last executing test programs: 6.458929516s ago: executing program 1 (id=2947): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x501, 0x10008095, 0x0, 0x0) 6.425707978s ago: executing program 2 (id=2948): shutdown(0xffffffffffffffff, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x3db66e6159adff3, 0x10100, 0x0) 6.325139122s ago: executing program 3 (id=2950): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200002000000000000000008500000041"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) 6.323581152s ago: executing program 1 (id=2951): socket$inet(0xa, 0x801, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$netlink(0x10, 0x3, 0xf) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) socket$inet_sctp(0x2, 0x1, 0x84) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xfe0f, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 6.215424167s ago: executing program 2 (id=2952): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x900, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x401}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56f41, 0x1070b923, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffe0, 0xb}, {0xd, 0xd}}}, 0x24}}, 0x4008800) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 6.030996175s ago: executing program 1 (id=2954): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x2) r5 = syz_genetlink_get_family_id$mptcp(0x0, r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYRES16=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2d, r6}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3086}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 5.43593842s ago: executing program 0 (id=2958): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[], 0x50) unshare(0x20000400) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xffffffc1) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000880)={@map, 0xffffffffffffffff, 0x15, 0x4006}, 0x20) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000008c0), 0x0, 0x408c0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 5.393864762s ago: executing program 0 (id=2959): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000013c0)=0xc) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8d, 0xc}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000000340)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x0) 3.268139952s ago: executing program 3 (id=2960): shutdown(0xffffffffffffffff, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x3db66e6159adff3, 0x10100, 0x0) 3.227132433s ago: executing program 1 (id=2961): sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x35c, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6}}}}, [@NL80211_ATTR_TX_RATES={0x68, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x1b, 0xc, 0xc, 0x0, 0x48, 0x6c, 0x16, 0x4, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1000, 0x4, 0x2, 0x8001, 0x9, 0x3, 0x77]}}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x0, 0x1, 0x85d0, 0x8000, 0x3, 0x80, 0x8]}}]}]}, @NL80211_ATTR_TX_RATES={0x2ac, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x5cc4, 0x7, 0x5, 0x7ff, 0xbb, 0x10, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x5, 0x8, 0x1, 0x81, 0x9, 0x7, 0x8]}}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0xb21, 0xfff4, 0x101, 0xa414, 0x40, 0x9, 0x2]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x1, 0x60, 0x6c, 0xc, 0x2c, 0x4, 0x36, 0x24, 0x1b, 0x18, 0x60, 0xc, 0x30, 0x60, 0xb, 0x30, 0x5]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x9, 0xfffc, 0x401, 0x8, 0x1, 0x100, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x200, 0x3, 0x0, 0x5, 0xff, 0x43, 0x7]}}]}, @NL80211_BAND_2GHZ={0x98, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7, 0x1, 0xb, 0x76, 0x3, 0x1000, 0x37]}}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x4, 0x7}, {0x3, 0x8}, {0x0, 0x9}, {0x1, 0x3}, {0x3, 0x7}, {0x7, 0x4}, {0x4, 0x9}, {0x3, 0xa}, {0x4, 0x1}, {0x1, 0x1}, {0x6, 0x4}, {0x1, 0x6}, {0x1}, {}, {0x7, 0x8}, {0x1, 0x9}, {0x0, 0x8}, {0x1, 0x7}, {0x3}, {0x0, 0x8}, {0x7, 0xa}, {0x0, 0x1}, {0x7, 0x2}, {0x2, 0x7}, {0x2, 0x7}, {0x7, 0x5}, {0x5, 0x9}, {0x5, 0x1}, {0x2, 0xa}, {0x1, 0x3}, {0x7, 0x3}, {0x3, 0x1}, {0x4, 0xa}, {0x1, 0x3}, {0x4, 0x3}, {0x1, 0x6}, {0x4, 0x3}, {0x1, 0x5}, {0x3, 0x5}, {0x6, 0x2}, {0x4, 