last executing test programs: 6.581832146s ago: executing program 2 (id=240): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000280)={0x1, 0x0, [{0x84d, 0x0, 0x8}]}) 6.376999566s ago: executing program 4 (id=242): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x6, @local, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xcd, 0x6071, 0x0, 0xe7}}}}}}, 0x0) 6.068901701s ago: executing program 2 (id=246): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x410, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) setresgid(0x0, 0x0, 0xee01) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x40, 0x40, 0xa}, 0x18) 5.329714405s ago: executing program 4 (id=254): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000740)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x0, "a8407a73"}, @local=@item_4={0x3, 0x2, 0x0, "93bf0280"}, @global=@item_4={0x3, 0x1, 0x0, "ec4260d6"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000040)) 4.915655365s ago: executing program 2 (id=257): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='cmdline\x00') r1 = fanotify_init(0x8, 0x0) fanotify_mark(r1, 0x1, 0x40000011, r0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000002140)='fdinfo\x00') getdents64(r2, 0xffffffffffffffff, 0x18) 4.332463675s ago: executing program 2 (id=260): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='batadv0\x00', 0x10) sendto$inet6(r0, &(0x7f0000000140)="8469b66f", 0x20, 0x0, 0x0, 0x0) 4.012491707s ago: executing program 2 (id=262): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x1, 0xff, 0x1f}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) 3.670101432s ago: executing program 3 (id=266): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x141220, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f0000000204004d1504"], 0x48) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40890}, 0x24008004) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r0, 0x4010744d, &(0x7f0000000080)=0xc) 3.669262225s ago: executing program 2 (id=267): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000c68000/0x3000)=nil, 0x7fffffff, 0x0, 0x0, 0x6, 0x0, 0x2, 0x0, 0xe4}) 3.461769199s ago: executing program 4 (id=270): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) io_uring_register$IORING_REGISTER_ENABLE_RINGS(0xffffffffffffffff, 0xc, 0x0, 0x0) 3.363729422s ago: executing program 0 (id=271): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000000000)={0x8000000, 0x101000, 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) 3.15641799s ago: executing program 3 (id=273): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) r1 = socket(0xa, 0x1, 0x84) close(0x3) setsockopt$inet_group_source_req(r1, 0x0, 0x2a, &(0x7f00000002c0)={0x1, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e23, @multicast2}}}, 0x108) 2.908298811s ago: executing program 0 (id=274): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000004d40)=ANY=[@ANYBLOB="8000000000000000130100009b0600008ce2f8eeb961347424d3707232dfa4241297a3ccb28355bee03dc202b84a2ea760b50362f6f0166d93526c4a09169c253ebee9ea19c3dd6526dbd2a65e7301a6c4340bf22fca3e71a6b8a31bf8b14afb6aed8e0fc0e46f18aa741e224c0b25fa494b70b700dc80f88e86ea362f00000028000000000000001801000004000000ea3d9823ce4aec51e425124f3485876a3bed2192b800000010100000000000001701"], 0x10b8}, 0x20000091) 2.866056343s ago: executing program 3 (id=276): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)={0x87}, 0x8) syz_emit_ethernet(0x4a, &(0x7f0000000b80)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "560400", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x4}}}}}}}, 0x0) 2.707187922s ago: executing program 0 (id=277): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) setregid(0x0, 0xee01) setgroups(0x0, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) 2.664357608s ago: executing program 3 (id=278): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 2.541781998s ago: executing program 0 (id=280): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x1, r2, 0x1, 0x1, 0xa, 0x1ff, 0x1}) 2.272983036s ago: executing program 1 (id=281): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0x30, 0x2b, 0x0, @remote, @local, {[@routing={0x3a, 0x2, 0x2, 0x1, 0x0, [@mcast1]}], {0x4e22, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0) 2.264432311s ago: executing program 3 (id=282): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000580)={0x4, 0x8000}, 0x4) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x3f}, 0x80, &(0x7f0000000040)=[{&(0x7f00000006c0)="27050200340f14000600002fb96dbcf706060000170000005f45f491bdd54ec5ff1144ee162fd4deb8bf7256da82f600102c21880b00000000010040570000000600000000000000805db18fc0260ee65302fba79b6ede33d5653fc260616254bfd2094fcd732947077c67052b95dc84c79a46940cb8e29750471fde0e2190613b3537", 0x83}, {&(0x7f0000001340)="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", 0xec4}, {&(0x7f0000000300)="1f7da2f0c99ffb815b58c74d6f7c71bd8ba3b13dcd0b7303551c34c4e8c81b970f5efe39825400e5fdca4dcf71bee004f8076bc034909e4e7783bfe3b2f4b0021bece403dcd4246080aed97e3d62b45358a65243ee54211a374fb0cb80e8fd2711c9129aa71845005f136cc3add133d8e2232a7347864fc1afdf984833d0736e64d6833bd6006df2a7ea93e740c7cb88fbac42fd6d1a063f534535dfb275adb500f3bbb16e5ccca5fceaaa2c06cc903082e743", 0xb3}], 0x3}, 0x9cdc2384016b48f8) 2.011030759s ago: executing program 1 (id=283): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000040)=0x9eb6, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x8001, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x5eff}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000080)) 1.95844917s ago: executing program 3 (id=284): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000140)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="201104060000000101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.788200439s ago: executing program 1 (id=285): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x9}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000f40)={r1}, &(0x7f0000000040)=0x8) 1.745579293s ago: executing program 0 (id=286): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d48751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6f77473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b49331904da2a37c89ea236f5d5640c32c3ac74e4bde1a62c560cb63836552f881c8a8305d2a13d838a5160a6c06c63decc865a92e9539f3513af3a1e6f78608890f912f087214dac06387a94d5e1b31c35be117ee540dc4560aa500269b81a0bbc", 0xe3}, {&(0x7f00000007c0)="1d4ac370cf8c47025bd7a6546c8bd2123991596dfcd1abdb72276d5f80b1d38cedd7d704de6e472fa6961cd700b4f8e0f594861c0296ca9277c9bbf83e11a3ab33449d0e26aa8bcb6c2ef9", 0x4b}, {&(0x7f0000000380)="88e584aac45d6d83e6c2e7857149eb55d2c259a747dbdfc0787e87150d7e40953e657417f2c201284dd4714eb14ce94fb9be03e73d06a982f5502b3ae3a800c03902057e1ec6", 0x46}, {&(0x7f0000000400)="83c0b58e5bcffe6c14ab199d81f63d9e77512d040c3f3a7b41a3a1ed6cf40450443e4e377139b523eb3dd725f87a1ed946e28c6b19e1fc6ea21fe2eef736ec85289f34830b89c7169369862871b9608f2e976924a41f64f236a395563ddb3b994b4d9cf9f465dea2adad06013851713e9d30f195383be99db35611dd11a69721e423fcf5904c2af8ca4b1774bc6438d1c6218a2ada56c8b5b289274c2d116ecd4aafbd01536f931c84ec7f95ce8c6d118d1dec3bfa645c3e72018e9c154a80fd84b6e0233520ee1dc56ec6247282000000000000000000", 0xd7}, {&(0x7f0000004480)="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", 0xda6}], 0x5) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r3 = memfd_create(&(0x7f0000000340)='\x00\x01\x00\x00\x00\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\x00\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\x03\x00\x00\x00m\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xa1\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"F\xb4\x02\xc5T\xe5\xc7\x98\xcd\fs\x1ap^\xc1jL\xfb{\xd8\x9e;L9\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90F@\x8a_\xe0\xd7\xfag\x9f\xcfp2*}=\x01h\x04\x81V9\xa1Q\xe19\x85\xa4x\xb6/\xbe~M\xac%\x03\xdfm\x174\xb0\x8a{)$\xa6\xad\xadg6\x02P\xbf\x9a\x1d\xaeR\x1f_\x1b\x9cma\xc3\xa5\x19b\'H\x94|\x18\x8a\xd5\xbb\"\xfe\xdf\x8f', 0x7) fallocate(r3, 0x0, 0x400000000000000, 0x7) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(0xffffffffffffffff, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xff1}], 0x1) 1.667830259s ago: executing program 1 (id=287): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000000000095000040"]) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r2, 0x4068aea3, &(0x7f00000000c0)) 1.571469329s ago: executing program 4 (id=288): r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x13, 0x14, "1271a2ab78fce00d9668dda1af1ea89d62b7080a01000000000300008a03000000000000000000ffffff7f00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c1265400000000000ecff00", [0x0, 0x4]}}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/crypto\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) 531.408518ms ago: executing program 4 (id=289): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in=@broadcast, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x4, 0x0, 0x80000000, 0x0, 0x9, 0x0, 0x40000000000000}, {0x0, 0x1000000000, 0x53e5, 0x20}, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1}, {{@in6=@mcast2, 0x0, 0x32}, 0x2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1502, 0x4, 0x0, 0x0, 0x0, 