last executing test programs: 30.380954439s ago: executing program 2 (id=470): unshare(0x8000600) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0, 0x33}], 0x1) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$sg(0x0, 0x2, 0x90400) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(0xffffffffffffffff, 0x5435, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000900)=ANY=[], 0x7) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0], &(0x7f0000000280), 0x1, r6}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000380)={0x401, 0x1, &(0x7f00000000c0)=[r6], &(0x7f0000000200), &(0x7f0000000300)=[r7], &(0x7f0000000580)}) sendmmsg$inet(r3, 0x0, 0x0, 0x0) r8 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000000f40)=[{{0x0, 0xcb000000, 0x0}}], 0x28000, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000300)="c9", 0x1) 29.820247377s ago: executing program 2 (id=474): r0 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000003c0)) 29.662464461s ago: executing program 2 (id=477): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000740)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x3, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @loopback}}}}}}, 0x0) r1 = fsopen(&(0x7f0000000040)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, 0x0) r4 = getpgrp(0x0) r5 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r6, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r6, 0xa, 0x12) readv(r7, &(0x7f0000000000)=[{&(0x7f0000000400)=""/223, 0xdf}], 0x1) r8 = dup2(r6, r7) fcntl$setown(r7, 0x8, r5) tkill(r5, 0x13) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r9, 0x0) sendmsg$netlink(r8, &(0x7f0000000340)={&(0x7f0000000140)=@kern={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)=[{&(0x7f000001bcc0)=ANY=[@ANYBLOB="fc000000380001002abd7000fedbdf25ec002d80e567dd2064f426d695acf98383ed36eba2b89665defe34a976d2b5ebd1810d11148dac6fc91839ebf696e73798a1eb6a0e8283fc63aadd66f04d3b94c993ea7db06058c4ce6c64c2de8103a0fd60ecce9c39d35fab864bec0389533169b0bcb2e04cee13ab6134aedfd31b1c8e5db5c69d78f81ff4c339be31fb186bc4777c89136a05611b5cb6a4d7cbaf03b8faaa55e92ea2dbd575336b2f8f7e780871c8ce5ae56aa28ea1da7bace4bc8f6b1e1991464181602ce1f91863ab8b391aad07de2972a709cf6d240835b1ea6315f2f80013f3a44dcee354cfbd92bf59be7785c8cf4604325f59969cb036f0ad182060ed1799519a427fd8e5a209445546"], 0xfc}, {&(0x7f0000019bc0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB='\b\x00\'\x00', @ANYRES32=r4, @ANYBLOB="08006a0041a1a7cf68e95e5ee18afab47a3df909520bf86f3bce051831a381132ad5a426f21dbf126051f522603c3e5bd264cf63cb322fddba080e398fe72ca680a31c2d78a7c89599fcff6bf50548be43ddb0d90a06878fc047feb180646c17c6599bd5c207d2f92e1c111b95e0c91a8d61eb4d314408e79cd6e9c3d1e05426f6bb82ac09b2446c5399a53a15", @ANYBLOB="ae6cd068a221233d4c798afcae723e27f748ed68289546370abc039a8e2d3c8afdf9fd18a5722ec80604809204688f9b8804f5e8b1b55b149826d497e4dacf24d093ccca0b1f00d508c26830cae82c47adfe73b9cf3afd38ff508f3a597ac4d93137d12411aae577f1955b764ed3d74f5bfa00003192b9b726640d9d2b31b6482082ec9b6ca3d9a751ed69db5c9b8c1090de007af5499efa7277d254f8b009929714802e3928cea5570b80afd11e831dbe26773dc9f01fa860c0339f1b3f976376b863fbb86767b5199672f5e281a6d0dfc67454670fb988e6c6fbf315cfd97c368beb35cd92961c4483845fa80032a356392e71ca9e7297bf58d4a2247f591400"/268], 0x2c0}, {&(0x7f000001be00)=ANY=[@ANYBLOB="3c1200003500040025bd", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="33000700dabfeb2f3dcd12247d6c83f0b38a91b53102d7d12fc63d9e4fad9bcfffd4fbf1fb5656ae802c2ca4aadcd4ddf200ed10268008001900ff03000004001900080097006612a3865e197cd3752cfb85ed259822a5442e1a2f3c1f331f3f898874b270272b7057853586a63b08ecdef80f0eeaa9ccba6f45b91d1e4744209eb4f28e70938198b31824", @ANYRES32=r9, @ANYBLOB="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"], 0x123c}], 0x3, 0x0, 0x0, 0x4cddb3268952b3d4}, 0xa0c0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000002600bdab"], 0x2c}}, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) close(r10) syz_usb_connect(0x0, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0xa4, 0xf5, 0x59, 0x20, 0x1bc7, 0x1041, 0x547c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0xe}}]}}]}}, 0x0) ioctl$sock_inet_udp_SIOCINQ(r10, 0x541b, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 29.394401722s ago: executing program 3 (id=483): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7fff, 0x2) preadv2(r1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/169, 0x7ffff000}, {&(0x7f0000000140)=""/121, 0x79}], 0x2, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 29.108540248s ago: executing program 3 (id=487): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d0"], 0x40}}, 0x0) 28.939263482s ago: executing program 3 (id=490): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 28.376730944s ago: executing program 1 (id=499): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xcb2}]}]}]}}]}, 0xa4}}, 0x0) 24.196650757s ago: executing program 1 (id=506): ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8001}}, './file0\x00'}) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000f18b3d106d04b2085980010203010902120001000020060904"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x9) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102373, 0x18fe5}], 0x1, 0x9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat2$dir(0xffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x8e, 0x5}, 0x18) statx(r1, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f00000007c0)=[0x1, 0x3], 0x2) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24008851}, 0x20044001) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') read$FUSE(r4, 0x0, 0x0) preadv(r4, &(0x7f0000000600)=[{&(0x7f0000000000)=""/142, 0x8e}, {0x0}, {&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/59, 0x3b}, {0x0}, {&(0x7f0000000580)=""/128, 0x80}], 0x6, 0x0, 0x0) r5 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x11, @multicast1, 0x0, 0x0, 'lblcr\x00'}, 0x2c) read(r4, &(0x7f0000001b00)=""/194, 0xc2) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, 0x0, 0x0) sendmsg$NL80211_CMD_GET_STATION(r2, 0x0, 0x40000) r6 = socket$netlink(0x10, 0x3, 0xf) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000091050000d23b2482d7", @ANYRES32=0x0, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x20004016}, 0x0) 24.196259235s ago: executing program 2 (id=507): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000280)=@device_b, &(0x7f0000000300)=@mgmt_frame=@beacon={{{}, {}, @device_b}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @val={0x25, 0x3}, @void, @void, @void, @void, @void, @void, [{0xdd, 0x6, "300d46e87334"}]}, 0x31) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@private2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x2800000000}}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r8, 0x1, 0x13, 0x0, &(0x7f0000000980)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r9, @ANYBLOB="0a00340002020203020200000a000600505050505050"], 0x44}}, 0x0) 22.632441524s ago: executing program 3 (id=509): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000240)) 19.588661029s ago: executing program 1 (id=511): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x4, 0xffffffffffffff36, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e000102"], 0x1c}}, 0x0) 18.919568789s ago: executing program 2 (id=513): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0xb8}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x6a, &(0x7f0000000500)={@local, @random="cce390677742", @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0cbb05", 0x30, 0x2f, 0x0, @private1, @local, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "0120d2", 0x0, 0x0, 0x0, @mcast2, @remote}}}}}}}, 0x0) 18.88509039s ago: executing program 2 (id=514): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) io_setup(0x2, &(0x7f0000000640)=0x0) io_submit(r1, 0x2, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x7, 0x1, 0x0, r0, 0x0}, 0x0]) 17.20452423s ago: executing program 4 (id=515): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000c80)=[{0x0, 0x0, 0x0, 0xfffff038}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x8) r2 = fcntl$dupfd(r0, 0x0, r1) write$tun(r2, &(0x7f0000000700)=ANY=[], 0x4) 16.201144385s ago: executing program 1 (id=516): sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000740)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x3, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @loopback}}}}}}, 0x0) r1 = fsopen(&(0x7f0000000040)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = getpgrp(0x0) r5 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r6, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r6, 0xa, 0x12) readv(r7, &(0x7f0000000000)=[{&(0x7f0000000400)=""/223, 0xdf}], 0x1) r8 = dup2(r6, r7) fcntl$setown(r7, 0x8, r5) tkill(r5, 0x13) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r9, 0x0) sendmsg$netlink(r8, &(0x7f0000000340)={&(0x7f0000000140)=@kern={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)=[{&(0x7f000001bcc0)=ANY=[@ANYBLOB="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"], 0xfc}, {&(0x7f0000019bc0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB='\b\x00\'\x00', @ANYRES32=r4, @ANYBLOB="08006a0041a1a7cf68e95e5ee18afab47a3df909520bf86f3bce051831a381132ad5a426f21dbf126051f522603c3e5bd264cf63cb322fddba080e398fe72ca680a31c2d78a7c89599fcff6bf50548be43ddb0d90a06878fc047feb180646c17c6599bd5c207d2f92e1c111b95e0c91a8d61eb4d314408e79cd6e9c3d1e05426f6bb82ac09b2446c5399a53a15", @ANYBLOB="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"/268], 0x2c0}, {&(0x7f000001be00)=ANY=[@ANYBLOB="3c1200003500040025bd", @ANYRES32=r4, @ANYBLOB="19a0d983c314a4aa1bb5682e38a8607ac58ad604436da08dd77f01a83bc55520fdff7d6e5cc7ce5658ab2c24abb76071723e63a67bf45696754cfa6625661e4043700599251d2251aa244e366a05061c918a2ed7cd028d3b7532aa7a089353b49e182479f5033c19ccd5d1142b88015053e5babb631dd9874cd1904525082b5a252fdf38bd84b9d545bf51ad47ebdb4d6c3a883b626e7585d5842186440323042d233783413e3eeb419433f33d8873ac627e8463c80cb1c7d6151e700a14a1facdd12c76237e4517050a916b7d0dfa313ce27980352f42b4727c1fdb504198f7683f641181df9d2d9c17870f10a2a02983bb7c792830a40800e100", @ANYRES32=r4, @ANYBLOB="33000700dabfeb2f3dcd12247d6c83f0b38a91b53102d7d12fc63d9e4fad9bcfffd4fbf1fb5656ae802c2ca4aadcd4ddf200ed10268008001900ff03000004001900080097006612a3865e197cd3752cfb85ed259822a5442e1a2f3c1f331f3f898874b270272b7057853586a63b08ecdef80f0eeaa9ccba6f45b91d1e4744209eb4f28e70938198b31824", @ANYRES32=r9, @ANYBLOB="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"], 0x123c}], 0x3, 0x0, 0x0, 0x4cddb3268952b3d4}, 0xa0c0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000002600bdab"], 0x2c}}, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) close(r10) syz_usb_connect(0x0, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0xa4, 0xf5, 0x59, 0x20, 0x1bc7, 0x1041, 0x547c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0xe}}]}}]}}, 0x0) ioctl$sock_inet_udp_SIOCINQ(r10, 0x541b, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 16.200591377s ago: executing program 4 (id=517): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38}]}}]}, 0x6c}}, 0x0) 16.17901608s ago: executing program 0 (id=518): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0x44}}, 0x0) 14.7325818s ago: executing program 3 (id=519): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x81, 0x2, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x402, r0}, 0x38) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, &(0x7f0000001640)=""/233, &(0x7f00000002c0), &(0x7f0000000440), 0x5, r0}, 0x38) 14.732313027s ago: executing program 0 (id=520): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x4, 0x0, 0x0) 14.732051841s ago: executing program 4 (id=521): r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') 14.406388469s ago: executing program 4 (id=522): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x50, r2, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x400, 0x0, 0x7, 0x0, {0xfff, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x300, 0x3, 0x40}}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x96c}]]}, 0x50}}, 0x0) 14.25241088s ago: executing program 4 (id=523): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0x1d, &(0x7f0000000040)=ANY=[], 0x4) 14.230038828s ago: executing program 0 (id=524): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000280)=@device_b, &(0x7f0000000300)=@mgmt_frame=@beacon={{{}, {}, @device_b}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @val={0x25, 0x3}, @void, @void, @void, @void, @void, @void, [{0xdd, 0x6, "300d46e87334"}]}, 0x31) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@private2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x2800000000}}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r8, 0x1, 0x13, 0x0, &(0x7f0000000980)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r9, @ANYBLOB="0a00340002020203020200000a000600505050505050"], 0x44}}, 0x0) 13.992786497s ago: executing program 4 (id=525): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, 0x0) 12.398964881s ago: executing program 1 (id=526): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000006604000008000300", @ANYRES32=r2, @ANYBLOB="0800b7000400000008002600940900000800a0000200000005001901080000000500190104000000080027"], 0x4c}}, 0x0) 12.369746215s ago: executing program 3 (id=527): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000f103"]) 9.069433657s ago: executing program 1 (id=528): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000ebffff9702"]) 8.968333754s ago: executing program 0 (id=529): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) 384.613552ms ago: executing program 0 (id=533): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f00000001c0), 0x2, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) 0s ago: executing program 0 (id=534): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000007c0)=ANY=[@ANYBLOB="3b00000000000000d004"]) kernel console output (not intermixed with test programs): rface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.973710][ T5391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.028462][ T5391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.063594][ T5391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.177814][ T5391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.253689][ T54] Bluetooth: hci4: command tx timeout [ 78.541975][ T5391] hsr_slave_0: entered promiscuous mode [ 78.556577][ T5391] hsr_slave_1: entered promiscuous mode [ 78.583273][ T5391] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.591697][ T5391] Cannot create hsr debugfs directory [ 78.739798][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.846253][ T5515] netlink: 'syz.1.51': attribute type 4 has an invalid length. [ 79.014164][ T5517] process 'syz.3.53' launched '/dev/fd/4' with NULL argv: empty string added [ 79.056004][ T5237] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.065983][ T5237] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.077685][ T5237] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.087065][ T5237] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.101400][ T5237] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 79.102945][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.119751][ T5237] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.305660][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.419785][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.523670][ T58] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 79.536876][ T5284] usb 10-1: device descriptor read/8, error -110 [ 79.733861][ T58] usb 4-1: Using ep0 maxpacket: 8 [ 79.756429][ T58] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 79.780504][ T58] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.819652][ T58] usb 4-1: Product: syz [ 79.828743][ T58] usb 4-1: Manufacturer: syz [ 79.843936][ T58] usb 4-1: SerialNumber: syz [ 79.869346][ T58] usb 4-1: config 0 descriptor?? [ 79.918954][ T12] bridge_slave_1: left allmulticast mode [ 79.937602][ T12] bridge_slave_1: left promiscuous mode [ 79.949079][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.972697][ T12] bridge_slave_0: left allmulticast mode [ 79.979852][ T12] bridge_slave_0: left promiscuous mode [ 79.985539][ T5284] usb usb10-port1: attempt power cycle [ 80.001833][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.143814][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.153869][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.153982][ T58] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 80.174933][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.188335][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.196768][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 80.205407][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.333476][ T54] Bluetooth: hci4: command tx timeout [ 80.551766][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 80.563216][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 80.580195][ T12] bond0 (unregistering): Released all slaves [ 80.657815][ T5284] usb usb10-port1: unable to enumerate USB device [ 80.775535][ T5527] chnl_net:caif_netlink_parms(): no params data found [ 81.041511][ T12] hsr_slave_0: left promiscuous mode [ 81.050757][ T12] hsr_slave_1: left promiscuous mode [ 81.078138][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.086319][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.095206][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.102830][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.165006][ T12] veth1_macvtap: left promiscuous mode [ 81.170917][ T12] veth0_macvtap: left promiscuous mode [ 81.181194][ T12] veth1_vlan: left promiscuous mode [ 81.192127][ T12] veth0_vlan: left promiscuous mode [ 81.213496][ T54] Bluetooth: hci1: command tx timeout [ 81.542953][ T5237] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.558038][ T5237] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.568245][ T5237] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.576593][ T5237] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.585703][ T5237] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 81.601243][ T5237] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.622484][ T58] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 81.650808][ T58] usb 4-1: USB disconnect, device number 4 [ 81.956705][ T12] team0 (unregistering): Port device team_slave_1 removed [ 82.001562][ T12] team0 (unregistering): Port device team_slave_0 removed [ 82.259735][ T54] Bluetooth: hci3: command tx timeout [ 82.437671][ T5527] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.445240][ T5527] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.452411][ T5527] bridge_slave_0: entered allmulticast mode [ 82.461323][ T5527] bridge_slave_0: entered promiscuous mode [ 82.477118][ T5527] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.485434][ T5527] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.492681][ T5527] bridge_slave_1: entered allmulticast mode [ 82.500376][ T5527] bridge_slave_1: entered promiscuous mode [ 82.553545][ T58] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 82.576017][ T5391] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.600504][ T5391] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.615039][ T5391] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.638868][ T5527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.663186][ T5391] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 82.715715][ T5527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.767676][ T5527] team0: Port device team_slave_0 added [ 82.768931][ T58] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 82.790698][ T58] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.799217][ T58] usb 4-1: Product: syz [ 82.804214][ T58] usb 4-1: Manufacturer: syz [ 82.808853][ T58] usb 4-1: SerialNumber: syz [ 82.821764][ T58] usb 4-1: config 0 descriptor?? [ 82.831447][ T58] ch341 4-1:0.0: ch341-uart converter detected [ 82.845333][ T5527] team0: Port device team_slave_1 added [ 82.920318][ T5527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.928026][ T5527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.954628][ T5527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.993735][ T5537] chnl_net:caif_netlink_parms(): no params data found [ 83.007948][ T5527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.015145][ T5527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.047137][ T5527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.271188][ T5527] hsr_slave_0: entered promiscuous mode [ 83.280567][ T5527] hsr_slave_1: entered promiscuous mode [ 83.287292][ T5527] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.296680][ T54] Bluetooth: hci1: command tx timeout [ 83.302322][ T5527] Cannot create hsr debugfs directory [ 83.347625][ T5537] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.355609][ T5537] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.362974][ T5537] bridge_slave_0: entered allmulticast mode [ 83.373384][ T5537] bridge_slave_0: entered promiscuous mode [ 83.409468][ T5537] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.418003][ T5537] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.425522][ T5537] bridge_slave_1: entered allmulticast mode [ 83.432910][ T5537] bridge_slave_1: entered promiscuous mode [ 83.501051][ T5537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.510736][ T5544] chnl_net:caif_netlink_parms(): no params data found [ 83.557471][ T5537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.614181][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.694048][ T54] Bluetooth: hci0: command tx timeout [ 83.732821][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.758271][ T5537] team0: Port device team_slave_0 added [ 83.767383][ T5537] team0: Port device team_slave_1 added [ 83.833136][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.977319][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.055302][ T5537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.062298][ T5537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.102102][ T5537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.219379][ T5537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.231919][ T5537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.263476][ T5537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.292511][ T5391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.334259][ T54] Bluetooth: hci3: command tx timeout [ 84.344502][ T58] ch341-uart ttyUSB0: failed to read break control: -71 [ 84.345148][ T5544] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.356059][ T58] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 84.370946][ T5544] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.380472][ T5544] bridge_slave_0: entered allmulticast mode [ 84.388552][ T5544] bridge_slave_0: entered promiscuous mode [ 84.403943][ T58] usb 4-1: USB disconnect, device number 5 [ 84.420275][ T58] ch341 4-1:0.0: device disconnected [ 84.421766][ T5544] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.448396][ T5544] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.463263][ T5544] bridge_slave_1: entered allmulticast mode [ 84.474227][ T5544] bridge_slave_1: entered promiscuous mode [ 84.572854][ T5391] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.615310][ T5544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.631008][ T1053] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.638183][ T1053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.663773][ T5537] hsr_slave_0: entered promiscuous mode [ 84.670523][ T5537] hsr_slave_1: entered promiscuous mode [ 84.678616][ T5537] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.689372][ T5537] Cannot create hsr debugfs directory [ 84.749619][ T5544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.819887][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.840934][ T1053] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.848142][ T1053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.950174][ T5544] team0: Port device team_slave_0 added [ 85.051373][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.102754][ T5544] team0: Port device team_slave_1 added [ 85.183107][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.274069][ T5544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.281066][ T5544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.308435][ T5544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.327424][ T5544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.334611][ T5544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.361406][ T5544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.373532][ T58] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 85.374153][ T54] Bluetooth: hci1: command tx timeout [ 85.400013][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.542285][ T5527] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.575437][ T58] usb 4-1: unable to get BOS descriptor or descriptor too short [ 85.588766][ T58] usb 4-1: not running at top speed; connect to a high speed hub [ 85.594966][ T5544] hsr_slave_0: entered promiscuous mode [ 85.605683][ T58] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 85.609490][ T5544] hsr_slave_1: entered promiscuous mode [ 85.624266][ T58] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.636466][ T5544] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.636870][ T58] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 85.645879][ T5544] Cannot create hsr debugfs directory [ 85.674436][ T58] usb 4-1: config 1 has no interface number 1 [ 85.690854][ T58] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 85.712424][ T5391] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.732634][ T58] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 85.746288][ T58] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.757815][ T5527] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.773622][ T54] Bluetooth: hci0: command tx timeout [ 85.773906][ T58] usb 4-1: Product: syz [ 85.796256][ T5527] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.803770][ T58] usb 4-1: Manufacturer: syz [ 85.808402][ T58] usb 4-1: SerialNumber: syz [ 85.871033][ T5527] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.077986][ T5391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.096837][ T12] bridge_slave_1: left allmulticast mode [ 86.102527][ T12] bridge_slave_1: left promiscuous mode [ 86.131426][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.160658][ T12] bridge_slave_0: left allmulticast mode [ 86.181543][ T12] bridge_slave_0: left promiscuous mode [ 86.203557][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.229610][ T12] bridge_slave_1: left allmulticast mode [ 86.243842][ T12] bridge_slave_1: left promiscuous mode [ 86.259814][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.273801][ T12] bridge_slave_0: left allmulticast mode [ 86.279542][ T12] bridge_slave_0: left promiscuous mode [ 86.289650][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.413839][ T54] Bluetooth: hci3: command tx timeout [ 87.463725][ T54] Bluetooth: hci1: command tx timeout [ 87.652915][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.669134][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.681024][ T12] bond0 (unregistering): Released all slaves [ 87.811291][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.822824][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.845175][ T12] bond0 (unregistering): Released all slaves [ 87.853659][ T54] Bluetooth: hci0: command tx timeout [ 88.244837][ T58] usb 4-1: USB disconnect, device number 6 [ 88.501163][ T54] Bluetooth: hci3: command tx timeout [ 88.889915][ T5527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.035986][ T5391] veth0_vlan: entered promiscuous mode [ 89.227294][ T5391] veth1_vlan: entered promiscuous mode [ 89.305219][ T5527] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.390680][ T12] hsr_slave_0: left promiscuous mode [ 89.403042][ T12] hsr_slave_1: left promiscuous mode [ 89.412017][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.444461][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.464687][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.472158][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.510500][ T12] hsr_slave_0: left promiscuous mode [ 89.530107][ T12] hsr_slave_1: left promiscuous mode [ 89.558541][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.583607][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.614999][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.631501][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.692453][ T12] veth1_macvtap: left promiscuous mode [ 89.711583][ T12] veth0_macvtap: left promiscuous mode [ 89.725185][ T12] veth1_vlan: left promiscuous mode [ 89.748496][ T12] veth0_vlan: left promiscuous mode [ 89.766218][ T12] veth1_macvtap: left promiscuous mode [ 89.778954][ T12] veth0_macvtap: left promiscuous mode [ 89.787161][ T12] veth1_vlan: left promiscuous mode [ 89.805752][ T12] veth0_vlan: left promiscuous mode [ 89.933833][ T54] Bluetooth: hci0: command tx timeout [ 90.041021][ T5654] netlink: 4 bytes leftover after parsing attributes in process `syz.3.68'. [ 90.491149][ T5666] netlink: 72 bytes leftover after parsing attributes in process `syz.3.69'. [ 90.531779][ T5666] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 90.568557][ T5666] VFS: Mount too revealing [ 90.940639][ T12] team0 (unregistering): Port device team_slave_1 removed [ 90.989488][ T12] team0 (unregistering): Port device team_slave_0 removed [ 91.707330][ T12] team0 (unregistering): Port device team_slave_1 removed [ 91.747605][ T12] team0 (unregistering): Port device team_slave_0 removed [ 92.121486][ T3048] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.128703][ T3048] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.139894][ T3048] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.147041][ T3048] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.176621][ T5391] veth0_macvtap: entered promiscuous mode [ 92.268756][ T5391] veth1_macvtap: entered promiscuous mode [ 92.427685][ T5391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.439575][ T5391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.478983][ T5391] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.597484][ T5391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.633431][ T5391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.662043][ T5391] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.713498][ T5544] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.741683][ T5527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.778702][ T5391] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.833023][ T5391] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.871791][ T5391] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.883535][ T5391] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.895047][ T5544] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.936966][ T5544] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.990872][ T5544] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.115441][ T5537] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.152131][ T5537] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.180939][ T5537] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.225329][ T5537] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.383142][ T5527] veth0_vlan: entered promiscuous mode [ 93.490292][ T5527] veth1_vlan: entered promiscuous mode [ 93.574469][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.608095][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.681798][ T5544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.724621][ T5527] veth0_macvtap: entered promiscuous mode [ 93.750504][ T1113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.756889][ T5527] veth1_macvtap: entered promiscuous mode [ 93.788049][ T1113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.947673][ T5544] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.996088][ T5527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.023385][ T5527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.042746][ T5527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.071023][ T5527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.122265][ T5527] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.167513][ T3048] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.174678][ T3048] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.255411][ T5537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.297684][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.304918][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.339701][ T5527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.360928][ T5527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.389323][ T5527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.389348][ T5527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.391052][ T5527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.398473][ T5527] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.398535][ T5527] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.398560][ T5527] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.398585][ T5527] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.604957][ T5537] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.632739][ T1113] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.632856][ T1113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.732386][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.739547][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.790288][ T5544] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.833506][ T941] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 95.032099][ T5544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.052086][ T941] usb 4-1: New USB device found, idVendor=05ac, idProduct=0253, bcdDevice=65.5a [ 95.073481][ T941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.094157][ T941] usb 4-1: config 0 descriptor?? [ 95.126952][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.148026][ T941] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input8 [ 95.185909][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.288936][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.312515][ T5537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.322899][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.496517][ T5544] veth0_vlan: entered promiscuous mode [ 95.558584][ T5544] veth1_vlan: entered promiscuous mode [ 95.593281][ T5537] veth0_vlan: entered promiscuous mode [ 95.636117][ T5537] veth1_vlan: entered promiscuous mode [ 95.725778][ T5748] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 95.728239][ T5544] veth0_macvtap: entered promiscuous mode [ 95.814042][ T5544] veth1_macvtap: entered promiscuous mode [ 95.822530][ T5537] veth0_macvtap: entered promiscuous mode [ 95.851957][ T5537] veth1_macvtap: entered promiscuous mode [ 95.894655][ T5544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.922208][ T5544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.017235][ T5544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.131339][ T5544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.141610][ T5544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.153905][ T5544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.166702][ T5544] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.183207][ T4676] bcm5974 4-1:0.0: could not read from device [ 96.222283][ T5537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.242303][ T5537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.266141][ T5537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.281231][ T5537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.293238][ T5537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.308355][ T5537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.320219][ T5537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.328735][ T941] usb 4-1: USB disconnect, device number 7 [ 96.339258][ T5537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.343259][ T5239] bcm5974 4-1:0.0: could not read from device [ 96.356257][ T5537] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.392496][ T5537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.441571][ T5537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.468685][ T5537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.489794][ T5537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.516203][ T5537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.544029][ T5537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.561304][ T4676] bcm5974 4-1:0.0: could not read from device [ 96.572106][ T5537] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.615533][ T5239] udevd[5239]: Error opening device "/dev/input/event4": No such device [ 96.626115][ T5239] udevd[5239]: Unable to EVIOCGABS device "/dev/input/event4" [ 96.642274][ T5239] udevd[5239]: Unable to EVIOCGABS device "/dev/input/event4" [ 96.653008][ T5537] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.673277][ T5537] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.690328][ T5239] udevd[5239]: Unable to EVIOCGABS device "/dev/input/event4" [ 96.705719][ T5537] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.725013][ T5239] udevd[5239]: Unable to EVIOCGABS device "/dev/input/event4" [ 96.728325][ T5770] use of bytesused == 0 is deprecated and will be removed in the future, [ 96.732561][ T5537] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.747948][ T5770] use the actual size instead. [ 96.837780][ T5544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.873636][ T5544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.905925][ T5544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.923525][ T5544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.946516][ T5544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.995457][ T5544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.008665][ T5544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.023480][ T5544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.038907][ T5544] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.117686][ T5544] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.158672][ T5544] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.184008][ T5544] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.184040][ T5544] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.290627][ T5781] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode [ 97.627388][ T3048] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.664808][ T3048] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.722896][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.744672][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.831376][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.872430][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.936691][ T1053] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.983249][ T1053] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.230280][ T5287] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 98.434436][ T5287] usb 1-1: Using ep0 maxpacket: 8 [ 98.459856][ T5287] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 98.501295][ T5287] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 98.552777][ T5287] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 98.566335][ T5287] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 98.581866][ T5287] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 98.606085][ T5287] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.794074][ T8] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 98.813013][ T5812] raw_sendmsg: syz.4.83 forgot to set AF_INET. Fix it! [ 98.868877][ T5287] usb 1-1: GET_CAPABILITIES returned 0 [ 98.889542][ T5287] usbtmc 1-1:16.0: can't read capabilities [ 99.005296][ T8] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 99.080491][ T8] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 99.112287][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 99.133035][ T8] usb 2-1: SerialNumber: syz [ 99.173214][ T8] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 99.238964][ T5795] usbtmc 1-1:16.0: send_request_dev_dep_msg_in returned -90 [ 99.279808][ T5819] kvm: emulating exchange as write [ 99.285154][ T5795] netlink: 'syz.0.82': attribute type 4 has an invalid length. [ 99.368225][ T5795] netlink: 20 bytes leftover after parsing attributes in process `syz.0.82'. [ 99.392399][ T5298] usb 1-1: USB disconnect, device number 7 [ 99.524247][ T8] usb 2-1: USB disconnect, device number 3 [ 100.257336][ T54] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 100.397332][ T5836] netlink: 'syz.1.92': attribute type 4 has an invalid length. [ 100.497018][ T5833] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 100.589444][ T5833] input: syz0 as /devices/virtual/input/input9 [ 100.903930][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 100.916337][ T5846] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 100.977121][ T5841] kvm: pic: non byte read [ 100.993568][ T5846] input: syz0 as /devices/virtual/input/input10 [ 101.007533][ T5841] kvm: pic: level sensitive irq not supported [ 101.007657][ T5841] kvm: pic: non byte read [ 101.018504][ T5846] input: failed to attach handler leds to device input10, error: -6 [ 101.046539][ T5841] kvm: pic: level sensitive irq not supported [ 101.046622][ T5841] kvm: pic: non byte read [ 101.060967][ T5841] kvm: pic: level sensitive irq not supported [ 101.061033][ T5841] kvm: pic: non byte read [ 101.104048][ T5852] xt_CT: You must specify a L4 protocol and not use inversions on it [ 101.112495][ T5841] kvm: pic: level sensitive irq not supported [ 101.112654][ T5841] kvm: pic: non byte read [ 101.123681][ T54] Bluetooth: hci4: unknown advertising packet type: 0x07 [ 101.129052][ T9] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 101.263481][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.319930][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.357179][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 101.407594][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 101.423425][ T9] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 101.443350][ T9] usb 4-1: Manufacturer: syz [ 101.494400][ T9] usb 4-1: config 0 descriptor?? [ 103.224253][ T5862] netlink: 4 bytes leftover after parsing attributes in process `syz.1.100'. [ 103.354027][ T5870] fuse: Unknown parameter '&d' [ 103.382453][ T9] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 103.401944][ T9] appleir 0003:05AC:8243.0001: No inputs registered, leaving [ 103.456051][ T9] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 103.843680][ T5876] netlink: 4 bytes leftover after parsing attributes in process `syz.0.104'. [ 104.146894][ T5877] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 104.160381][ T5288] usb 4-1: USB disconnect, device number 8 [ 104.218055][ T5877] kvm: pic: non byte read [ 104.231334][ T5877] kvm: pic: non byte read [ 104.243672][ T5298] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 104.246242][ T5877] kvm: pic: non byte read [ 104.258646][ T5877] kvm: pic: single mode not supported [ 104.258665][ T5877] kvm: pic: level sensitive irq not supported [ 104.272532][ T5877] kvm: pic: non byte read [ 104.291997][ T5877] kvm: pic: non byte read [ 104.304362][ T5877] kvm: pic: level sensitive irq not supported [ 104.493681][ T5298] usb 3-1: Using ep0 maxpacket: 8 [ 104.568550][ T5298] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 104.600798][ T5298] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.645316][ T5298] usb 3-1: Product: syz [ 104.649551][ T5298] usb 3-1: Manufacturer: syz [ 104.673851][ T5298] usb 3-1: SerialNumber: syz [ 104.696023][ T5298] usb 3-1: config 0 descriptor?? [ 104.892828][ T5902] netlink: 104 bytes leftover after parsing attributes in process `syz.4.107'. [ 104.917345][ T29] audit: type=1326 audit(1726275688.787:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5903 comm="syz.3.109" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 104.939952][ T5909] netlink: 'syz.1.110': attribute type 10 has an invalid length. [ 104.958196][ T5298] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 104.997217][ T29] audit: type=1326 audit(1726275688.787:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5903 comm="syz.3.109" exe="/root/syz-executor" sig=0 arch=40000003 syscall=14 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 105.032790][ T29] audit: type=1326 audit(1726275688.787:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5903 comm="syz.3.109" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 105.074409][ T5909] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.102140][ T29] audit: type=1326 audit(1726275688.787:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5903 comm="syz.3.109" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 105.171329][ T29] audit: type=1326 audit(1726275688.827:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5903 comm="syz.3.109" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 105.196731][ T5909] bond0: (slave team0): Enslaving as an active interface with an up link [ 105.267967][ T5912] netlink: 'syz.1.110': attribute type 10 has an invalid length. [ 105.284759][ T29] audit: type=1326 audit(1726275688.827:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5903 comm="syz.3.109" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 105.327167][ T29] audit: type=1326 audit(1726275688.827:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5903 comm="syz.3.109" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 105.363549][ T5912] bond0: (slave team0): Releasing backup interface [ 105.388798][ T29] audit: type=1326 audit(1726275688.827:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5903 comm="syz.3.109" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 105.425563][ T29] audit: type=1326 audit(1726275688.827:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5903 comm="syz.3.109" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 105.458390][ T5912] bridge0: port 3(team0) entered blocking state [ 105.480299][ T5912] bridge0: port 3(team0) entered disabled state [ 105.492587][ T29] audit: type=1326 audit(1726275688.827:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5903 comm="syz.3.109" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 105.500275][ T5912] team0: entered allmulticast mode [ 105.532874][ T5912] team_slave_0: entered allmulticast mode [ 105.540754][ T5912] team_slave_1: entered allmulticast mode [ 105.550814][ T5912] team0: entered promiscuous mode [ 105.558843][ T5912] team_slave_0: entered promiscuous mode [ 105.566984][ T5912] team_slave_1: entered promiscuous mode [ 105.586948][ T5920] netlink: 4 bytes leftover after parsing attributes in process `syz.0.111'. [ 106.243685][ T5934] veth0_vlan: left promiscuous mode [ 106.264004][ T5289] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 106.395385][ T5298] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 106.450593][ T5298] usb 3-1: USB disconnect, device number 2 [ 106.490633][ T5289] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.513809][ T5289] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 106.567468][ T5289] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 106.592742][ T5289] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.618045][ T5289] usb 4-1: config 0 descriptor?? [ 106.636724][ T5289] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 106.661438][ T5939] netlink: 'syz.1.117': attribute type 4 has an invalid length. [ 106.678509][ T5939] netlink: 'syz.1.117': attribute type 4 has an invalid length. [ 106.934667][ T5298] usb 4-1: USB disconnect, device number 9 [ 107.091995][ T5933] syz.0.116 (5933): drop_caches: 2 [ 107.292150][ T5949] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.120' sets config #1 [ 107.395735][ T5950] binder_alloc: 5946: binder_alloc_buf, no vma [ 108.220262][ T5971] xt_NFQUEUE: number of total queues is 0 [ 108.393506][ T5967] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.474080][ T5975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.506152][ T5975] netlink: 4 bytes leftover after parsing attributes in process `syz.4.129'. [ 108.530988][ T5975] netlink: 4 bytes leftover after parsing attributes in process `syz.4.129'. [ 108.606120][ T5975] netlink: 16 bytes leftover after parsing attributes in process `syz.4.129'. [ 109.955319][ T54] Bluetooth: hci2: unexpected subevent 0x01 length: 78 > 18 [ 110.329909][ T6012] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.142'. [ 110.399244][ T6014] input: syz0 as /devices/virtual/input/input11 [ 110.624910][ T6018] netlink: 4 bytes leftover after parsing attributes in process `syz.2.144'. [ 110.675559][ T5287] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 110.691039][ T6018] netlink: 4 bytes leftover after parsing attributes in process `syz.2.144'. [ 110.863468][ T5287] usb 2-1: Using ep0 maxpacket: 8 [ 110.897110][ T5287] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 110.925490][ T6018] team0: Port device team_slave_0 removed [ 110.947322][ T5287] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 110.976659][ T5287] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 111.026884][ T5287] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 111.051914][ T5287] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 111.107511][ T5287] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 111.128290][ T5287] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.223436][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 111.415364][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.448555][ T5287] usb 2-1: usb_control_msg returned -32 [ 111.468215][ T9] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 111.493976][ T5287] usbtmc 2-1:16.0: can't read capabilities [ 111.517366][ T9] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.95 [ 111.559533][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.567794][ T6027] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.593666][ T9] usb 4-1: Product: syz [ 111.597971][ T9] usb 4-1: Manufacturer: syz [ 111.633841][ T9] usb 4-1: SerialNumber: syz [ 111.650851][ T9] usb 4-1: config 0 descriptor?? [ 111.939248][ T9] usb 4-1: USB disconnect, device number 10 [ 112.090051][ T5288] usb 2-1: USB disconnect, device number 4 [ 112.097031][ T6015] usbtmc 2-1:16.0: usb_control_msg returned -71 [ 113.174539][ T5288] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 113.274018][ T6059] syzkaller0: entered promiscuous mode [ 113.282783][ T6059] syzkaller0: entered allmulticast mode [ 113.303787][ T3048] syzkaller0: tun_net_xmit 48 [ 113.345843][ T6059] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 113.358069][ T6059] syzkaller0: Linktype set failed because interface is up [ 113.403691][ T6059] syzkaller0: tun_net_xmit 1280 [ 113.412603][ T5288] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.434567][ T6059] syzkaller0: create flow: hash 976965286 index 1 [ 113.444314][ T5288] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 113.460701][ T5288] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.479135][ T5288] usb 5-1: Product: syz [ 113.485804][ T5288] usb 5-1: Manufacturer: syz [ 113.505716][ T5288] usb 5-1: SerialNumber: syz [ 113.588878][ T6057] syzkaller0: delete flow: hash 976965286 index 1 [ 113.824055][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 113.824072][ T29] audit: type=1326 audit(1726275697.687:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6067 comm="syz.2.161" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x0 [ 114.098895][ T5284] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 114.331727][ T5284] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=80.99 [ 114.343822][ T5284] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.352818][ T5284] usb 1-1: Product: syz [ 114.362050][ T5284] usb 1-1: Manufacturer: syz [ 114.378106][ T5284] usb 1-1: SerialNumber: syz [ 114.394184][ T5284] usb 1-1: config 0 descriptor?? [ 114.776384][ T5288] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 