0x6}, {0x1, 0x8}, {0x6, 0xa}, {0x4, 0x7}, {0x7, 0xa}, {0x2, 0x3}, {0x1, 0x8}, {0x4, 0x3}, {0x1, 0x1}, {0x6, 0x1}, {0x2, 0xa}, {0x4, 0x6}, {0x2, 0x5}, {0x2, 0x6}, {0x1, 0x6}, {0x4, 0x6}, {0x0, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x5, 0x2}, {0x5, 0x9}, {0x1, 0x2}, {0x0, 0xa}, {0x2, 0x4}, {0x3, 0x2}, {0x2, 0x8}, {0x2, 0x4}, {0x4, 0x2}, {0x1, 0x7}, {0x5, 0x1}, {0x1, 0x7}, {0x4, 0x6}, {0x0, 0x4}, {0x5, 0x6}, {0x5, 0xf}, {0x1, 0x3}, {0x1, 0x6}, {0x1, 0x7}, {0x4, 0xa}, {0x7, 0x3}, {0x1, 0x9}, {0x1, 0x9}, {0x2, 0x2}, {0x6, 0x5}, {}, {0x5, 0x6}, {0x7, 0x9}, {0x1, 0x4}, {0x5}, {0x2, 0x6}, {0x4, 0x5}, {0x0, 0xa}]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0xc, 0x2, 0x18, 0x4d, 0x9, 0xb, 0x5, 0x36, 0x1]}]}, @NL80211_BAND_6GHZ={0xa8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x8000, 0xfff, 0xa, 0x401, 0x1b89, 0x2, 0xffff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x0, 0x7, 0x91ce, 0x9dd, 0x5, 0x8, 0x60]}}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x5, 0x6}, {0x2, 0x4}, {0x0, 0x4}, {0x0, 0x8}, {0x2, 0x7}, {0x2, 0x4}, {0x5}, {0x2, 0x9}, {0x7}, {0x0, 0x6}, {0x0, 0xa}, {0x6, 0x7}, {0x3, 0x4}, {0x1, 0x7}, {0x1, 0xa}, {0x7}, {0x4, 0x6}, {0x2, 0x2}, {0x3, 0x6}, {0x2, 0xa}, {0x3, 0x7}, {0x6, 0x1}, {0x1, 0xa}, {0x0, 0x5}, {0x1, 0xa}, {0x6, 0x1}, {0x0, 0x3}, {0x2, 0x6}, {0x6, 0x9}, {0x0, 0x4}, {0x3, 0x1}, {0x4, 0x3}, {0x0, 0x2}, {0x2, 0x7}, {0x0, 0x8}, {0x1, 0x9}, {0x4, 0x3}, {0x4, 0x8}, {0x6, 0x8}, {0x0, 0xa}, {0x0, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xdb78, 0x4, 0x9, 0xf272, 0x1, 0x4, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x40, 0x1000, 0xdcd, 0x9, 0x8, 0x10]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x8, 0x7, 0xf9, 0x76a, 0xb, 0xfffc, 0x5]}}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x3, 0x4}, {0x5, 0x4}, {0x7, 0x4}, {0x5, 0x8}, {0x3, 0x8}, {0x2, 0x5}, {0x0, 0x2}, {0x5, 0x8}, {0x7, 0x8}]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x76, 0x5, 0xe, 0x240e, 0x101, 0x5, 0x4, 0x10]}}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x4}, {0x6, 0x9}, {0x0, 0x8}, {0x1, 0x8}, {0x5, 0x8}, {0x0, 0xa}, {0x6, 0x6}, {0x1, 0x6}, {0x6}, {0x1}, {0x1, 0x6}, {0x6, 0x4}, {0x4, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb88, 0x9767, 0xfff3, 0x6000, 0x6, 0x2, 0x8, 0xff82]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfc01, 0x1, 0x0, 0x4, 0x5, 0x5, 0xff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x5, 0x1, 0x0, 0xd74, 0x1, 0x81, 0x91ca]}}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x3, 0x5}, {0x1, 0x4}, {0x4, 0x3}, {0x7, 0xa}, {0x3, 0x3}, {0x0, 0x4}, {0x3, 0x3}, {0x3}, {0x4, 0x5}, {0x1, 0xa}, {0x3, 0x6}, {0x0, 0xa}, {0x3, 0x8}, {0x4, 0x3}, {0x4, 0xa}, {0x7, 0x15}, {0x1, 0x3}, {0x4, 0x6}, {0x1, 0xa}, {0x4, 0x1}, {0x3, 0x3}, {0x7, 0x5}, {0x6, 0xa}, {0x1, 0x1c}, {0x1, 0x5}, {0x0, 0x8}, {0x2}, {0x5, 0x3}, {0x0, 0x2}, {0x6, 0xa}, {0x0, 0x5}, {0x1, 0x3}, {0x0, 0xa}, {0x3, 0x9}, {0x3, 0x8}, {0x0, 0x4}, {0x5, 0xa}, {0x2, 0x2}, {0x7, 0x1}, {0x4, 0x8}, {0x3, 0x6}, {0x7, 0xa}, {0x3, 0x5}, {0x5, 0x6}, {0x4, 0xa}, {0x4, 0x7}, {0x0, 0x8}, {0x2, 0x5}, {0x6, 0x6}, {0x5, 0x3}, {0x5, 0x2}, {0x0, 0x9}]}]}]}, @NL80211_ATTR_TX_RATES={0x28, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1, 0x0, 0x6, 0x1, 0x6, 0x5, 0xc]}}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}]}]}, 0x35c}, 0x1, 0x0, 0x0, 0x4000001}, 0x10000000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYBLOB='\n\x00:'], 0x74}}, 0x0) 3.087650519s ago: executing program 3 (id=2962): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20040810) 3.06155657s ago: executing program 2 (id=2963): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x20040084) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@delqdisc={0x24, 0x25, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0x1, 0xfff1}, {0x0, 0xfff5}}}, 0x24}, 0x1, 0x0, 0x0, 0x20001005}, 0x20040080) 3.005050912s ago: executing program 0 (id=2964): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, @dev={0xfe, 0x80, '\x00', 0x29}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x8000, 0xfffffffc}}) 2.974414864s ago: executing program 3 (id=2965): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)) socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r0], 0x3c}}, 0x10) 2.946378615s