last executing test programs: 3.651657758s ago: executing program 4 (id=463): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="f00000001200379629fcecadf9afdf2507e01e3b9ac7721d28ea0000", @ANYRES32, @ANYBLOB="440001"], 0xf0}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) recvmmsg(r0, &(0x7f0000001cc0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40010022, 0x0) 3.374377594s ago: executing program 4 (id=469): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18022f430100000000000000ffffffff850000002f000008"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000039c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x38, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 3.0661756s ago: executing program 3 (id=472): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) 3.057303013s ago: executing program 4 (id=473): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvfrom(r0, 0x0, 0x0, 0x40002020, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000000706010100000000000000000200000205000100070a00000800064000000000711ddcde19"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x2000c094) 2.762471108s ago: executing program 3 (id=478): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x458, 0x138, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x20, {[@global=@item_012={0x0, 0x1, 0x3}]}}, 0x0}, 0x0) 2.706164642s ago: executing program 4 (id=479): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0xf, &(0x7f0000000040)="25a688a800a34400000000000000", 0x0, 0x1, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.454501825s ago: executing program 4 (id=482): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@abs={0x1}, 0x6e) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2.03379377s ago: executing program 4 (id=484): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xa, 0x86, 0xf3, 0x40, 0x1110, 0x9024, 0xdb24, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xe9, 0x50, 0x9, [{{0x9, 0x4, 0x62, 0x4, 0x0, 0x6f, 0x6f, 0x49, 0x5}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[], 0x0) 1.524353223s ago: executing program 2 (id=488): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x54, r1, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @dev}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x54}, 0x2, 0x34005}, 0x0) 1.268312428s ago: executing program 0 (id=490): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000100)={0x3f2, 0x6, 0x4, 0x8316, 0xff, "0332004000000000000000000004007fcb0f0e", 0x4, 0xb67}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xff) 1.225662886s ago: executing program 2 (id=491): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x58, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfeffffff}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}]}, 0x58}}, 0x0) 1.127562677s ago: executing program 1 (id=492): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x18, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 1.080372674s ago: executing program 0 (id=493): r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) futex(&(0x7f0000000000), 0x88, 0x0, 0x0, 0x0, 0x0) 1.013521518s ago: executing program 2 (id=494): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a74000000060a0b0400000000000000000200000048000480440001800a0001006d6174636800000034000280180003000f000000a7906e8f58c2052fade1bc2c62cdeb7508000240000000000d00010064657667726f7570000000000900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) 954.374356ms ago: executing program 1 (id=495): syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) 934.209593ms ago: executing program 0 (id=496): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001a000103"], 0x14}}, 0x0) 853.41051ms ago: executing program 3 (id=497): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt(r0, 0x84, 0x81, &(0x7f0000000300)="1a00000002000000", 0x8) 739.487973ms ago: executing program 1 (id=498): r0 = socket$netlink(0x10, 0x3, 0x0) unshare(0x2a060400) flistxattr(r0, 0x0, 0x0) 720.61973ms ago: executing program 3 (id=499): r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r0, 0xc3d33000) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 713.9527ms ago: executing program 2 (id=500): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x82}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r0, 0x4b63, 0x3) 698.958633ms ago: executing program 0 (id=501): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="05000000940f00000500000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="060023e715c9"], 0x80}}, 0x4081) 521.775518ms ago: executing program 2 (id=502): r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3d}}, {0x2, 0x4e21, @broadcast}, 0xd1, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffe, 0x9, 0x6}) syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) 476.186879ms ago: executing program 1 (id=503): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x402, @loopback}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000500)={0x0, 0x1c, "aedc7a62d95d7cb5d1e62ac01da47696807a1daade867bdfcde17a07"}, &(0x7f0000000580)=0x24) 473.748418ms ago: executing program 0 (id=504): bind$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs={0x1}, 0x2) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) ioctl$RTC_ALM_READ(r0, 0x40187014, &(0x7f0000000040)) 432.891276ms ago: executing program 3 (id=505): r0 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000340)='name', &(0x7f00000000c0)='ccnA\xf6gr\xe7lo_', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='name', &(0x7f0000000140)='ccnA\xf6gr\xe7lo_', 0x0) 354.633011ms ago: executing program 0 (id=506): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x40, 0x2, {0x2, @raw_data="3d924b8271394fa4ec01eb92492ff84715d1a004d08b012a7cafe27a5f313d31bbdae50511ca5be6bfe92437ed0d21b5180e375be56b3b9306d7dbb26bf9f22de7ac7681cca450055250217bdf1113b4258293ba4efed33147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc3310200970349a3c1374ffec96177b67caa0656f9664277cadb8597e7d911ad1da457ef9744b0993c57a7"}}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000005d40)=@userptr={0x9, 0x2, 0x4, 0x1, 0x3, {}, {0x5, 0x1, 0xfa, 0x2, 0x46, 0xfb, "67341e26"}, 0xffff0000, 0x2, {0x0}, 0x80000007}) 335.60632ms ago: executing program 2 (id=507): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000001c0)) 223.019872ms ago: executing program 1 (id=508): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x68, r1, 0x909, 0x70bd25, 0x0, {{}, {}, {0x4c, 0x18, {0x5, @media='udp\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) 191.1526ms ago: executing program 3 (id=509): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r1, {0x0, 0x5}, {0xffff, 0xffff}, {0x14}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x3, 0xb}}}}]}, 0x40}}, 0x0) 0s ago: executing program 1 (id=510): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x14 1 [ 94.717180][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.718145][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.747627][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.748392][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 94.750996][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 94.751797][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.752195][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 94.753429][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 94.754215][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.016261][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.018250][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.041417][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.044667][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.047246][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.096246][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.097751][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.098458][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.100823][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.101759][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 95.153801][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 95.155940][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 95.156691][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 95.158044][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 95.162259][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 95.819243][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 96.186550][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 96.309396][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 96.497553][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 96.608427][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.609744][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.611134][ T5840] bridge_slave_0: entered allmulticast mode [ 96.614284][ T5840] bridge_slave_0: entered promiscuous mode [ 96.726702][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 96.737939][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.738173][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.739292][ T5840] bridge_slave_1: entered allmulticast mode [ 96.753619][ T5840] bridge_slave_1: entered promiscuous mode [ 96.831399][ T5838] Bluetooth: hci1: command tx timeout [ 96.910737][ T5838] Bluetooth: hci0: command tx timeout [ 97.070039][ T5838] Bluetooth: hci2: command tx timeout [ 97.150090][ T5838] Bluetooth: hci3: command tx timeout [ 97.230012][ T5838] Bluetooth: hci4: command tx timeout [ 97.345391][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.345681][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.345921][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.346113][ T5837] bridge_slave_0: entered allmulticast mode [ 97.348105][ T5837] bridge_slave_0: entered promiscuous mode [ 97.477987][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.478253][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.478411][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.478611][ T5837] bridge_slave_1: entered allmulticast mode [ 97.483698][ T5837] bridge_slave_1: entered promiscuous mode [ 97.751877][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.752069][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.752276][ T5845] bridge_slave_0: entered allmulticast mode [ 97.755684][ T5845] bridge_slave_0: entered promiscuous mode [ 98.031013][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.031174][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.031368][ T5845] bridge_slave_1: entered allmulticast mode [ 98.033585][ T5845] bridge_slave_1: entered promiscuous mode [ 98.125629][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.125720][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.125862][ T5847] bridge_slave_0: entered allmulticast mode [ 98.127558][ T5847] bridge_slave_0: entered promiscuous mode [ 98.208982][ T5840] team0: Port device team_slave_0 added [ 98.214882][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.301526][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.301752][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.301977][ T5847] bridge_slave_1: entered allmulticast mode [ 98.305726][ T5847] bridge_slave_1: entered promiscuous mode [ 98.393086][ T5840] team0: Port device team_slave_1 added [ 98.396287][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.561644][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.561809][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.562014][ T5849] bridge_slave_0: entered allmulticast mode [ 98.565278][ T5849] bridge_slave_0: entered promiscuous mode [ 98.745775][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.851489][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.851729][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.851929][ T5849] bridge_slave_1: entered allmulticast mode [ 98.857093][ T5849] bridge_slave_1: entered promiscuous mode [ 98.910012][ T5838] Bluetooth: hci1: command tx timeout [ 98.990104][ T5838] Bluetooth: hci0: command tx timeout [ 99.034485][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.038472][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.101508][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.101521][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.101537][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.105390][ T5837] team0: Port device team_slave_0 added [ 99.157793][ T5838] Bluetooth: hci2: command tx timeout [ 99.206516][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.229998][ T5838] Bluetooth: hci3: command tx timeout [ 99.309975][ T5838] Bluetooth: hci4: command tx timeout [ 99.423594][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.423616][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.423645][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.428529][ T5837] team0: Port device team_slave_1 added [ 99.605969][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.704275][ T5845] team0: Port device team_slave_0 added [ 99.797049][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.866143][ T5845] team0: Port device team_slave_1 added [ 99.868082][ T5847] team0: Port device team_slave_0 added [ 99.966630][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.966644][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.966660][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.124354][ T5847] team0: Port device team_slave_1 added [ 100.295242][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.295257][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.295273][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.464610][ T5849] team0: Port device team_slave_0 added [ 100.737938][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.737956][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.737971][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.852671][ T5849] team0: Port device team_slave_1 added [ 100.858990][ T5840] hsr_slave_0: entered promiscuous mode [ 100.861619][ T5840] hsr_slave_1: entered promiscuous mode [ 100.873396][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.873412][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.873436][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.874994][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.875005][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.875028][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.990135][ T5838] Bluetooth: hci1: command tx timeout [ 101.021097][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.021116][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.021144][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.070014][ T5838] Bluetooth: hci0: command tx timeout [ 101.231525][ T5838] Bluetooth: hci2: command tx timeout [ 101.303898][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.303917][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.303945][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.320019][ T5838] Bluetooth: hci3: command tx timeout [ 101.390078][ T5838] Bluetooth: hci4: command tx timeout [ 101.409627][ T5837] hsr_slave_0: entered promiscuous mode [ 101.411187][ T5837] hsr_slave_1: entered promiscuous mode [ 101.412250][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 101.412347][ T5837] Cannot create hsr debugfs directory [ 101.414449][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.414462][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.414487][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.868872][ T5845] hsr_slave_0: entered promiscuous mode [ 101.870386][ T5845] hsr_slave_1: entered promiscuous mode [ 101.871355][ T5845] debugfs: 'hsr0' already exists in 'hsr' [ 101.871380][ T5845] Cannot create hsr debugfs directory [ 102.066868][ T5847] hsr_slave_0: entered promiscuous mode [ 102.068392][ T5847] hsr_slave_1: entered promiscuous mode [ 102.069368][ T5847] debugfs: 'hsr0' already exists in 'hsr' [ 102.069389][ T5847] Cannot create hsr debugfs directory [ 102.432831][ T5849] hsr_slave_0: entered promiscuous mode [ 102.433719][ T5849] hsr_slave_1: entered promiscuous mode [ 102.434302][ T5849] debugfs: 'hsr0' already exists in 'hsr' [ 102.434323][ T5849] Cannot create hsr debugfs directory [ 103.071293][ T5838] Bluetooth: hci1: command tx timeout [ 103.150058][ T5838] Bluetooth: hci0: command tx timeout [ 103.309956][ T5838] Bluetooth: hci2: command tx timeout [ 103.390074][ T5838] Bluetooth: hci3: command tx timeout [ 103.469976][ T5838] Bluetooth: hci4: command tx timeout [ 104.085498][ T5840] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 104.139681][ T5840] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 104.158970][ T5840] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 104.219239][ T5840] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 104.356106][ T5837] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.407389][ T5837] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.446201][ T5837] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.503060][ T5837] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.711644][ T5845] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 104.767649][ T5845] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 104.807393][ T5845] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 104.869171][ T5845] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 105.094582][ T5847] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.138020][ T5847] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.185615][ T5847] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.254290][ T5847] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 105.386235][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.508760][ T5849] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 105.548016][ T5849] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 105.589657][ T5849] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 105.667686][ T5849] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 105.702473][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.767509][ T3657] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.768003][ T3657] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.835622][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.835888][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.876944][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.034343][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.084209][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.105869][ T84] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.106116][ T84] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.174385][ T3559] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.174820][ T3559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.284679][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.325754][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.392327][ T84] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.392628][ T84] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.516888][ T84] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.517222][ T84] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.563820][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.628867][ T3559] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.629045][ T3559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.664905][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.699042][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.700054][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.874414][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.911875][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.996188][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.997224][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.071618][ T84] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.071785][ T84] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.373683][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.514206][ T5840] veth0_vlan: entered promiscuous mode [ 107.613879][ T5840] veth1_vlan: entered promiscuous mode [ 107.656621][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.821018][ T5837] veth0_vlan: entered promiscuous mode [ 107.916716][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.917657][ T5837] veth1_vlan: entered promiscuous mode [ 107.966846][ T5840] veth0_macvtap: entered promiscuous mode [ 108.000749][ T5840] veth1_macvtap: entered promiscuous mode [ 108.167520][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.227295][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.303778][ T5837] veth0_macvtap: entered promiscuous mode [ 108.327943][ T1125] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.353509][ T3559] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.363914][ T3559] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.378318][ T3559] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.379160][ T5837] veth1_macvtap: entered promiscuous mode [ 108.448918][ T5847] veth0_vlan: entered promiscuous mode [ 108.488477][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.562375][ T5847] veth1_vlan: entered promiscuous mode [ 108.573263][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.689110][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.786665][ T43] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.816896][ T43] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.833576][ T43] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.854826][ T43] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.877349][ T1125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.877382][ T1125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.906155][ T5845] veth0_vlan: entered promiscuous mode [ 109.103429][ T5847] veth0_macvtap: entered promiscuous mode [ 109.121114][ T5845] veth1_vlan: entered promiscuous mode [ 109.126612][ T1116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.126635][ T1116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.213519][ T5847] veth1_macvtap: entered promiscuous mode [ 109.241218][ T5849] veth0_vlan: entered promiscuous mode [ 109.363673][ T5849] veth1_vlan: entered promiscuous mode [ 109.390860][ T3657] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.390884][ T3657] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.419711][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.512108][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.586303][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.586327][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.592531][ T5845] veth0_macvtap: entered promiscuous mode [ 109.623905][ T3559] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.653185][ T3559] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.682911][ T5845] veth1_macvtap: entered promiscuous mode [ 109.684725][ T3559] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.709570][ T3559] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.874473][ T5849] veth0_macvtap: entered promiscuous mode [ 110.078234][ T5960] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.7'. [ 110.078355][ T5960] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.7'. [ 110.092330][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.118585][ T5849] veth1_macvtap: entered promiscuous mode [ 110.208209][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.390598][ T1125] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.442460][ T1125] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.454111][ T1125] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.475550][ T1125] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.501799][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.518087][ T84] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.518111][ T84] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.678827][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.340307][ T5925] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 111.545982][ T5925] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.546015][ T5925] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 111.553922][ T5925] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 111.553956][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 111.553977][ T5925] usb 1-1: SerialNumber: syz [ 111.666992][ T3657] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.689765][ T3657] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.690017][ T3657] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.733898][ T84] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.798698][ T84] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.936872][ T84] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.989719][ T5925] usb 1-1: 0:2 : does not exist [ 111.991237][ T5925] usb 1-1: unit 255 not found! [ 112.501051][ T5925] usb 1-1: USB disconnect, device number 2 [ 112.702102][ T84] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.702131][ T84] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.857527][ T3519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.857552][ T3519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.121020][ T5897] udevd[5897]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 113.286655][ T3657] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.286680][ T3657] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.457933][ T84] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.457957][ T84] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.343127][ T6004] syz.3.17 (6004): drop_caches: 2 [ 114.399996][ T31] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 114.451003][ T6020] netlink: 'syz.4.5': attribute type 3 has an invalid length. [ 114.451032][ T6020] netlink: 'syz.4.5': attribute type 3 has an invalid length. [ 114.451097][ T6020] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 114.560975][ T6022] hfsplus: Unexpected value for 'barrier' [ 114.575768][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 114.578389][ T31] usb 1-1: config 0 has an invalid interface number: 146 