0xfffffffb, 0x1}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) 376.386756ms ago: executing program 0 (id=290): syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) 289.257961ms ago: executing program 4 (id=291): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000280600fe88a43de1a400000000000000027d01ff020000000000000000000000000001000088bed2868a1610e8f515ab"], 0xfdef) 241.388651ms ago: executing program 1 (id=292): r0 = socket$inet(0x2, 0x1, 0x100) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) 0s ago: executing program 1 (id=293): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xb, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, r1, 0x25, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x8000000000000001}}, 0x30) syz_emit_ethernet(0x7a, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "d40040", 0x44, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x1}, {0x1}, {}, {0x8, 0x88be, 0x3, {{0xc, 0x1, 0x8, 0x1, 0x1, 0x0, 0x4, 0x10}, 0x1, {0x7b40}}}, {0x8, 0x22eb, 0x2, {{0x3, 0x2, 0x2, 0x3, 0x0, 0x0, 0x1, 0x9}, 0x2, {0x3, 0xeb, 0x0, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x3}}}}}}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.0' (ED25519) to the list of known hosts. [ 89.608888][ T5824] cgroup: Unknown subsys name 'net' [ 89.899148][ T5824] cgroup: Unknown subsys name 'cpuset' [ 89.973007][ T5824] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 92.004113][ T5824] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.239665][ T2085] cfg80211: failed to load regulatory.db [ 94.961230][ T5154] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 94.967347][ T5154] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 94.986819][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 94.988017][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.989649][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.990610][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.991124][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 94.996523][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.997555][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.000388][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.035162][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.037041][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.038025][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.039476][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.040327][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.196838][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.198676][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.203502][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.205321][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.206896][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 95.257736][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 95.260454][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 95.279612][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 95.280990][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 95.292949][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 96.073942][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 96.167273][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 96.521954][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 96.608285][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 96.968662][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 96.976747][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.977042][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.977720][ T5840] bridge_slave_0: entered allmulticast mode [ 96.981411][ T5840] bridge_slave_0: entered promiscuous mode [ 97.034212][ T5838] Bluetooth: hci0: command tx timeout [ 97.112676][ T5838] Bluetooth: hci2: command tx timeout [ 97.174996][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.175285][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.175489][ T5840] bridge_slave_1: entered allmulticast mode [ 97.178788][ T5840] bridge_slave_1: entered promiscuous mode [ 97.192885][ T5838] Bluetooth: hci1: command tx timeout [ 97.197245][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.197415][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.197669][ T5834] bridge_slave_0: entered allmulticast mode [ 97.201110][ T5834] bridge_slave_0: entered promiscuous mode [ 97.273402][ T5838] Bluetooth: hci3: command tx timeout [ 97.334210][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.334365][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.334910][ T5834] bridge_slave_1: entered allmulticast mode [ 97.337690][ T5834] bridge_slave_1: entered promiscuous mode [ 97.352297][ T5838] Bluetooth: hci4: command tx timeout [ 97.755843][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.970696][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.970956][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.971256][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.971737][ T5835] bridge_slave_0: entered allmulticast mode [ 97.991201][ T5835] bridge_slave_0: entered promiscuous mode [ 98.000098][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.173617][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.173764][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.173958][ T5835] bridge_slave_1: entered allmulticast mode [ 98.176857][ T5835] bridge_slave_1: entered promiscuous mode [ 98.180735][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.294161][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.294380][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.294603][ T5843] bridge_slave_0: entered allmulticast mode [ 98.297692][ T5843] bridge_slave_0: entered promiscuous mode [ 98.654846][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.654996][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.655162][ T5843] bridge_slave_1: entered allmulticast mode [ 98.657090][ T5843] bridge_slave_1: entered promiscuous mode [ 98.765132][ T5840] team0: Port device team_slave_0 added [ 99.023067][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.023224][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.023387][ T5844] bridge_slave_0: entered allmulticast mode [ 99.025312][ T5844] bridge_slave_0: entered promiscuous mode [ 99.029829][ T5840] team0: Port device team_slave_1 added [ 99.041960][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.058003][ T5834] team0: Port device team_slave_0 added [ 99.112388][ T5838] Bluetooth: hci0: command tx timeout [ 99.164083][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.164253][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.164455][ T5844] bridge_slave_1: entered allmulticast mode [ 99.167382][ T5844] bridge_slave_1: entered promiscuous mode [ 99.202427][ T5838] Bluetooth: hci2: command tx timeout [ 99.272413][ T5838] Bluetooth: hci1: command tx timeout [ 99.293321][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.296761][ T5834] team0: Port device team_slave_1 added [ 99.352729][ T5838] Bluetooth: hci3: command tx timeout [ 99.389082][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.432598][ T5838] Bluetooth: hci4: command tx timeout [ 99.828062][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.829188][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.829200][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.829220][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.036923][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.114638][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.114656][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.114684][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.118850][ T5835] team0: Port device team_slave_0 added [ 100.120041][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.120057][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.120084][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.126479][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.287236][ T5835] team0: Port device team_slave_1 added [ 100.288583][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.288600][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.288628][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.368635][ T5843] team0: Port device team_slave_0 added [ 100.539092][ T5843] team0: Port device team_slave_1 added [ 100.876174][ T5844] team0: Port device team_slave_0 added [ 100.964786][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.964804][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.964833][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.068556][ T5844] team0: Port device team_slave_1 added [ 101.135857][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.135876][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.135905][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.192764][ T5838] Bluetooth: hci0: command tx timeout [ 101.235688][ T5840] hsr_slave_0: entered promiscuous mode [ 101.237120][ T5840] hsr_slave_1: entered promiscuous mode [ 101.273838][ T5838] Bluetooth: hci2: command tx timeout [ 101.352301][ T5838] Bluetooth: hci1: command tx timeout [ 