ago: executing program 1 (id=2966): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000002ac0)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a40)={0x28, 0x140d, 0x1, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}]}, 0x28}}, 0x80) 2.82465068s ago: executing program 3 (id=2967): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[], 0x50) unshare(0x20000400) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xffffffc1) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000880)={@map, 0xffffffffffffffff, 0x15, 0x4006}, 0x20) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000008c0), 0x0, 0x408c0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 2.8235384s ago: executing program 2 (id=2968): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) socket$kcm(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x6c000, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x20040084) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x22000810) writev(r0, &(0x7f0000000240)=[{&(0x7f0000002740)="1e", 0xfdef}], 0x1) 2.679604247s ago: executing program 1 (id=2969): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200002000000000000000008500000041"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) 2.657790027s ago: executing program 0 (id=2970): shutdown(0xffffffffffffffff, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x3db66e6159adff3, 0x10100, 0x0) 2.500901914s ago: executing program 3 (id=2971): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x900, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x401}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56f41, 0x1070b923, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffe0, 0xb}, {0xd, 0xd}}}, 0x24}}, 0x4008800) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.451556026s ago: executing program 0 (id=2972): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000007, 0x42032, 0xffffffffffffffff, 0x100000000) r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x16, 0x0, 0x0) setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) connect$bt_l2cap(r1, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000280)={r1, r1, 0x1, 0x0, 0x0, 0x9, 0xcb, 0x16bf, 0x5505, 0xc3b8, 0x1, 0x0, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 2.209938456s ago: executing program 0 (id=2973): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000013c0)=0xc) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8d, 0xc}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000000340)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x0) 54.492297ms ago: executing program 2 (id=2974): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000003d40)}, 0x20040810) 0s ago: executing program 2 (id=2975): sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x35c, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6}}}}, [@NL80211_ATTR_TX_RATES={0x68, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x1b, 0xc, 0xc, 0x0, 0x48, 0x6c, 0x16, 0x4, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1000, 0x4, 0x2, 0x8001, 0x9, 0x3, 0x77]}}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x0, 0x1, 0x85d0, 0x8000, 0x3, 0x80, 0x8]}}]}]}, @NL80211_ATTR_TX_RATES={0x2ac, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x5cc4, 0x7, 0x5, 0x7ff, 0xbb, 0x10, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x5, 0x8, 0x1, 0x81, 0x9, 0x7, 0x8]}}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0xb21, 0xfff4, 0x101, 0xa414, 0x40, 0x9, 0x2]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x1, 0x60, 0x6c, 0xc, 0x2c, 0x4, 0x36, 0x24, 0x1b, 0x18, 0x60, 0xc, 0x30, 0x60, 0xb, 0x30, 0x5]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x9, 0xfffc, 0x401, 0x8, 0x1, 0x100, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x200, 0x3, 0x0, 0x5, 0xff, 0x43, 0x7]}}]}, @NL80211_BAND_2GHZ={0x98, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7, 0x1, 0xb, 0x76, 0x3, 0x1000, 0x37]}}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x4, 0x7}, {0x3, 0x8}, {0x0, 0x9}, {0x1, 0x3}, {0x3, 0x7}, {0x7, 0x4}, {0x4, 0x9}, {0x3, 0xa}, {0x4, 0x1}, {0x1, 0x1}, {0x6, 0x4}, {0x1, 0x6}, {0x1}, {}, {0x7, 0x8}, {0x1, 0x9}, {0x0, 0x8}, {0x1, 0x7}, {0x3}, {0x0, 0x8}, {0x7, 0xa}, {0x0, 0x1}, {0x7, 0x2}, {0x2, 0x7}, {0x2, 0x7}, {0x7, 0x5}, {0x5, 0x9}, {0x5, 