but max is 0 [ 114.578420][ T31] usb 1-1: config 0 has no interface number 0 [ 114.578483][ T31] usb 1-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 114.578506][ T31] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 114.578533][ T31] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 114.578562][ T31] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 114.578589][ T31] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 114.578615][ T31] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 114.578637][ T31] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 114.578662][ T31] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 114.578689][ T31] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 114.578714][ T31] usb 1-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 114.660035][ T31] usb 1-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 114.660069][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.660088][ T31] usb 1-1: Product: syz [ 114.660103][ T31] usb 1-1: Manufacturer: syz [ 114.660117][ T31] usb 1-1: SerialNumber: syz [ 114.774836][ T31] usb 1-1: config 0 descriptor?? [ 114.777927][ T6017] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 114.778676][ T6017] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 114.811296][ T31] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 114.811319][ T31] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 114.891764][ T31] scsi host1: microtekX6 [ 115.037682][ T31] usb 1-1: USB disconnect, device number 3 [ 115.040106][ T11] microtek usb (rev 0.4.3): error -19 submitting URB [ 115.204187][ T6034] netlink: 'syz.3.23': attribute type 5 has an invalid length. [ 115.600348][ T6040] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 116.400853][ T6057] Bluetooth: MGMT ver 1.23 [ 117.301741][ T6083] netlink: 24 bytes leftover after parsing attributes in process `syz.0.40'. [ 117.902085][ T5897] udevd[5897]: failed to send result of seq 11158 to main daemon: Connection refused [ 118.865649][ T37] audit: type=1326 audit(1757263751.513:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6122 comm="syz.3.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6a72ebe9 code=0x7ffc0000 [ 118.865712][ T37] audit: type=1326 audit(1757263751.513:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6122 comm="syz.3.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6a72ebe9 code=0x7ffc0000 [ 118.921858][ T37] audit: type=1326 audit(1757263751.513:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6122 comm="syz.3.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f6c6a72ebe9 code=0x7ffc0000 [ 118.921924][ T37] audit: type=1326 audit(1757263751.523:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6122 comm="syz.3.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6c6a72ec23 code=0x7ffc0000 [ 118.921973][ T37] audit: type=1326 audit(1757263751.523:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6122 comm="syz.3.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6c6a72ec23 code=0x7ffc0000 [ 118.922020][ T37] audit: type=1326 audit(1757263751.523:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6122 comm="syz.3.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6a72ebe9 code=0x7ffc0000 [ 118.922068][ T37] audit: type=1326 audit(1757263751.523:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6122 comm="syz.3.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6a72ebe9 code=0x7ffc0000 [ 118.922117][ T37] audit: type=1326 audit(1757263751.553:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6122 comm="syz.3.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f6c6a72ebe9 code=0x7ffc0000 [ 118.922165][ T37] audit: type=1326 audit(1757263751.553:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6122 comm="syz.3.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6a72ebe9 code=0x7ffc0000 [ 118.922212][ T37] audit: type=1326 audit(1757263751.553:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6122 comm="syz.3.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6a72ebe9 code=0x7ffc0000 [ 119.480003][ T5911] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 119.642967][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 119.643006][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2031, setting to 64 [ 119.643053][ T5911] usb 5-1: New USB device found, idVendor=17ef, idProduct=60fe, bcdDevice= 0.00 [ 119.643078][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.698521][ T5911] usb 5-1: config 0 descriptor?? [ 119.705331][ T6133] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 120.270998][ T5911] lenovo 0003:17EF:60FE.0001: unknown main item tag 0x0 [ 120.382448][ T5911] lenovo 0003:17EF:60FE.0001: hidraw0: USB HID v0.00 Device [HID 17ef:60fe] on usb-dummy_hcd.4-1/input0 [ 120.473909][ T6059] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 120.488460][ T5911] usb 5-1: USB disconnect, device number 2 [ 120.622026][ T6059] usb 3-1: Using ep0 maxpacket: 8 [ 120.635377][ T6059] usb 3-1: config 2 has an invalid interface number: 31 but max is 0 [ 120.635408][ T6059] usb 3-1: config 2 has no interface number 0 [ 120.635462][ T6059] usb 3-1: config 2 interface 31 has no altsetting 0 [ 120.640833][ T6059] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 120.640863][ T6059] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.640882][ T6059] usb 3-1: Product: syz [ 120.640898][ T6059] usb 3-1: Manufacturer: syz [ 120.640912][ T6059] usb 3-1: SerialNumber: syz [ 120.804421][ T6174] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 120.826992][ T6170] can0: slcan on ttynull. [ 121.095375][ T6177] netlink: 16 bytes leftover after parsing attributes in process `syz.1.76'. [ 121.141578][ T6168] can0 (unregistered): slcan off ttynull. [ 121.466431][ T6059] ch9200 3-1:2.31: probe with driver ch9200 failed with error -22 [ 121.494652][ T6059] usb 3-1: USB disconnect, device number 2 [ 121.537083][ T6187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.80'. [ 121.537115][ T6187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.80'. [ 121.586403][ T6187] macvlan2: entered promiscuous mode [ 121.689981][ T5925] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 121.841547][ T5925] usb 4-1: Using ep0 maxpacket: 32 [ 121.845578][ T5925] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 121.845604][ T5925] usb 4-1: config 0 has no interface number 0 [ 121.848791][ T5925] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 121.848822][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.848843][ T5925] usb 4-1: Product: syz [ 121.848859][ T5925] usb 4-1: Manufacturer: syz [ 121.848874][ T5925] usb 4-1: SerialNumber: syz [ 121.854119][ T6199] netlink: 36 bytes leftover after parsing attributes in process `syz.0.85'. [ 121.918615][ T5925] usb 4-1: config 0 descriptor?? [ 121.934522][ T5925] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 121.934553][ T5925] usb 4-1: selecting invalid altsetting 1 [ 121.934571][ T5925] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 121.984857][ T5925] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 121.986851][ T5925] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 121.987359][ T5925] usb 4-1: media controller created [ 122.081288][ T5925] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 122.452516][ T6211] program syz.1.89 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 123.239984][ T5925] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 123.240069][ T5925] zl10353_read_register: readreg error (reg=127, ret==-110) [ 123.301130][ T6184] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 123.464891][ T5925] usb 4-1: USB disconnect, device number 2 [ 124.013377][ T6251] netlink: 11 bytes leftover after parsing attributes in process `syz.2.105'. [ 124.170182][ T990] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 124.328475][ T990] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.328511][ T990] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.328551][ T990] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 124.328576][ T990] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.392463][ T990] usb 5-1: config 0 descriptor?? [ 124.855391][ T990] kone 0003:1E7D:2CED.0002: unknown main item tag 0x4 [ 124.887179][ T990] kone 0003:1E7D:2CED.