101.353606][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.353619][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.353647][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.432782][ T5838] Bluetooth: hci3: command tx timeout [ 101.512443][ T5838] Bluetooth: hci4: command tx timeout [ 101.537794][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.537812][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.537840][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.550132][ T5834] hsr_slave_0: entered promiscuous mode [ 101.551618][ T5834] hsr_slave_1: entered promiscuous mode [ 101.554756][ T5834] debugfs: 'hsr0' already exists in 'hsr' [ 101.554882][ T5834] Cannot create hsr debugfs directory [ 101.557737][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.557753][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.557781][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.655672][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.655693][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.655724][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.191636][ T5835] hsr_slave_0: entered promiscuous mode [ 102.193685][ T5835] hsr_slave_1: entered promiscuous mode [ 102.194781][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 102.194810][ T5835] Cannot create hsr debugfs directory [ 102.506810][ T5843] hsr_slave_0: entered promiscuous mode [ 102.508319][ T5843] hsr_slave_1: entered promiscuous mode [ 102.509304][ T5843] debugfs: 'hsr0' already exists in 'hsr' [ 102.509329][ T5843] Cannot create hsr debugfs directory [ 102.734753][ T5844] hsr_slave_0: entered promiscuous mode [ 102.735859][ T5844] hsr_slave_1: entered promiscuous mode [ 102.736764][ T5844] debugfs: 'hsr0' already exists in 'hsr' [ 102.736787][ T5844] Cannot create hsr debugfs directory [ 103.272518][ T5838] Bluetooth: hci0: command tx timeout [ 103.353442][ T5838] Bluetooth: hci2: command tx timeout [ 103.432357][ T5838] Bluetooth: hci1: command tx timeout [ 103.512324][ T5838] Bluetooth: hci3: command tx timeout [ 103.603288][ T5838] Bluetooth: hci4: command tx timeout [ 104.254303][ T5840] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 104.302913][ T5840] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 104.348288][ T5840] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 104.400219][ T5840] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 104.547081][ T5834] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.585912][ T5834] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.630019][ T5834] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.691037][ T5834] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.831986][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 104.881512][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 104.919600][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 104.999335][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 105.179974][ T5843] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 105.223002][ T5843] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 105.267567][ T5843] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 105.334520][ T5843] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 105.539271][ T5844] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.588835][ T5844] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.631589][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.654518][ T5844] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.696317][ T5844] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 105.835466][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.884878][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.908726][ T1438] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.909399][ T1438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.971843][ T1438] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.971997][ T1438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.047788][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.079428][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.134555][ T1438] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.134786][ T1438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.201468][ T1438] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.201688][ T1438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.254319][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.326793][ T1180] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.327049][ T1180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.368199][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.400020][ T2998] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.400174][ T2998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.565142][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.596948][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.659936][ T3089] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.660166][ T3089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.775071][ T1438] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.775204][ T1438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.865330][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.937070][ T1180] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.937255][ T1180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.003537][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.017083][ T1438] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.017287][ T1438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.320199][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.439802][ T5840] veth0_vlan: entered promiscuous mode [ 107.520884][ T5840] veth1_vlan: entered promiscuous mode [ 107.571163][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.751588][ T5834] veth0_vlan: entered promiscuous mode [ 107.820005][ T5840] veth0_macvtap: entered promiscuous mode [ 107.839080][ T5834] veth1_vlan: entered promiscuous mode [ 107.886517][ T5840] veth1_macvtap: entered promiscuous mode [ 107.920734][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.977469][ T5835] veth0_vlan: entered promiscuous mode [ 108.037133][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.056137][ T5835] veth1_vlan: entered promiscuous mode [ 108.096315][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.135546][ T5834] veth0_macvtap: entered promiscuous mode [ 108.156697][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.205012][ T1438] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.211221][ T1438] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.228356][ T5834] veth1_macvtap: entered promiscuous mode [ 108.231960][ T1438] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.246211][ T1438] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.499144][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.566714][ T5835] veth0_macvtap: entered promiscuous mode [ 108.594334][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.627235][ T5835] veth1_macvtap: entered promiscuous mode [ 108.724383][ T3089] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.742415][ T3089] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.743449][ T3089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.743472][ T3089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.758901][ T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.794585][ T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.840147][ T5844] veth0_vlan: entered promiscuous mode [ 108.908180][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.037808][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.053913][ T1438] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.053934][ T1438] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.076671][ T5844] veth1_vlan: entered promiscuous mode [ 109.172034][ T5843] veth0_vlan: entered promiscuous mode [ 109.208575][ T37] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.247046][ T37] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.275298][ T37] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.279981][ T37] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.344835][ T1438] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.344857][ T1438] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.350630][ T5843] veth1_vlan: entered promiscuous mode [ 109.675624][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.675646][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.910734][ T5844] veth0_macvtap: entered promiscuous mode [ 109.932972][ T1438] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.932996][ T1438] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.979351][ T5844] veth1_macvtap: entered promiscuous mode [ 110.189669][ T5843] veth0_macvtap: entered promiscuous mode [ 110.255974][ T5843] veth1_macvtap: entered promiscuous mode [ 110.307104][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.307127][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.348325][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.385291][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.457203][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.457292][ T2998] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.476628][ T2998] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.482675][ T2998] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.483170][ T2998] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.537401][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.842826][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.904375][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.941366][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.142862][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.487409][ T1482] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.487433][ T1482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.526915][ T38] audit: type=1326 audit(1755985053.340:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5977 comm="syz.1.