114.783104][ T5288] cdc_ncm 5-1:1.0: setting rx_max = 16384 [ 114.931834][ T5284] usb 1-1: USB disconnect, device number 8 [ 114.967970][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 114.985680][ T5288] cdc_ncm 5-1:1.0: setting tx_max = 16384 [ 115.173544][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 115.193861][ T9] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 115.202271][ T9] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 115.211128][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.221730][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 115.230867][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 115.244046][ T9] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 115.253129][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.273920][ T9] usb 3-1: config 0 descriptor?? [ 115.864697][ T5284] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 115.895960][ T8] usb 3-1: USB disconnect, device number 3 [ 116.073923][ T5284] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 116.093382][ T5284] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.109310][ T5284] usb 1-1: config 0 descriptor?? [ 116.304215][ T5288] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 116.342129][ T5288] usb 5-1: USB disconnect, device number 2 [ 116.354542][ T5288] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 116.580857][ T5284] usb 1-1: Cannot read MAC address [ 116.610502][ T5284] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 116.668837][ T5284] usb 1-1: USB disconnect, device number 9 [ 117.270814][ T6106] team0: entered promiscuous mode [ 117.293179][ T6106] team_slave_1: entered promiscuous mode [ 117.306992][ T8] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 117.321964][ T6106] dummy0: entered promiscuous mode [ 117.503778][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 117.532488][ T8] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.559578][ T8] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.583535][ T8] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 117.606454][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.655706][ T8] hub 4-1:4.0: USB hub found [ 117.661684][ T6119] syzkaller0: entered allmulticast mode [ 117.783591][ T54] Bluetooth: hci3: Malformed LE Event: 0x0d [ 118.086490][ T8] hub 4-1:4.0: config failed, can't read hub descriptor (err -22) [ 118.134416][ T29] audit: type=1326 audit(1726275701.997:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6125 comm="syz.1.181" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f3f579 code=0x7ffc0000 [ 118.179396][ T8] usb 4-1: USB disconnect, device number 11 [ 118.208794][ T29] audit: type=1326 audit(1726275701.997:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6125 comm="syz.1.181" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f3f579 code=0x7ffc0000 [ 118.302000][ T29] audit: type=1326 audit(1726275702.007:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6125 comm="syz.1.181" exe="/root/syz-executor" sig=0 arch=40000003 syscall=321 compat=1 ip=0xf7f3f579 code=0x7ffc0000 [ 118.383370][ T29] audit: type=1326 audit(1726275702.027:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6125 comm="syz.1.181" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f3f579 code=0x7ffc0000 [ 118.416255][ T29] audit: type=1326 audit(1726275702.027:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6125 comm="syz.1.181" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f3f579 code=0x7ffc0000 [ 118.416302][ T29] audit: type=1326 audit(1726275702.027:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6125 comm="syz.1.181" exe="/root/syz-executor" sig=0 arch=40000003 syscall=439 compat=1 ip=0xf7f3f579 code=0x7ffc0000 [ 118.416348][ T29] audit: type=1326 audit(1726275702.027:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6125 comm="syz.1.181" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f3f579 code=0x7ffc0000 [ 118.416385][ T29] audit: type=1326 audit(1726275702.027:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6125 comm="syz.1.181" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f3f579 code=0x7ffc0000 [ 118.416422][ T29] audit: type=1326 audit(1726275702.027:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6125 comm="syz.1.181" exe="/root/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf7f3f579 code=0x7ffc0000 [ 118.633649][ T5285] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 118.840365][ T5285] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.931668][ T5285] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.987784][ T5285] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 118.987817][ T5285] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.990066][ T5285] usb 3-1: config 0 descriptor?? [ 119.116482][ T6148] netlink: 'syz.0.186': attribute type 2 has an invalid length. [ 119.157040][ T6148] netlink: 'syz.0.186': attribute type 1 has an invalid length. [ 119.171938][ T6148] netlink: 138932 bytes leftover after parsing attributes in process `syz.0.186'. [ 119.403403][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 119.623591][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 119.638127][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 119.657107][ T9] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 119.670734][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.686410][ T9] usb 5-1: Product: syz [ 119.690748][ T9] usb 5-1: Manufacturer: syz [ 119.695976][ T9] usb 5-1: SerialNumber: syz [ 119.704825][ T9] usb 5-1: config 0 descriptor?? [ 119.712720][ T9] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 119.727933][ T9] usb 5-1: Detected FT232R [ 119.769060][ T6158] netdevsim netdevsim3: Direct firmware load for ng failed with error -2 [ 119.782501][ T6158] netdevsim netdevsim3: Falling back to sysfs fallback for: ng [ 119.823538][ T8] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 120.040663][ T8] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 120.055764][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.068842][ T8] usb 1-1: Product: syz [ 120.073264][ T8] usb 1-1: Manufacturer: syz [ 120.078517][ T8] usb 1-1: SerialNumber: syz [ 120.095441][ T8] usb 1-1: config 0 descriptor?? [ 120.135122][ T9] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 120.160656][ T9] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 120.189423][ T9] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 120.222034][ T9] usb 5-1: USB disconnect, device number 3 [ 120.267051][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 120.302475][ T9] ftdi_sio 5-1:0.0: device disconnected [ 120.378119][ T8] usb 1-1: USB disconnect, device number 10 [ 121.465813][ T5285] usbhid 3-1:0.0: can't add hid device: -71 [ 121.489447][ T5285] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 121.553041][ T5285] usb 3-1: USB disconnect, device number 4 [ 122.302114][ T6196] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 122.308693][ T6196] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 122.318687][ T6196] vhci_hcd vhci_hcd.0: Device attached [ 122.824659][ T5284] usb 18-1: SetAddress Request (2) to port 0 [ 122.842486][ T5284] usb 18-1: new SuperSpeed USB device number 2 using vhci_hcd [ 122.882392][ T6229] vhci_hcd: connection closed [ 122.892241][ T2998] vhci_hcd: stop threads [ 122.930479][ T54] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 122.930486][ T2998] vhci_hcd: release socket [ 122.961360][ T2998] vhci_hcd: disconnect device [ 123.132459][ T6248] macvlan0: entered allmulticast mode [ 123.197925][ T6248] veth1_vlan: entered allmulticast mode [ 123.665731][ T5285] IPVS: starting estimator thread 0... [ 123.761760][ T6265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.205'. [ 123.803564][ T6264] IPVS: using max 32 ests per chain, 76800 per kthread [ 123.927105][ T5289] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 124.068957][ T5285] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 124.123467][ T8] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 124.163434][ T5289] usb 3-1: Using ep0 maxpacket: 8 [ 124.169978][ T5289] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 124.193516][ T5289] usb 3-1: config 0 has no interface number 0 [ 124.209529][ T5289] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 124.235433][ T5289] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 124.259553][ T5285] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 124.268604][ T5289] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.291403][ T5285] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 124.319400][ T5289] usb 3-1: config 0 descriptor?? [ 124.330983][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 124.337343][ T5289] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 124.338933][ T6275] netlink: 'syz.4.207': attribute type 4 has an invalid length. [ 124.371921][ T5285] usb 4-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=4e.18 [ 124.384386][ T5285] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.417868][ T8] usb 2-1: New USB device found, idVendor=1bc7, idProduct=1041, bcdDevice=54.7c [ 124.432531][ T5285] usb 4-1: Product: syz [ 124.443716][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.452321][ T5285] usb 4-1: Manufacturer: syz [ 124.458266][ T8] usb 2-1: Product: syz [ 124.463601][ T8] usb 2-1: Manufacturer: syz [ 124.470589][ T5285] usb 4-1: SerialNumber: syz [ 124.483156][ T6274] netlink: 'syz.4.207': attribute type 4 has an invalid length. [ 124.484285][ T5285] usb 4-1: config 0 descriptor?? [ 124.490937][ T8] usb 2-1: SerialNumber: syz [ 124.550424][ T8] usb 2-1: config 0 descriptor?? [ 124.567176][ T8] cdc_mbim 2-1:0.0: CDC Union missing and no IAD found [ 124.621183][ T8] cdc_mbim 2-1:0.0: bind() failure [ 124.648546][ T8] option 2-1:0.0: GSM modem (1-port) converter detected [ 124.724797][ T5288] usb 3-1: USB disconnect, device number 5 [ 124.736087][ T54] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 124.750292][ T54] Bluetooth: hci2: Injecting HCI hardware error event [ 124.753032][ T5288] iowarrior 3-1:0.1: I/O-Warror #0 now disconnected [ 124.759475][ T5237] Bluetooth: hci2: hardware error 0x00 [ 124.834193][ T5298] usb 2-1: USB disconnect, device number 5 [ 124.841007][ T5298] option 2-1:0.0: device disconnected [ 125.013888][ T5285] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 125.149239][ T5285] usb 4-1: USB disconnect, device number 12 [ 125.303396][ T8] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 125.433743][ T5287] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 125.485254][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 125.504612][ T8] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 125.518616][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.529808][ T8] usb 5-1: Product: syz [ 125.536572][ T8] usb 5-1: Manufacturer: syz [ 125.550541][ T8] usb 5-1: SerialNumber: syz [ 125.572845][ T8] usb 5-1: config 0 descriptor?? [ 125.627938][ T5287] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 125.645783][ T5287] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 125.653605][ T5289] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 125.663429][ T5287] usb 1-1: can't read configurations, error -61 [ 125.833833][ T8] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 125.863621][ T5289] usb 3-1: Using ep0 maxpacket: 16 [ 125.871724][ T5289] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.877814][ T6291] netlink: 'syz.3.213': attribute type 1 has an invalid length. [ 125.883572][ T5287] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 125.891035][ T6291] netlink: 'syz.3.213': attribute type 2 has an invalid length. [ 125.906446][ T6291] netlink: 16074 bytes leftover after parsing attributes in process `syz.3.213'. [ 125.907845][ T5289] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.937701][ T5289] usb 3-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 125.950849][ T5289] usb 3-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 125.959018][ T5289] usb 3-1: Product: syz [ 125.975011][ T5289] usb 3-1: config 0 descriptor?? [ 126.114080][ T5287] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 126.130513][ T5287] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 126.155142][ T5287] usb 1-1: can't read configurations, error -61 [ 126.185016][ T5287] usb usb1-port1: attempt power cycle [ 126.513489][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 126.513507][ T29] audit: type=1326 audit(1726275710.377:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6282 comm="syz.2.210" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 126.601271][ T29] audit: type=1326 audit(1726275710.377:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6282 comm="syz.2.210" exe="/root/syz-executor" sig=0 arch=40000003 syscall=384 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 126.644058][ T5287] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 126.662130][ T29] audit: type=1326 audit(1726275710.407:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6282 comm="syz.2.210" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 126.707303][ C0] hrtimer: interrupt took 59572 ns [ 126.728697][ T5287] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 126.754611][ T5289] usbhid 3-1:0.0: can't add hid device: -71 [ 126.762729][ T5287] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 126.777231][ T5287] usb 1-1: can't read configurations, error -61 [ 126.784049][ T5289] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 126.796744][ T29] audit: type=1326 audit(1726275710.407:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6282 comm="syz.2.210" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 126.827403][ T5237] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 126.843697][ T5289] usb 3-1: USB disconnect, device number 6 [ 126.921811][ T29] audit: type=1326 audit(1726275710.407:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6282 comm="syz.2.210" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 126.984262][ T5287] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 127.011391][ T29] audit: type=1326 audit(1726275710.417:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6282 comm="syz.2.210" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 127.046916][ T29] audit: type=1326 audit(1726275710.417:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6282 comm="syz.2.210" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 127.052705][ T5287] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 127.078707][ T29] audit: type=1326 audit(1726275710.417:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6282 comm="syz.2.210" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 127.108765][ T5287] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 127.116609][ T5287] usb 1-1: can't read configurations, error -61 [ 127.126639][ T5287] usb usb1-port1: unable to enumerate USB device [ 127.153582][ T29] audit: type=1326 audit(1726275710.417:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6282 comm="syz.2.210" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 127.177625][ T29] audit: type=1326 audit(1726275710.427:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6282 comm="syz.2.210" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 127.243025][ T6305] syz.3.216 (6305) used greatest stack depth: 18320 bytes left [ 127.652662][ T8] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 127.674980][ T8] usb 5-1: USB disconnect, device number 4 [ 128.014062][ T5284] usb 18-1: device descriptor read/8, error -110 [ 128.194163][ T8] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 128.283608][ T5289] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 128.393505][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 128.413229][ T8] usb 3-1: New USB device found, idVendor=046d, idProduct=08b2, bcdDevice=80.59 [ 128.433374][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.443570][ T8] usb 3-1: Product: syz [ 128.447909][ T8] usb 3-1: Manufacturer: syz [ 128.452517][ T8] usb 3-1: SerialNumber: syz [ 128.471642][ T5284] usb usb18-port1: attempt power cycle [ 128.475396][ T5289] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.497260][ T8] usb 3-1: config 0 descriptor?? [ 128.522838][ T5289] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 128.582608][ T8] pwc: Logitech QuickCam 4000 Pro USB webcam detected. [ 128.591004][ T5289] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 128.612681][ T5289] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 128.626360][ T5289] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.626387][ T5289] usb 1-1: Product: syz [ 128.626402][ T5289] usb 1-1: Manufacturer: syz [ 128.626415][ T5289] usb 1-1: SerialNumber: syz [ 128.717636][ T5237] Bluetooth: hci0: link tx timeout [ 128.723190][ T5237] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 128.860284][ T5289] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 128.875048][ T5289] cdc_ncm 1-1:1.0: bind() failure [ 128.913748][ T5289] usb 1-1: USB disconnect, device number 15 [ 128.990421][ T5285] IPVS: starting estimator thread 0... [ 129.033699][ T941] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 129.123580][ T6334] IPVS: using max 22 ests per chain, 52800 per kthread [ 129.167629][ T5284] usb usb18-port1: unable to enumerate USB device [ 129.242692][ T941] usb 5-1: New USB device found, idVendor=0913, idProduct=0001, bcdDevice=3a.08 [ 129.257382][ T5287] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 129.292743][ T941] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=128 [ 129.332939][ T941] usb 5-1: SerialNumber: syz [ 129.350966][ T8] pwc: Failed to set LED on/off time (-71) [ 129.362557][ T8] pwc: send_video_command error -71 [ 129.368948][ T941] usb 5-1: config 0 descriptor?? [ 129.386992][ T8] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 129.404879][ T8] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 129.473462][ T5287] usb 2-1: Using ep0 maxpacket: 8 [ 129.478698][ T8] usb 3-1: USB disconnect, device number 7 [ 129.511833][ T5287] usb 2-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=58.36 [ 129.511857][ T5287] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.511869][ T5287] usb 2-1: Product: syz [ 129.511877][ T5287] usb 2-1: Manufacturer: syz [ 129.511891][ T5287] usb 2-1: SerialNumber: syz [ 129.518302][ T5287] usb 2-1: config 0 descriptor?? [ 129.522960][ T5287] pn533_usb 2-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 129.727451][ T5287] usb 2-1: USB disconnect, device number 6 [ 129.764125][ T5284] hid-generic FFFD:10001:0000.0002: unknown main item tag 0x0 [ 129.782702][ T5284] hid-generic FFFD:10001:0000.0002: unknown main item tag 0x0 [ 129.801624][ T5284] hid-generic FFFD:10001:0000.0002: unknown main item tag 0x0 [ 129.809802][ T5284] hid-generic FFFD:10001:0000.0002: unknown main item tag 0x0 [ 129.819832][ T5284] hid-generic FFFD:10001:0000.0002: unknown main item tag 0x0 [ 129.827785][ T5284] hid-generic FFFD:10001:0000.0002: unknown main item tag 0x0 [ 129.840660][ T5284] hid-generic FFFD:10001:0000.0002: unknown main item tag 0x0 [ 129.852060][ T5284] hid-generic FFFD:10001:0000.0002: unknown main item tag 0x0 [ 129.862016][ T5284] hid-generic FFFD:10001:0000.0002: unknown main item tag 0x0 [ 129.873667][ T5284] hid-generic FFFD:10001:0000.0002: unknown main item tag 0x0 [ 129.881756][ T5284] hid-generic FFFD:10001:0000.0002: unknown main item tag 0x0 [ 129.893596][ T5284] hid-generic FFFD:10001:0000.0002: unknown main item tag 0x0 [ 129.903112][ T5284] hid-generic FFFD:10001:0000.0002: unknown main item tag 0x0 [ 129.922314][ T5284] hid-generic FFFD:10001:0000.0002: unknown main item tag 0x0 [ 129.931772][ T5284] hid-generic FFFD:10001:0000.0002: unknown main item tag 0x0 [ 129.942163][ T5284] hid-generic FFFD:10001:0000.0002: unknown main item tag 0x0 [ 129.960186][ T5284] hid-generic FFFD:10001:0000.0002: unknown main item tag 0x0 [ 129.984107][ T5284] hid-generic FFFD:10001:0000.0002: unknown main item tag 0x0 [ 129.991737][ T5284] hid-generic FFFD:10001:0000.0002: unknown main item tag 0x0 [ 130.042352][ T5284] hid-generic FFFD:10001:0000.0002: unknown main item tag 0x0 [ 130.063501][ T8] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 130.064077][ T5284] hid-generic FFFD:10001:0000.0002: unknown main item tag 0x0 [ 130.102615][ T5284] hid-generic FFFD:10001:0000.0002: unknown main item tag 0x0 [ 130.133360][ T5284] hid-generic FFFD:10001:0000.0002: unknown main item tag 0x0 [ 130.157767][ T5284] hid-generic FFFD:10001:0000.0002: unknown main item tag 0x0 [ 130.182385][ T5284] hid-generic FFFD:10001:0000.0002: unknown main item tag 0x0 [ 130.182421][ T5284] hid-generic FFFD:10001:0000.0002: unknown main item tag 0x0 [ 130.182446][ T5284] hid-generic FFFD:10001:0000.0002: unknown main item tag 0x0 [ 130.182473][ T5284] hid-generic FFFD:10001:0000.0002: unknown main item tag 0x0 [ 130.182498][ T5284] hid-generic FFFD:10001:0000.0002: unknown main item tag 0x0 [ 130.182524][ T5284] hid-generic FFFD:10001:0000.0002: unknown main item tag 0x0 [ 130.182549][ T5284] hid-generic FFFD:10001:0000.0002: unknown main item tag 0x0 [ 130.182574][ T5284] hid-generic FFFD:10001:0000.0002: unknown main item tag 0x0 [ 130.182599][ T5284] hid-generic FFFD:10001:0000.0002: unknown main item tag 0x0 [ 130.182625][ T5284] hid-generic FFFD:10001:0000.0002: unknown main item tag 0x0 [ 130.182650][ T5284] hid-generic FFFD:10001:0000.0002: unknown main item tag 0x0 [ 130.182675][ T5284] hid-generic FFFD:10001:0000.0002: unknown main item tag 0x0 [ 130.182701][ T5284] hid-generic FFFD:10001:0000.0002: unknown main item tag 0x0 [ 130.182727][ T5284] hid-generic FFFD:10001:0000.0002: unknown main item tag 0x0 [ 130.182753][ T5284] hid-generic FFFD:10001:0000.0002: unknown main item tag 0x0 [ 130.182780][ T5284] hid-generic FFFD:10001:0000.0002: unknown main item tag 0x0 [ 130.182806][ T5284] hid-generic FFFD:10001:0000.0002: unknown main item tag 0x0 [ 130.182840][ T5284] hid-generic FFFD:10001:0000.0002: unknown main item tag 0x0 [ 130.182865][ T5284] hid-generic FFFD:10001:0000.0002: unknown main item tag 0x0 [ 130.231061][ T5284] hid-generic FFFD:10001:0000.0002: hidraw0: HID vfffdff.fd Device [syz0] on syz0 [ 130.381090][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.430161][ T8] usb 1-1: config 0 has no interfaces? [ 130.451040][ T8] usb 1-1: New USB device found, idVendor=0913, idProduct=0001, bcdDevice=3a.08 [ 130.451159][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=128 [ 130.451286][ T8] usb 1-1: SerialNumber: syz [ 130.494440][ T8] usb 1-1: config 0 descriptor?? [ 130.742819][ T6342] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 130.813930][ T54] Bluetooth: hci0: command 0x0406 tx timeout [ 131.283660][ T5284] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 131.441119][ T5298] usb 1-1: USB disconnect, device number 16 [ 131.473785][ T5284] usb 2-1: Using ep0 maxpacket: 8 [ 131.484532][ T5284] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 131.518888][ T5284] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.544379][ T5284] usb 2-1: Product: syz [ 131.568523][ T5284] usb 2-1: Manufacturer: syz [ 131.585320][ T5284] usb 2-1: SerialNumber: syz [ 131.617352][ T5284] usb 2-1: config 0 descriptor?? [ 131.752022][ T5287] usb 5-1: USB disconnect, device number 5 [ 131.824025][ T8] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 131.897683][ T5284] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 132.013536][ T8] usb 4-1: device descriptor read/64, error -71 [ 132.177916][ T6386] @: renamed from vlan0 (while UP) [ 132.285785][ T8] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 132.463445][ T8] usb 4-1: device descriptor read/64, error -71 [ 132.598261][ T8] usb usb4-port1: attempt power cycle [ 133.013578][ T8] usb 4-1: new low-speed USB device number 15 using dummy_hcd [ 133.064452][ T8] usb 4-1: device descriptor read/8, error -71 [ 133.217119][ T1263] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.229177][ T1263] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.361149][ T5284] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 133.364885][ T8] usb 4-1: new low-speed USB device number 16 using dummy_hcd [ 133.408146][ T5284] usb 2-1: USB disconnect, device number 7 [ 133.424865][ T8] usb 4-1: device descriptor read/8, error -71 [ 133.554475][ T8] usb usb4-port1: unable to enumerate USB device [ 133.615752][ T29] kauditd_printk_skb: 90 callbacks suppressed [ 133.615768][ T29] audit: type=1326 audit(1726275717.487:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6400 comm="syz.4.246" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f5f579 code=0x7ffc0000 [ 133.655722][ T29] audit: type=1326 audit(1726275717.517:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6400 comm="syz.4.246" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f5f579 code=0x7ffc0000 [ 133.696572][ T29] audit: type=1326 audit(1726275717.517:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6400 comm="syz.4.246" exe="/root/syz-executor" sig=0 arch=40000003 syscall=14 compat=1 ip=0xf7f5f579 code=0x7ffc0000 [ 133.727800][ T29] audit: type=1326 audit(1726275717.517:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6400 comm="syz.4.246" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f5f579 code=0x7ffc0000 [ 133.756627][ T29] audit: type=1326 audit(1726275717.517:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6400 comm="syz.4.246" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f5f579 code=0x7ffc0000 [ 133.780199][ T29] audit: type=1326 audit(1726275717.517:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6400 comm="syz.4.246" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f5f579 code=0x7ffc0000 [ 133.802682][ T29] audit: type=1326 audit(1726275717.517:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6400 comm="syz.4.246" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f5f579 code=0x7ffc0000 [ 133.838001][ T29] audit: type=1326 audit(1726275717.517:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6400 comm="syz.4.246" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f5f579 code=0x7ffc0000 [ 133.899455][ T29] audit: type=1326 audit(1726275717.517:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6400 comm="syz.4.246" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f5f579 code=0x7ffc0000 [ 133.920967][ T6404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.247'. [ 133.927470][ T29] audit: type=1326 audit(1726275717.517:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6400 comm="syz.4.246" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f5f579 code=0x7ffc0000 [ 134.463386][ T5287] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 134.586614][ T8] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 134.655516][ T5287] usb 3-1: config 0 has an invalid interface number: 75 but max is 0 [ 134.668558][ T5287] usb 3-1: config 0 has no interface number 0 [ 134.680513][ T5287] usb 3-1: New USB device found, idVendor=14aa, idProduct=0221, bcdDevice=4c.2f [ 134.693441][ T5287] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.701603][ T5287] usb 3-1: Product: syz [ 134.711730][ T5287] usb 3-1: Manufacturer: syz [ 134.718900][ T5287] usb 3-1: SerialNumber: syz [ 134.727929][ T5287] usb 3-1: config 0 descriptor?? [ 134.745559][ T5287] dvb-usb: found a 'WideView WT-220U PenType Receiver (Typhoon/Freecom)' in warm state. [ 134.761806][ T5287] dvb-usb: bulk message failed: -22 (2/0) [ 134.779261][ T5287] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 134.788597][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 134.806173][ T5287] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (Typhoon/Freecom)) [ 134.818445][ T5287] usb 3-1: media controller created [ 134.826083][ T8] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 134.837628][ T5287] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 134.846158][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.858131][ T8] usb 2-1: Product: syz [ 134.865597][ T8] usb 2-1: Manufacturer: syz [ 134.871537][ T5287] usb 3-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 134.880272][ T8] usb 2-1: SerialNumber: syz [ 134.883524][ T5288] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 134.886941][ T5287] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 134.908397][ T8] usb 2-1: config 0 descriptor?? [ 134.919881][ T8] gspca_main: se401-2.14.0 probing 047d:5003 [ 135.003394][ T5287] rc_core: IR keymap rc-dtt200u not found [ 135.009275][ T5287] Registered IR keymap rc-empty [ 135.016651][ T5287] rc rc0: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 135.030173][ T5287] input: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input12 [ 135.047611][ T5287] dvb-usb: schedule remote query interval to 300 msecs. [ 135.055006][ T5287] dvb-usb: WideView WT-220U PenType Receiver (Typhoon/Freecom) successfully initialized and connected. [ 135.072091][ T5287] usb 3-1: USB disconnect, device number 8 [ 135.093806][ T5298] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 135.114713][ T5288] usb 5-1: config 0 has an invalid interface number: 156 but max is 1 [ 135.146591][ T5288] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.186161][ T5288] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 135.218281][ T5288] usb 5-1: config 0 has no interface number 0 [ 135.239978][ T5288] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 135.240511][ T5287] dvb-usb: WideView WT-220U PenType Receiver (Typh successfully deinitialized and disconnected. [ 135.279414][ T5288] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 135.329093][ T5288] usb 5-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 135.343221][ T8] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 135.350070][ T5298] usb 4-1: config 0 has an invalid interface number: 114 but max is 0 [ 135.365588][ T5298] usb 4-1: config 0 has no interface number 0 [ 135.372091][ T5288] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 135.382436][ T5288] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=21 [ 135.402369][ T5288] usb 5-1: SerialNumber: syz [ 135.408028][ T5298] usb 4-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 135.412514][ T8] se401 2-1:0.0: probe with driver se401 failed with error -71 [ 135.436556][ T5288] usb 5-1: config 0 descriptor?? [ 135.441668][ T5298] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.456422][ T5288] gspca_main: spca561-2.14.0 probing abcd:cdee [ 135.473161][ T5298] usb 4-1: Product: syz [ 135.485309][ T5298] usb 4-1: Manufacturer: syz [ 135.492385][ T8] usb 2-1: USB disconnect, device number 8 [ 135.497487][ T5298] usb 4-1: SerialNumber: syz [ 135.518549][ T5298] usb 4-1: config 0 descriptor?? [ 135.549025][ T5298] peak_usb 4-1:0.114: probe with driver peak_usb failed with error 114 [ 135.707440][ T5288] spca561 5-1:0.156: probe with driver spca561 failed with error -22 [ 135.731216][ T5288] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 135.746770][ T5288] usb 5-1: MIDIStreaming interface descriptor not found [ 135.823129][ T8] usb 4-1: USB disconnect, device number 17 [ 135.853733][ T5288] usb 5-1: USB disconnect, device number 6 [ 135.965752][ T5431] udevd[5431]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 136.394118][ T5287] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 136.444057][ T8] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 136.595257][ T5287] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 136.628001][ T5287] usb 1-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 136.643485][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 136.677251][ T5287] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 136.713742][ T941] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 136.740915][ T8] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 136.763853][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.774785][ T8] usb 3-1: Product: syz [ 136.779470][ T5287] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 136.788870][ T8] usb 3-1: Manufacturer: syz [ 136.795509][ T5287] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.808002][ T8] usb 3-1: SerialNumber: syz [ 136.825817][ T5287] usb 1-1: Product: syz [ 136.832093][ T8] usb 3-1: config 0 descriptor?? [ 136.840985][ T5287] usb 1-1: Manufacturer: syz [ 136.857690][ T5287] usb 1-1: SerialNumber: syz [ 136.875413][ T5287] usb 1-1: config 0 descriptor?? [ 136.897803][ T5287] usb-storage 1-1:0.0: USB Mass Storage device detected [ 136.919016][ T941] usb 2-1: unable to get BOS descriptor or descriptor too short [ 136.947700][ T941] usb 2-1: not running at top speed; connect to a high speed hub [ 136.960078][ T5287] usb-storage 1-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 136.969877][ T941] usb 2-1: config 5 has an invalid interface number: 144 but max is 0 [ 136.980137][ T941] usb 2-1: config 5 has no interface number 0 [ 136.986916][ T941] usb 2-1: config 5 interface 144 has no altsetting 0 [ 136.999964][ T941] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=d0.dd [ 137.011066][ T941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.038931][ T941] usb 2-1: Product: syz [ 137.078435][ T941] usb 2-1: Manufacturer: syz [ 137.094672][ T941] usb 2-1: SerialNumber: syz [ 137.126197][ T8] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 137.282336][ T5288] usb 1-1: USB disconnect, device number 17 [ 137.309501][ T6470] netlink: 4 bytes leftover after parsing attributes in process `syz.3.273'. [ 137.340500][ T941] quatech2 2-1:5.144: Quatech 2nd gen USB to Serial Driver converter detected [ 137.357149][ T941] usb 2-1: qt2_attach - failed to power on unit: -71 [ 137.376400][ T941] quatech2 2-1:5.144: probe with driver quatech2 failed with error -71 [ 137.415028][ T941] usb 2-1: USB disconnect, device number 9 [ 138.037420][ T6493] netlink: 'syz.4.281': attribute type 5 has an invalid length. [ 138.177360][ T8] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 138.406635][ T6503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.294'. [ 138.725021][ T5288] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 138.732690][ T5284] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 138.882087][ T6514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.287'. [ 138.933552][ T5288] usb 4-1: Using ep0 maxpacket: 32 [ 138.947445][ T5284] usb 2-1: config 0 has an invalid interface number: 156 but max is 1 [ 138.960476][ T5284] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.982439][ T5284] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 139.004034][ T5288] usb 4-1: New USB device found, idVendor=1bc7, idProduct=1041, bcdDevice=54.7c [ 139.043430][ T5288] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.073518][ T5284] usb 2-1: config 0 has no interface number 0 [ 139.079678][ T5284] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 139.093331][ T5288] usb 