0x1}, {0x2, 0xa}, {0x1, 0x3}, {0x7, 0x3}, {0x3, 0x1}, {0x4, 0xa}, {0x1, 0x3}, {0x4, 0x3}, {0x1, 0x6}, {0x4, 0x3}, {0x1, 0x5}, {0x3, 0x5}, {0x6, 0x2}, {0x4, 0x6}, {0x1, 0x8}, {0x6, 0xa}, {0x4, 0x7}, {0x7, 0xa}, {0x2, 0x3}, {0x1, 0x8}, {0x4, 0x3}, {0x1, 0x1}, {0x6, 0x1}, {0x2, 0xa}, {0x4, 0x6}, {0x2, 0x5}, {0x2, 0x6}, {0x1, 0x6}, {0x4, 0x6}, {0x0, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x5, 0x2}, {0x5, 0x9}, {0x1, 0x2}, {0x0, 0xa}, {0x2, 0x4}, {0x3, 0x2}, {0x2, 0x8}, {0x2, 0x4}, {0x4, 0x2}, {0x1, 0x7}, {0x5, 0x1}, {0x1, 0x7}, {0x4, 0x6}, {0x0, 0x4}, {0x5, 0x6}, {0x5, 0xf}, {0x1, 0x3}, {0x1, 0x6}, {0x1, 0x7}, {0x4, 0xa}, {0x7, 0x3}, {0x1, 0x9}, {0x1, 0x9}, {0x2, 0x2}, {0x6, 0x5}, {}, {0x5, 0x6}, {0x7, 0x9}, {0x1, 0x4}, {0x5}, {0x2, 0x6}, {0x4, 0x5}, {0x0, 0xa}]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0xc, 0x2, 0x18, 0x4d, 0x9, 0xb, 0x5, 0x36, 0x1]}]}, @NL80211_BAND_6GHZ={0xa8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x8000, 0xfff, 0xa, 0x401, 0x1b89, 0x2, 0xffff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x0, 0x7, 0x91ce, 0x9dd, 0x5, 0x8, 0x60]}}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x5, 0x6}, {0x2, 0x4}, {0x0, 0x4}, {0x0, 0x8}, {0x2, 0x7}, {0x2, 0x4}, {0x5}, {0x2, 0x9}, {0x7}, {0x0, 0x6}, {0x0, 0xa}, {0x6, 0x7}, {0x3, 0x4}, {0x1, 0x7}, {0x1, 0xa}, {0x7}, {0x4, 0x6}, {0x2, 0x2}, {0x3, 0x6}, {0x2, 0xa}, {0x3, 0x7}, {0x6, 0x1}, {0x1, 0xa}, {0x0, 0x5}, {0x1, 0xa}, {0x6, 0x1}, {0x0, 0x3}, {0x2, 0x6}, {0x6, 0x9}, {0x0, 0x4}, {0x3, 0x1}, {0x4, 0x3}, {0x0, 0x2}, {0x2, 0x7}, {0x0, 0x8}, {0x1, 0x9}, {0x4, 0x3}, {0x4, 0x8}, {0x6, 0x8}, {0x0, 0xa}, {0x0, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xdb78, 0x4, 0x9, 0xf272, 0x1, 0x4, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x40, 0x1000, 0xdcd, 0x9, 0x8, 0x10]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x8, 0x7, 0xf9, 0x76a, 0xb, 0xfffc, 0x5]}}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x3, 0x4}, {0x5, 0x4}, {0x7, 0x4}, {0x5, 0x8}, {0x3, 0x8}, {0x2, 0x5}, {0x0, 0x2}, {0x5, 0x8}, {0x7, 0x8}]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x76, 0x5, 0xe, 0x240e, 0x101, 0x5, 0x4, 0x10]}}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x4}, {0x6, 0x9}, {0x0, 0x8}, {0x1, 0x8}, {0x5, 0x8}, {0x0, 0xa}, {0x6, 0x6}, {0x1, 0x6}, {0x6}, {0x1}, {0x1, 0x6}, {0x6, 0x4}, {0x4, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb88, 0x9767, 0xfff3, 0x6000, 0x6, 0x2, 0x8, 0xff82]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfc01, 0x1, 0x0, 0x4, 0x5, 0x5, 0xff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x5, 0x1, 0x0, 0xd74, 0x1, 0x81, 0x91ca]}}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x3, 0x5}, {0x1, 0x4}, {0x4, 0x3}, {0x7, 0xa}, {0x3, 0x3}, {0x0, 0x4}, {0x3, 0x3}, {0x3}, {0x4, 0x5}, {0x1, 0xa}, {0x3, 0x6}, {0x0, 0xa}, {0x3, 0x8}, {0x4, 0x3}, {0x4, 0xa}, {0x7, 0x15}, {0x1, 0x3}, {0x4, 0x6}, {0x1, 0xa}, {0x4, 0x1}, {0x3, 0x3}, {0x7, 0x5}, {0x6, 0xa}, {0x1, 0x1c}, {0x1, 0x5}, {0x0, 0x8}, {0x4, 0x2}, {0x5, 0x3}, {0x0, 0x2}, {0x6, 0xa}, {0x0, 0x5}, {0x1, 0x3}, {0x0, 0xa}, {0x3, 0x9}, {0x3, 0x8}, {0x0, 0x4}, {0x5, 0xa}, {0x2, 0x2}, {0x7, 0x1}, {0x4, 0x8}, {0x3, 0x6}, {0x7, 0xa}, {0x3, 0x5}, {0x5, 0x6}, {0x4, 0xa}, {0x4, 0x7}, {0x0, 0x8}, {0x2, 0x5}, {0x6, 0x6}, {0x5, 0x3}, {0x5, 0x2}, {0x0, 0x9}]}]}]}, @NL80211_ATTR_TX_RATES={0x28, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1, 0x0, 0x6, 0x1, 0x6, 0x5, 0xc]}}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}]}]}, 0x35c}, 0x1, 0x0, 0x0, 0x4000001}, 0x10000000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYBLOB='\n\x00:'], 0x74}}, 0x0) kernel console output (not intermixed with test programs): d/64, error -71 [ 662.972618][ T5800] usb usb1-port1: attempt power cycle [ 662.972944][ T969] usb 2-1: USB disconnect, device number 20 [ 663.006387][ T969] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 663.035888][ T969] cp210x 2-1:0.0: device disconnected [ 663.070876][ T5858] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 663.335206][T13584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.353151][T13584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 663.375679][ T5858] usb 3-1: USB disconnect, device number 10 [ 663.423184][ T5800] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 