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f23bb5e5ba7 code=0x7ffc0000 [ 111.527101][ T38] audit: type=1326 audit(1755985053.350:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5977 comm="syz.1.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f23bb58ade9 code=0x7ffc0000 [ 111.527398][ T38] audit: type=1326 audit(1755985053.350:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5977 comm="syz.1.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23bb5eebe9 code=0x7ffc0000 [ 111.528501][ T38] audit: type=1326 audit(1755985053.350:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5977 comm="syz.1.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23bb5eebe9 code=0x7ffc0000 [ 111.528845][ T38] audit: type=1326 audit(1755985053.350:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5977 comm="syz.1.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f23bb5eebe9 code=0x7ffc0000 [ 111.529114][ T38] audit: type=1326 audit(1755985053.350:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5977 comm="syz.1.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23bb5eebe9 code=0x7ffc0000 [ 111.530216][ T38] audit: type=1326 audit(1755985053.350:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5977 comm="syz.1.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23bb5eebe9 code=0x7ffc0000 [ 111.878687][ T1024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.878712][ T1024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.032332][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.032355][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.183535][ T5945] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 112.230139][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.230161][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.352158][ T5945] usb 1-1: Using ep0 maxpacket: 8 [ 112.361864][ T5945] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 112.361897][ T5945] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.516909][ T5945] pvrusb2: Hardware description: Terratec Grabster AV400 [ 112.516936][ T5945] pvrusb2: ********** [ 112.516943][ T5945] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 112.516954][ T5945] pvrusb2: Important functionality might not be entirely working. [ 112.516962][ T5945] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 112.516978][ T5945] pvrusb2: ********** [ 112.680305][ T2369] pvrusb2: Invalid write control endpoint [ 112.886266][ T2369] pvrusb2: Invalid write control endpoint [ 112.886281][ T2369] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 112.886290][ T2369] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 112.886297][ T2369] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 112.886306][ T2369] pvrusb2: Device being rendered inoperable [ 112.973966][ T2369] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 112.974045][ T2369] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 112.998647][ T2369] pvrusb2: Attached sub-driver cx25840 [ 112.998677][ T2369] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 112.998688][ T2369] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 113.068531][ T5945] usb 1-1: USB disconnect, device number 2 [ 113.714821][ T5907] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 113.864416][ T5907] usb 5-1: Using ep0 maxpacket: 32 [ 113.868729][ T5907] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 113.868760][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.922444][ T5907] usb 5-1: config 0 descriptor?? [ 114.042812][ T31] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 114.170258][ T5907] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 114.192879][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 114.200592][ T31] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 114.200646][ T31] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 114.200675][ T31] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 114.200700][ T31] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 114.200723][ T31] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 114.213748][ T31] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 114.213871][ T31] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 114.213902][ T31] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 114.213929][ T31] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 114.213956][ T31] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 114.242272][ T5680] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 114.262295][ T31] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 114.262363][ T31] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 114.262392][ T31] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 114.262419][ T31] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 114.262446][ T31] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 114.407495][ T31] usb 1-1: string descriptor 0 read error: -22 [ 114.407652][ T31] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 114.407678][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.411964][ T5907] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 114.458341][ T5907] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 114.458443][ T5907] usb 5-1: media controller created [ 114.472232][ T5680] usb 4-1: Using ep0 maxpacket: 32 [ 114.474907][ T5680] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 114.474954][ T5680] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 114.474997][ T5680] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 114.475026][ T5680] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 114.475055][ T5680] usb 4-1: config 0 interface 0 has no altsetting 0 [ 114.534380][ T5680] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 114.534413][ T5680] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 114.534433][ T5680] usb 4-1: Product: syz [ 114.534447][ T5680] usb 4-1: Manufacturer: syz [ 114.534462][ T5680] usb 4-1: SerialNumber: syz [ 114.592407][ T5680] usb 4-1: config 0 descriptor?? [ 114.597075][ T31] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 114.619392][ T5680] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 114.643478][ T5680] ldusb 4-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 114.689641][ T5907] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 114.726491][ T5845] usb 1-1: USB disconnect, device number 3 [ 114.745439][ T5907] az6027: usb out operation failed. (-71) [ 114.746272][ T5907] az6027: usb out operation failed. (-71) [ 114.746289][ T5907] stb0899_attach: Driver disabled by Kconfig [ 114.746299][ T5907] az6027: no front-end attached [ 114.746299][ T5907] [ 114.746710][ T5907] az6027: usb out operation failed. (-71) [ 114.746724][ T5907] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 114.815867][ T5907] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input5 [ 114.867233][ T5907] dvb-usb: schedule remote query interval to 400 msecs. [ 114.867259][ T5907] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 114.881065][ T5945] usb 4-1: USB disconnect, device number 2 [ 114.902267][ T5907] usb 5-1: USB disconnect, device number 2 [ 114.924197][ T5945] ldusb 4-1:0.0: LD USB Device #1 now disconnected [ 115.133449][ T5907] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 115.165199][ T1024] Bluetooth: hci5: Frame reassembly failed (-84) [ 115.692260][ T5907] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 115.786451][ T6027] can0: slcan on ttyS3. [ 115.845304][ T5907] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 115.845341][ T5907] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 115.845383][ T5907] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 115.845407][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.900853][ T6023] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 115.939490][ T5907] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 115.986668][ T6035] warning: `syz.0.38' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 116.024157][ T6032] can0 (unregistered): slcan off ttyS3. [ 116.038130][ T5945] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 116.136051][ T6037] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 116.184393][ T5899] usb 2-1: USB disconnect, device number 2 [ 116.198644][ T5945] usb 4-1: Using ep0 maxpacket: 16 [ 116.204250][ T5945] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.204293][ T5945] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.204322][ T5945] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 