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.4-1/input0 [ 125.097779][ T990] usb 5-1: USB disconnect, device number 3 [ 125.162760][ T6278] netlink: 'syz.3.115': attribute type 2 has an invalid length. [ 125.209134][ T6278] k›*·]‘: entered promiscuous mode [ 125.310361][ T59] Bluetooth: hci0: command 0x0c1a tx timeout [ 125.310630][ T5838] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 125.949174][ T6303] syz.0.129 (6303) used greatest stack depth: 18920 bytes left [ 126.004913][ T6306] netlink: 16 bytes leftover after parsing attributes in process `syz.3.131'. [ 126.004938][ T6306] tipc: Invalid UDP bearer configuration [ 126.004990][ T6306] tipc: Enabling of bearer rejected, failed to enable media [ 126.059944][ T5925] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 126.122355][ T37] audit: type=1326 audit(1757263758.753:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6312 comm="syz.0.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08bd4bebe9 code=0x7ffc0000 [ 126.122416][ T37] audit: type=1326 audit(1757263758.763:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6312 comm="syz.0.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08bd4bebe9 code=0x7ffc0000 [ 126.159387][ T37] audit: type=1326 audit(1757263758.793:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6312 comm="syz.0.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f08bd4bebe9 code=0x7ffc0000 [ 126.159442][ T37] audit: type=1326 audit(1757263758.793:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6312 comm="syz.0.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08bd4bebe9 code=0x7ffc0000 [ 126.159484][ T37] audit: type=1326 audit(1757263758.803:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6312 comm="syz.0.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f08bd4bebe9 code=0x7ffc0000 [ 126.159525][ T37] audit: type=1326 audit(1757263758.803:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6312 comm="syz.0.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08bd4bebe9 code=0x7ffc0000 [ 126.262507][ T5925] usb 5-1: Using ep0 maxpacket: 16 [ 126.265647][ T5925] usb 5-1: unable to get BOS descriptor or descriptor too short [ 126.267383][ T5925] usb 5-1: config 9 has an invalid interface number: 48 but max is 0 [ 126.267410][ T5925] usb 5-1: config 9 has no interface number 0 [ 126.267447][ T5925] usb 5-1: config 9 interface 48 has no altsetting 0 [ 126.300459][ T5925] usb 5-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=f3.7b [ 126.300492][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.300513][ T5925] usb 5-1: Product: syz [ 126.300529][ T5925] usb 5-1: Manufacturer: syz [ 126.300543][ T5925] usb 5-1: SerialNumber: syz [ 126.419163][ T6317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.136'. [ 126.585050][ T5925] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 126.800038][ T5873] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 126.949938][ T5873] usb 4-1: Using ep0 maxpacket: 8 [ 126.958498][ T5873] usb 4-1: unable to get BOS descriptor or descriptor too short [ 126.962258][ T6330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.142'. [ 126.962280][ T6330] netlink: 12 bytes leftover after parsing attributes in process `syz.1.142'. [ 126.962305][ T6330] netlink: 'syz.1.142': attribute type 7 has an invalid length. [ 126.987498][ T5925] gspca_vc032x: reg_w err -71 [ 126.987516][ T5925] gspca_vc032x: I2c Bus Busy Wait 00 [ 126.987527][ T5925] gspca_vc032x: I2c Bus Busy Wait 00 [ 126.987536][ T5925] gspca_vc032x: I2c Bus Busy Wait 00 [ 126.987545][ T5925] gspca_vc032x: I2c Bus Busy Wait 00 [ 126.987554][ T5925] gspca_vc032x: I2c Bus Busy Wait 00 [ 126.987563][ T5925] gspca_vc032x: I2c Bus Busy Wait 00 [ 126.987572][ T5925] gspca_vc032x: I2c Bus Busy Wait 00 [ 126.987581][ T5925] gspca_vc032x: I2c Bus Busy Wait 00 [ 126.987590][ T5925] gspca_vc032x: I2c Bus Busy Wait 00 [ 126.987599][ T5925] gspca_vc032x: I2c Bus Busy Wait 00 [ 126.987609][ T5925] gspca_vc032x: I2c Bus Busy Wait 00 [ 126.987618][ T5925] gspca_vc032x: I2c Bus Busy Wait 00 [ 126.987627][ T5925] gspca_vc032x: I2c Bus Busy Wait 00 [ 126.987636][ T5925] gspca_vc032x: I2c Bus Busy Wait 00 [ 126.987645][ T5925] gspca_vc032x: I2c Bus Busy Wait 00 [ 126.987655][ T5925] gspca_vc032x: I2c Bus Busy Wait 00 [ 126.987664][ T5925] gspca_vc032x: I2c Bus Busy Wait 00 [ 126.987673][ T5925] gspca_vc032x: I2c Bus Busy Wait 00 [ 126.987682][ T5925] gspca_vc032x: I2c Bus Busy Wait 00 [ 126.987691][ T5925] gspca_vc032x: Unknown sensor... [ 126.987793][ T5925] vc032x 5-1:9.48: probe with driver vc032x failed with error -22 [ 127.128632][ T5873] usb 4-1: config 4 has an invalid interface number: 30 but max is 0 [ 127.128663][ T5873] usb 4-1: config 4 has no interface number 0 [ 127.128700][ T5873] usb 4-1: config 4 interface 30 has no altsetting 0 [ 127.129198][ T5925] usb 5-1: USB disconnect, device number 4 [ 127.174399][ T5873] usb 4-1: string descriptor 0 read error: -22 [ 127.174586][ T5873] usb 4-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 127.174612][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.234163][ T5873] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 127.234229][ T5873] dw2102: su3000_power_ctrl: 1, initialized 0 [ 127.234709][ T5873] dvb-usb: bulk message failed: -22 (2/0) [ 127.262324][ T5873] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 127.266317][ T5873] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 127.266388][ T5873] usb 4-1: media controller created [ 127.266923][ T5873] dvb-usb: bulk message failed: -22 (6/0) [ 127.266943][ T5873] dw2102: i2c transfer failed. [ 127.266965][ T5873] dvb-usb: bulk message failed: -22 (6/0) [ 127.266977][ T5873] dw2102: i2c transfer failed. [ 127.266994][ T5873] dvb-usb: bulk message failed: -22 (6/0) [ 127.267007][ T5873] dw2102: i2c transfer failed. [ 127.267025][ T5873] dvb-usb: bulk message failed: -22 (6/0) [ 127.267039][ T5873] dw2102: i2c transfer failed. [ 127.267056][ T5873] dvb-usb: bulk message failed: -22 (6/0) [ 127.267069][ T5873] dw2102: i2c transfer failed. [ 127.267087][ T5873] dvb-usb: bulk message failed: -22 (6/0) [ 127.267101][ T5873] dw2102: i2c transfer failed. [ 127.267110][ T5873] dvb-usb: MAC address: 02:02:02:02:02:02 [ 127.403014][ T5873] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 127.446857][ T6323] dw2102: i2c wr: len=66 is too big! [ 127.446857][ T6323] [ 127.463492][ T5873] dvb-usb: bulk message failed: -22 (3/0) [ 127.463514][ T5873] dw2102: command 0x0e transfer failed. [ 127.463525][ T5873] dvb-usb: bulk message failed: -22 (3/0) [ 127.463540][ T5873] dw2102: command 0x0e transfer failed. [ 127.772708][ T5873] dvb-usb: bulk message failed: -22 (3/0) [ 127.772738][ T5873] dw2102: command 0x0e transfer failed. [ 127.772748][ T5873] dvb-usb: bulk message failed: -22 (3/0) [ 127.772763][ T5873] dw2102: command 0x0e transfer failed. [ 127.772773][ T5873] dvb-usb: bulk message failed: -22 (1/0) [ 127.772787][ T5873] dw2102: command 0x51 transfer failed. [ 127.772797][ T5873] dvb-usb: bulk message failed: -22 (5/0) [ 127.772811][ T5873] dw2102: i2c probe for address 0x68 failed. [ 127.772823][ T5873] dvb-usb: bulk message failed: -22 (5/0) [ 127.772837][ T5873] dw2102: i2c probe for address 0x69 failed. [ 127.772849][ T5873] dvb-usb: bulk message failed: -22 (5/0) [ 127.772862][ T5873] dw2102: i2c probe for address 0x6a failed. [ 127.772873][ T5873] dw2102: probing for demodulator failed. Is the external power switched on? [ 127.772883][ T5873] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 127.970783][ T5873] rc_core: IR keymap rc-tt-1500 not found [ 127.970808][ T5873] Registered IR keymap rc-empty [ 128.019898][ T5873] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 128.024937][ T5873] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input5 [ 128.073131][ T5873] dvb-usb: schedule remote query interval to 250 msecs. [ 128.073157][ T5873] dw2102: su3000_power_ctrl: 0, initialized 1 [ 128.073171][ T5873] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 128.110305][ T5873] usb 4-1: USB disconnect, device number 3 [ 128.405324][ T6357] capability: warning: `syz.3.154' uses deprecated v2 capabilities in a way that may be insecure [ 128.548089][ T5873] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 128.664247][ T6345] syz.0.149 (6345): drop_caches: 2 [ 129.009739][ T6363] autofs: Bad value for 'fd' [ 129.202654][ T6370] sp0: Synchronizing with TNC [ 129.490281][ T5925] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 129.566779][ T6385] netlink: 28 bytes leftover after parsing attributes in process `syz.1.168'. [ 129.566818][ T6385] netlink: 28 bytes leftover after parsing attributes in process `syz.1.168'. [ 129.616429][ T6385] gretap0: entered promiscuous mode [ 129.650059][ T5925] usb 5-1: Using ep0 maxpacket: 32 [ 129.655230][ T5925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.655265][ T5925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.655307][ T5925] usb 5-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 129.655332][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.707048][ T5925] usb 5-1: config 0 descriptor?? [ 129.717761][ T6385] gretap0: left promiscuous mode [ 130.147645][ T5925] kye 0003:0458:0087.0003: unknown main item tag 0x0 [ 130.147681][ T5925] kye 0003:0458:0087.0003: unknown main item tag 0x0 [ 130.186282][ T5925] kye 0003:0458:0087.0003: hidraw0: USB HID v0.00 Device [HID 0458:0087] on usb-dummy_hcd.4-1/input0 [ 130.377858][ T6399] syz.0.173 (6399) used greatest stack depth: 18040 bytes left [ 130.404296][ T5911] usb 5-1: USB disconnect, device number 5 [ 131.059981][ T5911] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 131.210909][ T5911] usb 2-1: Using ep0 maxpacket: 16 [ 131.213877][ T5911] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.213912][ T5911] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.213936][ T5911] usb 2-1: config 0 interface 0 has no altsetting 0 [ 131.213973][ T5911] usb 2-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 131.213998][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.219463][ T6432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.190'. [ 131.219488][ T6432] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 131.299834][ T5911] usb 2-1: config 0 descriptor?? [ 131.790188][ T5911] kye 0003:0458:0138.0004: unknown main item tag 0x0 [ 131.790235][ T5911] kye 0003:0458:0138.0004: unknown main item tag 0x0 [ 131.790262][ T5911] kye 0003:0458:0138.0004: unknown main item tag 0x0 [ 131.790288][ T5911] kye 0003:0458:0138.0004: unknown main item tag 0x0 [ 131.790313][ T5911] kye 0003:0458:0138.0004: unknown main item tag 0x0 [ 131.790339][ T5911] kye 0003:0458:0138.0004: unknown main item tag 0x0 [ 131.790365][ T5911] kye 0003:0458:0138.0004: unknown main item tag 0x0 [ 131.790391][ T5911] kye 0003:0458:0138.0004: unknown main item tag 0x0 [ 131.796987][ T5911] kye 0003:0458:0138.0004: collection stack underflow [ 131.797021][ T5911] kye 0003:0458:0138.0004: item 0 0 0 12 parsing failed [ 131.797996][ T5911] kye 0003:0458:0138.0004: parse failed [ 131.798077][ T5911] kye 0003:0458:0138.0004: probe with driver kye failed with error -22 [ 131.970556][ T5911] usb 2-1: USB disconnect, device number 2 [ 132.419916][ T5873] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 132.580319][ T6472] binder: BINDER_SET_CONTEXT_MGR already set [ 132.580337][ T6472] binder: 6470:6472 ioctl 40046207 0 returned -16 [ 132.588494][ T5873] usb 5-1: config 0 interface 0 has no altsetting 0 [ 132.588544][ T5873] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 132.588569][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.657049][ T5873] usb 5-1: config 0 descriptor?? [ 133.020005][ T5911] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 133.092662][ T5873] kye 0003:0458:5013.0005: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 133.115758][ T5873] kye 0003:0458:5013.0005: hidraw0: USB HID v0.06 Device [HID 0458:5013] on usb-dummy_hcd.4-1/input0 [ 133.115796][ T5873] kye 0003:0458:5013.0005: tablet-enabling feature report not found [ 133.115811][ T5873] kye 0003:0458:5013.0005: tablet enabling failed [ 133.220993][ T5911] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 133.221032][ T5911] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.221056][ T5911] usb 1-1: config 0 interface 0 has no altsetting 0 [ 133.221094][ T5911] usb 1-1: New USB device found, idVendor=0b05, idProduct=183d, bcdDevice= 0.00 [ 133.221117][ T5911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.246580][ T5911] usb 1-1: config 0 descriptor?? [ 133.352221][ T31] usb 5-1: USB disconnect, device number 6 [ 133.740646][ T5911] asus 0003:0B05:183D.0006: hidraw0: USB HID v0.08 Device [HID 0b05:183d] on usb-dummy_hcd.0-1/input0 [ 133.740684][ T5911] asus 0003:0B05:183D.0006: Asus input not registered [ 133.743821][ T5911] asus 0003:0B05:183D.0006: probe with driver asus failed with error -12 [ 133.992162][ T31] usb 1-1: USB disconnect, device number 4 [ 134.573525][ T6522] tipc: Started in network mode [ 134.573562][ T6522] tipc: Node identity f67552f6a49e, cluster identity 4711 [ 134.576513][ T6522] tipc: Enabled bearer , priority 10 [ 134.779958][ T6059] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 134.949957][ T6059] usb 4-1: Using ep0 maxpacket: 32 [ 134.952529][ T6059] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 134.955577][ T6059] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 134.955609][ T6059] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.955630][ T6059] usb 4-1: Product: syz [ 134.955646][ T6059] usb 4-1: Manufacturer: syz [ 134.955661][ T6059] usb 4-1: SerialNumber: syz [ 135.008824][ T6059] usb 4-1: config 0 descriptor?? [ 135.011307][ T6523] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 135.026459][ T6059] hub 4-1:0.0: bad descriptor, ignoring hub [ 135.026505][ T6059] hub 4-1:0.0: probe with driver hub failed with error -5 [ 135.052798][ T6059] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input6 [ 135.170037][ T5873] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 135.320540][ T5873] usb 2-1: Using ep0 maxpacket: 8 [ 135.338447][ T5873] usb 2-1: unable to get BOS descriptor or descriptor too short [ 135.355655][ T5873] usb 2-1: config 128 has an invalid interface number: 153 but max is 0 [ 135.355687][ T5873] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 135.355708][ T5873] usb 2-1: config 128 has no interface number 0 [ 135.355901][ T5873] usb 2-1: config 128 interface 153 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.355931][ T5873] usb 2-1: config 128 interface 153 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.355956][ T5873] usb 2-1: config 128 interface 153 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 135.356120][ T5873] usb 2-1: config 128 interface 153 has no altsetting 0 [ 135.370015][ T6523] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 135.370043][ T6523] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 135.374594][ T6523] vhci_hcd vhci_hcd.0: Device attached [ 135.402778][ T6541] vhci_hcd: connection closed [ 135.413927][ T3559] vhci_hcd: stop threads [ 135.415527][ T3559] vhci_hcd: release socket [ 135.415602][ T3559] vhci_hcd: disconnect device [ 135.426234][ T5911] usb 4-1: USB disconnect, device number 4 [ 135.426367][ C0] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 135.489404][ T5873] usb 2-1: New USB device found, idVendor=06cd, idProduct=011c, bcdDevice=14.a4 [ 135.489438][ T5873] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.489468][ T5873] usb 2-1: Product: syz [ 135.489484][ T5873] usb 2-1: Manufacturer: syz [ 135.489499][ T5873] usb 2-1: SerialNumber: syz [ 135.692991][ T6059] tipc: Node number set to 1391153910 [ 135.761917][ T5873] keyspan 2-1:128.153: Keyspan 1 port adapter converter detected [ 135.762211][ T5873] keyspan 2-1:128.153: found no endpoint descriptor for endpoint 84 [ 135.764855][ T5873] keyspan 2-1:128.153: found no endpoint descriptor for endpoint 82 [ 135.764959][ T5873] keyspan 2-1:128.153: found no endpoint descriptor for endpoint 1 [ 135.765051][ T5873] keyspan 2-1:128.153: found no endpoint descriptor for endpoint 2 [ 135.765142][ T5873] keyspan 2-1:128.153: found no endpoint descriptor for endpoint 83 [ 135.765237][ T5873] keyspan 2-1:128.153: found no endpoint descriptor for endpoint 3 [ 135.840600][ T5873] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 135.846467][ T5873] usb 2-1: USB disconnect, device number 3 [ 135.881347][ T5873] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 135.882032][ T5873] keyspan 2-1:128.153: device disconnected [ 138.137746][ T6616] (unnamed net_device) (uninitialized): (slave dummy0): Device is not bonding slave [ 138.137772][ T6616] (unnamed net_device) (uninitialized): option active_slave: invalid value (dummy0) [ 138.196635][ T6618] capability: warning: `syz.1.271' uses 32-bit capabilities (legacy support in use) [ 138.279275][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.279395][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.831699][ T6638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.281'. [ 139.213123][ T6649] IPVS: Error connecting to the multicast addr [ 140.391571][ T6059] kernel write not supported for file /vcs (pid: 6059 comm: kworker/0:7) [ 140.671918][ T6690] program syz.0.304 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 140.729900][ T6071] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 140.879750][ T6692] netlink: 32 bytes leftover after parsing attributes in process `syz.3.306'. [ 140.879879][ T6071] usb 5-1: Using ep0 maxpacket: 16 [ 140.882404][ T6692] gretap0: entered promiscuous mode [ 140.885113][ T6071] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.885146][ T6071] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.885170][ T6071] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 140.885216][ T6071] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 140.885241][ T6071] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.969263][ T6071] usb 5-1: config 0 descriptor?? [ 141.416465][ T6071] hid_parser_main: 645 callbacks suppressed [ 141.416494][ T6071] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 141.416528][ T6071] microsoft 0003:045E:07DA.0007: ignoring exceeding usage max [ 141.419180][ T6071] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 141.419215][ T6071] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 141.419243][ T6071] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 141.419268][ T6071] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 141.419294][ T6071] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 141.419320][ T6071] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 141.419355][ T6071] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 141.419380][ T6071] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 141.419406][ T6071] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 141.419443][ T6071] microsoft 0003:045E:07DA.0007: unsupported Resolution Multiplier 0 [ 141.655455][ T6071] microsoft 0003:045E:07DA.0007: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 141.655492][ T6071] microsoft 0003:045E:07DA.0007: no inputs found [ 141.655505][ T6071] microsoft 0003:045E:07DA.0007: could not initialize ff, continuing anyway [ 141.694662][ T6703] warning: `syz.3.310' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 141.700867][ T6071] usb 5-1: USB disconnect, device number 7 [ 141.946080][ T6710] netlink: 'syz.3.313': attribute type 3 has an invalid length. [ 142.502787][ T6730] netlink: 8 bytes leftover after parsing attributes in process `syz.1.323'. [ 142.623899][ T6733] tipc: Started in network mode [ 142.623935][ T6733] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 142.625455][ T6733] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 142.627099][ T6733] tipc: Enabled bearer , priority 10 [ 143.151265][ T6749] netlink: 32 bytes leftover after parsing attributes in process `syz.4.333'. [ 143.475809][ T37] audit: type=1326 audit(1757263776.123:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6759 comm="syz.0.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08bd4bebe9 code=0x7ffc0000 [ 143.520037][ T37] audit: type=1326 audit(1757263776.123:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6759 comm="syz.0.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08bd4bebe9 code=0x7ffc0000 [ 143.520099][ T37] audit: type=1326 audit(1757263776.163:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6759 comm="syz.0.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f08bd4bebe9 code=0x7ffc0000 [ 143.520141][ T37] audit: type=1326 audit(1757263776.163:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6759 comm="syz.0.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08bd4bebe9 code=0x7ffc0000 [ 143.749945][ T6071] tipc: Node number set to 1 [ 143.948118][ T6778] netlink: 104 bytes leftover after parsing attributes in process `syz.4.343'. [ 144.196685][ T6784] bridge_slave_0: default FDB implementation only supports local addresses [ 144.413291][ T6793] syz.2.354 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 144.744288][ T37] audit: type=1326 audit(1757263777.393:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6802 comm="syz.2.358" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f68adeeebe9 code=0x0 [ 145.162449][ T6816] Driver unsupported XDP return value 0 on prog (id 28) dev N/A, expect packet loss! [ 145.720709][ T6837] random: crng reseeded on system resumption [ 147.199908][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 147.209952][ T5873] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 147.352746][ T9] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 147.352779][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.360924][ T5873] usb 4-1: Using ep0 maxpacket: 16 [ 147.363558][ T5873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.363589][ T5873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.363610][ T5873] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 147.363653][ T5873] usb 4-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 147.363675][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.376480][ T9] usb 1-1: config 0 descriptor?? [ 147.395456][ T9] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 147.436304][ T5873] usb 4-1: config 0 descriptor?? [ 147.880027][ T6059] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 147.973313][ T6895] tipc: Enabled bearer , priority 10 [ 148.013899][ T5873] hid-multitouch 0003:0457:07DA.0008: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.3-1/input0 [ 148.024236][ T9] gspca_cpia1: usb_control_msg 01, error -71 [ 148.024256][ T9] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 148.035009][ T6059] usb 5-1: Using ep0 maxpacket: 32 [ 148.044033][ T9] usb 1-1: USB disconnect, device number 5 [ 148.060025][ T6059] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 148.060059][ T6059] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.060081][ T6059] usb 5-1: Product: syz [ 148.060096][ T6059] usb 5-1: Manufacturer: syz [ 148.060111][ T6059] usb 5-1: SerialNumber: syz [ 148.091621][ T5873] usb 4-1: USB disconnect, device number 5 [ 148.120474][ T6059] usb 5-1: config 0 descriptor?? [ 148.189514][ T6059] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 148.567273][ T6901] Invalid ELF header magic: != ELF [ 148.770911][ T6059] gspca_stk1135: reg_w 0x3 err -71 [ 148.771961][ T6059] gspca_stk1135: serial bus timeout: status=0x00 [ 148.771977][ T6059] gspca_stk1135: Sensor write failed [ 148.772003][ T6059] gspca_stk1135: serial bus timeout: status=0x00 [ 148.772013][ T6059] gspca_stk1135: Sensor write failed [ 148.772043][ T6059] gspca_stk1135: serial bus timeout: status=0x00 [ 148.772053][ T6059] gspca_stk1135: Sensor read failed [ 148.772101][ T6059] gspca_stk1135: serial bus timeout: status=0x00 [ 148.772112][ T6059] gspca_stk1135: Sensor read failed [ 148.772119][ T6059] gspca_stk1135: Detected sensor type unknown (0x0) [ 148.772162][ T6059] gspca_stk1135: serial bus timeout: status=0x00 [ 148.772172][ T6059] gspca_stk1135: Sensor read failed [ 148.772211][ T6059] gspca_stk1135: serial bus timeout: status=0x00 [ 148.772221][ T6059] gspca_stk1135: Sensor read failed [ 148.772260][ T6059] gspca_stk1135: serial bus timeout: status=0x00 [ 148.772269][ T6059] gspca_stk1135: Sensor write failed [ 148.772300][ T6059] gspca_stk1135: serial bus timeout: status=0x00 [ 148.772309][ T6059] gspca_stk1135: Sensor write failed [ 148.772412][ T6059] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71 [ 148.800514][ T6059] usb 5-1: USB disconnect, device number 8 [ 149.864644][ T6922] tipc: Bearer : already 2 bearers with priority 10 [ 149.864668][ T6922] tipc: Bearer : trying with adjusted priority [ 149.864771][ T6922] tipc: Enabling of bearer rejected, failed to enable media [ 151.240144][ T6952] binder: 6950:6952 ioctl 541b 0 returned -22 [ 151.574463][ T6960] netlink: 'syz.4.433': attribute type 27 has an invalid length. [ 152.440037][ T5873] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 152.592396][ T5873] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.592453][ T5873] usb 1-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 152.592478][ T5873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.615159][ T5873] usb 1-1: config 0 descriptor?? [ 152.657231][ T6059] hid_parser_main: 1 callbacks suppressed [ 152.657260][ T6059] hid-generic 0000:0004:0000.0009: unknown main item tag 0x0 [ 152.657294][ T6059] hid-generic 0000:0004:0000.0009: unknown main item tag 0x0 [ 152.657319][ T6059] hid-generic 0000:0004:0000.0009: unknown main item tag 0x0 [ 152.831291][ T6059] hid-generic 0000:0004:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz0 [ 153.067435][ T5873] hid_mf 0003:0079:1846.000A: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.0-1/input0 [ 153.067476][ T5873] hid_mf 0003:0079:1846.000A: Invalid report, this should never happen! [ 153.067493][ T5873] hid_mf 0003:0079:1846.000A: Force feedback init failed. [ 153.174841][ T7005] netlink: 16 bytes leftover after parsing attributes in process `syz.1.455'. [ 153.231925][ T5924] usb 1-1: USB disconnect, device number 6 [ 155.070016][ T59] Bluetooth: hci4: command 0x0405 tx timeout [ 155.100099][ T5873] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 155.254684][ T5873] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 