663.462243][ T969] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 663.476641][ T5800] usb 1-1: device descriptor read/8, error -71 [ 663.581514][T13559] usblp0: removed [ 663.641101][T13592] netlink: 'syz.3.2254': attribute type 58 has an invalid length. [ 663.650348][T13592] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2254'. [ 663.652402][ T969] usb 2-1: Using ep0 maxpacket: 8 [ 663.674138][ T969] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 663.686240][ T969] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.695163][ T969] usb 2-1: Product: syz [ 663.700177][ T969] usb 2-1: Manufacturer: syz [ 663.705276][ T969] usb 2-1: SerialNumber: syz [ 663.712818][ T969] usb 2-1: config 0 descriptor?? [ 663.722535][ T969] gspca_main: se401-2.14.0 probing 047d:5003 [ 663.763695][ T5800] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 663.811960][T13594] tipc: Enabled bearer , priority 0 [ 663.812887][ T5800] usb 1-1: device descriptor read/8, error -71 [ 663.827772][T13593] tipc: Disabling bearer [ 663.952387][ T5800] usb usb1-port1: unable to enumerate USB device [ 664.327552][T13604] vcan0: tx drop: invalid da for name 0x00000000000000c8 [ 664.401891][T13606] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2258'. [ 664.550727][ T969] gspca_se401: Wrong descriptor type [ 664.771907][ T5800] usb 2-1: USB disconnect, device number 21 [ 664.827062][T13616] tipc: Enabled bearer , priority 0 [ 664.839139][T13615] tipc: Disabling bearer [ 665.033565][T13620] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2266'. [ 665.043382][T13620] netlink: 175 bytes leftover after parsing attributes in process `syz.0.2266'. [ 665.222249][ T969] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 665.429197][ T969] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 665.450453][T13628] tipc: Enabled bearer , priority 0 [ 665.452932][ T969] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 665.467867][T13628] syzkaller0: entered promiscuous mode [ 665.472532][ T969] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 665.482666][T13628] syzkaller0: entered allmulticast mode [ 665.504085][ T969] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 665.522758][ T969] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 665.539162][ T969] usb 4-1: Product: syz [ 665.549085][ T969] usb 4-1: Manufacturer: syz [ 665.553013][T13628] tipc: Resetting bearer [ 665.558560][ T969] usb 4-1: SerialNumber: syz [ 665.591978][T13627] tipc: Resetting bearer [ 665.595248][T13631] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2270'. [ 665.633598][T13627] tipc: Disabling bearer [ 665.707579][T13632] syzkaller0: entered promiscuous mode [ 665.713209][T13632] syzkaller0: entered allmulticast mode [ 665.808358][ T969] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 21 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 666.076657][T13643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 666.090718][T13643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 666.113625][ T969] usb 4-1: USB disconnect, device number 21 [ 666.347043][T13617] usblp0: removed [ 668.141663][T13637] tipc: Enabled bearer , priority 0 [ 668.155068][T13636] tipc: Disabling bearer [ 668.532216][ T969] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 668.535550][T13671] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2285'. [ 668.702622][ T28] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 668.722495][ T969] usb 1-1: Using ep0 maxpacket: 8 [ 668.738729][ T969] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 668.758271][ T969] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.775535][ T969] usb 1-1: Product: syz [ 668.785519][ T969] usb 1-1: Manufacturer: syz [ 668.786342][T13682] netlink: 'syz.1.2288': attribute type 1 has an invalid length. [ 668.793191][ T969] usb 1-1: SerialNumber: syz [ 668.809719][ T969] usb 1-1: config 0 descriptor?? [ 668.829220][ T969] gspca_main: se401-2.14.0 probing 047d:5003 [ 668.870526][T13682] bond1: entered promiscuous mode [ 668.879933][T13682] 8021q: adding VLAN 0 to HW filter on device bond1 [ 668.895769][ T28] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 668.910771][ T28] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 