4-1: Product: syz [ 139.097554][ T5288] usb 4-1: Manufacturer: syz [ 139.131237][ T5288] usb 4-1: SerialNumber: syz [ 139.141695][ T5284] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 139.154490][ T5284] usb 2-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 139.168822][ T5288] usb 4-1: config 0 descriptor?? [ 139.180008][ T5288] cdc_mbim 4-1:0.0: CDC Union missing and no IAD found [ 139.189874][ T5288] cdc_mbim 4-1:0.0: bind() failure [ 139.197419][ T5284] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 139.207470][ T5288] option 4-1:0.0: GSM modem (1-port) converter detected [ 139.214892][ T5284] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=21 [ 139.248735][ T5284] usb 2-1: SerialNumber: syz [ 139.261186][ T5284] usb 2-1: config 0 descriptor?? [ 139.270102][ T5284] gspca_main: spca561-2.14.0 probing abcd:cdee [ 139.401810][ T5288] usb 4-1: USB disconnect, device number 18 [ 139.409030][ T5288] option 4-1:0.0: device disconnected [ 139.481646][ T5284] spca561 2-1:0.156: probe with driver spca561 failed with error -22 [ 139.522398][ T6523] netlink: 'syz.0.290': attribute type 2 has an invalid length. [ 139.531923][ T5284] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 139.546460][ T5284] usb 2-1: MIDIStreaming interface descriptor not found [ 139.609551][ T5284] usb 2-1: USB disconnect, device number 10 [ 139.706335][ T5249] udevd[5249]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 139.869785][ T6530] netlink: 8 bytes leftover after parsing attributes in process `syz.4.295'. [ 139.927675][ T6537] netlink: 'syz.0.298': attribute type 10 has an invalid length. [ 139.937518][ T6537] veth0_macvtap: left promiscuous mode [ 139.943113][ T6537] macvtap0: entered promiscuous mode [ 140.070708][ T6541] netlink: 40 bytes leftover after parsing attributes in process `syz.0.300'. [ 140.169286][ T8] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 140.360919][ T6552] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 140.373482][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 140.392924][ T8] usb 5-1: New USB device found, idVendor=1bc7, idProduct=1041, bcdDevice=54.7c [ 140.418286][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.440122][ T8] usb 5-1: Product: syz [ 140.457542][ T8] usb 5-1: Manufacturer: syz [ 140.468227][ T8] usb 5-1: SerialNumber: syz [ 140.489505][ T8] usb 5-1: config 0 descriptor?? [ 140.523106][ T8] cdc_mbim 5-1:0.0: CDC Union missing and no IAD found [ 140.532393][ T8] cdc_mbim 5-1:0.0: bind() failure [ 140.564424][ T8] option 5-1:0.0: GSM modem (1-port) converter detected [ 140.752177][ T25] usb 5-1: USB disconnect, device number 7 [ 140.794763][ T6561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.309'. [ 140.828051][ T25] option 5-1:0.0: device disconnected [ 140.935500][ T941] usb 3-1: USB disconnect, device number 9 [ 141.113815][ T8] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 141.229071][ T6579] netlink: 'syz.3.317': attribute type 4 has an invalid length. [ 141.293800][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 141.378350][ T8] usb 2-1: New USB device found, idVendor=1bc7, idProduct=1041, bcdDevice=54.7c [ 141.390349][ T6578] netlink: 'syz.3.317': attribute type 4 has an invalid length. [ 141.421882][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.458980][ T8] usb 2-1: Product: syz [ 141.465688][ T6584] netlink: 8 bytes leftover after parsing attributes in process `syz.4.319'. [ 141.475068][ T8] usb 2-1: Manufacturer: syz [ 141.479694][ T8] usb 2-1: SerialNumber: syz [ 141.503498][ T8] usb 2-1: config 0 descriptor?? [ 141.523931][ T8] cdc_mbim 2-1:0.0: CDC Union missing and no IAD found [ 141.567272][ T8] cdc_mbim 2-1:0.0: bind() failure [ 141.601280][ T8] option 2-1:0.0: GSM modem (1-port) converter detected [ 141.748375][ T941] usb 2-1: USB disconnect, device number 11 [ 141.783855][ T941] option 2-1:0.0: device disconnected [ 141.826760][ T6596] bond0: entered promiscuous mode [ 141.876899][ T6596] bond_slave_0: entered promiscuous mode [ 141.882801][ T6596] bond_slave_1: entered promiscuous mode [ 142.058778][ T6604] netlink: 8 bytes leftover after parsing attributes in process `syz.4.329'. [ 142.383526][ T941] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 142.431531][ T6615] netlink: 'syz.0.333': attribute type 4 has an invalid length. [ 142.438383][ T6615] netlink: 'syz.0.333': attribute type 4 has an invalid length. [ 142.466059][ T6624] netlink: 4 bytes leftover after parsing attributes in process `syz.1.338'. [ 142.624029][ T941] usb 5-1: Using ep0 maxpacket: 32 [ 142.643669][ T941] usb 5-1: New USB device found, idVendor=1bc7, idProduct=1041, bcdDevice=54.7c [ 142.667323][ T941] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.675963][ T941] usb 5-1: Product: syz [ 142.684416][ T941] usb 5-1: Manufacturer: syz [ 142.698257][ T6628] netlink: 'syz.3.340': attribute type 4 has an invalid length. [ 142.707369][ T941] usb 5-1: SerialNumber: syz [ 142.726186][ T941] usb 5-1: config 0 descriptor?? [ 142.746174][ T941] cdc_mbim 5-1:0.0: CDC Union missing and no IAD found [ 142.753108][ T941] cdc_mbim 5-1:0.0: bind() failure [ 142.784843][ T941] option 5-1:0.0: GSM modem (1-port) converter detected [ 142.949530][ T6638] netlink: 5 bytes leftover after parsing attributes in process `syz.2.342'. [ 142.969674][ T941] usb 5-1: USB disconnect, device number 8 [ 142.979586][ T941] option 5-1:0.0: device disconnected [ 143.112672][ T6642] netlink: 'syz.3.346': attribute type 1 has an invalid length. [ 143.143636][ T6642] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.346'. [ 143.684125][ T6663] netlink: 'syz.2.353': attribute type 1 has an invalid length. [ 143.692921][ T6663] netlink: 'syz.2.353': attribute type 2 has an invalid length. [ 143.712983][ T6663] netlink: 16074 bytes leftover after parsing attributes in process `syz.2.353'. [ 143.720023][ T6665] netlink: 'syz.0.355': attribute type 8 has an invalid length. [ 144.289778][ T6681] input: syz0 as /devices/virtual/input/input13 [ 144.333903][ T25] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 144.431899][ T3048] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.585853][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 144.585889][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 144.585910][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 144.585935][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 144.593153][ T25] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 144.593189][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.593210][ T25] usb 4-1: Product: syz [ 144.593224][ T25] usb 4-1: Manufacturer: syz [ 144.593244][ T25] usb 4-1: SerialNumber: syz [ 144.596478][ T25] usb 4-1: config 0 descriptor?? [ 144.671928][ T3048] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.832929][ T25] adutux 4-1:0.0: Could not retrieve serial number [ 144.833033][ T25] adutux 4-1:0.0: probe with driver adutux failed with error -5 [ 144.854341][ T3048] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.984450][ T3048] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.078133][ T941] usb 4-1: USB disconnect, device number 19 [ 145.318149][ T3048] bridge_slave_1: left allmulticast mode [ 145.330290][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 145.339764][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 145.352459][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 145.366789][ T3048] bridge_slave_1: left promiscuous mode [ 145.374509][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 145.384617][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 145.391946][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 145.411531][ T3048] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.440015][ T3048] bridge_slave_0: left allmulticast mode [ 145.455328][ T3048] bridge_slave_0: left promiscuous mode [ 145.476468][ T3048] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.749260][ T6709] capability: warning: `syz.3.374' uses 32-bit capabilities (legacy support in use) [ 145.908094][ T6715] vivid-001: disconnect [ 145.914074][ T6714] vivid-001: reconnect [ 146.273569][ T5295] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 146.463564][ T5295] usb 4-1: Using ep0 maxpacket: 32 [ 146.476162][ T5295] usb 4-1: New USB device found, idVendor=1bc7, idProduct=1041, bcdDevice=54.7c [ 146.503713][ T5295] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.520677][ T5295] usb 4-1: Product: syz [ 146.531641][ T5295] usb 4-1: Manufacturer: syz [ 146.539883][ T5295] usb 4-1: SerialNumber: syz [ 146.556223][ T5295] usb 4-1: config 0 descriptor?? [ 146.564528][ T5295] cdc_mbim 4-1:0.0: CDC Union missing and no IAD found [ 146.583253][ T5295] cdc_mbim 4-1:0.0: bind() failure [ 146.589019][ T5295] option 4-1:0.0: GSM modem (1-port) converter detected [ 146.617425][ T3048] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.662381][ T3048] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.716417][ T3048] bond0 (unregistering): Released all slaves [ 146.762232][ T6742] syz.2.388 (6742): /proc/6741/oom_adj is deprecated, please use /proc/6741/oom_score_adj instead. [ 146.773702][ T6703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.370'. [ 146.788835][ T6713] netlink: 8 bytes leftover after parsing attributes in process `syz.3.375'. [ 146.839493][ T5284] usb 4-1: USB disconnect, device number 20 [ 146.877959][ T5284] option 4-1:0.0: device disconnected [ 146.889690][ T6736] netlink: 'syz.0.386': attribute type 1 has an invalid length. [ 146.899272][ T6736] netlink: 'syz.0.386': attribute type 2 has an invalid length. [ 146.912310][ T6736] netlink: 16074 bytes leftover after parsing attributes in process `syz.0.386'. [ 147.461413][ T54] Bluetooth: hci4: command tx timeout [ 147.605822][ T3048] hsr_slave_0: left promiscuous mode [ 147.630659][ T3048] hsr_slave_1: left promiscuous mode [ 147.639628][ T3048] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.663078][ T3048] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.699390][ T3048] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.726362][ T3048] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.786244][ T3048] veth1_macvtap: left promiscuous mode [ 147.792138][ T3048] veth0_macvtap: left promiscuous mode [ 147.801499][ T3048] veth1_vlan: left promiscuous mode [ 147.943461][ T5295] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 148.143537][ T5295] usb 1-1: Using ep0 maxpacket: 16 [ 148.152945][ T5295] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 148.177362][ T5295] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 148.195145][ T5295] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.209976][ T5295] usb 1-1: Product: syz [ 148.218863][ T5295] usb 1-1: Manufacturer: syz [ 148.231027][ T5295] usb 1-1: SerialNumber: syz [ 148.246992][ T5295] usb 1-1: config 0 descriptor?? [ 148.261579][ T5295] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 148.282978][ T5295] usb 1-1: Detected FT232R [ 148.596206][ T3048] team0 (unregistering): Port device team_slave_1 removed [ 148.648925][ T3048] team0 (unregistering): Port device team_slave_0 removed [ 148.698297][ T5295] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 148.708079][ T5295] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 148.720963][ T5295] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 148.743558][ T5295] usb 1-1: USB disconnect, device number 18 [ 148.783666][ T5295] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 148.800272][ T5295] ftdi_sio 1-1:0.0: device disconnected [ 149.413103][ T6795] netlink: 'syz.1.402': attribute type 1 has an invalid length. [ 149.444434][ T6795] netlink: 'syz.1.402': attribute type 2 has an invalid length. [ 149.482293][ T6795] netlink: 16074 bytes leftover after parsing attributes in process `syz.1.402'. [ 149.537022][ T54] Bluetooth: hci4: command tx timeout [ 149.672547][ T6701] chnl_net:caif_netlink_parms(): no params data found [ 149.740994][ T6809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.407'. [ 150.083682][ T5287] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 150.094115][ T6828] xt_CT: You must specify a L4 protocol and not use inversions on it [ 150.144744][ T6701] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.162484][ T6701] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.184312][ T6701] bridge_slave_0: entered allmulticast mode [ 150.199825][ T6701] bridge_slave_0: entered promiscuous mode [ 150.216414][ T6701] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.225252][ T6701] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.252069][ T6701] bridge_slave_1: entered allmulticast mode [ 150.283393][ T5287] usb 3-1: Using ep0 maxpacket: 32 [ 150.299630][ T6701] bridge_slave_1: entered promiscuous mode [ 150.320922][ T5287] usb 3-1: New USB device found, idVendor=1bc7, idProduct=1041, bcdDevice=54.7c [ 150.355901][ T5287] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.412072][ T5287] usb 3-1: Product: syz [ 150.424228][ T5287] usb 3-1: Manufacturer: syz [ 150.463360][ T5287] usb 3-1: SerialNumber: syz [ 150.486628][ T5287] usb 3-1: config 0 descriptor?? [ 150.498105][ T5287] cdc_mbim 3-1:0.0: CDC Union missing and no IAD found [ 150.513537][ T5287] cdc_mbim 3-1:0.0: bind() failure [ 150.519529][ T5287] option 3-1:0.0: GSM modem (1-port) converter detected [ 150.531627][ T6701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.566707][ T6701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.708181][ T6701] team0: Port device team_slave_0 added [ 150.719605][ T941] usb 3-1: USB disconnect, device number 10 [ 150.752245][ T6701] team0: Port device team_slave_1 added [ 150.758178][ T941] option 3-1:0.0: device disconnected [ 150.874839][ T6701] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.896778][ T6701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.935098][ T5287] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 150.961742][ T6701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.986867][ T6701] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.004288][ T6701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.092753][ T6701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.101011][ T6846] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 151.137881][ T5287] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 151.183466][ T5287] usb 2-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 151.210593][ T5287] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 151.211106][ T6846] picdev_read: 1 callbacks suppressed [ 151.211120][ T6846] kvm: pic: non byte read [ 151.234178][ T5287] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 151.255639][ T6701] hsr_slave_0: entered promiscuous mode [ 151.264312][ T5287] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.276923][ T5287] usb 2-1: Product: syz [ 151.281124][ T5287] usb 2-1: Manufacturer: syz [ 151.291021][ T6701] hsr_slave_1: entered promiscuous mode [ 151.304091][ T5287] usb 2-1: SerialNumber: syz [ 151.316782][ T6846] kvm: pic: non byte read [ 151.321557][ T6846] kvm: pic: non byte read [ 151.341049][ T5287] usb 2-1: config 0 descriptor?? [ 151.358372][ T6846] kvm: pic: single mode not supported [ 151.358393][ T6846] kvm: pic: level sensitive irq not supported [ 151.367043][ T5287] usb-storage 2-1:0.0: USB Mass Storage device detected [ 151.385424][ T6846] kvm: pic: non byte read [ 151.409588][ T5287] usb-storage 2-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 151.409991][ T6846] kvm: pic: non byte read [ 151.439845][ T6846] kvm: pic: level sensitive irq not supported [ 151.439919][ T6846] kvm: pic: non byte read [ 151.613851][ T54] Bluetooth: hci4: command tx timeout [ 151.753859][ T25] usb 2-1: USB disconnect, device number 12 [ 152.174149][ T941] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 152.286523][ T54] Bluetooth: hci1: unexpected subevent 0x01 length: 78 > 18 [ 152.375388][ T941] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 152.420460][ T941] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 152.451977][ T941] usb 3-1: can't read configurations, error -61 [ 152.602105][ T6701] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 152.624920][ T941] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 152.663525][ T6701] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 152.709155][ T6701] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 152.752351][ T6701] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 152.815338][ T941] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 152.838267][ T941] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 152.861068][ T941] usb 3-1: can't read configurations, error -61 [ 152.877909][ T941] usb usb3-port1: attempt power cycle [ 152.957450][ T6901] xt_NFQUEUE: number of total queues is 0 [ 152.985094][ T54] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 153.056928][ T6701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.135726][ T6701] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.162407][ T3048] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.169661][ T3048] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.183487][ T25] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 153.198324][ T6232] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.205526][ T6232] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.314304][ T941] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 153.365192][ T941] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 153.376932][ T6701] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.397187][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.409335][ T941] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 153.417914][ T941] usb 3-1: can't read configurations, error -61 [ 153.426814][ T25] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 153.451739][ T25] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.95 [ 153.471629][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.497923][ T25] usb 1-1: Product: syz [ 153.502171][ T25] usb 1-1: Manufacturer: syz [ 153.505868][ T6701] veth0_vlan: entered promiscuous mode [ 153.524147][ T25] usb 1-1: SerialNumber: syz [ 153.540548][ T25] usb 1-1: config 0 descriptor?? [ 153.558013][ T6701] veth1_vlan: entered promiscuous mode [ 153.584506][ T941] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 153.634747][ T941] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 153.668723][ T941] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 153.686239][ T941] usb 3-1: can't read configurations, error -61 [ 153.693661][ T54] Bluetooth: hci4: command tx timeout [ 153.718083][ T6701] veth0_macvtap: entered promiscuous mode [ 153.731190][ T941] usb usb3-port1: unable to enumerate USB device [ 153.761027][ T6701] veth1_macvtap: entered promiscuous mode [ 153.813802][ T25] usb 1-1: USB disconnect, device number 19 [ 153.860411][ T6701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.914519][ T6701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.944490][ T6701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.972249][ T6701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.992410][ T6701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.016403][ T6701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.052083][ T6701] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.073001][ T6701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.084286][ T6701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.141815][ T6701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.153162][ T6701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.163352][ T6701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.174093][ T6701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.185185][ T6701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.197429][ T6701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.229294][ T6701] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.270516][ T6701] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.302006][ T6701] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.319317][ T6701] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.332573][ T6701] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.636068][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.660737][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.764204][ T6235] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.799459][ T6235] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.057673][ T6948] capability: warning: `syz.4.365' uses deprecated v2 capabilities in a way that may be insecure [ 155.073595][ T5298] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 155.303627][ T5298] usb 2-1: Using ep0 maxpacket: 8 [ 155.310866][ T5298] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 155.322747][ T5298] usb 2-1: config 0 has no interface number 0 [ 155.340373][ T5298] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 155.409162][ T5298] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 155.466827][ T5298] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 155.491795][ T941] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 155.526726][ T6969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.439'. [ 155.529971][ T5298] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.588874][ T5298] usb 2-1: config 0 descriptor?? [ 155.609856][ T5298] iowarrior 2-1:0.1: no interrupt-in endpoint found [ 155.700025][ T941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.718265][ T941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.735636][ T5295] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 155.749177][ T941] usb 4-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.09 [ 155.759682][ T941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.831297][ T941] usb 4-1: config 0 descriptor?? [ 155.949349][ T5295] usb 5-1: Using ep0 maxpacket: 32 [ 155.952012][ T5298] usb 2-1: USB disconnect, device number 13 [ 155.973731][ T5295] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 156.014423][ T5295] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.036489][ T5295] usb 5-1: Product: syz [ 156.040735][ T5295] usb 5-1: Manufacturer: syz [ 156.076750][ T5295] usb 5-1: SerialNumber: syz [ 156.107950][ T5295] usb 5-1: config 0 descriptor?? [ 156.141801][ T6990] nftables ruleset with unbound chain [ 156.268358][ T941] logitech-hidpp-device 0003:046D:C086.0003: unknown main item tag 0x0 [ 156.285302][ T941] logitech-hidpp-device 0003:046D:C086.0003: unbalanced collection at end of report description [ 156.300120][ T941] logitech-hidpp-device 0003:046D:C086.0003: hidpp_probe:parse failed [ 156.303384][ T25] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 156.310876][ T941] logitech-hidpp-device 0003:046D:C086.0003: probe with driver logitech-hidpp-device failed with error -22 [ 156.488108][ T5298] usb 4-1: USB disconnect, device number 21 [ 156.523563][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 156.531919][ T25] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 156.555995][ T5295] peak_usb 5-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 156.560197][ T25] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 156.576247][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.580053][ T5295] peak_usb 5-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 156.586869][ T25] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 156.606433][ T25] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 156.630117][ T25] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 156.641883][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.664246][ T25] usb 1-1: config 0 descriptor?? [ 156.665069][ T5295] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -71 [ 156.699602][ T5295] usb 5-1: USB disconnect, device number 9 [ 156.754132][ T941] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 156.782823][ T7006] tipc: Started in network mode [ 156.788721][ T7006] tipc: Node identity ., cluster identity 4711 [ 156.801412][ T7006] tipc: Enabling of bearer rejected, failed to enable media [ 156.940643][ T941] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 156.961778][ T941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.976634][ T941] usb 3-1: config 0 descriptor?? [ 157.129692][ T5298] usb 1-1: USB disconnect, device number 20 [ 157.223933][ T25] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 157.404394][ T7021] netlink: 36 bytes leftover after parsing attributes in process `syz.0.456'. [ 157.441607][ T941] usb 3-1: Cannot read MAC address [ 157.451071][ T941] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 157.464141][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 157.485317][ T941] usb 3-1: USB disconnect, device number 15 [ 157.495576][ T25] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 157.531149][ T25] usb 2-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 157.561156][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.569657][ T25] usb 2-1: Product: syz [ 157.585567][ T25] usb 2-1: Manufacturer: syz [ 157.590312][ T25] usb 2-1: SerialNumber: syz [ 157.602770][ T25] usb 2-1: config 0 descriptor?? [ 157.631848][ T25] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 157.700883][ T25] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 157.772836][ T6423] udevd[6423]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 157.813547][ T5295] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 157.842862][ T941] usb 2-1: USB disconnect, device number 14 [ 157.948134][ T8] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 158.005645][ T5295] usb 5-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 158.014828][ T5295] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.025541][ T5295] usb 5-1: config 0 descriptor?? [ 158.073452][ T25] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 158.144697][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.159008][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.170251][ T8] usb 4-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 158.182646][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.204692][ T8] usb 4-1: config 0 descriptor?? [ 158.271278][ T25] usb 1-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 158.281477][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.296890][ T25] usb 1-1: Product: syz [ 158.301097][ T25] usb 1-1: Manufacturer: syz [ 158.309036][ T25] usb 1-1: SerialNumber: syz [ 158.318242][ T25] usb 1-1: config 0 descriptor?? [ 158.335064][ T25] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 158.464520][ T5295] hid-u2fzero 0003:10C4:8ACF.0004: unknown main item tag 0x0 [ 158.479178][ T5295] hid-u2fzero 0003:10C4:8ACF.0004: unknown main item tag 0x0 [ 158.502205][ T5295] hid-u2fzero 0003:10C4:8ACF.0004: unknown main item tag 0x0 [ 158.510472][ T5295] hid-u2fzero 0003:10C4:8ACF.0004: unknown main item tag 0x0 [ 158.531136][ T5295] hid-u2fzero 0003:10C4:8ACF.0004: unknown main item tag 0x0 [ 158.578848][ T5295] hid-u2fzero 0003:10C4:8ACF.0004: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.4-1/input0 [ 158.612195][ T5295] hid-u2fzero 0003:10C4:8ACF.0004: U2F Zero LED initialised [ 158.623575][ T5295] hid-u2fzero 0003:10C4:8ACF.0004: U2F Zero RNG initialised [ 158.639742][ T8] hid (null): report_id 0 is invalid [ 158.676155][ T5295] usb 5-1: USB disconnect, device number 10 [ 158.700934][ T8] logitech-hidpp-device 0003:046D:C086.0005: report_id 0 is invalid [ 158.738098][ T8] logitech-hidpp-device 0003:046D:C086.0005: item 0 0 1 8 parsing failed [ 158.764319][ T8] logitech-hidpp-device 0003:046D:C086.0005: hidpp_probe:parse failed [ 158.788756][ T8] logitech-hidpp-device 0003:046D:C086.0005: probe with driver logitech-hidpp-device failed with error -22 [ 158.852337][ T8] usb 4-1: USB disconnect, device number 22 [ 158.964606][ T25] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 158.980693][ T25] sq905c 1-1:0.0: probe with driver sq905c failed with error -71 [ 158.998505][ T25] usb 1-1: USB disconnect, device number 21 [ 159.043236][ T7054] netlink: 'syz.1.472': attribute type 32 has an invalid length. [ 159.058814][ T7054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.472'. [ 159.072732][ T7054] (unnamed net_device) (uninitialized): option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 159.174572][ T7057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.473'. [ 159.589914][ T7070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.477'. [ 159.710650][ T7079] netlink: 'syz.1.481': attribute type 12 has an invalid length. [ 159.727644][ T7079] bond0: option primary_reselect: invalid value (255) [ 159.903503][ T8] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 160.119125][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 160.149699][ T8] usb 3-1: New USB device found, idVendor=1bc7, idProduct=1041, bcdDevice=54.7c [ 160.180540][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.188872][ T8] usb 3-1: Product: syz [ 160.193066][ T8] usb 3-1: Manufacturer: syz [ 160.223801][ T8] usb 3-1: SerialNumber: syz [ 160.232905][ T8] usb 3-1: config 0 descriptor?? [ 160.251579][ T8] cdc_mbim 3-1:0.0: CDC Union missing and no IAD found [ 160.273396][ T8] cdc_mbim 3-1:0.0: bind() failure [ 160.297421][ T8] option 3-1:0.0: GSM modem (1-port) converter detected [ 160.486185][ T5288] usb 3-1: USB disconnect, device number 16 [ 160.494073][ T25] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 160.514734][ T5288] option 3-1:0.0: device disconnected [ 160.574269][ T7115] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. [ 160.653636][ T7117] netlink: 'syz.0.497': attribute type 46 has an invalid length. [ 161.006058][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 161.804154][ T8] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 164.792295][ T8] usb 1-1: device descriptor read/64, error -71 [ 164.872388][ T7136] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.316294][ T7136] netlink: 4 bytes leftover after parsing attributes in process `syz.2.507'. [ 166.327493][ T7136] netlink: 4 bytes leftover after parsing attributes in process `syz.2.507'. [ 167.488054][ T5298] IPVS: starting estimator thread 0... [ 167.509411][ T7142] netlink: 16 bytes leftover after parsing attributes in process `syz.2.507'. [ 167.514906][ T941] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 167.583570][ T7140] IPVS: using max 32 ests per chain, 76800 per kthread [ 167.763352][ T941] usb 2-1: Using ep0 maxpacket: 16 [ 167.778706][ T941] usb 2-1: New USB device found, idVendor=046d, idProduct=08b2, bcdDevice=80.59 [ 168.530714][ T25] usb 4-1: unable to read config index 0 descriptor/all [ 168.537705][ T25] usb 4-1: can't read configurations, error -71 [ 168.583696][ T941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.591720][ T941] usb 2-1: Product: syz [ 169.413557][ T941] usb 2-1: Manufacturer: syz [ 169.418200][ T941] usb 2-1: SerialNumber: syz [ 170.685633][ T7156] netlink: 'syz.4.512': attribute type 12 has an invalid length. [ 170.693566][ T7156] netlink: 'syz.4.512': attribute type 11 has an invalid length. [ 170.701278][ T7156] netlink: 190580 bytes leftover after parsing attributes in process `syz.4.512'. [ 171.813444][ T941] usb 2-1: config 0 descriptor?? [ 171.833458][ T941] usb 2-1: can't set config #0, error -71 [ 172.795465][ T941] usb 2-1: USB disconnect, device number 15 [ 174.422661][ T7173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.516'. [ 174.466126][ T7178] bridge0: port 3(syz_tun) entered blocking state [ 174.483893][ T7178] bridge0: port 3(syz_tun) entered disabled state [ 174.491844][ T7178] syz_tun: entered allmulticast mode [ 174.516124][ T7178] syz_tun: entered promiscuous mode [ 174.531172][ T7178] bridge0: port 3(syz_tun) entered blocking state [ 174.538231][ T7178] bridge0: port 3(syz_tun) entered forwarding state [ 174.713380][ T941] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 174.894258][ T7185] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.908769][ T941] usb 2-1: Using ep0 maxpacket: 32 [ 174.927453][ T941] usb 2-1: New USB device found, idVendor=1bc7, idProduct=1041, bcdDevice=54.7c [ 174.946808][ T941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.966595][ T7185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.524'. [ 174.975590][ T941] usb 2-1: Product: syz [ 174.979762][ T941] usb 2-1: Manufacturer: syz [ 175.006251][ T941] usb 2-1: SerialNumber: syz [ 175.022267][ T7185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.524'. [ 175.042760][ T941] usb 2-1: config 0 descriptor?? [ 175.061951][ T941] cdc_mbim 2-1:0.0: CDC Union missing and no IAD found [ 175.078522][ T941] cdc_mbim 2-1:0.0: bind() failure [ 175.085674][ T941] option 2-1:0.0: GSM modem (1-port) converter detected [ 176.308383][ T941] usb 2-1: USB disconnect, device number 16 [ 176.320856][ T941] option 2-1:0.0: device disconnected [ 176.623508][ T7185] netlink: 16 bytes leftover after parsing attributes in process `syz.0.524'. [ 188.445565][ T5237] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 188.455735][ T5237] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 188.464082][ T5237] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 188.474878][ T5237] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 188.482525][ T5237] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 188.490492][ T5237] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 194.548115][ T7208] chnl_net:caif_netlink_parms(): no params data found [ 194.557496][ T5237] Bluetooth: hci5: command tx timeout [ 194.584578][ T54] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 202.129092][ T1263] ieee802154 phy0 wpan0: encryption failed: -22 [ 202.144910][ T1263] ieee802154 phy1 wpan1: encryption failed: -22 [ 202.181390][ T5242] Bluetooth: hci5: command tx timeout [ 202.226577][ T5241] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 202.276342][ T5240] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 202.294681][ T5240] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 202.304912][ T5240] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 202.313327][ T5240] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 202.322095][ T5240] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 202.329957][ T5240] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 202.338782][ T5240] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 202.346061][ T5241] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 202.373985][ T5240] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 202.392776][ T5240] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 211.606078][ T5237] Bluetooth: hci1: command 0x0406 tx timeout [ 211.612271][ T5237] Bluetooth: hci7: command tx timeout [ 211.618609][ T5237] Bluetooth: hci6: command tx timeout [ 211.624697][ T5237] Bluetooth: hci5: command tx timeout [ 222.132986][ T5240] Bluetooth: hci5: command tx timeout [ 222.138565][ T5240] Bluetooth: hci6: command tx timeout [ 222.144080][ T5240] Bluetooth: hci7: command tx timeout [ 234.813944][ T5237] Bluetooth: hci7: command tx timeout [ 234.819431][ T5237] Bluetooth: hci6: command tx timeout [ 248.582104][ T5240] Bluetooth: hci6: command tx timeout [ 248.587694][ T5240] Bluetooth: hci7: command tx timeout [ 264.895877][ T1263] ieee802154 phy0 wpan0: encryption failed: -22 [ 264.902243][ T1263] ieee802154 phy1 wpan1: encryption failed: -22 [ 284.873373][ T5240] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 308.821760][ T54] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 335.982098][ T7222] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 336.223754][ T1263] ieee802154 phy0 wpan0: encryption failed: -22 [ 336.223856][ T1263] ieee802154 phy1 wpan1: encryption failed: -22 [ 405.005306][ T30] INFO: task syz-executor:7223 blocked for more than 170 seconds. [ 405.038325][ T30] Not tainted 6.11.0-rc7-syzkaller-00133-ge936e7d4a83b #0 [ 405.075896][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 405.103217][ T30] task:syz-executor state:D stack:25552 pid:7223 tgid:7223 ppid:7204 flags:0x20004002 [ 405.133600][ T30] Call Trace: [ 405.136929][ T30] [ 405.139874][ T30] __schedule+0x1800/0x4a60 [ 405.173237][ T30] ? __pfx___schedule+0x10/0x10 [ 405.178158][ T30] ? __pfx_lock_release+0x10/0x10 [ 405.203214][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 405.208736][ T30] ? schedule+0x90/0x320 [ 405.212984][ T30] schedule+0x14b/0x320 [ 405.233234][ T30] schedule_preempt_disabled+0x13/0x30 [ 405.238742][ T30] __mutex_lock+0x6a4/0xd70 [ 405.253215][ T30] ? __mutex_lock+0x527/0xd70 [ 405.257932][ T30] ? ip_tunnel_init_net+0x20e/0x710 [ 405.273241][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 405.278328][ T30] ip_tunnel_init_net+0x20e/0x710 [ 405.293277][ T30] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 405.298894][ T30] ops_init+0x359/0x610 [ 405.303068][ T30] setup_net+0x515/0xca0 [ 405.324865][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 405.330471][ T30] ? __pfx_setup_net+0x10/0x10 [ 405.356134][ T30] copy_net_ns+0x4e2/0x7b0 [ 405.360616][ T30] create_new_namespaces+0x425/0x7b0 [ 405.393246][ T30] ? bpf_lsm_capable+0x9/0x10 [ 405.397996][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 405.433212][ T30] ksys_unshare+0x619/0xc10 [ 405.437792][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 405.442829][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 405.472562][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 405.485157][ T30] __ia32_sys_unshare+0x37/0x40 [ 405.490050][ T30] __do_fast_syscall_32+0xb4/0x110 [ 405.513248][ T30] ? exc_page_fault+0x590/0x8c0 [ 405.518135][ T30] do_fast_syscall_32+0x34/0x80 [ 405.523002][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 405.543300][ T30] RIP: 0023:0xf7f67579 [ 405.547427][ T30] RSP: 002b:00000000f754ff7c EFLAGS: 00000206 ORIG_RAX: 0000000000000136 [ 405.563380][ T30] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 405.571379][ T30] RDX: 00000000f73ebff4 RSI: 00000000f72c2aaf RDI: 0000000030000000 [ 405.603224][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 405.611235][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 405.633241][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 405.641258][ T30] [ 405.653204][ T30] [ 405.653204][ T30] Showing all locks held in the system: [ 405.660923][ T30] 3 locks held by kworker/0:1/9: [ 405.683368][ T30] 1 lock held by khungtaskd/30: [ 405.688234][ T30] #0: ffffffff8e938320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 405.713216][ T30] 2 locks held by kworker/u8:3/52: [ 405.718357][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 405.743213][ T30] #1: ffffc90000bc7d00 ((work_completion)(&pool->idle_cull_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 405.773209][ T30] 3 locks held by kworker/u9:0/54: [ 405.778339][ T30] 3 locks held by kworker/0:2/941: [ 405.793196][ T30] 3 locks held by kworker/u8:6/1063: [ 405.798488][ T30] #0: ffff88802fc2c948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 405.823218][ T30] #1: ffffc900044ffd00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 405.853214][ T30] #2: ffffffff8fc8c308 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 405.862765][ T30] 2 locks held by kworker/u8:7/1079: [ 405.883207][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 405.903223][ T30] #1: ffffc9000459fd00 ((work_completion)(&pool->idle_cull_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 405.933264][ T30] 4 locks held by kworker/u8:14/3048: [ 405.939212][ T30] 2 locks held by getty/4992: [ 405.953197][ T30] #0: ffff888034ad20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 405.963000][ T30] #1: ffffc9000312b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 405.993217][ T30] 6 locks held by kworker/u9:2/5237: [ 405.998541][ T30] #0: ffff8880258e6148 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 406.023382][ T30] #1: ffffc9000358fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 406.053728][ T1263] ieee802154 phy0 wpan0: encryption failed: -22 [ 406.060067][ T1263] ieee802154 phy1 wpan1: encryption failed: -22 [ 406.067755][ T30] #2: ffff88807ea54d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 406.083190][ T30] #3: ffff88807ea54078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 406.092894][ T30] #4: ffffffff8fdf7f28 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x185/0x340 [ 406.123249][ T30] #5: ffffffff8e93d6f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 406.153236][ T30] 3 locks held by kworker/u9:3/5240: [ 406.158555][ T30] #0: ffff888062664948 ((wq_completion)hci7){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 406.183232][ T30] #1: ffffc900035d7d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 406.203188][ T30] #2: ffff8880645a4d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 406.213066][ T30] 3 locks held by kworker/1:3/5284: [ 406.243260][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 406.263192][ T30] #1: ffffc9000406fd00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 406.283203][ T30] #2: ffffffff8fc8c308 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 406.313237][ T30] 2 locks held by kworker/0:4/5287: [ 406.318478][ T30] 4 locks held by kworker/u8:16/6235: [ 406.362117][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 406.423216][ T30] #1: ffffc90003297d00 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 406.473225][ T30] #2: ffffffff8e7d2610 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_enable+0x12/0x20 [ 406.483069][ T30] #3: ffffffff8e9e7088 (jump_label_mutex){+.+.}-{3:3}, at: static_key_enable_cpuslocked+0xd7/0x260 [ 406.533272][ T30] 3 locks held by syz.2.514/7160: [ 406.538345][ T30] #0: ffff88805f0acd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 406.563306][ T30] #1: ffff88805f0ac078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 406.573050][ T30] #2: ffffffff8fdf7f28 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 406.596918][ T30] 1 lock held by syz.4.525/7186: [ 406.601870][ T30] #0: ffffffff8fc8c308 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 406.610967][ T30] 3 locks held by syz.3.527/7192: [ 406.619707][ T30] 1 lock held by syz.1.528/7195: [ 406.625982][ T30] 1 lock held by syz-executor/7208: [ 406.631246][ T30] #0: ffffffff8fc8c308 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 406.643031][ T30] 2 locks held by syz-executor/7223: [ 406.648385][ T30] #0: ffffffff8fc7f750 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 406.658267][ T30] #1: ffffffff8fc8c308 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x710 [ 406.668098][ T30] 2 locks held by syz-executor/7224: [ 406.673426][ T30] #0: ffffffff8fc7f750 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 406.682858][ T30] #1: ffffffff8fc8c308 (rtnl_mutex){+.+.}-{3:3}, at: register_netdev+0x13/0x50 [ 406.692012][ T30] 1 lock held by dhcpcd/7230: [ 406.696717][ T30] 1 lock held by dhcpcd/7231: [ 406.701394][ T30] 2 locks held by dhcpcd/7232: [ 406.706192][ T30] 1 lock held by dhcpcd/7233: [ 406.710866][ T30] 1 lock held by dhcpcd/7234: [ 406.715594][ T30] 2 locks held by syz-executor/7236: [ 406.720888][ T30] [ 406.743277][ T30] ============================================= [ 406.743277][ T30] [ 406.751743][ T30] NMI backtrace for cpu 0 [ 406.756082][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc7-syzkaller-00133-ge936e7d4a83b #0 [ 406.766594][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 406.776648][ T30] Call Trace: [ 406.780103][ T30] [ 406.783038][ T30] dump_stack_lvl+0x241/0x360 [ 406.787735][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 406.792940][ T30] ? __pfx__printk+0x10/0x10 [ 406.797533][ T30] ? vprintk_emit+0x667/0x7c0 [ 406.802347][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 406.807386][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 406.812340][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 406.817809][ T30] ? _printk+0xd5/0x120 [ 406.821973][ T30] ? __pfx__printk+0x10/0x10 [ 406.826565][ T30] ? __wake_up_klogd+0xcc/0x110 [ 406.831421][ T30] ? __pfx__printk+0x10/0x10 [ 406.836035][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 406.841083][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 406.847076][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 406.853073][ T30] watchdog+0xff4/0x1040 [ 406.857347][ T30] ? watchdog+0x1ea/0x1040 [ 406.861791][ T30] ? __pfx_watchdog+0x10/0x10 [ 406.866482][ T30] kthread+0x2f0/0x390 [ 406.870563][ T30] ? __pfx_watchdog+0x10/0x10 [ 406.875277][ T30] ? __pfx_kthread+0x10/0x10 [ 406.879894][ T30] ret_from_fork+0x4b/0x80 [ 406.884414][ T30] ? __pfx_kthread+0x10/0x10 [ 406.889017][ T30] ret_from_fork_asm+0x1a/0x30 [ 406.893829][ T30] [ 406.897666][ T30] Sending NMI from CPU 0 to CPUs 1: [ 406.902907][ C1] NMI backtrace for cpu 1 [ 406.902921][ C1] CPU: 1 UID: 0 PID: 7236 Comm: syz-executor Not tainted 6.11.0-rc7-syzkaller-00133-ge936e7d4a83b #0 [ 406.902940][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 406.902950][ C1] RIP: 0010:taprio_set_budgets+0x1e1/0x370 [ 406.902974][ C1] Code: 99 3a f8 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 f7 96 3a f8 48 89 e8 31 d2 48 f7 33 <48> 89 c5 bf 11 00 00 00 4c 89 fe e8 9f 53 d3 f7 49 83 ff 10 0f 87 [ 406.902987][ C1] RSP: 0018:ffffc90000a18c30 EFLAGS: 00000046 [ 406.903002][ C1] RAX: 0000000000000000 RBX: ffff8880290e72e0 RCX: dffffc0000000000 [ 406.903014][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff8880290e72e0 [ 406.903025][ C1] RBP: 0000000000000000 R08: ffff8880290e72e7 R09: 1ffff1100521ce5c [ 406.903036][ C1] R10: dffffc0000000000 R11: ffffed100521ce5d R12: 0000000000000004 [ 406.903048][ C1] R13: ffff888048120808 R14: ffff888048120800 R15: 0000000000000001 [ 406.903063][ C1] FS: 0000000000000000(0000) GS:ffff8880b8900000(0063) knlGS:0000000057106440 [ 406.903078][ C1] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 406.903089][ C1] CR2: 00000000f7465004 CR3: 0000000026ed0000 CR4: 00000000003526f0 [ 406.903104][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 406.903113][ C1] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 406.903123][ C1] Call Trace: [ 406.903130][ C1] [ 406.903138][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 406.903156][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 406.903177][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 406.903195][ C1] ? nmi_handle+0x2a/0x5a0 [ 406.903220][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 406.903239][ C1] ? nmi_handle+0x14f/0x5a0 [ 406.903255][ C1] ? nmi_handle+0x2a/0x5a0 [ 406.903272][ C1] ? taprio_set_budgets+0x1e1/0x370 [ 406.903290][ C1] ? default_do_nmi+0x63/0x160 [ 406.903311][ C1] ? exc_nmi+0x123/0x1f0 [ 406.903329][ C1] ? end_repeat_nmi+0xf/0x53 [ 406.903354][ C1] ? taprio_set_budgets+0x1e1/0x370 [ 406.903370][ C1] ? taprio_set_budgets+0x1e1/0x370 [ 406.903390][ C1] ? taprio_set_budgets+0x1e1/0x370 [ 406.903407][ C1] [ 406.903413][ C1] [ 406.903422][ C1] advance_sched+0x98d/0xca0 [ 406.903447][ C1] ? __pfx_advance_sched+0x10/0x10 [ 406.903463][ C1] __hrtimer_run_queues+0x59b/0xd50 [ 406.903480][ C1] ? ktime_get_update_offsets_now+0x3c/0x250 [ 406.903509][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 406.903530][ C1] hrtimer_interrupt+0x396/0x990 [ 406.903559][ C1] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 406.903582][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 406.903603][ C1] [ 406.903608][ C1] [ 406.903614][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 406.903633][ C1] RIP: 0010:check_preemption_disabled+0x2/0x120 [ 406.903650][ C1] Code: 8e 60 8c 48 c7 c6 20 8f 60 8c eb 1c 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 57 <41> 56 41 54 53 48 83 ec 10 65 48 8b 04 25 28 00 00 00 48 89 44 24 [ 406.903663][ C1] RSP: 0018:ffffc900098ef6d0 EFLAGS: 00000283 [ 406.903677][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffffffff816fcd04 [ 406.903688][ C1] RDX: 0000000000000000 RSI: ffffffff8c608f20 RDI: ffffffff8c608ee0 [ 406.903699][ C1] RBP: ffffc900098ef858 R08: ffffffff9018766f R09: 1ffffffff2030ecd [ 406.903711][ C1] R10: dffffc0000000000 R11: fffffbfff2030ece R12: 1ffff9200131dee8 [ 406.903724][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 406.903739][ C1] ? lock_acquire+0xd4/0x550 [ 406.903761][ C1] rcu_is_watching+0x15/0xb0 [ 406.903781][ C1] lock_acquire+0xe3/0x550 [ 406.903803][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 406.903823][ C1] ? __alloc_pages_noprof+0x166/0x6c0 [ 406.903847][ C1] ? alloc_pages_bulk_noprof+0x729/0xd40 [ 406.903867][ C1] ? fs_reclaim_acquire+0x93/0x140 [ 406.903887][ C1] fs_reclaim_acquire+0xaf/0x140 [ 406.903907][ C1] ? fs_reclaim_acquire+0x93/0x140 [ 406.903925][ C1] prepare_alloc_pages+0x147/0x5d0 [ 406.903949][ C1] __alloc_pages_noprof+0x166/0x6c0 [ 406.903971][ C1] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 406.904001][ C1] alloc_pages_mpol_noprof+0x3e8/0x680 [ 406.904026][ C1] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 406.904046][ C1] ? rcu_is_watching+0x15/0xb0 [ 406.904071][ C1] ? trace_kmalloc+0x1f/0xd0 [ 406.904086][ C1] ? __vmalloc_node_range_noprof+0x5e3/0x1400 [ 406.904102][ C1] ? alloc_pages_noprof+0xef/0x170 [ 406.904118][ C1] __vmalloc_node_range_noprof+0xa40/0x1400 [ 406.904149][ C1] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 406.904170][ C1] vmalloc_user_noprof+0x74/0x80 [ 406.904186][ C1] ? kcov_ioctl+0x59/0x640 [ 406.904205][ C1] kcov_ioctl+0x59/0x640 [ 406.904224][ C1] ? bpf_lsm_file_ioctl_compat+0x9/0x10 [ 406.904244][ C1] ? security_file_ioctl_compat+0x87/0xb0 [ 406.904262][ C1] __se_compat_sys_ioctl+0x51c/0xca0 [ 406.904282][ C1] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 406.904298][ C1] ? file_close_fd+0x67/0x80 [ 406.904320][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 406.904341][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 406.904363][ C1] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 406.904380][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 406.904396][ C1] __do_fast_syscall_32+0xb4/0x110 [ 406.904413][ C1] ? exc_page_fault+0x590/0x8c0 [ 406.904435][ C1] do_fast_syscall_32+0x34/0x80 [ 406.904451][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 406.904471][ C1] RIP: 0023:0xf743d579 [ 406.904485][ C1] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 406.904497][ C1] RSP: 002b:00000000ff8d7eb4 EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 406.904513][ C1] RAX: ffffffffffffffda RBX: 00000000000000de RCX: 0000000080086301 [ 406.904524][ C1] RDX: 0000000000040000 RSI: 00000000f742bff4 RDI: 00000000f7465330 [ 406.904535][ C1] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 [ 406.904544][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 406.904554][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 406.904573][ C1] [ 407.526261][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 407.533140][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc7-syzkaller-00133-ge936e7d4a83b #0 [ 407.543643][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 407.553700][ T30] Call Trace: [ 407.556985][ T30] [ 407.559919][ T30] dump_stack_lvl+0x241/0x360 [ 407.564609][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 407.569810][ T30] ? __pfx__printk+0x10/0x10 [ 407.574410][ T30] ? vscnprintf+0x5d/0x90 [ 407.578750][ T30] panic+0x349/0x860 [ 407.582648][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 407.588810][ T30] ? __pfx_panic+0x10/0x10 [ 407.593225][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 407.598603][ T30] ? __irq_work_queue_local+0x137/0x410 [ 407.604168][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 407.609544][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 407.615705][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 407.621872][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 407.628034][ T30] watchdog+0x1033/0x1040 [ 407.632373][ T30] ? watchdog+0x1ea/0x1040 [ 407.636802][ T30] ? __pfx_watchdog+0x10/0x10 [ 407.641486][ T30] kthread+0x2f0/0x390 [ 407.645558][ T30] ? __pfx_watchdog+0x10/0x10 [ 407.650239][ T30] ? __pfx_kthread+0x10/0x10 [ 407.654833][ T30] ret_from_fork+0x4b/0x80 [ 407.659254][ T30] ? __pfx_kthread+0x10/0x10 [ 407.663845][ T30] ret_from_fork_asm+0x1a/0x30 [ 407.668629][ T30] [ 408.779672][ T30] Shutting down cpus with NMI [ 408.784715][ T30] Kernel Offset: disabled [ 408.789050][ T30] Rebooting in 86400 seconds..