116.204353][ T5945] usb 4-1: config 0 interface 0 has no altsetting 0 [ 116.204395][ T5945] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 116.204420][ T5945] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.234467][ T5945] usb 4-1: config 0 descriptor?? [ 116.306758][ T6043] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 116.412798][ T6039] mkiss: ax0: crc mode is auto. [ 116.789217][ T6048] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 116.907102][ T5899] usb 4-1: USB disconnect, device number 3 [ 117.192529][ T5838] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 117.423019][ T6062] team0: Device gtp0 is of different type [ 117.614054][ T5845] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 117.782301][ T5845] usb 3-1: Using ep0 maxpacket: 16 [ 117.786085][ T5845] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 117.786136][ T5845] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 117.786161][ T5845] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.809283][ T5845] usb 3-1: config 0 descriptor?? [ 117.896704][ T5845] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input6 [ 118.048123][ T5190] bcm5974 3-1:0.0: could not read from device [ 118.138389][ T5845] bcm5974 3-1:0.0: could not read from device [ 118.173552][ T5190] bcm5974 3-1:0.0: could not read from device [ 118.182299][ T2085] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 118.245829][ T5845] input: failed to attach handler mousedev to device input6, error: -5 [ 118.264244][ T5190] bcm5974 3-1:0.0: could not read from device [ 118.282625][ T5845] usb 3-1: USB disconnect, device number 2 [ 118.333322][ T2085] usb 5-1: Using ep0 maxpacket: 8 [ 118.337704][ T2085] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 118.337745][ T2085] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.390080][ T2085] pvrusb2: Hardware description: Terratec Grabster AV400 [ 118.397014][ T2085] pvrusb2: ********** [ 118.397032][ T2085] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 118.397046][ T2085] pvrusb2: Important functionality might not be entirely working. [ 118.397057][ T2085] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 118.397069][ T2085] pvrusb2: ********** [ 118.807640][ T2369] pvrusb2: Invalid write control endpoint [ 118.916281][ T2369] pvrusb2: Invalid write control endpoint [ 118.916298][ T2369] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 118.916308][ T2369] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 118.916317][ T2369] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 118.916328][ T2369] pvrusb2: Device being rendered inoperable [ 118.918475][ T2369] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 118.918542][ T2369] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 118.920684][ T2369] pvrusb2: Attached sub-driver cx25840 [ 118.920698][ T2369] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 118.920708][ T2369] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 119.041774][ T2085] usb 5-1: USB disconnect, device number 3 [ 120.754372][ T5680] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 120.905596][ T5680] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 120.905632][ T5680] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.905674][ T5680] usb 2-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00 [ 120.905699][ T5680] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.915833][ T5680] usb 2-1: config 0 descriptor?? [ 121.360046][ T5680] logitech-hidpp-device 0003:046D:C262.0002: item fetching failed at offset 0/3 [ 121.360958][ T5680] logitech-hidpp-device 0003:046D:C262.0002: hidpp_probe:parse failed [ 121.361071][ T5680] logitech-hidpp-device 0003:046D:C262.0002: probe with driver logitech-hidpp-device failed with error -22 [ 121.567777][ T2085] usb 2-1: USB disconnect, device number 3 [ 121.644956][ T5680] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 121.682317][ T5907] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 121.807141][ T5680] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 121.807180][ T5680] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 121.807225][ T5680] usb 3-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 121.807249][ T5680] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.836042][ T5907] usb 4-1: Using ep0 maxpacket: 16 [ 121.838981][ T5907] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.839011][ T5907] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 121.848381][ T5907] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 121.848416][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.848439][ T5907] usb 4-1: Product: syz [ 121.848456][ T5907] usb 4-1: Manufacturer: syz [ 121.848472][ T5907] usb 4-1: SerialNumber: syz [ 121.859870][ T5680] usb 3-1: config 0 descriptor?? [ 121.861116][ T6132] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 121.978456][ T6147] Zero length message leads to an empty skb [ 122.335105][ T5907] usb 4-1: 0:2 : does not exist [ 122.339843][ T5680] saitek 0003:06A3:0CCD.0003: item fetching failed at offset 0/2 [ 122.341262][ T5680] saitek 0003:06A3:0CCD.0003: parse failed [ 122.341437][ T5680] saitek 0003:06A3:0CCD.0003: probe with driver saitek failed with error -22 [ 122.476529][ T31] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 122.579437][ T5680] usb 3-1: USB disconnect, device number 3 [ 122.647131][ T31] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 122.647160][ T31] usb 1-1: config 0 has no interface number 0 [ 122.671590][ T31] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 122.671683][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.671706][ T31] usb 1-1: Product: syz [ 122.671721][ T31] usb 1-1: Manufacturer: syz [ 122.671737][ T31] usb 1-1: SerialNumber: syz [ 122.769183][ T5907] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 122.770766][ T31] usb 1-1: config 0 descriptor?? [ 122.897260][ T5907] usb 4-1: USB disconnect, device number 4 [ 123.147291][ T31] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 123.202250][ T5680] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 123.224233][ T31] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 123.224643][ T31] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 123.224697][ T31] usb 1-1: media controller created [ 123.302606][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 123.320492][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 123.320547][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 123.320639][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 123.320716][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 123.320781][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 123.320931][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 123.344670][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 123.344715][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 123.344775][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 123.874269][ T5680] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.874353][ T5680] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 123.874496][ T5680] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 123.874555][ T5680] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.193383][ T5680] usb 5-1: config 0 descriptor?? [ 124.253325][ T5680] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 124.253388][ T5680] dvb-usb: bulk message failed: -22 (3/0) [ 124.295172][ T5680] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 124.397826][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 124.417439][ T5680] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 124.417509][ T5680] usb 5-1: media controller created [ 124.436015][ T5680] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 124.584961][ T5680] dvb-usb: bulk message failed: -22 (6/0) [ 124.585096][ T5680] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 124.596954][ T5680] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input7 [ 124.609979][ T31] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 124.666563][ T5680] dvb-usb: schedule remote query interval to 150 msecs. [ 124.666587][ T5680] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 124.825832][ T5680] dvb-usb: bulk message failed: -22 (1/0) [ 124.825880][ T5680] dvb-usb: error while querying for an remote control event. [ 124.951188][ T5680] usb 5-1: USB disconnect, device number 4 [ 124.990876][ T31] usb 1-1: USB disconnect, device number 4 [ 125.115148][ T5680] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 127.266251][ T6206] tipc: Started in network mode [ 127.266287][ T6206] tipc: Node identity ac1414aa, cluster identity 4711 [ 127.269331][ T6206] tipc: Enabled bearer , priority 10 [ 127.692242][ T5907] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 127.802204][ T5899] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 127.842317][ T5907] usb 1-1: Using ep0 maxpacket: 16 [ 127.845340][ T5907] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.845399][ T5907] usb 1-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 127.845430][ T5907] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.863334][ T5907] usb 1-1: config 0 descriptor?? [ 