668.941611][T13685] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2288'. [ 668.958145][T13685] bond1: entered allmulticast mode [ 668.959115][ T28] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 668.991927][T13682] bond1: (slave bridge1): making interface the new active one [ 669.000187][T13682] bridge1: entered promiscuous mode [ 669.010824][T13682] bridge1: entered allmulticast mode [ 669.013528][ T28] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 669.017605][T13682] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 669.038376][ T28] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 669.058167][ T28] usb 3-1: Product: syz [ 669.069835][ T28] usb 3-1: Manufacturer: syz [ 669.092114][ T28] usb 3-1: SerialNumber: syz [ 669.347367][ T28] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 669.367690][T13693] tipc: Enabled bearer , priority 0 [ 669.405564][T13690] tipc: Disabling bearer [ 669.621715][T13700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 669.641841][T13700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 669.651684][ T5890] usb 3-1: USB disconnect, device number 11 [ 669.739054][ T969] gspca_se401: Wrong descriptor type [ 669.811993][T13706] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 669.966912][ T5890] usb 1-1: USB disconnect, device number 13 [ 670.023357][T13713] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 670.093985][T13713] macsec1: entered promiscuous mode [ 670.100972][T13713] macsec1: entered allmulticast mode [ 670.113914][T13666] usblp0: removed [ 670.194079][T13719] netlink: 'syz.3.2296': attribute type 58 has an invalid length. [ 670.212353][T13719] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2296'. [ 670.633325][ T5890] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 670.796612][T13736] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 670.846579][ T5890] usb 4-1: Using ep0 maxpacket: 8 [ 670.893014][ T5890] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 670.903151][ T5890] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 670.930987][ T5890] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 670.953343][ T5890] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 670.968910][ T5890] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 670.988946][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.073933][T13744] netlink: 'syz.1.2307': attribute type 1 has an invalid length. [ 671.159844][T13744] bond2: entered promiscuous mode [ 671.166055][T13744] 8021q: adding VLAN 0 to HW filter on device bond2 [ 671.173927][T13749] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2307'. [ 671.218367][ T5890] usb 4-1: GET_CAPABILITIES returned 0 [ 671.232232][ T5890] usbtmc 4-1:16.0: can't read capabilities [ 671.235489][T13748] tipc: Enabled bearer , priority 0 [ 671.275137][T13748] tipc: Resetting bearer [ 671.321691][T13747] tipc: Disabling bearer [ 671.406344][T13756] tipc: Enabling of bearer rejected, failed to enable media [ 671.459636][T13725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 671.497715][T13725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 671.518285][ T969] usb 4-1: USB disconnect, device number 22 [ 671.623155][ T5890] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 671.701141][T13768] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 671.887386][ T5890] usb 2-1: Using ep0 maxpacket: 8 [ 671.916318][ T5890] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 671.925775][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.927314][T13774] netlink: 'syz.0.2316': attribute type 58 has an invalid length. [ 671.933852][ T5890] usb 2-1: Product: syz [ 671.933878][ T5890] usb 2-1: Manufacturer: syz [ 671.933895][ T5890] usb 2-1: SerialNumber: syz [ 671.936888][ T5890] usb 2-1: config 0 descriptor?? [ 671.961280][T13774] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2316'. [ 671.966045][ T5890] gspca_main: se401-2.14.0 probing 047d:5003 [ 672.312563][T13783] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2319'. [ 672.426344][T13787] tipc: Enabled bearer , priority 0 [ 672.457637][T13787] tipc: Resetting bearer [ 672.550681][T13786] tipc: Disabling bearer [ 672.569017][T13789] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 672.653260][T13791] tipc: Enabling of