last executing test programs: 9.51959201s ago: executing program 1 (id=337): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000900)={0x1c, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000240)={0x40, 0x2, 0x4, "49e7c9eb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.377598052s ago: executing program 3 (id=340): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000d972a440b72040155ab7010203010902120001000000000904800000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000340)={0x0, 0x31, 0x1, 'w'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000400)={0x20, 0x8, 0x1, "11"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x40, 0x21, 0x1, 0x8}}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000200)={0x0, 0xe, 0xa, "904bf8b6fa2b794cc02a"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.617462023s ago: executing program 0 (id=341): sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x0) 7.690460488s ago: executing program 0 (id=343): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x404c000}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8894}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x82) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x1}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef) 7.433214649s ago: executing program 0 (id=345): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x2, 0xb4, 0x8c, 0xbb, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000180)={0x40, 0x10, 0x49, "7be4a9009c66cb5a01d906d5c867eb80321d2c6bc2b0ada844b4674b8b6c7e50a2a5a205a0708a3d2847bf7e154c397970d66d7c1b6baea2517f143b6e007df9a3579bc3e188e2bab5"}, 0x0, 0x0, &(0x7f00000002c0)={0xc0, 0xa1, 0x4, 0x1}, &(0x7f0000000300)={0x40, 0xa0, 0x4}, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000780)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.034410391s ago: executing program 1 (id=347): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}}) llistxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 6.538144071s ago: executing program 3 (id=348): bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000030000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x1, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1000}, 0x50) bind$rds(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x0, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, 0x0, 0x1) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000003c0)={0x3, 0x4, {}, {}, 0x10, 0x8}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20048001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x4, 0x0, 0xb51b, 0x10}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x26}}, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10, 0x0}, 0x40008c0) rseq(&(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5, 0x1, 0x3}, 0x3}, 0x20, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001380)="52348bf9812fc081678b5760a4c4967393fd8939aaf12a894c5424df616c4eea14fbac2dad114a75c405d89fafa5715b56abba4bbceca456d8225e3f6eb57a03287e74c7bd74e40e3fda3150f92d181e7c82cb2f8ea0416fc4c0f111161cdb9a52911925644e25f871d02f403c83214f830f93b30b874e75cab53f1ed7871f21c0d654a47fab0637868517d7e8d9915e99b4dc2dcafdcb2ef2a012ec95418a544c32181fb969e01318e00a12fd1b2a0eb57bcf7de086e320f2d4be4e1453010be849e4d7dba41558329699aacd3d1c7d97b9bf74caf8b7946647309d209558b1965ef7ea4576ec0e289b73c2089310271d0a67d88a312f4cb0194c4f28ec3c2fe269311d0cec1fe0efef17d376d183b08e392b6cb58e930e1f959dd4528ec95350fc86e5297e6d59af036b132df17833881238ba8692842a8da4d5b4a37c94915331143d9128a197495433c2f550b4455a9ae03b937305e192e861ca3a60f9b3a14288e3daeb6936593485388a4aaab39b3843ee2960d9c8728eafb904333e7b78a270480e8dd89b93fe5a37ca9c85a0e6e82bd603efb596c4cf0b791013cff43bf314e11a44d5f9c4fdad8a2fcdb04f76de29a50a0428148f4bc3eff1e84d25ea95dabddfba6162860a3c3389ee366450b6bcf1409f920caf1be5702af0402e2cef4896d9544a26ebfab694d7a47eca55bd2f62e7d7eb1f6061f7e441df5ab31344f02179764822036ef706133ea1a6380e042f074b2b0ddcc578cb8a668a846b9d5792f8d434f8ec7b562594587c49e8e6b3450e545fc070644bd06a36106cdb63f9e8ad7ae50b5b44e47f377961f5e29392330fb40d63c911ffd13e094f0452cc5c77b0731b56211b2d8a7554f6077ae593626a54f56d6dea49058fd1d48db02a7b33d50474b58a7e14e6a4d935bfaf4865f00074d59ece4b2d5f5e768e952733ee2c34b3e4b0be230f792f8b16f872afbbd155fe5314d4f54ea7b747eb2cd2410db7464c73ecd4815cda0bcc839fb603bb3f0c04b2d233b54a78b7aa3db9745b69c8788e155cc2ef39bcf8491101058093c842df8cd0ac03d29e6d6902187f31eaf960b306debf734d8d26cc34a7e62c64a98b5a8a6102142af724db839aa7f63f7e0d81f5213d4d5722088be5b5ea6b1ee19b148d1f8b7172cd507533360d2d668e85252463b1d61302a75a7e3dc5e8c607a1", 0x355}], 0x1}}], 0x1, 0x4) sendto$inet(r0, &(0x7f0000000580)='W', 0xfffffffffffffd3d, 0x10008095, 0x0, 0x0) 5.713839668s ago: executing program 1 (id=351): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, 0x0, &(0x7f00000000c0)=@tcp6}, 0x20) bind$unix(0xffffffffffffffff, 0x0, 0x0) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) close(r4) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r3, &(0x7f00000004c0)={[0x0, &(0x7f00000003c0)=')!}\x00']}, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xc) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r6, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@delqdisc={0x24, 0x25, 0x400, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x6}, {0xa, 0xb}, {0x7, 0x2}}}, 0x24}}, 0x8004) r8 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000003c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2d, 0x2000, {0x60, 0x0, 0x0, r10, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80d1}, 0x30008000) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.490157626s ago: executing program 3 (id=352): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x12002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r4, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendfile(r4, r3, 0x0, 0x40008) r5 = openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x80002, 0x0) setsockopt$MRT6_INIT(r5, 0x29, 0xc8, &(0x7f00000002c0), 0x4) r6 = signalfd4(r1, &(0x7f0000000080)={[0xc658]}, 0x8, 0x800) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x2b}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020800000100000000000001000000000100140003"], 0x18}}, 0x0) io_setup(0x30, &(0x7f0000000600)) pipe2$9p(&(0x7f00000000c0), 0x4000) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x101002) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r7, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) pread64(r7, 0x0, 0x20, 0xce2) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 4.012019065s ago: executing program 0 (id=354): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x404c000}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8894}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x82) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x1}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef) 3.374954497s ago: executing program 1 (id=356): mlock(&(0x7f0000ff8000/0x5000)=nil, 0x5000) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x9}]}}]}, 0x40}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x70bd25, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 3.21620703s ago: executing program 1 (id=358): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x31) 3.132007497s ago: executing program 0 (id=360): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}}], {0x14}}, 0x78}}, 0x0) 3.113963608s ago: executing program 1 (id=361): pivot_root(&(0x7f0000000000)='./cgroup\x00', 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYRES64=r1, @ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRES16=r1, @ANYRESHEX=r0, @ANYRES8=r1, @ANYRESDEC=0x0], 0x3}, 0x1, 0x0, 0x0, 0x800}, 0x8040) r2 = socket$kcm(0x21, 0x5, 0x2) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYRESOCT=r2], 0x10b8}, 0x50810) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xff4c) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) fsopen(&(0x7f0000000040)='afs\x00', 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000080d050132000000000001090224000100000000090400000103020300092100000001220700098103ff0300000000"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001a, '\x00', 0x0, @fallback=0x2}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) readv(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000180)=""/85, 0x55}], 0x2) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000080)=0x74000000) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xd, 0x4, 0x0, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) write$dsp(r3, &(0x7f0000002000)='`', 0x88020) 3.049713833s ago: executing program 0 (id=362): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x218, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x2a8000) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) read$dsp(r3, &(0x7f0000000200)=""/168, 0xa8) ioctl$TCSETSW2(r2, 0x80047456, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r3, 0x8008f513, &(0x7f0000000100)) 2.256447017s ago: executing program 2 (id=363): r0 = fsopen(&(0x7f0000000000)='devtmpfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 1.97192819s ago: executing program 2 (id=364): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b00010067656e657665000020000280140007000000000000000000000000000000000105000c0001", @ANYRES32=r2], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.680479534s ago: executing program 2 (id=365): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, &(0x7f0000000340)={0x3, 0x1, @stop_pts=0x101}) socket$nl_route(0x10, 0x3, 0x0) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000000c0)) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x501, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x3dff, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x8}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1, 0x0, 0x0, 0xfffffffd}, 0x0) 830.018763ms ago: executing program 3 (id=366): mlock(&(0x7f0000ff8000/0x5000)=nil, 0x5000) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x9}]}}]}, 0x40}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x70bd25, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 774.196567ms ago: executing program 3 (id=367): bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x1, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1000}, 0x50) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000400)={0x2, 0x0, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, 0x0, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000003c0)={0x3, 0x4, {0x0}, {}, 0x10, 0x8}) sendmsg$nl_netfilter(r4, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB="40000000130201032dbd7000fbdbdf2501007fff2200e000cafe03f8bc9046aa74440efea8c76984a019dd80a498f310f1d13ca40d93000008008800", @ANYRES32=r5, @ANYBLOB="84c02afa774cffe39f81b100a41959768296d970a85f5ea8099e45e8ba4d685bf26d0daf9335911de01e081b520af05a26314bed00c572c12db2de22be56a57384f4a81da9f3f26eff9c00374ab8dfec1e0f44d760ef7b0d9886447d8d9a6d9bd67927a545b25ceabf546384f0c405463bf8586597fc0417693a3bee43e8a5"], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20048001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000280)={0x4, 0x0, 0xb51b, 