127.962164][ T5899] usb 3-1: Using ep0 maxpacket: 8 [ 127.982655][ T5899] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 127.982687][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.982707][ T5899] usb 3-1: Product: syz [ 127.982720][ T5899] usb 3-1: Manufacturer: syz [ 127.982735][ T5899] usb 3-1: SerialNumber: syz [ 128.025260][ T5899] usb 3-1: config 0 descriptor?? [ 128.306138][ T5899] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 128.326961][ T5907] kye 0003:0458:5016.0004: control desc unexpectedly large [ 128.384560][ T5680] tipc: Node number set to 2886997162 [ 128.393958][ T5907] input: HID 0458:5016 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5016.0004/input/input8 [ 128.637131][ T5907] input: HID 0458:5016 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5016.0004/input/input9 [ 128.786752][ T5907] kye 0003:0458:5016.0004: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.0-1/input0 [ 128.801224][ T5907] usb 1-1: USB disconnect, device number 5 [ 129.183336][ T5899] usb write operation failed. (-71) [ 129.242478][ T5899] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 129.243168][ T5899] dvbdev: DVB: registering new adapter (Terratec H7) [ 129.243226][ T5899] usb 3-1: media controller created [ 129.246625][ T5899] usb read operation failed. (-71) [ 129.247130][ T5899] usb write operation failed. (-71) [ 129.379745][ T5899] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 129.410053][ T5899] usb 3-1: USB disconnect, device number 4 [ 129.629784][ T6281] syz.3.126 uses obsolete (PF_INET,SOCK_PACKET) [ 130.789443][ T6294] overlayfs: missing 'lowerdir' [ 131.116216][ T6306] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 131.350864][ T6313] ubi31: attaching mtd0 [ 131.532395][ T5907] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 131.682337][ T5907] usb 1-1: Using ep0 maxpacket: 8 [ 131.686121][ T5907] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 131.686145][ T5907] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 131.686163][ T5907] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 131.686180][ T5907] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 131.686215][ T5907] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 131.686231][ T5907] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.902398][ T5845] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 131.903068][ T5907] usb 1-1: GET_CAPABILITIES returned 0 [ 131.903117][ T5907] usbtmc 1-1:16.0: can't read capabilities [ 132.055800][ T5845] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.055862][ T5845] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 132.055886][ T5845] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.060161][ T5845] usb 4-1: config 0 descriptor?? [ 132.077414][ T5845] pwc: Askey VC010 type 2 USB webcam detected. [ 132.121575][ T5945] usb 1-1: USB disconnect, device number 6 [ 132.488166][ T5845] pwc: recv_control_msg error -32 req 02 val 2b00 [ 132.491239][ T5845] pwc: recv_control_msg error -32 req 02 val 2700 [ 133.149456][ T5845] pwc: recv_control_msg error -71 req 04 val 1000 [ 133.149975][ T5845] pwc: recv_control_msg error -71 req 04 val 1300 [ 133.158179][ T5845] pwc: recv_control_msg error -71 req 04 val 1400 [ 133.158762][ T5845] pwc: recv_control_msg error -71 req 02 val 2000 [ 133.159293][ T5845] pwc: recv_control_msg error -71 req 02 val 2100 [ 133.159846][ T5845] pwc: recv_control_msg error -71 req 04 val 1500 [ 133.160391][ T5845] pwc: recv_control_msg error -71 req 02 val 2500 [ 133.163543][ T5845] pwc: recv_control_msg error -71 req 02 val 2400 [ 133.164120][ T5845] pwc: recv_control_msg error -71 req 02 val 2600 [ 133.167012][ T5845] pwc: recv_control_msg error -71 req 02 val 2900 [ 133.172350][ T5845] pwc: recv_control_msg error -71 req 02 val 2800 [ 133.177652][ T5845] pwc: recv_control_msg error -71 req 04 val 1100 [ 133.182360][ T5845] pwc: recv_control_msg error -71 req 04 val 1200 [ 133.212647][ T5845] pwc: Registered as video103. [ 133.240901][ T6334] overlayfs: missing 'lowerdir' [ 133.253108][ T5845] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input10 [ 133.287722][ T5845] usb 4-1: USB disconnect, device number 5 [ 133.672924][ T31] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 133.838727][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 133.841283][ T31] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.841314][ T31] usb 5-1: config 0 interface 0 has no altsetting 0 [ 133.841349][ T31] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 133.841372][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.888878][ T31] usb 5-1: config 0 descriptor?? [ 133.920570][ T6352] netlink: 'syz.3.155': attribute type 1 has an invalid length. [ 133.920797][ T6352] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 133.920948][ T6352] IPv6: NLM_F_CREATE should be set when creating new route [ 133.920985][ T6352] IPv6: NLM_F_CREATE should be set when creating new route [ 133.952625][ T6352] netlink: 'syz.3.155': attribute type 1 has an invalid length. [ 133.952696][ T6352] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 134.316525][ T31] hid (null): report_id 55783 is invalid [ 134.364157][ T31] cougar 0003:060B:500A.0005: usage count exceeds max: fixing up report descriptor [ 134.365532][ T31] cougar 0003:060B:500A.0005: unexpected long global item [ 134.366485][ T31] cougar 0003:060B:500A.0005: parse failed [ 134.366630][ T31] cougar 0003:060B:500A.0005: probe with driver cougar failed with error -22 [ 134.527540][ T5907] usb 5-1: USB disconnect, device number 5 [ 134.563583][ T5945] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 134.720389][ T5945] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 134.720421][ T5945] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 134.720442][ T5945] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 134.720463][ T5945] usb 3-1: config 220 has no interface number 2 [ 134.720542][ T5945] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 134.720570][ T5945] usb 3-1: config 220 interface 0 has no altsetting 0 [ 134.720588][ T5945] usb 3-1: config 220 interface 76 has no altsetting 0 [ 134.720607][ T5945] usb 3-1: config 220 interface 1 has no altsetting 0 [ 134.729411][ T5945] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 134.729443][ T5945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.729463][ T5945] usb 3-1: Product: syz [ 134.729477][ T5945] usb 3-1: Manufacturer: syz [ 134.729491][ T5945] usb 3-1: SerialNumber: syz [ 135.031073][ T5945] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 135.031127][ T5945] usb 3-1: No valid video chain found. [ 135.031213][ T5945] usb 3-1: selecting invalid altsetting 0 [ 135.097970][ T5945] usb 3-1: selecting invalid altsetting 0 [ 135.098013][ T5945] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 135.162620][ T5945] usb 3-1: USB disconnect, device number 5 [ 135.522369][ T5907] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 135.522571][ T31] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 135.675011][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 135.695137][ T5907] usb 5-1: config 0 has an invalid interface number: 102 but max is 0 [ 135.695166][ T5907] usb 5-1: config 0 has no interface number 0 [ 135.695281][ T5907] usb 5-1: New USB device found, idVendor=2001, idProduct=1a00, bcdDevice=38.f5 [ 135.695304][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.735565][ T31] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 135.735592][ T31] usb 4-1: config 0 has no interface number 0 [ 135.760832][ T5907] usb 5-1: config 0 descriptor?? [ 135.777755][ T31] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 135.777856][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.777879][ T31] usb 4-1: Product: syz [ 135.777899][ T31] usb 4-1: Manufacturer: syz [ 135.777913][ T31] usb 4-1: SerialNumber: syz [ 135.820041][ T31] usb 4-1: config 0 descriptor?? [ 135.841887][ T31] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 136.078903][ T31] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 136.119626][ T31] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 136.269469][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - xmit_empty message too short [ 136.475645][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 136.477311][ T5899] usb 4-1: USB disconnect, device number 6 [ 136.503644][ T5899] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 136.516705][ T5899] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 136.517754][ T5899] quatech2 4-1:0.51: device disconnected [ 136.604608][ T5907] asix 5-1:0.102 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 136.604642][ T5907] asix 5-1:0.102 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 136.605321][ T5907] asix 5-1:0.102: probe with driver asix failed with error -71 [ 136.649511][ T5907] usb 5-1: USB disconnect, device number 6 [ 137.040846][ T6419] syzkaller1: entered promiscuous mode [ 137.040877][ T6419] syzkaller1: entered allmulticast mode [ 137.108782][ T6421] ======================================================= [ 137.108782][ T6421] WARNING: The mand mount option has been deprecated and [ 137.108782][ T6421] and is ignored