 2915.126475][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 2915.137801][ T31] worker_thread+0x8a0/0xda0 [ 2915.142544][ T31] kthread+0x711/0x8a0 [ 2915.146621][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2915.151814][ T31] ? __pfx_kthread+0x10/0x10 [ 2915.156431][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2915.162997][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2915.168265][ T31] ? __pfx_kthread+0x10/0x10 [ 2915.173165][ T31] ret_from_fork+0x4bc/0x870 [ 2915.177784][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2915.182949][ T31] ? __switch_to_asm+0x39/0x70 [ 2915.187709][ T31] ? __switch_to_asm+0x33/0x70 [ 2915.192509][ T31] ? __pfx_kthread+0x10/0x10 [ 2915.197102][ T31] ret_from_fork_asm+0x1a/0x30 [ 2915.202073][ T31] [ 2915.205216][ T31] [ 2915.205216][ T31] Showing all locks held in the system: [ 2915.213284][ T31] 1 lock held by khungtaskd/31: [ 2915.218147][ T31] #0: ffffffff8df3d2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2915.228624][ T31] 1 lock held by udevd/5197: [ 2915.233763][ T31] #0: ffff8880b883a058 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 2915.244299][ T31] 2 locks held by getty/5586: [ 2915.248960][ T31] #0: ffff88814d8b50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2915.259156][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 2915.270142][ T31] 5 locks held by kworker/1:6/5916: [ 2915.275348][ T31] #0: ffff8880216b9548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2915.287092][ T31] #1: ffffc9000473fba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2915.299400][ T31] #2: ffff88823be6c198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 2915.308853][ T31] #3: ffff888028fcf518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20 [ 2915.319266][ T31] #4: ffff888028343068 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20 [ 2915.329287][ T31] [ 2915.332014][ T31] ============================================= [ 2915.332014][ T31] [ 2915.340529][ T31] NMI backtrace for cpu 1 [ 2915.340549][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 2915.340567][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2915.340579][ T31] Call Trace: [ 2915.340586][ T31] [ 2915.340593][ T31] dump_stack_lvl+0x189/0x250 [ 2915.340622][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2915.340646][ T31] ? __pfx__printk+0x10/0x10 [ 2915.340674][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 2915.340696][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2915.340717][ T31] ? __pfx__printk+0x10/0x10 [ 2915.340739][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2915.340767][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2915.340790][ T31] watchdog+0xf60/0xfa0 [ 2915.340814][ T31] ? watchdog+0x1e2/0xfa0 [ 2915.340838][ T31] kthread+0x711/0x8a0 [ 2915.340864][ T31] ? __pfx_watchdog+0x10/0x10 [ 2915.340881][ T31] ? __pfx_kthread+0x10/0x10 [ 2915.340913][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2915.340933][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2915.340953][ T31] ? __pfx_kthread+0x10/0x10 [ 2915.340976][ T31] ret_from_fork+0x4bc/0x870 [ 2915.340997][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2915.341021][ T31] ? __switch_to_asm+0x39/0x70 [ 2915.341036][ T31] ? __switch_to_asm+0x33/0x70 [ 2915.341051][ T31] ? __pfx_kthread+0x10/0x10 [ 2915.341073][ T31] ret_from_fork_asm+0x1a/0x30 [ 2915.341104][ T31] [ 2915.341112][ T31] Sending NMI from CPU 1 to CPUs 0: [ 2915.489936][ C0] NMI backtrace for cpu 0 [ 2915.489952][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 2915.489971][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2915.489981][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 2915.490005][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 21 22 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 2915.490020][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 2915.490036][ C0] RAX: 4214c63512c95900 RBX: ffffffff81967be7 RCX: 4214c63512c95900 [ 2915.490049][ C0] RDX: 0000000000000001 RSI: ffffffff8d70bf1d RDI: ffffffff8bbf05e0 [ 2915.490061][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b8832fdb R09: 1ffff110171065fb [ 2915.490074][ C0] R10: dffffc0000000000 R11: ffffed10171065fc R12: ffffffff8f7cd470 [ 2915.490087][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a40 [ 2915.490098][ C0] FS: 0000000000000000(0000) GS:ffff88812613e000(0000) knlGS:0000000000000000 [ 2915.490112][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2915.490124][ C0] CR2: 0000564a6cdc4070 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 2915.490143][ C0] Call Trace: [ 2915.490150][ C0] [ 2915.490157][ C0] default_idle+0x13/0x20 [ 2915.490178][ C0] default_idle_call+0x73/0xb0 [ 2915.490199][ C0] do_idle+0x1e7/0x510 [ 2915.490220][ C0] ? __pfx_do_idle+0x10/0x10 [ 2915.490243][ C0] cpu_startup_entry+0x44/0x60 [ 2915.490260][ C0] rest_init+0x2de/0x300 [ 2915.490276][ C0] start_kernel+0x3ae/0x410 [ 2915.490297][ C0] x86_64_start_reservations+0x24/0x30 [ 2915.490315][ C0] x86_64_start_kernel+0x143/0x1c0 [ 2915.490332][ C0] common_startup_64+0x13e/0x147 [ 2915.490359][ C0]