0x10}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001200010ae6ffffe17c14dbce70c8"], 0x26}}, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000804) sendmsg$rds(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000780)}, 0x40008c0) rseq(&(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5, 0x1, 0x3}, 0x3}, 0x20, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000340)=[{}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001380)="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", 0x355}], 0x1}}], 0x2, 0x4) sendto$inet(r0, &(0x7f0000000580)='W', 0xfffffffffffffd3d, 0x10008095, 0x0, 0x0) 249.737869ms ago: executing program 3 (id=368): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x404c000}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8894}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x82) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x1}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef) 195.706994ms ago: executing program 2 (id=369): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x31) 121.4993ms ago: executing program 2 (id=370): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, 0x0, 0x0) 0s ago: executing program 2 (id=371): socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() timer_create(0xb, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x2182) ioctl$CEC_RECEIVE(r1, 0xc0386106, &(0x7f0000000000)={0x0, 0x7, 0x1, 0x0, 0x0, 0x9, '&\x00', 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0xe}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.133' (ED25519) to the list of known hosts. [ 59.544093][ T5776] cgroup: Unknown subsys name 'net' [ 59.674566][ T5776] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 61.068774][ T5776] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 62.524949][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.533688][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.535783][ T5795] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.548472][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.551282][ T5795] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.568131][ T5798] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.568146][ T5792] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.568583][ T5792] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.577143][ T5798] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.585128][ T5792] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.591073][ T5798] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.598855][ T5792] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 62.605272][ T5798] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.611967][ T5792] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.632636][ T5798] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.649068][ T5105] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.656959][ T5105] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 62.663197][ T5800] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.664580][ T5105] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.673383][ T5800] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.690666][ T5798] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 62.698038][ T5800] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 62.705435][ T5798] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.713242][ T5800] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 63.151519][ T5793] chnl_net:caif_netlink_parms(): no params data found [ 63.234743][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 63.298720][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 63.362039][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.369459][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.376803][ T5793] bridge_slave_0: entered allmulticast mode [ 63.384274][ T5793] bridge_slave_0: entered promiscuous mode [ 63.392304][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 63.422164][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.429914][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.437165][ T5793] bridge_slave_1: entered allmulticast mode [ 63.445254][ T5793] bridge_slave_1: entered promiscuous mode [ 63.506986][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.514393][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.521996][ T5787] bridge_slave_0: entered allmulticast mode [ 63.528790][ T5787] bridge_slave_0: entered promiscuous mode [ 63.551622][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.582328][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.590124][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.597273][ T5787] bridge_slave_1: entered allmulticast mode [ 63.604810][ T5787] bridge_slave_1: entered promiscuous mode [ 63.613709][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.633794][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.641187][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.648604][ T5794] bridge_slave_0: entered allmulticast mode [ 63.655316][ T5794] bridge_slave_0: entered promiscuous mode [ 63.693146][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.700419][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.707596][ T5794] bridge_slave_1: entered allmulticast mode [ 63.715272][ T5794] bridge_slave_1: entered promiscuous mode [ 63.749970][ T5793] team0: Port device team_slave_0 added [ 63.779409][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.791526][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.802528][ T5793] team0: Port device team_slave_1 added [ 63.822186][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.864753][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.884418][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.891900][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.918389][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.932680][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.939819][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.966146][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.977572][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.984965][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.992589][ T5790] bridge_slave_0: entered allmulticast mode [ 63.999673][ T5790] bridge_slave_0: entered promiscuous mode [ 64.022306][ T5787] team0: Port device team_slave_0 added [ 64.045504][ T5794] team0: Port device team_slave_0 added [ 64.054618][ T5794] team0: Port device team_slave_1 added [ 64.061169][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.068775][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.075974][ T5790] bridge_slave_1: entered allmulticast mode [ 64.083258][ T5790] bridge_slave_1: entered promiscuous mode [ 64.103357][ T5787] team0: Port device team_slave_1 added [ 64.184835][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.192366][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.219159][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.233170][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.245529][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.264339][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.271586][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.297877][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.310710][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.317697][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.343968][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.356140][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.363163][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.389481][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.417603][ T5793] hsr_slave_0: entered promiscuous mode [ 64.424553][ T5793] hsr_slave_1: entered promiscuous mode [ 64.514347][ T5794] hsr_slave_0: entered promiscuous mode [ 64.522372][ T5794] hsr_slave_1: entered promiscuous mode [ 64.528984][ T5794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.536846][ T5794] Cannot create hsr debugfs directory [ 64.545583][ T5790] team0: Port device team_slave_0 added [ 64.555256][ T5790] team0: Port device team_slave_1 added [ 64.573889][ T5787] hsr_slave_0: entered promiscuous mode [ 64.580260][ T5787] hsr_slave_1: entered promiscuous mode [ 64.586591][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.594874][ T5787] Cannot create hsr debugfs directory [ 64.653741][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.661142][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.687071][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.700886][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.707975][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.718837][ T5800] Bluetooth: hci0: command tx timeout [ 64.735110][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.787908][ T5800] Bluetooth: hci1: command tx timeout [ 64.787924][ T5795] Bluetooth: hci2: command tx timeout [ 64.788144][ T5795] Bluetooth: hci3: command tx timeout [ 64.920058][ T5790] hsr_slave_0: entered promiscuous mode [ 64.926579][ T5790] hsr_slave_1: entered promiscuous mode [ 64.933224][ T5790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.941330][ T5790] Cannot create hsr debugfs directory [ 65.136199][ T5794] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.154113][ T5794] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.164709][ T5794] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.192179][ T5794] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.269774][ T5793] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.300420][ T5793] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.313114][ T5793] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.339806][ T5793] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.379360][ T5787] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.393029][ T5787] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.403908][ T5787] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.414597][ T5787] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.505199][ T5790] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.525093][ T5790] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.550199][ T5790] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.569487][ T5790] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.636521][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.673291][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.705682][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.735963][ T2937] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.743367][ T2937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.762199][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.786327][ T3472] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.793572][ T3472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.805207][ T3472] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.812359][ T3472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.825417][ T2937] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.832640][ T2937] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.877469][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.930990][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.944699][ T5793] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.983337][ T5794] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.001717][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.010547][ T2937] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.017680][ T2937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.046981][ T3472] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.054212][ T3472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.145562][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.201257][ T3472] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.208545][ T3472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.237162][ T1323] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.244512][ T1323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.272903][ T5787] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.396169][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.424145][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.535206][ T5793] veth0_vlan: entered promiscuous mode [ 66.560117][ T5794] veth0_vlan: entered promiscuous mode [ 66.644158][ T5793] veth1_vlan: entered promiscuous mode [ 66.654848][ T5794] veth1_vlan: entered promiscuous mode [ 66.674486][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.765970][ T5794] veth0_macvtap: entered promiscuous mode [ 66.782826][ T5793] veth0_macvtap: entered promiscuous mode [ 66.789518][ T5795] Bluetooth: hci0: command tx timeout [ 66.794855][ T5793] veth1_macvtap: entered promiscuous mode [ 66.810720][ T5794] veth1_macvtap: entered promiscuous mode [ 66.847653][ T5787] veth0_vlan: entered promiscuous mode [ 66.866346][ T5787] veth1_vlan: entered promiscuous mode [ 66.872483][ T5795] Bluetooth: hci3: command tx timeout [ 66.880606][ T5795] Bluetooth: hci1: command tx timeout [ 66.882239][ T50] Bluetooth: hci2: command tx timeout [ 66.896228][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.911043][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.934251][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.945484][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.959347][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.974121][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.989016][ T5794] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.998775][ T5794] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.007595][ T5794] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.016987][ T5794] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.038570][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.049283][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.061288][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.082625][ T5793] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.091562][ T5793] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.101254][ T5793] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.111240][ T5793] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.245527][ T5787] veth0_macvtap: entered promiscuous mode [ 67.264632][ T5787] veth1_macvtap: entered promiscuous mode [ 67.275028][ T5790] veth0_vlan: entered promiscuous mode [ 67.283424][ T3530] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.300725][ T3530] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.323013][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.344220][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.362494][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.373405][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.383428][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.394054][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.405812][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.423793][ T5790] veth1_vlan: entered promiscuous mode [ 67.463849][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.475566][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.486197][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.496898][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.511002][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.524062][ T5787] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.533837][ T5787] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.542794][ T5787] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.552193][ T5787] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.576249][ T3490] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.585645][ T3490] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.593658][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.603782][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.662394][ T5790] veth0_macvtap: entered promiscuous mode [ 67.711207][ T5790] veth1_macvtap: entered promiscuous mode [ 67.769026][ T2937] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.777001][ T2937] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.822406][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.824357][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.843770][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.857869][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.877936][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.909722][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.930037][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.951500][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.964797][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.037046][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.053108][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.064030][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.075430][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.085373][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.096049][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.113509][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.208550][ T5833] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 68.350134][ T5790] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.360095][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 68.383297][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 68.455175][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 68.479354][ T5790] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.489215][ T5833] usb 3-1: Using ep0 maxpacket: 32 [ 68.537832][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 68.547968][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 68.556626][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 68.599609][ T5833] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 68.646696][ T5790] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.685889][ T5833] usb 3-1: config 0 has no interface number 0 [ 68.755144][ T5790] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.849189][ T5833] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 68.888684][ T50] Bluetooth: hci0: command tx timeout [ 68.938024][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.946881][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.955709][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.964547][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.978792][ T50] Bluetooth: hci2: command tx timeout [ 68.984368][ T50] Bluetooth: hci1: command tx timeout [ 68.990832][ T50] Bluetooth: hci3: command tx timeout [ 69.045687][ T5833] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.119472][ T5833] usb 3-1: Product: syz [ 69.176791][ T5833] usb 3-1: Manufacturer: syz [ 69.215878][ T5833] usb 3-1: SerialNumber: syz [ 69.284354][ T5833] usb 3-1: config 0 descriptor?? [ 69.323260][ T5833] smsc95xx v2.0.0 [ 69.400930][ T5887] syz.3.7 uses obsolete (PF_INET,SOCK_PACKET) [ 69.433899][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.448708][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.531383][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.556368][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.749444][ T5833] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 69.896009][ T5895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 69.944255][ T5897] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 69.957677][ T5833] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 70.753259][ T3530] Bluetooth: hci4: Frame reassembly failed (-84) [ 70.763597][ T5833] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 70.811587][ T5833] smsc95xx: probe of 3-1:0.67 failed with error -71 [ 70.849504][ T5833] usb 3-1: USB disconnect, device number 2 [ 70.960573][ T50] Bluetooth: hci0: command tx timeout [ 71.035031][ T50] Bluetooth: hci3: command tx timeout [ 71.035070][ T5795] Bluetooth: hci1: command tx timeout [ 71.035673][ T5789] Bluetooth: hci2: command tx timeout [ 71.516866][ T5897] syz.3.11[5897]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 71.655047][ T5909] fuse: Unknown parameter '0x0000000000000005' [ 71.676731][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.683718][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.401283][ T5800] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 75.407851][ T786] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 76.305620][ T786] usb 3-1: Using ep0 maxpacket: 16 [ 76.393213][ T786] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 76.552940][ T786] usb 3-1: config 0 has no interface number 0 [ 76.607946][ T786] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 76.651764][ T786] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 76.678911][ T786] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 76.693273][ T786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.704977][ T786] usb 3-1: Product: syz [ 76.731806][ T786] usb 3-1: Manufacturer: syz [ 76.760296][ T786] usb 3-1: SerialNumber: syz [ 76.806298][ T786] usb 3-1: config 0 descriptor?? [ 76.814282][ T5935] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 76.881796][ T5935] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 77.066597][ T5951] Zero length message leads to an empty skb [ 77.154647][ T5935] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 77.185802][ T5935] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 77.705152][ T786] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 78.503855][ T786] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 78.552194][ T786] asix: probe of 3-1:0.251 failed with error -71 [ 78.614906][ T786] usb 3-1: USB disconnect, device number 3 [ 79.458540][ T5779] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 79.818519][ T5779] usb 1-1: Using ep0 maxpacket: 32 [ 79.847336][ T5779] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 79.930467][ T5779] usb 1-1: config 0 has no interface number 0 [ 79.964457][ T5779] usb 1-1: config 0 interface 12 has no altsetting 0 [ 80.041096][ T5779] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=70.40 [ 80.162800][ T5779] usb 1-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3 [ 80.192092][ T5779] usb 1-1: Product: syz [ 80.196425][ T5779] usb 1-1: Manufacturer: syz [ 80.209777][ T5779] usb 1-1: SerialNumber: syz [ 80.242759][ T5779] usb 1-1: config 0 descriptor?? [ 80.899317][ T966] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 81.167846][ T966] usb 4-1: Using ep0 maxpacket: 16 [ 81.207891][ T966] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 81.276299][ T966] usb 4-1: config 0 has no interface number 0 [ 81.304062][ T966] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 81.326047][ T966] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 81.362709][ T966] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 81.400459][ T966] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.429901][ T966] usb 4-1: Product: syz [ 81.444455][ T966] usb 4-1: Manufacturer: syz [ 81.454565][ T966] usb 4-1: SerialNumber: syz [ 81.465281][ T966] usb 4-1: config 0 descriptor?? [ 81.476545][ T5983] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 81.484782][ T5983] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 81.708128][ T42] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 81.796650][ T5983] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 81.838787][ T5983] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 81.911393][ T9] cfg80211: failed to load regulatory.db [ 82.022674][ T42] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 82.060760][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.119648][ T42] usb 2-1: Product: syz [ 82.146040][ T42] usb 2-1: Manufacturer: syz [ 82.172936][ T42] usb 2-1: SerialNumber: syz [ 82.296952][ T966] asix 4-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 82.369984][ T42] usb 2-1: config 0 descriptor?? [ 82.378191][ T966] asix: probe of 4-1:0.251 failed with error -524 [ 82.705282][ T966] usb 4-1: USB disconnect, device number 2 [ 82.917031][ T5779] f81534 1-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 82.925478][ T5779] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 82.932973][ T5779] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 82.940847][ T5779] f81534: probe of 1-1:0.12 failed with error -71 [ 82.965516][ T5779] usb 1-1: USB disconnect, device number 2 [ 83.125249][ T5999] ======================================================= [ 83.125249][ T5999] WARNING: The mand mount option has been deprecated and [ 83.125249][ T5999] and is ignored by this kernel. Remove the mand [ 83.125249][ T5999] option from the mount to silence this warning. [ 83.125249][ T5999] ======================================================= [ 83.338056][ T42] mos7840 2-1:0.0: required endpoints missing [ 83.370658][ T42] usb 2-1: USB disconnect, device number 2 [ 83.688451][ T6004] binder: 6000:6004 ioctl 4018620d 0 returned -22 [ 85.471898][ T6017] syz_tun: entered allmulticast mode [ 85.502254][ T6014] syz_tun: left allmulticast mode [ 86.062387][ T6022] fuse: Unknown parameter '0x0000000000000005' [ 86.236355][ T6031] loop1: detected capacity change from 0 to 64 [ 86.340036][ T966] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 86.559994][ T966] usb 1-1: Using ep0 maxpacket: 32 [ 86.584706][ T966] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 86.613291][ T966] usb 1-1: config 0 has no interface number 0 [ 86.672695][ T6037] IPVS: Error connecting to the multicast addr [ 86.848194][ T966] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 86.978486][ T5872] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 87.000669][ T966] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.114332][ T966] usb 1-1: Product: syz [ 87.176482][ T966] usb 1-1: Manufacturer: syz [ 87.194710][ T966] usb 1-1: SerialNumber: syz [ 87.207425][ T966] usb 1-1: config 0 descriptor?? [ 87.220686][ T966] smsc95xx v2.0.0 [ 87.260936][ T5872] usb 2-1: not running at top speed; connect to a high speed hub [ 87.287806][ T5872] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 87.326477][ T5872] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 87.339776][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.357751][ T5872] usb 2-1: SerialNumber: 씳燃㙜ⓢ跊Ҝ㹰汢﷨炇숎ᜠ᧰즟卑␩뤩湵悎捨泱喰 [ 87.569611][ T6039] capability: warning: `syz.2.56' uses deprecated v2 capabilities in a way that may be insecure [ 87.628062][ T966] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 87.651398][ T966] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 87.746912][ T6046] binder: 6044:6046 ioctl 4018620d 0 returned -22 [ 87.880271][ T966] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 87.905633][ T966] smsc95xx: probe of 1-1:0.67 failed with error -71 [ 87.951027][ T966] usb 1-1: USB disconnect, device number 3 [ 89.248124][ T6057] netlink: 72 bytes leftover after parsing attributes in process `syz.0.61'. [ 89.315125][ T6058] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 89.771763][ T5872] usb 2-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 89.786833][ T5872] usb 2-1: 2:1 : sample bitwidth 249 in over sample bytes 1 [ 89.794414][ T5872] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 89.833910][ T6060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.61'. [ 89.845986][ T6060] netlink: 12 bytes leftover after parsing attributes in process `syz.0.61'. [ 90.440132][ T5872] usb 2-1: USB disconnect, device number 3 [ 90.515944][ T5985] udevd[5985]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 91.969295][ T5779] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 92.168075][ T5901] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 92.260160][ T5779] usb 1-1: Using ep0 maxpacket: 32 [ 92.321773][ T5779] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 92.354058][ T5779] usb 1-1: config 0 has no interface number 0 [ 92.368075][ T5901] usb 2-1: Using ep0 maxpacket: 32 [ 92.406428][ T5901] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 92.437790][ T5901] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 92.450095][ T5901] usb 2-1: config 1 has no interface number 1 [ 92.456569][ T5901] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 92.456746][ T5779] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 92.518466][ T5901] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 92.527604][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.535789][ T5779] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.582942][ T5779] usb 1-1: Product: syz [ 92.587913][ T5901] usb 2-1: Product: syz [ 92.597442][ T5901] usb 2-1: Manufacturer: syz [ 92.598515][ T5779] usb 1-1: Manufacturer: syz [ 92.610552][ T5779] usb 1-1: SerialNumber: syz [ 92.611655][ T5901] usb 2-1: SerialNumber: syz [ 92.622784][ T5779] usb 1-1: config 0 descriptor?? [ 92.653853][ T5779] smsc95xx v2.0.0 [ 92.886098][ T5901] usb 2-1: 2:1 : no UAC_FORMAT_TYPE desc [ 93.098125][ T5901] usb 2-1: USB disconnect, device number 4 [ 93.179014][ T5779] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 93.390605][ T6102] netlink: 'syz.3.77': attribute type 4 has an invalid length. [ 93.934908][ T6103] trusted_key: encrypted_key: key user:syz not found [ 93.952535][ T5779] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 93.972194][ T5780] udevd[5780]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 94.331617][ T5779] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 94.347773][ T5779] smsc95xx: probe of 1-1:0.67 failed with error -71 [ 94.379130][ T5779] usb 1-1: USB disconnect, device number 4 [ 95.519533][ T6118] netlink: 'syz.1.84': attribute type 1 has an invalid length. [ 96.878035][ T5779] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 98.149271][ T5779] usb 4-1: Using ep0 maxpacket: 32 [ 98.321052][ T5779] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 98.333979][ T5779] usb 4-1: config 0 has no interface number 0 [ 98.344567][ T5779] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 98.384018][ T5779] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.013395][ T5779] usb 4-1: Product: syz [ 99.017631][ T5779] usb 4-1: Manufacturer: syz [ 99.027557][ T5779] usb 4-1: SerialNumber: syz [ 99.143152][ T5779] usb 4-1: config 0 descriptor?? [ 99.164220][ T5779] smsc95xx v2.0.0 [ 99.298063][ T6148] netlink: 'syz.1.95': attribute type 1 has an invalid length. [ 99.431196][ T5779] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 99.441077][ T6148] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.490504][ T5779] smsc95xx: probe of 4-1:0.67 failed with error -71 [ 99.526411][ T5779] usb 4-1: USB disconnect, device number 3 [ 99.578012][ T966] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 99.800863][ T966] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 99.817395][ T966] usb 3-1: config 0 has no interface number 0 [ 99.848211][ T966] usb 3-1: config 0 interface 41 has no altsetting 0 [ 100.179291][ T966] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 100.196753][ T966] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.206298][ T966] usb 3-1: Product: syz [ 100.210795][ T966] usb 3-1: Manufacturer: syz [ 100.215517][ T966] usb 3-1: SerialNumber: syz [ 100.305063][ T966] usb 3-1: config 0 descriptor?? [ 101.359166][ T6165] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.368396][ T6165] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.377372][ T6165] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.386814][ T6165] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.411330][ T6165] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.420346][ T6165] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.430032][ T6165] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.439135][ T6165] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.587467][ T6168] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 101.704724][ T966] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 102.021459][ T6181] random: crng reseeded on system resumption [ 102.091052][ T6183] netlink: 'syz.1.105': attribute type 1 has an invalid length. [ 102.170274][ T6183] 8021q: adding VLAN 0 to HW filter on device bond2 [ 102.980356][ T966] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 103.046714][ T966] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 103.067217][ T966] CoreChips: probe of 3-1:0.41 failed with error -71 [ 103.114267][ T966] usb 3-1: USB disconnect, device number 4 [ 103.473813][ T6171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.392885][ T6195] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 104.467395][ T6215] netlink: 'syz.1.114': attribute type 1 has an invalid length. [ 104.516198][ T6215] 8021q: adding VLAN 0 to HW filter on device bond3 [ 105.251902][ T6229] process 'syz.0.119' launched '/dev/fd/7' with NULL argv: empty string added [ 105.635997][ T6236] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 105.642801][ T6236] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 105.687199][ T6236] vhci_hcd vhci_hcd.0: Device attached [ 106.019389][ T5871] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 106.090795][ T6249] netlink: 'syz.0.123': attribute type 1 has an invalid length. [ 106.835067][ T6237] vhci_hcd: connection reset by peer [ 106.894500][ T3472] vhci_hcd: stop threads [ 106.911667][ T3472] vhci_hcd: release socket [ 