by this kernel. Remove the mand [ 137.108782][ T6421] option from the mount to silence this warning. [ 137.108782][ T6421] ======================================================= [ 137.223791][ T6024] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 137.402258][ T6024] usb 2-1: Using ep0 maxpacket: 16 [ 137.422266][ T6024] usb 2-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 137.422297][ T6024] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.422319][ T6024] usb 2-1: Product: syz [ 137.422334][ T6024] usb 2-1: Manufacturer: syz [ 137.422350][ T6024] usb 2-1: SerialNumber: syz [ 137.481118][ T6024] usb 2-1: config 0 descriptor?? [ 137.490253][ T6024] ums-onetouch 2-1:0.0: USB Mass Storage device detected [ 137.726113][ T6437] Bluetooth: MGMT ver 1.23 [ 137.737107][ T5899] usb 2-1: USB disconnect, device number 4 [ 137.912112][ T6441] syzkaller1: entered promiscuous mode [ 137.912141][ T6441] syzkaller1: entered allmulticast mode [ 138.328291][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.328379][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.472371][ T6453] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.483241][ T6453] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.199133][ T6453] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.201966][ T6453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.206231][ T6453] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.206432][ T6453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.503173][ T6453] team0: Port device bridge0 added [ 139.916361][ T6469] Context (ID=0x0) not attached to queue pair (handle=0x0:0x9) [ 142.222163][ T31] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 142.273161][ T6507] netlink: 8 bytes leftover after parsing attributes in process `syz.3.218'. [ 142.392258][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 142.394948][ T31] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 142.394976][ T31] usb 2-1: config 0 has no interface number 0 [ 142.399197][ T31] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 142.399228][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.399259][ T31] usb 2-1: Product: syz [ 142.399274][ T31] usb 2-1: Manufacturer: syz [ 142.399289][ T31] usb 2-1: SerialNumber: syz [ 142.467457][ T31] usb 2-1: config 0 descriptor?? [ 142.480441][ T31] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 142.649156][ T6518] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 142.729922][ T31] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 142.742705][ T5907] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 142.773686][ T31] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 142.914105][ T5907] usb 4-1: Using ep0 maxpacket: 16 [ 142.919027][ T5907] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 142.919057][ T5907] usb 4-1: config 0 has no interface number 0 [ 142.919181][ T5907] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 142.919207][ T5907] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 142.919232][ T5907] usb 4-1: config 0 interface 41 has no altsetting 0 [ 142.949298][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - port change to invalid port: 210 [ 142.984131][ T5907] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 142.984223][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.984244][ T5907] usb 4-1: Product: syz [ 142.984259][ T5907] usb 4-1: Manufacturer: syz [ 142.984274][ T5907] usb 4-1: SerialNumber: syz [ 143.036260][ T5907] usb 4-1: config 0 descriptor?? [ 143.045104][ T6515] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 143.045259][ T6515] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 143.152471][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 143.156644][ T9] usb 2-1: USB disconnect, device number 5 [ 143.193391][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 143.222334][ T5899] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 143.266282][ T6515] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 143.266433][ T6515] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 143.316848][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 143.317661][ T9] quatech2 2-1:0.51: device disconnected [ 143.372147][ T5899] usb 1-1: Using ep0 maxpacket: 32 [ 143.378727][ T5899] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.378760][ T5899] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.378801][ T5899] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 143.378825][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.416348][ T5899] usb 1-1: config 0 descriptor?? [ 143.680054][ T5907] Error reading MAC address [ 143.692726][ T6515] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 143.697249][ T6515] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 143.931078][ T5907] sr9700 4-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 143.943781][ T5899] savu 0003:1E7D:2D5A.0006: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 143.952844][ T5907] usb 4-1: USB disconnect, device number 7 [ 144.651565][ T31] usb 1-1: USB disconnect, device number 7 [ 146.151217][ T6553] capability: warning: `syz.2.235' uses deprecated v2 capabilities in a way that may be insecure [ 146.182079][ T38] audit: type=1400 audit(1755985087.970:9): lsm=SMACK fn=smack_inode_set_acl action=denied subject="w" object="_" requested=w pid=6545 comm="syz.2.235" name="45" dev="tmpfs" ino=239 [ 146.763304][ T6567] ptrace attach of "./syz-executor exec"[5840] was attempted by ""[6567] [ 147.548877][ T6585] pim6reg1: entered promiscuous mode [ 147.548910][ T6585] pim6reg1: entered allmulticast mode [ 147.802293][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 147.912566][ T31] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 147.968626][ T9] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 147.968689][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.970274][ T9] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 147.970303][ T9] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 147.970323][ T9] usb 2-1: Manufacturer: syz [ 148.003254][ T9] usb 2-1: config 0 descriptor?? [ 148.064812][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.064847][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.064870][ T31] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 148.064916][ T31] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 148.064939][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.071311][ T31] usb 5-1: config 0 descriptor?? [ 148.198993][ T9] rc_core: IR keymap rc-hauppauge not found [ 148.199017][ T9] Registered IR keymap rc-empty [ 148.209732][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 148.244545][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input11 [ 148.261418][ C0] igorplugusb 2-1:0.0: Error: urb status = -32 [ 148.337673][ T9] usb 2-1: USB disconnect, device number 6 [ 148.539911][ T31] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 148.600267][ T31] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 148.872557][ T5945] usb 5-1: USB disconnect, device number 7 [ 149.089558][ T6615] loop9: detected capacity change from 0 to 7 [ 149.137065][ T6618] Driver unsupported XDP return value 0 on prog (id 22) dev N/A, expect packet loss! [ 150.444460][ T6647] block nbd3: shutting down sockets [ 151.571185][ T5945] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 151.962968][ T5945] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 151.963319][ T5945] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.083401][ C1] vkms_vblank_simulate: vblank timer overrun [ 152.141995][ T5945] usb 4-1: config 0 descriptor?? [ 152.168417][ T5945] cp210x 4-1:0.0: cp210x converter detected [ 152.309750][ C1] vkms_vblank_simulate: vblank timer overrun [ 152.709935][ T5945] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 152.760107][ T5945] usb 4-1: cp210x converter now attached to ttyUSB0 [ 152.850303][ T6681] [ 152.850316][ T6681] ====================================================== [ 152.850325][ T6681] WARNING: possible circular locking dependency detected [ 152.850344][ T6681] syzkaller #0 Not tainted [ 152.850355][ T6681] ------------------------------------------------------ [ 152.850363][ T6681] syz.1.292/6681 is trying to acquire lock: [ 152.850376][ T6681] ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 152.850453][ T6681] [ 152.850453][ T6681] but task is already holding lock: [ 152.850461][ T6681] ffffffff8efa6548 (smc_v4_hashinfo.lock){++.+}-{3:3}, at: smc_diag_dump_proto+0x174/0x1fb0 [ 152.850511][ T6681] [ 152.850511][ T6681] which lock already depends on the new lock. [ 152.850511][ T6681] [ 152.850518][ T6681] [ 152.850518][ T6681] the existing dependency chain (in reverse order) is: [ 152.850526][ T6681] [ 152.850526][ T6681] -> #1 (smc_v4_hashinfo.lock){++.+}-{3:3}: [ 152.850553][ T6681] lock_acquire+0x120/0x360 [ 152.850579][ T6681] rt_write_lock+0x6a/0x110 [ 152.850599][ T6681] smc_hash_sk+0x8f/0x2a0 [ 152.850617][ T6681] smc_sk_init+0x5a1/0x7f0 [ 152.850636][ T6681] smc_inet_init_sock+0x4e/0xb0 [ 152.850656][ T6681] inet_create+0xd13/0x1010 [ 152.850676][ T6681] __sock_create+0x4b3/0x9f0 [ 152.850697][ T6681] __sys_socket+0xd7/0x1b0 [ 152.850716][ T6681] __x64_sys_socket+0x7a/0x90 [ 152.850737][ T6681] do_syscall_64+0xfa/0x3b0 [ 152.850763][ T6681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.850782][ T6681] [ 152.850782][ T6681] -> #0 ((softirq_ctrl.lock)){+.