155.254756][ T5873] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 155.254826][ T5873] usb 4-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 155.254851][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.298160][ T5873] usb 4-1: config 0 descriptor?? [ 155.705489][ T7079] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 155.720152][ T5924] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 155.780361][ T5873] kye 0003:0458:0138.000B: hidraw0: USB HID v0.00 Device [HID 0458:0138] on usb-dummy_hcd.3-1/input0 [ 155.805789][ T7081] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 155.872467][ T5924] usb 5-1: config 0 has an invalid interface number: 98 but max is 0 [ 155.872498][ T5924] usb 5-1: config 0 has no interface number 0 [ 155.872534][ T5924] usb 5-1: config 0 interface 98 has no altsetting 0 [ 155.877483][ T5924] usb 5-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 155.877516][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.877537][ T5924] usb 5-1: Product: syz [ 155.877552][ T5924] usb 5-1: Manufacturer: syz [ 155.877567][ T5924] usb 5-1: SerialNumber: syz [ 155.946190][ T5924] usb 5-1: config 0 descriptor?? [ 155.956139][ T6059] usb 4-1: USB disconnect, device number 6 [ 156.213184][ T5924] usb 5-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 156.922093][ T5924] usb 5-1: reset high-speed USB device number 9 using dummy_hcd [ 157.379545][ T5924] usb 5-1: failed to restore interface 98 altsetting 4 (error=-71) [ 157.398318][ T5924] usb 5-1: [ueagle-atm] pre-firmware device, uploading firmware [ 157.398417][ T5924] usb 5-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 157.436201][ T5924] usb 5-1: USB disconnect, device number 9 [ 157.439634][ T5911] usb 5-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 157.439663][ T5911] usb 5-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 157.490200][ T5911] ------------[ cut here ]------------ [ 157.490215][ T5911] WARNING: CPU: 1 PID: 5911 at fs/kernfs/dir.c:537 kernfs_get+0x72/0x90 [ 157.490250][ T5911] Modules linked in: [ 157.490271][ T5911] CPU: 1 UID: 0 PID: 5911 Comm: kworker/1:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 157.490295][ T5911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 157.490309][ T5911] Workqueue: events request_firmware_work_func [ 157.490340][ T5911] RIP: 0010:kernfs_get+0x72/0x90 [ 157.490361][ T5911] Code: e8 e3 82 6b ff 48 89 df be 04 00 00 00 e8 b6 bf ca ff f0 ff 03 eb 05 e8 cc 82 6b ff 5b 5d e9 85 93 a7 08 cc e8 bf 82 6b ff 90 <0f> 0b 90 eb d6 89 d9 80 e1 07 80 c1 03 38 c1 7c b6 48 89 df e8 b5 [ 157.490378][ T5911] RSP: 0018:ffffc9000506f5e0 EFLAGS: 00010293 [ 157.490396][ T5911] RAX: ffffffff8252dce1 RBX: ffff8880327921e0 RCX: ffff88802dfd3b80 [ 157.490413][ T5911] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 157.490426][ T5911] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 157.490439][ T5911] R10: dffffc0000000000 R11: ffffed10064f243d R12: ffff8880370f5528 [ 157.490455][ T5911] R13: 1ffff11006e1eaa6 R14: ffff8880370f5530 R15: 1ffff11006e1eaa5 [ 157.490471][ T5911] FS: 0000000000000000(0000) GS:ffff8881269bf000(0000) knlGS:0000000000000000 [ 157.490489][ T5911] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 157.490505][ T5911] CR2: 0000001b31e12ff8 CR3: 000000003040c000 CR4: 00000000003526f0 [ 157.490525][ T5911] Call Trace: [ 157.490534][ T5911] [ 157.490568][ T5911] kobject_add_internal+0x638/0xb50 [ 157.490604][ T5911] kobject_add+0x155/0x220 [ 157.490634][ T5911] ? __pfx_kobject_add+0x10/0x10 [ 157.490656][ T5911] ? __kasan_kmalloc+0x93/0xb0 [ 157.490688][ T5911] ? kobject_init+0x83/0x1e0 [ 157.490713][ T5911] get_device_parent+0x31d/0x3a0 [ 157.490741][ T5911] device_add+0x2e1/0xb50 [ 157.490768][ T5911] firmware_fallback_sysfs+0x2e4/0x9b0 [ 157.490804][ T5911] ? _request_firmware+0xe57/0x15b0 [ 157.490841][ T5911] _request_firmware+0xf83/0x15b0 [ 157.490908][ T5911] ? __pfx__request_firmware+0x10/0x10 [ 157.490944][ T5911] ? process_scheduled_works+0x9ef/0x17b0 [ 157.490979][ T5911] request_firmware_work_func+0xaf/0x1c0 [ 157.491013][ T5911] ? process_scheduled_works+0x9ef/0x17b0 [ 157.491043][ T5911] process_scheduled_works+0xade/0x17b0 [ 157.491108][ T5911] ? __pfx_process_scheduled_works+0x10/0x10 [ 157.491158][ T5911] worker_thread+0x8a0/0xda0 [ 157.491198][ T5911] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 157.491242][ T5911] ? __kthread_parkme+0x7b/0x200 [ 157.491284][ T5911] kthread+0x70e/0x8a0 [ 157.491321][ T5911] ? __pfx_worker_thread+0x10/0x10 [ 157.491348][ T5911] ? __pfx_kthread+0x10/0x10 [ 157.491388][ T5911] ? __pfx_kthread+0x10/0x10 [ 157.491423][ T5911] ret_from_fork+0x3f9/0x770 [ 157.491456][ T5911] ? __pfx_ret_from_fork+0x10/0x10 [ 157.491493][ T5911] ? __switch_to_asm+0x39/0x70 [ 157.491513][ T5911] ? __switch_to_asm+0x33/0x70 [ 157.491532][ T5911] ? __pfx_kthread+0x10/0x10 [ 157.491567][ T5911] ret_from_fork_asm+0x1a/0x30 [ 157.491608][ T5911] [ 157.491619][ T5911] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 157.491634][ T5911] CPU: 1 UID: 0 PID: 5911 Comm: kworker/1:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 157.491657][ T5911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 157.491670][ T5911] Workqueue: events request_firmware_work_func [ 157.491699][ T5911] Call Trace: [ 157.491707][ T5911] [ 157.491716][ T5911] dump_stack_lvl+0x99/0x250 [ 157.491748][ T5911] ? __asan_memcpy+0x40/0x70 [ 157.491772][ T5911] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.491805][ T5911] ? __pfx__printk+0x10/0x10 [ 157.491845][ T5911] vpanic+0x281/0x750 [ 157.491877][ T5911] ? __pfx__printk+0x10/0x10 [ 157.491900][ T5911] ? __pfx_vpanic+0x10/0x10 [ 157.491931][ T5911] ? is_bpf_text_address+0x26/0x2b0 [ 157.491976][ T5911] panic+0xb9/0xc0 [ 157.492006][ T5911] ? __pfx_panic+0x10/0x10 [ 157.492058][ T5911] __warn+0x31b/0x4b0 [ 157.492088][ T5911] ? kernfs_get+0x72/0x90 [ 157.492112][ T5911] ? kernfs_get+0x72/0x90 [ 157.492133][ T5911] report_bug+0x2be/0x4f0 [ 157.492169][ T5911] ? kernfs_get+0x72/0x90 [ 157.492190][ T5911] ? kernfs_get+0x72/0x90 [ 157.492211][ T5911] ? kernfs_get+0x74/0x90 [ 157.492231][ T5911] handle_bug+0x84/0x160 [ 157.492255][ T5911] exc_invalid_op+0x1a/0x50 [ 157.492278][ T5911] asm_exc_invalid_op+0x1a/0x20 [ 157.492299][ T5911] RIP: 0010:kernfs_get+0x72/0x90 [ 157.492319][ T5911] Code: e8 e3 82 6b ff 48 89 df be 04 00 00 00 e8 b6 bf ca ff f0 ff 03 eb 05 e8 cc 82 6b ff 5b 5d e9 85 93 a7 08 cc e8 bf 82 6b ff 90 <0f> 0b 90 eb d6 89 d9 80 e1 07 80 c1 03 38 c1 7c b6 48 89 df e8 b5 [ 157.492336][ T5911] RSP: 0018:ffffc9000506f5e0 EFLAGS: 00010293 [ 157.492353][ T5911] RAX: ffffffff8252dce1 RBX: ffff8880327921e0 RCX: ffff88802dfd3b80 [ 157.492369][ T5911] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 157.492382][ T5911] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 157.492394][ T5911] R10: dffffc0000000000 R11: ffffed10064f243d R12: ffff8880370f5528 [ 157.492410][ T5911] R13: 1ffff11006e1eaa6 R14: ffff8880370f5530 R15: 1ffff11006e1eaa5 [ 157.492437][ T5911] ? kernfs_get+0x71/0x90 [ 157.492468][ T5911] kobject_add_internal+0x638/0xb50 [ 157.492502][ T5911] kobject_add+0x155/0x220 [ 157.492530][ T5911] ? __pfx_kobject_add+0x10/0x10 [ 157.492552][ T5911] ? __kasan_kmalloc+0x93/0xb0 [ 157.492583][ T5911] ? kobject_init+0x83/0x1e0 [ 157.492613][ T5911] get_device_parent+0x31d/0x3a0 [ 157.492639][ T5911] device_add+0x2e1/0xb50 [ 157.492665][ T5911] firmware_fallback_sysfs+0x2e4/0x9b0 [ 157.492701][ T5911] ? _request_firmware+0xe57/0x15b0 [ 157.492736][ T5911] _request_firmware+0xf83/0x15b0 [ 157.492790][ T5911] ? __pfx__request_firmware+0x10/0x10 [ 157.492826][ T5911] ? process_scheduled_works+0x9ef/0x17b0 [ 157.492858][ T5911] request_firmware_work_func+0xaf/0x1c0 [ 157.492892][ T5911] ? process_scheduled_works+0x9ef/0x17b0 [ 157.492920][ T5911] process_scheduled_works+0xade/0x17b0 [ 157.492984][ T5911] ? __pfx_process_scheduled_works+0x10/0x10 [ 157.493031][ T5911] worker_thread+0x8a0/0xda0 [ 157.493063][ T5911] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 157.493106][ T5911] ? __kthread_parkme+0x7b/0x200 [ 157.493148][ T5911] kthread+0x70e/0x8a0 [ 157.493190][ T5911] ? __pfx_worker_thread+0x10/0x10 [ 157.493216][ T5911] ? __pfx_kthread+0x10/0x10 [ 157.493253][ T5911] ? __pfx_kthread+0x10/0x10 [ 157.493285][ T5911] ret_from_fork+0x3f9/0x770 [ 157.493316][ T5911] ? __pfx_ret_from_fork+0x10/0x10 [ 157.493358][ T5911] ? __switch_to_asm+0x39/0x70 [ 157.493377][ T5911] ? __switch_to_asm+0x33/0x70 [ 157.493395][ T5911] ? __pfx_kthread+0x10/0x10 [ 157.493429][ T5911] ret_from_fork_asm+0x1a/0x30 [ 157.493471][ T5911] [ 157.493754][ T5911] Kernel Offset: disabled