106.943190][ T3472] vhci_hcd: disconnect device [ 107.280841][ T6275] NILFS (loop2): device size too small [ 107.508043][ T42] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 107.654975][ T6283] netlink: 'syz.2.135': attribute type 1 has an invalid length. [ 107.770146][ T42] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.216167][ T6283] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.491198][ T42] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 108.501057][ T42] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 108.510194][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.528753][ T42] usb 4-1: config 0 descriptor?? [ 108.624147][ T6290] fuse: Unknown parameter 'use00000000000000000000' [ 108.828006][ T42] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 109.028017][ T42] usb 2-1: Using ep0 maxpacket: 16 [ 109.055169][ T42] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 109.083705][ T42] usb 2-1: config 0 has no interface number 0 [ 109.133082][ T42] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 109.175423][ T42] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 109.238866][ T42] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 109.270323][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.309599][ T42] usb 2-1: Product: syz [ 109.334087][ T42] usb 2-1: Manufacturer: syz [ 109.353843][ T42] usb 2-1: SerialNumber: syz [ 109.431459][ T42] usb 2-1: config 0 descriptor?? [ 109.514735][ T6288] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 109.631956][ T6288] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 109.913993][ T6311] netlink: 'syz.0.145': attribute type 1 has an invalid length. [ 109.952746][ T6288] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 109.970564][ T6288] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 110.097453][ T6317] fuse: Unknown parameter 'use00000000000000000000' [ 110.191605][ T5779] usb 4-1: USB disconnect, device number 4 [ 110.265482][ T42] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 110.306931][ T42] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 110.318579][ T786] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 110.328280][ T42] asix: probe of 2-1:0.251 failed with error -5 [ 110.369196][ T42] usb 2-1: USB disconnect, device number 5 [ 110.609600][ T786] usb 3-1: Using ep0 maxpacket: 32 [ 110.783465][ T786] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 110.797766][ T786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.812194][ T786] usb 3-1: Product: syz [ 110.817672][ T786] usb 3-1: Manufacturer: syz [ 110.827292][ T786] usb 3-1: SerialNumber: syz [ 110.835610][ T786] usb 3-1: config 0 descriptor?? [ 110.851120][ T786] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 111.205534][ T5871] vhci_hcd: vhci_device speed not set [ 112.013452][ T6337] netlink: 'syz.0.156': attribute type 1 has an invalid length. [ 112.056030][ T6340] fuse: Unknown parameter 'use00000000000000000000' [ 112.066363][ T6337] 8021q: adding VLAN 0 to HW filter on device bond1 [ 112.168259][ T42] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 112.329379][ T786] gspca_stk1135: reg_w 0xd err -71 [ 112.351388][ T786] gspca_stk1135: serial bus timeout: status=0x00 [ 112.372473][ T786] gspca_stk1135: Sensor write failed [ 112.390716][ T786] gspca_stk1135: serial bus timeout: status=0x00 [ 112.415968][ T786] gspca_stk1135: Sensor write failed [ 112.423264][ T786] gspca_stk1135: serial bus timeout: status=0x00 [ 112.445265][ T786] gspca_stk1135: Sensor read failed [ 112.462269][ T786] gspca_stk1135: serial bus timeout: status=0x00 [ 112.907194][ T786] gspca_stk1135: Sensor read failed [ 113.051187][ T786] gspca_stk1135: Detected sensor type unknown (0x0) [ 113.075168][ T786] gspca_stk1135: serial bus timeout: status=0x00 [ 113.092682][ T786] gspca_stk1135: Sensor read failed [ 113.098722][ T786] gspca_stk1135: serial bus timeout: status=0x00 [ 113.106437][ T786] gspca_stk1135: Sensor read failed [ 113.111881][ T786] gspca_stk1135: serial bus timeout: status=0x00 [ 113.147479][ T786] gspca_stk1135: Sensor write failed [ 113.167892][ T42] usb 2-1: Using ep0 maxpacket: 32 [ 113.182010][ T42] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 113.194030][ T786] gspca_stk1135: serial bus timeout: status=0x00 [ 113.207793][ T42] usb 2-1: config 0 has no interface number 0 [ 113.218266][ T42] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 113.224685][ T786] gspca_stk1135: Sensor write failed [ 113.227457][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.262683][ T786] stk1135: probe of 3-1:0.0 failed with error -71 [ 113.272678][ T42] usb 2-1: Product: syz [ 113.277173][ T42] usb 2-1: Manufacturer: syz [ 113.283631][ T42] usb 2-1: SerialNumber: syz [ 113.330167][ T42] usb 2-1: config 0 descriptor?? [ 113.398748][ T42] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 113.432587][ T786] usb 3-1: USB disconnect, device number 5 [ 114.571390][ T42] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 114.587323][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 114.595621][ T42] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 114.645439][ T42] usb 2-1: USB disconnect, device number 6 [ 114.682213][ T6368] fuse: Unknown parameter 'user_i00000000000000000000' [ 114.716223][ T42] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 114.766347][ T42] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 114.798617][ T42] quatech2 2-1:0.51: device disconnected [ 114.860013][ T6370] netlink: 'syz.3.167': attribute type 1 has an invalid length. [ 114.914373][ T6370] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.768704][ T6402] fuse: Unknown parameter 'user_i00000000000000000000' [ 118.279334][ T6405] netlink: 'syz.0.178': attribute type 1 has an invalid length. [ 118.327124][ T6405] 8021q: adding VLAN 0 to HW filter on device bond2 [ 118.503130][ T6414] binder: 6413:6414 ioctl 4018620d 0 returned -22 [ 118.510973][ T6414] binder: 6413:6414 ioctl c0306201 200000000240 returned -11 [ 118.868231][ T5871] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 119.158718][ T5871] usb 4-1: Using ep0 maxpacket: 32 [ 119.290392][ T5871] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 119.369477][ T5833] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 119.379466][ T5871] usb 4-1: config 0 has no interface number 0 [ 119.399124][ T5871] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 119.415047][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.463338][ T5871] usb 4-1: Product: syz [ 119.467654][ T5871] usb 4-1: Manufacturer: syz [ 119.473874][ T5871] usb 4-1: SerialNumber: syz [ 119.516843][ T5871] usb 4-1: config 0 descriptor?? [ 119.555207][ T6425] fuse: Unknown parameter 'user_i00000000000000000000' [ 119.568284][ T5871] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 119.671302][ T5833] usb 2-1: Using ep0 maxpacket: 32 [ 119.688222][ T5833] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 119.792737][ T5833] usb 2-1: config 0 has no interface number 0 [ 119.807083][ T5871] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 119.821992][ T5871] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 120.019706][ T5833] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 120.062989][ T5833] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.071733][ T5833] usb 2-1: Product: syz [ 120.075928][ T5833] usb 2-1: Manufacturer: syz [ 120.080700][ T5833] usb 2-1: SerialNumber: syz [ 120.089184][ T5833] usb 2-1: config 0 descriptor?? [ 120.103782][ T5833] smsc95xx v2.0.0 [ 120.107489][ T5833] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 120.166641][ T5833] smsc95xx: probe of 2-1:0.67 failed with error -22 [ 120.251882][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 101 [ 120.640738][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 120.641148][ T5833] usb 4-1: USB disconnect, device number 5 [ 120.832641][ T5833] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 120.871503][ T5833] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 120.940937][ T5833] quatech2 4-1:0.51: device disconnected [ 121.568628][ T5833] usb 2-1: USB disconnect, device number 7 [ 121.979166][ T5901] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 122.344094][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.485682][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.618289][ T5901] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 122.669156][ T5779] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 122.731199][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.743135][ T5901] usb 3-1: config 0 descriptor?? [ 122.868326][ T5779] usb 1-1: Using ep0 maxpacket: 16 [ 122.904364][ T5779] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 122.923449][ T5779] usb 1-1: config 0 has no interface number 0 [ 122.939038][ T5779] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.956727][ T5779] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.019269][ T5779] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 123.048140][ T5833] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 123.052735][ T5779] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.185556][ T5779] usb 1-1: config 0 descriptor?? [ 123.208251][ T5901] usbhid 3-1:0.0: can't add hid device: -71 [ 123.221939][ T5901] usbhid: probe of 3-1:0.0 failed with error -71 [ 123.263420][ T5833] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 123.287584][ T5901] usb 3-1: USB disconnect, device number 6 [ 123.324825][ T5833] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.357881][ T5833] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.369241][ T5833] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 123.422007][ T5833] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 123.431880][ T5833] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 123.440522][ T5833] usb 4-1: Manufacturer: syz [ 123.465111][ T5833] usb 4-1: config 0 descriptor?? [ 123.905862][ T5779] uclogic 0003:28BD:0071.0001: pen parameters not found [ 123.918442][ T5779] uclogic 0003:28BD:0071.0001: interface is invalid, ignoring [ 123.941329][ T5833] usbhid 4-1:0.0: can't add hid device: -71 [ 123.964330][ T5833] usbhid: probe of 4-1:0.0 failed with error -71 [ 124.811854][ T5833] usb 4-1: USB disconnect, device number 6 [ 125.117138][ T5871] usb 1-1: USB disconnect, device number 5 [ 125.608835][ T6485] loop3: detected capacity change from 0 to 64 [ 125.937442][ T6489] IPVS: Error connecting to the multicast addr [ 126.229104][ T5833] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 126.620920][ T5833] usb 4-1: not running at top speed; connect to a high speed hub [ 126.638638][ T5833] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 126.663116][ T5833] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 126.672424][ T5833] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.681418][ T5833] usb 4-1: SerialNumber: 씳燃㙜ⓢ跊Ҝ㹰汢﷨炇숎ᜠ᧰즟卑␩뤩湵悎捨泱喰 [ 128.698633][ T5833] usb 4-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 128.717761][ T5833] usb 4-1: 2:1 : sample bitwidth 249 in over sample bytes 1 [ 128.725332][ T5833] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 128.787896][ T5833] usb 4-1: USB disconnect, device number 7 [ 128.849921][ T5985] udevd[5985]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 128.930777][ T6504] pim6reg: entered allmulticast mode [ 129.018068][ T6514] fuse: Bad value for 'fd' [ 129.257967][ T5901] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 129.478111][ T5901] usb 2-1: Using ep0 maxpacket: 32 [ 129.506973][ T5901] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.536034][ T5901] usb 2-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=d4.09 [ 129.545246][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.553575][ T5901] usb 2-1: Product: syz [ 129.558959][ T5901] usb 2-1: Manufacturer: syz [ 129.569274][ T5901] usb 2-1: SerialNumber: syz [ 129.606676][ T5901] usb 2-1: config 0 descriptor?? [ 129.643783][ T5901] peak_usb 2-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 129.685822][ T5901] peak_usb 2-1:0.0: unable to read PCAN-USB serial number (err -22) [ 130.762278][ T6497] pim6reg: left allmulticast mode [ 130.773531][ T5901] peak_usb: probe of 2-1:0.0 failed with error -22 [ 131.059709][ T5901] usb 2-1: USB disconnect, device number 8 [ 131.627886][ T5833] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 131.845871][ T5833] usb 3-1: Using ep0 maxpacket: 32 [ 132.266865][ T5833] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 132.276733][ T5833] usb 3-1: config 0 has no interface number 0 [ 132.286183][ T5833] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 132.306330][ T5833] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.325349][ T5833] usb 3-1: Product: syz [ 132.337258][ T5833] usb 3-1: Manufacturer: syz [ 132.354776][ T5833] usb 3-1: SerialNumber: syz [ 132.366436][ T5833] usb 3-1: config 0 descriptor?? [ 132.386541][ T5833] smsc95xx v2.0.0 [ 132.397630][ T5833] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 132.428757][ T5833] smsc95xx: probe of 3-1:0.67 failed with error -22 [ 132.430247][ T6547] fuse: Bad value for 'fd' [ 133.477506][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.489604][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.890913][ T786] usb 3-1: USB disconnect, device number 7 [ 136.866223][ T6570] netlink: 'syz.2.227': attribute type 1 has an invalid length. [ 136.927477][ T6570] 8021q: adding VLAN 0 to HW filter on device bond2 [ 136.967844][ T6575] netlink: 56 bytes leftover after parsing attributes in process `syz.2.227'. [ 137.293731][ T6572] pim6reg: entered allmulticast mode [ 138.118958][ T42] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 138.131674][ T786] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 138.630926][ T5800] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 138.639045][ T5800] Bluetooth: Wrong link type (-22) [ 138.644562][ T5800] Bluetooth: hci2: link tx timeout [ 138.651436][ T5800] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 138.663170][ T42] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 138.672102][ T42] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.682618][ T42] usb 3-1: config 0 has no interface number 0 [ 138.689287][ T42] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 138.700946][ T42] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 138.714112][ T42] usb 3-1: config 0 interface 52 has no altsetting 0 [ 138.721990][ T42] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 138.727850][ T786] usb 4-1: Using ep0 maxpacket: 32 [ 138.736141][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=35 [ 138.744525][ T786] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.744732][ T42] usb 3-1: SerialNumber: syz [ 138.763684][ T42] usb 3-1: config 0 descriptor?? [ 138.775958][ T786] usb 4-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=d4.09 [ 138.791493][ T786] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.815622][ T786] usb 4-1: Product: syz [ 138.823762][ T786] usb 4-1: Manufacturer: syz [ 138.833602][ T786] usb 4-1: SerialNumber: syz [ 138.845718][ T786] usb 4-1: config 0 descriptor?? [ 138.864977][ T786] peak_usb 4-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 138.904601][ T786] peak_usb 4-1:0.0: unable to read PCAN-USB serial number (err -22) [ 139.022904][ T42] input: USB Synaptics Device 06cb:0003 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input5 [ 139.027148][ T6600] netlink: 72 bytes leftover after parsing attributes in process `syz.0.237'. [ 139.068166][ T786] peak_usb: probe of 4-1:0.0 failed with error -22 [ 139.082235][ T6572] pim6reg: left allmulticast mode [ 139.458819][ T5901] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 139.847969][ T5901] usb 2-1: Using ep0 maxpacket: 8 [ 139.959581][ T5901] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 140.089008][ T6603] netlink: 4 bytes leftover after parsing attributes in process `syz.0.237'. [ 140.113878][ T5901] usb 2-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 140.130832][ T6606] netlink: 12 bytes leftover after parsing attributes in process `syz.0.237'. [ 140.183442][ T786] usb 3-1: USB disconnect, device number 8 [ 140.183505][ C1] synaptics_usb 3-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 140.208065][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.229553][ T5901] usb 2-1: config 0 descriptor?? [ 140.246248][ T5901] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 140.248782][ T5779] usb 4-1: USB disconnect, device number 8 [ 140.708105][ T5789] Bluetooth: hci2: command 0x0406 tx timeout [ 140.853042][ T6620] netlink: 'syz.2.240': attribute type 1 has an invalid length. [ 140.939487][ T6620] 8021q: adding VLAN 0 to HW filter on device bond3 [ 140.968037][ T6622] netlink: 56 bytes leftover after parsing attributes in process `syz.2.240'. [ 141.666869][ T6631] binder: 6628:6631 ioctl 4018620d 0 returned -22 [ 143.014058][ T966] usb 2-1: USB disconnect, device number 9 [ 143.157321][ T6641] netlink: 72 bytes leftover after parsing attributes in process `syz.0.247'. [ 143.236526][ T6644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.247'. [ 143.248191][ T6644] netlink: 12 bytes leftover after parsing attributes in process `syz.0.247'. [ 144.433442][ T6647] random: crng reseeded on system resumption [ 144.745044][ T6643] pim6reg: entered allmulticast mode [ 144.980684][ T6659] Bluetooth: MGMT ver 1.22 [ 145.058249][ T5779] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 145.247949][ T5779] usb 4-1: Using ep0 maxpacket: 32 [ 145.256837][ T5779] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.275168][ T5779] usb 4-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=d4.09 [ 145.284349][ T5779] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.292468][ T5779] usb 4-1: Product: syz [ 145.297017][ T5779] usb 4-1: Manufacturer: syz [ 145.301891][ T5779] usb 4-1: SerialNumber: syz [ 145.309213][ T5779] usb 4-1: config 0 descriptor?? [ 145.322290][ T5779] peak_usb 4-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 145.330186][ T5779] peak_usb 4-1:0.0: unable to read PCAN-USB serial number (err -22) [ 145.381276][ T5779] peak_usb: probe of 4-1:0.0 failed with error -22 [ 145.547609][ T6643] pim6reg: left allmulticast mode [ 145.683820][ T786] usb 4-1: USB disconnect, device number 9 [ 145.967986][ T42] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 145.978891][ T6673] binder: 6671:6673 ioctl 4018620d 0 returned -22 [ 146.177982][ T42] usb 1-1: Using ep0 maxpacket: 8 [ 146.201594][ T42] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 146.206985][ T6675] netlink: 72 bytes leftover after parsing attributes in process `syz.1.257'. [ 146.217807][ T42] usb 1-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 146.252277][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.299922][ T6676] netlink: 4 bytes leftover after parsing attributes in process `syz.1.257'. [ 146.312469][ T6676] netlink: 12 bytes leftover after parsing attributes in process `syz.1.257'. [ 146.366775][ T42] usb 1-1: config 0 descriptor?? [ 146.534346][ T42] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 147.215489][ T6682] warning: `syz.2.260' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 147.367876][ T42] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 147.557771][ T42] usb 4-1: Using ep0 maxpacket: 16 [ 147.574157][ T42] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 147.582589][ T42] usb 4-1: config 0 has no interface number 0 [ 147.607892][ T42] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 147.642472][ T42] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 147.654525][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.679363][ T42] usb 4-1: Product: syz [ 147.691252][ T42] usb 4-1: Manufacturer: syz [ 147.697772][ T42] usb 4-1: SerialNumber: syz [ 147.718917][ T42] usb 4-1: config 0 descriptor?? [ 147.837977][ T786] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 148.002435][ T786] usb 3-1: device descriptor read/64, error -71 [ 148.277941][ T786] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 148.342722][ T42] usbtouchscreen: probe of 4-1:0.214 failed with error -71 [ 148.362280][ T42] usb 4-1: USB disconnect, device number 10 [ 148.437913][ T786] usb 3-1: device descriptor read/64, error -71 [ 148.558044][ T5844] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 148.565876][ T786] usb usb3-port1: attempt power cycle [ 148.750622][ T5844] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 148.758886][ T5844] usb 2-1: config 0 has no interface number 0 [ 148.765234][ T5844] usb 2-1: config 0 interface 41 has no altsetting 0 [ 148.775938][ T5844] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 148.789895][ T5844] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.800334][ T5844] usb 2-1: Product: syz [ 148.804528][ T5844] usb 2-1: Manufacturer: syz [ 148.810210][ T5844] usb 2-1: SerialNumber: syz [ 148.816617][ T5844] usb 2-1: config 0 descriptor?? [ 148.987868][ T786] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 149.018698][ T786] usb 3-1: device descriptor read/8, error -71 [ 149.196468][ T42] usb 1-1: USB disconnect, device number 6 [ 149.318966][ T786] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 149.359756][ T786] usb 3-1: device descriptor read/8, error -71 [ 149.490524][ T786] usb usb3-port1: unable to enumerate USB device [ 149.507218][ T6702] pim6reg: entered allmulticast mode [ 149.637233][ T5844] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 149.807827][ T42] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 149.979075][ T6708] binder: 6706:6708 ioctl 4018620d 0 returned -22 [ 150.027926][ T42] usb 1-1: Using ep0 maxpacket: 32 [ 150.035387][ T42] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.049195][ T42] usb 1-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=d4.09 [ 150.058834][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.068615][ T42] usb 1-1: Product: syz [ 150.073013][ T42] usb 1-1: Manufacturer: syz [ 150.077597][ T42] usb 1-1: SerialNumber: syz [ 150.084280][ T42] usb 1-1: config 0 descriptor?? [ 150.098439][ T42] peak_usb 1-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 150.105963][ T42] peak_usb 1-1:0.0: unable to read PCAN-USB serial number (err -22) [ 150.149899][ T42] peak_usb: probe of 1-1:0.0 failed with error -22 [ 150.301378][ T6702] pim6reg: left allmulticast mode [ 150.364021][ T5871] usb 1-1: USB disconnect, device number 7 [ 150.590190][ T6710] fuse: Unknown parameter '0x0000000000000003' [ 150.653269][ T6712] netlink: 72 bytes leftover after parsing attributes in process `syz.2.270'. [ 150.726783][ T6713] netlink: 4 bytes leftover after parsing attributes in process `syz.2.270'. [ 150.739314][ T6713] netlink: 12 bytes leftover after parsing attributes in process `syz.2.270'. [ 150.828044][ T5844] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 151.512431][ T5844] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 151.522362][ T5844] CoreChips: probe of 2-1:0.41 failed with error -71 [ 151.537279][ T5844] usb 2-1: USB disconnect, device number 10 [ 152.727941][ T5844] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 153.061584][ T5844] usb 2-1: Using ep0 maxpacket: 8 [ 153.082381][ T5844] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 153.102017][ T5844] usb 2-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 153.102633][ T3507] Bluetooth: hci4: Frame reassembly failed (-84) [ 153.111395][ T5844] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.132639][ T6728] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 153.141821][ T5844] usb 2-1: config 0 descriptor?? [ 153.159818][ T5844] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 153.317191][ T6737] fuse: Unknown parameter '0x0000000000000003' [ 153.554708][ T6744] binder: 6742:6744 ioctl c0306201 0 returned -14 [ 154.088371][ T5844] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 154.287997][ T5844] usb 1-1: Using ep0 maxpacket: 32 [ 154.295676][ T5844] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.310664][ T5844] usb 1-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=d4.09 [ 154.320129][ T5844] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.328743][ T5844] usb 1-1: Product: syz [ 154.333150][ T5844] usb 1-1: Manufacturer: syz [ 154.338302][ T5844] usb 1-1: SerialNumber: syz [ 154.345868][ T5844] usb 1-1: config 0 descriptor?? [ 154.380730][ T5844] peak_usb 1-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 154.388880][ T5844] peak_usb 1-1:0.0: unable to read PCAN-USB serial number (err -22) [ 154.458968][ T5844] peak_usb: probe of 1-1:0.0 failed with error -22 [ 154.688567][ T9] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 154.891450][ T9] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 154.899826][ T9] usb 3-1: config 0 has no interface number 0 [ 154.905997][ T9] usb 3-1: config 0 interface 41 has no altsetting 0 [ 154.915048][ T9] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 154.924420][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.932630][ T9] usb 3-1: Product: syz [ 154.936910][ T9] usb 3-1: Manufacturer: syz [ 154.941588][ T9] usb 3-1: SerialNumber: syz [ 154.949757][ T9] usb 3-1: config 0 descriptor?? [ 155.117889][ T5800] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 155.117913][ T5789] Bluetooth: hci4: command 0x1003 tx timeout [ 155.214974][ T42] usb 2-1: USB disconnect, device number 11 [ 155.278976][ T6749] netlink: 72 bytes leftover after parsing attributes in process `syz.1.283'. [ 155.402924][ T6750] netlink: 4 bytes leftover after parsing attributes in process `syz.1.283'. [ 155.414806][ T6750] netlink: 12 bytes leftover after parsing attributes in process `syz.1.283'. [ 156.356193][ T9] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 156.998466][ T786] usb 1-1: USB disconnect, device number 8 [ 157.210887][ T6764] fuse: Unknown parameter '0x0000000000000003' [ 157.946895][ T9] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 157.962237][ T9] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 157.972841][ T9] CoreChips: probe of 3-1:0.41 failed with error -71 [ 157.984390][ T9] usb 3-1: USB disconnect, device number 13 [ 158.437800][ T5871] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 159.502251][ T5871] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 159.514802][ T5871] usb 2-1: config 0 has no interface number 0 [ 159.521482][ T5871] usb 2-1: config 0 interface 41 has no altsetting 0 [ 159.538077][ T5871] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 159.566944][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.594815][ T5871] usb 2-1: Product: syz [ 159.607976][ T5871] usb 2-1: Manufacturer: syz [ 159.612723][ T5871] usb 2-1: SerialNumber: syz [ 159.629254][ T5871] usb 2-1: config 0 descriptor?? [ 160.014822][ T5800] Bluetooth: hci3: Invalid connection link type handle 0x00c9 [ 160.107511][ T6797] loop2: detected capacity change from 0 to 64 [ 160.416677][ T6799] IPVS: Error connecting to the multicast addr [ 161.068372][ T5871] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 161.249166][ T966] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 161.510608][ T966] usb 3-1: not running at top speed; connect to a high speed hub [ 161.522897][ T966] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 161.966190][ T5871] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 162.126465][ T966] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 162.135729][ T966] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.136732][ T5871] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 162.177911][ T5871] CoreChips: probe of 2-1:0.41 failed with error -71 [ 162.192872][ T5871] usb 2-1: USB disconnect, device number 12 [ 162.249549][ T966] usb 3-1: SerialNumber: 씳燃㙜ⓢ跊Ҝ㹰汢﷨炇숎ᜠ᧰즟卑␩뤩湵悎捨泱喰 [ 162.345146][ T6806] fuse: Unknown parameter '0x0000000000000003' [ 163.722131][ T966] usb 3-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 163.764626][ T966] usb 3-1: 2:1 : sample bitwidth 249 in over sample bytes 1 [ 163.828771][ T966] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 163.909774][ T966] usb 3-1: USB disconnect, device number 14 [ 164.000411][ T6818] netlink: 'syz.1.301': attribute type 1 has an invalid length. [ 164.045587][ T5985] udevd[5985]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 164.521419][ T6833] netlink: 'syz.2.308': attribute type 1 has an invalid length. [ 164.556716][ T6833] 8021q: adding VLAN 0 to HW filter on device bond4 [ 165.258793][ T6840] netlink: 8 bytes leftover after parsing attributes in process `syz.2.308'. [ 165.373353][ T6840] netlink: 8 bytes leftover after parsing attributes in process `syz.2.308'. [ 166.827346][ T6845] loop2: detected capacity change from 0 to 64 [ 167.178117][ T6847] IPVS: Error connecting to the multicast addr [ 167.917893][ T23] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 168.167815][ T9] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 168.189168][ T23] usb 3-1: not running at top speed; connect to a high speed hub [ 168.205557][ T23] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 168.234366][ T23] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 168.239648][ T6851] netlink: 'syz.3.312': attribute type 1 has an invalid length. [ 168.253958][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.264362][ T23] usb 3-1: SerialNumber: 씳燃㙜ⓢ跊Ҝ㹰汢﷨炇숎ᜠ᧰즟卑␩뤩湵悎捨泱喰 [ 168.272002][ T6851] 8021q: adding VLAN 0 to HW filter on device bond2 [ 168.343625][ T6851] bond2: (slave geneve2): making interface the new active one [ 168.360757][ T6851] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 168.381930][ T9] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 168.390291][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.401530][ T9] usb 2-1: config 0 has no interface number 0 [ 168.407862][ T9] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 168.419578][ T9] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 168.433534][ T9] usb 2-1: config 0 interface 52 has no altsetting 0 [ 168.443006][ T9] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 168.452836][ T6851] syz.3.312 (6851) used greatest stack depth: 19952 bytes left [ 168.460523][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=35 [ 168.478137][ T9] usb 2-1: SerialNumber: syz [ 168.494864][ T9] usb 2-1: config 0 descriptor?? [ 168.728648][ T9] input: USB Synaptics Device 06cb:0003 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.52/input/input7 [ 168.766931][ T6856] netlink: 44 bytes leftover after parsing attributes in process `syz.0.314'. [ 169.035632][ T5871] usb 2-1: USB disconnect, device number 13 [ 169.041717][ C0] synaptics_usb 2-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 169.899223][ T23] usb 3-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 169.910586][ T23] usb 3-1: 2:1 : sample bitwidth 249 in over sample bytes 1 [ 170.256406][ T23] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 170.297647][ T6879] netlink: 4 bytes leftover after parsing attributes in process `syz.3.319'. [ 170.904033][ T23] usb 3-1: USB disconnect, device number 15 [ 170.938647][ T6884] netlink: 72 bytes leftover after parsing attributes in process `syz.2.321'. [ 171.019296][ T6885] netlink: 4 bytes leftover after parsing attributes in process `syz.2.321'. [ 171.031001][ T6885] netlink: 12 bytes leftover after parsing attributes in process `syz.2.321'. [ 172.298345][ T5871] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 172.305171][ T6895] netlink: 44 bytes leftover after parsing attributes in process `syz.0.326'. [ 172.380396][ T6897] fuse: Unknown parameter 'fd0x0000000000000003' [ 172.456024][ T6902] netlink: 44 bytes leftover after parsing attributes in process `syz.2.328'. [ 172.513835][ T5871] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 172.532729][ T5871] usb 2-1: config 0 has no interface number 0 [ 172.537530][ T6904] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcmmio) [ 172.547805][ T5871] usb 2-1: config 0 interface 41 has no altsetting 0 [ 172.567303][ T5871] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 172.577924][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.585972][ T5871] usb 2-1: Product: syz [ 172.607739][ T5871] usb 2-1: Manufacturer: syz [ 172.618165][ T5871] usb 2-1: SerialNumber: syz [ 172.634502][ T5871] usb 2-1: config 0 descriptor?? [ 172.667824][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 172.900561][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 173.000795][ T9] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 173.154387][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.243943][ T9] usb 1-1: Product: syz [ 173.261662][ T9] usb 1-1: Manufacturer: syz [ 173.271818][ T9] usb 1-1: SerialNumber: syz [ 173.315751][ T9] usb 1-1: config 0 descriptor?? [ 173.625247][ T5871] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 173.657863][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 173.853591][ T9] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 173.865172][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.874876][ T9] usb 3-1: Product: syz [ 173.881325][ T9] usb 3-1: Manufacturer: syz [ 173.886292][ T9] usb 3-1: SerialNumber: syz [ 173.910544][ T9] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 173.956652][ T786] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 174.410953][ T5779] usb 3-1: USB disconnect, device number 16 [ 174.735223][ T5871] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 175.046976][ T786] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 175.086790][ T5871] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 175.221229][ T786] ath9k_htc: Failed to initialize the device [ 175.262250][ T5871] CoreChips: probe of 2-1:0.41 failed with error -71 [ 175.294182][ T5779] usb 3-1: ath9k_htc: USB layer deinitialized [ 175.330727][ T5871] usb 2-1: USB disconnect, device number 14 [ 175.413608][ T6928] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcmmio) [ 175.444808][ T966] usb 1-1: USB disconnect, device number 9 [ 175.801730][ T5844] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 175.815853][ T5871] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 176.057143][ T5871] usb 2-1: Using ep0 maxpacket: 32 [ 176.065489][ T5844] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 176.074029][ T5844] usb 4-1: config 0 has no interface number 0 [ 176.083953][ T5871] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 176.092334][ T5871] usb 2-1: config 0 has no interface number 0 [ 176.106424][ T5844] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 176.120196][ T5844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.131150][ T5871] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 176.141242][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.149949][ T5844] usb 4-1: Product: syz [ 176.158057][ T5844] usb 4-1: Manufacturer: syz [ 176.162707][ T5844] usb 4-1: SerialNumber: syz [ 176.167384][ T5871] usb 2-1: Product: syz [ 176.172293][ T5871] usb 2-1: Manufacturer: syz [ 176.180567][ T5844] usb 4-1: config 0 descriptor?? [ 176.185902][ T5871] usb 2-1: SerialNumber: syz [ 176.209623][ T5871] usb 2-1: config 0 descriptor?? [ 176.237128][ T5871] smsc95xx v2.0.0 [ 176.625619][ T5871] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 176.648843][ T5871] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 177.073499][ T5871] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 177.098266][ T5871] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 177.131736][ T5871] usb 2-1: USB disconnect, device number 15 [ 177.213162][ T5844] usb 4-1: non-Atmel transceiver xxxx1177 [ 177.414137][ T5844] usb 4-1: Firmware version (0.0) predates our first public release. [ 177.438044][ T5844] usb 4-1: Please update to version 0.2 or newer [ 177.455065][ T5844] usb 4-1: atusb_probe: initialization failed, error = -19 [ 177.474385][ T5844] usb 4-1: USB disconnect, device number 11 [ 177.542498][ T6951] netlink: 72 bytes leftover after parsing attributes in process `syz.2.346'. [ 177.625215][ T6952] netlink: 4 bytes leftover after parsing attributes in process `syz.2.346'. [ 177.768269][ T42] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 178.597080][ T42] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 178.605653][ T42] usb 1-1: config 0 has no interface number 0 [ 178.613945][ T42] usb 1-1: config 0 interface 41 has no altsetting 0 [ 178.630445][ T42] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 178.640388][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.648632][ T42] usb 1-1: Product: syz [ 178.652907][ T42] usb 1-1: Manufacturer: syz [ 178.657908][ T42] usb 1-1: SerialNumber: syz [ 178.680661][ T42] usb 1-1: config 0 descriptor?? [ 179.660867][ T42] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 179.921263][ T6978] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 180.718482][ T42] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 180.729244][ T42] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 180.739367][ T42] CoreChips: probe of 1-1:0.41 failed with error -71 [ 180.751841][ T42] usb 1-1: USB disconnect, device number 10 [ 181.335984][ T6980] netlink: 'syz.2.353': attribute type 1 has an invalid length. [ 181.344840][ T6980] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 181.355903][ T6981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.353'. [ 181.784137][ T7001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.360'. [ 182.107794][ T5871] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 182.237825][ T42] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 182.290190][ T5871] usb 2-1: Using ep0 maxpacket: 8 [ 182.298897][ T5871] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 182.314240][ T5871] usb 2-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 182.324962][ T5871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.335517][ T5871] usb 2-1: config 0 descriptor?? [ 182.346669][ T5871] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 182.437784][ T42] usb 1-1: Using ep0 maxpacket: 8 [ 182.445637][ T42] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.456418][ T42] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 182.465589][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.476083][ T42] usb 1-1: config 0 descriptor?? [ 182.484927][ T42] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 182.944618][ T7013] netlink: 'syz.2.364': attribute type 1 has an invalid length. [ 182.996176][ T7013] 8021q: adding VLAN 0 to HW filter on device bond5 [ 183.012224][ T42] gspca_vc032x: reg_r err -110 [ 183.028939][ T7013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.364'. [ 183.064974][ T42] vc032x: probe of 1-1:0.0 failed with error -110 [ 183.795227][ T7018] netlink: 'syz.2.365': attribute type 1 has an invalid length. [ 183.804771][ T7018] netlink: 224 bytes leftover after parsing attributes in process `syz.2.365'. [ 183.899916][ T5844] IPVS: starting estimator thread 0... [ 184.028004][ T7019] IPVS: using max 34 ests per chain, 81600 per kthread [ 184.877954][ C0] general protection fault, probably for non-canonical address 0xdffffc0000000009: 0000 [#1] PREEMPT SMP KASAN [ 184.881607][ T966] usb 1-1: USB disconnect, device number 11 [ 184.889794][ C0] KASAN: null-ptr-deref in range [0x0000000000000048-0x000000000000004f] [ 184.889831][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.6.102-syzkaller #0 [ 184.889846][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 184.889859][ C0] RIP: 0010:loopback_jiffies_timer_pos_update+0x13c/0x1250 [ 184.889893][ C0] Code: fb 49 f9 44 89 f8 83 e0 02 44 89 7c 24 3c 75 0a e8 79 f7 49 f9 45 31 ff eb 27 e8 6f f7 49 f9 49 8d 5d 48 48 89 d8 48 c1 e8 03 <80> 3c 28 00 74 08 48 89 df e8 86 3e a1 f9 4d 89 f7 4c 2b 3b 4c 89 [ 184.889905][ C0] RSP: 0018:ffffc90000007ac8 EFLAGS: 00010006 [ 184.889923][ C0] RAX: 0000000000000009 RBX: 0000000000000048 RCX: ffffffff8ca93380 [ 184.889936][ C0] RDX: 0000000000000100 RSI: 0000000000000002 RDI: 0000000000000000 [ 184.889947][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 184.889957][ C0] R10: dffffc0000000000 R11: fffff52000000f48 R12: 0000000000000002 [ 184.889970][ C0] R13: 0000000000000000 R14: 00000000ffffd239 R15: 0000000000000003 [ 184.889982][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 184.889997][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 184.890010][ C0] CR2: 000000110c2e36ca CR3: 0000000061d78000 CR4: 00000000003506f0 [ 184.890026][ C0] Call Trace: [ 184.890033][ C0] [ 184.890041][ C0] ? _raw_spin_lock+0x40/0x40 [ 184.890070][ C0] ? read_lock_is_recursive+0x20/0x20 [ 184.890093][ C0] loopback_jiffies_timer_function+0x62/0x250 [ 184.890121][ C0] call_timer_fn+0x16e/0x530 [ 184.890140][ C0] ? loopback_jiffies_timer_dpcm_info+0x200/0x200 [ 184.890164][ C0] ? call_timer_fn+0xbf/0x530 [ 184.890181][ C0] ? __run_timers+0x7d0/0x7d0 [ 184.890203][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 184.890229][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 184.890250][ C0] ? loopback_jiffies_timer_dpcm_info+0x200/0x200 [ 185.078845][ C0] __run_timers+0x52d/0x7d0 [ 185.083344][ C0] ? detach_timer+0x2b0/0x2b0 [ 185.088018][ C0] ? lock_chain_count+0x20/0x20 [ 185.092987][ C0] run_timer_softirq+0x67/0xf0 [ 185.097783][ C0] handle_softirqs+0x280/0x820 [ 185.102574][ C0] ? __irq_exit_rcu+0xc7/0x190 [ 185.107363][ C0] ? do_softirq+0x180/0x180 [ 185.111946][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 185.117173][ C0] __irq_exit_rcu+0xc7/0x190 [ 185.121782][ C0] ? irq_exit_rcu+0x20/0x20 [ 185.126409][ C0] irq_exit_rcu+0x9/0x20 [ 185.130823][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 185.136623][ C0] [ 185.139614][ C0] [ 185.142532][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 185.148659][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 185.154427][ C0] Code: cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d e3 e6 3a 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 66 0f 1f 00 55 41 57 41 56 [ 185.174048][ C0] RSP: 0018:ffffffff8ca07d80 EFLAGS: 000002c6 [ 185.180103][ C0] RAX: 6355c4849314c800 RBX: ffffffff8161914b RCX: 6355c4849314c800 [ 185.188062][ C0] RDX: 0000000000000001 RSI: ffffffff8aaab9c0 RDI: ffffffff8afc66c0 [ 185.196021][ C0] RBP: ffffffff8ca07eb8 R08: ffff8880b8e36d4b R09: 1ffff110171c6da9 [ 185.204073][ C0] R10: dffffc0000000000 R11: ffffed10171c6daa R12: ffffffff8e4a8828 [ 185.212130][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1952670 [ 185.220104][ C0] ? do_idle+0x1eb/0x510 [ 185.224350][ C0] default_idle+0x13/0x20 [ 185.228663][ C0] default_idle_call+0x6c/0xa0 [ 185.233445][ C0] do_idle+0x1eb/0x510 [ 185.237509][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 185.242752][ C0] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 185.248395][ C0] cpu_startup_entry+0x43/0x60 [ 185.253138][ C0] rest_init+0x2e2/0x300 [ 185.257356][ C0] ? time_init+0x40/0x40 [ 185.261765][ C0] arch_call_rest_init+0xe/0x10 [ 185.266599][ C0] start_kernel+0x459/0x4e0 [ 185.271260][ C0] x86_64_start_reservations+0x2a/0x30 [ 185.276902][ C0] x86_64_start_kernel+0x60/0x60 [ 185.281950][ C0] secondary_startup_64_no_verify+0x179/0x17b [ 185.288108][ C0] [ 185.291136][ C0] Modules linked in: [ 185.295024][ C0] ---[ end trace 0000000000000000 ]--- [ 185.300513][ C0] RIP: 0010:loopback_jiffies_timer_pos_update+0x13c/0x1250 [ 185.307887][ C0] Code: fb 49 f9 44 89 f8 83 e0 02 44 89 7c 24 3c 75 0a e8 79 f7 49 f9 45 31 ff eb 27 e8 6f f7 49 f9 49 8d 5d 48 48 89 d8 48 c1 e8 03 <80> 3c 28 00 74 08 48 89 df e8 86 3e a1 f9 4d 89 f7 4c 2b 3b 4c 89 [ 185.327481][ C0] RSP: 0018:ffffc90000007ac8 EFLAGS: 00010006 [ 185.333644][ C0] RAX: 0000000000000009 RBX: 0000000000000048 RCX: ffffffff8ca93380 [ 185.341692][ C0] RDX: 0000000000000100 RSI: 0000000000000002 RDI: 0000000000000000 [ 185.349650][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 185.357631][ C0] R10: dffffc0000000000 R11: fffff52000000f48 R12: 0000000000000002 [ 185.365610][ C0] R13: 0000000000000000 R14: 00000000ffffd239 R15: 0000000000000003 [ 185.373584][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 185.382523][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 185.389098][ C0] CR2: 000000110c2e36ca CR3: 0000000061d78000 CR4: 00000000003506f0 [ 185.397074][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 185.404604][ C0] Kernel Offset: disabled [ 185.408915][ C0] Rebooting in 86400 seconds..