+.}-{3:3}: [ 152.850809][ T6681] validate_chain+0xb9b/0x2140 [ 152.850838][ T6681] __lock_acquire+0xab9/0xd20 [ 152.850862][ T6681] reacquire_held_locks+0x127/0x1d0 [ 152.850902][ T6681] lock_release+0x1b4/0x3e0 [ 152.850928][ T6681] __local_bh_enable_ip+0x10c/0x270 [ 152.850952][ T6681] sock_i_ino+0xa9/0xc0 [ 152.850980][ T6681] smc_diag_dump_proto+0xa4c/0x1fb0 [ 152.851002][ T6681] smc_diag_dump+0x27/0xa0 [ 152.851022][ T6681] netlink_dump+0x6e4/0xe90 [ 152.851043][ T6681] __netlink_dump_start+0x5cb/0x7e0 [ 152.851063][ T6681] smc_diag_handler_dump+0x178/0x210 [ 152.851084][ T6681] sock_diag_rcv_msg+0x4c9/0x600 [ 152.851104][ T6681] netlink_rcv_skb+0x205/0x470 [ 152.851126][ T6681] netlink_unicast+0x843/0xa10 [ 152.851144][ T6681] netlink_sendmsg+0x805/0xb30 [ 152.851173][ T6681] __sock_sendmsg+0x219/0x270 [ 152.851197][ T6681] ____sys_sendmsg+0x508/0x820 [ 152.851223][ T6681] ___sys_sendmsg+0x21f/0x2a0 [ 152.851247][ T6681] __x64_sys_sendmsg+0x1a1/0x260 [ 152.851275][ T6681] do_syscall_64+0xfa/0x3b0 [ 152.851299][ T6681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.851317][ T6681] [ 152.851317][ T6681] other info that might help us debug this: [ 152.851317][ T6681] [ 152.851323][ T6681] Possible unsafe locking scenario: [ 152.851323][ T6681] [ 152.851329][ T6681] CPU0 CPU1 [ 152.851334][ T6681] ---- ---- [ 152.851340][ T6681] rlock(smc_v4_hashinfo.lock); [ 152.851355][ T6681] lock((softirq_ctrl.lock)); [ 152.851370][ T6681] lock(smc_v4_hashinfo.lock); [ 152.851386][ T6681] lock((softirq_ctrl.lock)); [ 152.851399][ T6681] [ 152.851399][ T6681] *** DEADLOCK *** [ 152.851399][ T6681] [ 152.851404][ T6681] 3 locks held by syz.1.292/6681: [ 152.851416][ T6681] #0: ffff8880380c6908 (nlk_cb_mutex-SOCK_DIAG){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 152.851465][ T6681] #1: ffffffff8efa6548 (smc_v4_hashinfo.lock){++.+}-{3:3}, at: smc_diag_dump_proto+0x174/0x1fb0 [ 152.851517][ T6681] #2: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: rt_read_lock+0x1f8/0x360 [ 152.851565][ T6681] [ 152.851565][ T6681] stack backtrace: [ 152.851594][ T6681] CPU: 0 UID: 0 PID: 6681 Comm: syz.1.292 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 152.851615][ T6681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 152.851633][ T6681] Call Trace: [ 152.851641][ T6681] [ 152.851649][ T6681] dump_stack_lvl+0x189/0x250 [ 152.851681][ T6681] ? __pfx_dump_stack_lvl+0x10/0x10 [ 152.851716][ T6681] ? __pfx__printk+0x10/0x10 [ 152.851738][ T6681] ? print_lock_name+0xde/0x100 [ 152.851760][ T6681] print_circular_bug+0x2ee/0x310 [ 152.851782][ T6681] check_noncircular+0x134/0x160 [ 152.851817][ T6681] validate_chain+0xb9b/0x2140 [ 152.851849][ T6681] ? validate_chain+0x897/0x2140 [ 152.851891][ T6681] __lock_acquire+0xab9/0xd20 [ 152.851922][ T6681] reacquire_held_locks+0x127/0x1d0 [ 152.851952][ T6681] ? __local_bh_disable_ip+0x264/0x400 [ 152.851979][ T6681] lock_release+0x1b4/0x3e0 [ 152.852005][ T6681] ? __local_bh_enable_ip+0x100/0x270 [ 152.852031][ T6681] __local_bh_enable_ip+0x10c/0x270 [ 152.852057][ T6681] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 152.852087][ T6681] ? rt_read_unlock+0x65/0xa0 [ 152.852110][ T6681] ? sock_i_ino+0x24/0xc0 [ 152.852142][ T6681] sock_i_ino+0xa9/0xc0 [ 152.852182][ T6681] smc_diag_dump_proto+0xa4c/0x1fb0 [ 152.852215][ T6681] ? __pfx_smc_diag_dump_proto+0x10/0x10 [ 152.852238][ T6681] ? __lruvec_stat_mod_folio+0x79/0x2f0 [ 152.852270][ T6681] ? __lruvec_stat_mod_folio+0x79/0x2f0 [ 152.852301][ T6681] ? __phys_addr+0xd3/0x180 [ 152.852328][ T6681] ? __kasan_kmalloc_large+0x85/0xa0 [ 152.852353][ T6681] ? rcu_is_watching+0x15/0xb0 [ 152.852382][ T6681] ? rcu_is_watching+0x15/0xb0 [ 152.852409][ T6681] ? trace_kmalloc+0x1f/0xd0 [ 152.852434][ T6681] ? __kmalloc_node_track_caller_noprof+0x213/0x450 [ 152.852469][ T6681] ? __build_skb_around+0x257/0x3e0 [ 152.852499][ T6681] smc_diag_dump+0x27/0xa0 [ 152.852522][ T6681] netlink_dump+0x6e4/0xe90 [ 152.852551][ T6681] ? __pfx_netlink_dump+0x10/0x10 [ 152.852573][ T6681] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 152.852600][ T6681] ? lockdep_hardirqs_on+0x9c/0x150 [ 152.852639][ T6681] __netlink_dump_start+0x5cb/0x7e0 [ 152.852667][ T6681] smc_diag_handler_dump+0x178/0x210 [ 152.852692][ T6681] ? __pfx_smc_diag_handler_dump+0x10/0x10 [ 152.852716][ T6681] ? __pfx_smc_diag_dump+0x10/0x10 [ 152.852740][ T6681] ? sock_diag_lock_handler+0x19/0x290 [ 152.852763][ T6681] ? sock_diag_lock_handler+0x19/0x290 [ 152.852788][ T6681] sock_diag_rcv_msg+0x4c9/0x600 [ 152.852814][ T6681] netlink_rcv_skb+0x205/0x470 [ 152.852837][ T6681] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 152.852861][ T6681] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 152.852890][ T6681] ? netlink_deliver_tap+0x2e/0x1b0 [ 152.852919][ T6681] netlink_unicast+0x843/0xa10 [ 152.852945][ T6681] ? __pfx_netlink_unicast+0x10/0x10 [ 152.852967][ T6681] ? netlink_sendmsg+0x642/0xb30 [ 152.852990][ T6681] ? skb_put+0x11b/0x210 [ 152.853019][ T6681] netlink_sendmsg+0x805/0xb30 [ 152.853048][ T6681] ? __pfx_netlink_sendmsg+0x10/0x10 [ 152.853077][ T6681] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 152.853097][ T6681] ? __pfx_netlink_sendmsg+0x10/0x10 [ 152.853123][ T6681] __sock_sendmsg+0x219/0x270 [ 152.853146][ T6681] ____sys_sendmsg+0x508/0x820 [ 152.853184][ T6681] ? __pfx_____sys_sendmsg+0x10/0x10 [ 152.853215][ T6681] ? import_iovec+0x74/0xa0 [ 152.853236][ T6681] ___sys_sendmsg+0x21f/0x2a0 [ 152.853263][ T6681] ? __pfx____sys_sendmsg+0x10/0x10 [ 152.853305][ T6681] ? __fget_files+0x2a/0x420 [ 152.853331][ T6681] ? __fget_files+0x3a6/0x420 [ 152.853362][ T6681] __x64_sys_sendmsg+0x1a1/0x260 [ 152.853389][ T6681] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 152.853419][ T6681] ? rcu_is_watching+0x15/0xb0 [ 152.853455][ T6681] ? do_syscall_64+0xbe/0x3b0 [ 152.853485][ T6681] do_syscall_64+0xfa/0x3b0 [ 152.853512][ T6681] ? lockdep_hardirqs_on+0x9c/0x150 [ 152.853537][ T6681] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.853557][ T6681] ? clear_bhb_loop+0x60/0xb0 [ 152.853580][ T6681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.853601][ T6681] RIP: 0033:0x7f23bb5eebe9 [ 152.853626][ T6681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.853643][ T6681] RSP: 002b:00007f23b9856038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 152.853664][ T6681] RAX: ffffffffffffffda RBX: 00007f23bb815fa0 RCX: 00007f23bb5eebe9 [ 152.853678][ T6681] RDX: 0000000000000600 RSI: 0000200000000540 RDI: 0000000000000004 [ 152.853691][ T6681] RBP: 00007f23bb671e19 R08: 0000000000000000 R09: 0000000000000000 [ 152.853703][ T6681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.853715][ T6681] R13: 00007f23bb816038 R14: 00007f23bb815fa0 R15: 00007ffd305217b8 [ 152.853737][ T6681] [ 152.918416][ T5945] usb 4-1: USB disconnect, device number 8 [ 152.921610][ T5945] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 153.036389][ T5945] cp210x 4-1:0.0: device disconnected [ 153.300021][ T6677] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 153.300128][ T6677] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 153.366558][ T6677] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 153.443744][ T6677] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 153.443839][ T6677] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 153.525729][ T6677] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 153.655043][ T6677] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 153.655131][ T6677] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 153.735832][ T6677] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 153.836114][ T6677] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 153.837196][ T6677] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 153.912704][ T6677] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 153.972763][ T6677] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 153.972832][ T6677] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 154.047412][ T6677] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 155.362153][ T59] Bluetooth: hci1: command 0x0c1a tx timeout [ 155.512258][ T59] Bluetooth: hci0: command 0x0c1a tx timeout [ 155.672267][ T59] Bluetooth: hci2: command 0x0c1a tx timeout [ 155.912170][ T59] Bluetooth: hci3: command 0x0c1a tx timeout [ 155.992166][ T59] Bluetooth: hci4: command 0x0405 tx timeout [ 157.442128][ T59] Bluetooth: hci1: command 0x0c1a tx timeout [ 157.592176][ T59] Bluetooth: hci0: command 0x0c1a tx timeout [ 157.752465][ T59] Bluetooth: hci2: command 0x0c1a tx timeout [ 157.992189][ T59] Bluetooth: hci3: command 0x0c1a tx timeout [ 158.072146][ T59] Bluetooth: hci4: command 0x0405 tx timeout [ 159.512165][ T59] Bluetooth: hci1: command 0x0c1a tx timeout [ 159.672185][ T59] Bluetooth: hci0: command 0x0c1a tx timeout [ 159.842541][ T59] Bluetooth: hci2: command 0x0c1a tx timeout [ 160.072416][ T59] Bluetooth: hci3: command 0x0c1a tx timeout [ 160.152194][ T59] Bluetooth: hci4: command 0x0405 tx timeout