bearer rejected, failed to enable media [ 672.971376][ T5890] gspca_se401: Wrong descriptor type [ 672.987062][T13806] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2326'. [ 673.179372][T13813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2329'. [ 673.189316][T13813] netlink: 'syz.0.2329': attribute type 15 has an invalid length. [ 673.189805][T10972] usb 2-1: USB disconnect, device number 22 [ 673.197246][T13813] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2329'. [ 673.210986][T13813] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 673.221432][T13813] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 673.230364][T13813] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 673.239226][T13813] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 673.322815][ T5890] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 673.512114][ T5890] usb 3-1: Using ep0 maxpacket: 8 [ 673.525685][ T5890] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 673.540074][ T5890] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 673.589240][ T5890] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 673.632103][ T5890] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 673.655496][ T5890] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 673.665371][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.899587][ T5890] usb 3-1: GET_CAPABILITIES returned 0 [ 673.910695][ T5890] usbtmc 3-1:16.0: can't read capabilities [ 673.959013][T13830] tipc: Enabling of bearer rejected, failed to enable media [ 674.105664][T13809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 674.122736][ T969] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 674.140325][T13809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 674.164177][ T5800] usb 3-1: USB disconnect, device number 12 [ 674.324744][ T969] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 674.340781][ T969] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 674.360916][ T969] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 674.371147][ T969] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 674.384808][T13844] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2340'. [ 674.387611][ T969] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 674.411263][ T969] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 674.422227][ T969] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 674.430288][ T969] usb 4-1: Product: syz [ 674.436740][ T969] usb 4-1: Manufacturer: syz [ 674.447713][ T969] cdc_wdm 4-1:1.0: skipping garbage [ 674.453890][ T969] cdc_wdm 4-1:1.0: skipping garbage [ 674.461512][ T969] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 674.470512][ T969] cdc_wdm 4-1:1.0: Unknown control protocol [ 674.655417][T13828] cdc_wdm 4-1:1.0: Error submitting int urb - -90 [ 675.147890][ T28] usb 4-1: USB disconnect, device number 23 [ 675.150025][T13863] tipc: Enabled bearer , priority 0 [ 675.180096][T13863] tipc: Resetting bearer [ 675.193512][T13864] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2349'. [ 675.227742][T13862] tipc: Disabling bearer [ 675.252424][ T5890] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 675.464969][ T5890] usb 2-1: Using ep0 maxpacket: 8 [ 675.508156][ T5890] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 675.523651][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.546330][ T5890] usb 2-1: Product: syz [ 675.550677][ T5890] usb 2-1: Manufacturer: syz [ 675.557243][ T5890] usb 2-1: SerialNumber: syz [ 675.574677][ T5890] usb 2-1: config 0 descriptor?? [ 675.590424][T13872] tipc: Enabling of bearer rejected, failed to enable media [ 675.594069][ T5890] gspca_main: se401-2.14.0 probing 047d:5003 [ 675.812259][ T28] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 676.003417][ T28] usb 1-1: Using ep0 maxpacket: 8 [ 676.024899][ T28] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 676.058698][ T28] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 676.101421][ T28] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 676.132239][ T28] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 676.168135][ T28] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 676.224742][ T28] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.469244][ T28] usb 1-1: GET_CAPABILITIES returned 0 [ 676.482268][ T28] usbtmc 1-1:16.0: can't read capabilities [ 676.672624][T13870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 676.695472][T13870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 676.748036][T10972] usb 1-1: USB disconnect, device number 14 [ 676.815767][ T5890] gspca_se401: Wrong descriptor type [ 676.842168][ T28] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 676.871832][T13888] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 676.882775][T13888] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 676.891172][T13888] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 676.899980][T13888] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 676.908214][T13888] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 676.916601][T13888] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 676.967017][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 676.977931][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 676.985671][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 676.994353][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 677.008704][ T51] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 677.016834][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 677.051523][ T5858] usb 2-1: USB disconnect, device number 23 [ 677.106243][ T28] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 677.125398][ T28] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.161562][ T28] usb 4-1: config 0 descriptor?? [ 677.174349][ T28] cp210x 4-1:0.0: cp210x converter detected [ 677.186232][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 677.197686][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.350967][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 677.383499][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.398296][ T28] usb 4-1: cp210x converter now attached to ttyUSB0 [ 677.434590][T13887] chnl_net:caif_netlink_parms(): no params data found [ 677.446681][T13894] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2360'. [ 677.520771][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 677.533586][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.606105][T13896] tipc: Enabled bearer , priority 0 [ 677.644441][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 677.660798][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.699292][T13896] tipc: Resetting bearer [ 677.761303][T13895] tipc: Disabling bearer [ 677.800944][T13904] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2363'. [ 677.813910][T13887] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.829221][T13887] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.841624][T13887] bridge_slave_0: entered allmulticast mode [ 677.849589][T13887] bridge_slave_0: entered promiscuous mode [ 677.859489][T13887] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.866821][T13887] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.874189][T13887] bridge_slave_1: entered allmulticast mode [ 677.892726][T13887] bridge_slave_1: entered promiscuous mode [ 678.063543][T13887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 678.083339][T13887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 678.198597][T13887] team0: Port device team_slave_0 added [ 678.209129][T13887] team0: Port device team_slave_1 added [ 678.216625][ T12] tipc: Left network mode [ 678.232570][ T5890] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 678.274470][T13887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 678.281805][T13887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 678.309057][T13887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 678.377935][T13887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 678.389002][T13887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 678.420394][T13887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 678.446175][ T5890] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 678.462186][ T5890] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 678.483388][ T5890] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 678.501075][ T5890] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 678.513363][ T5890] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 678.531367][ T5890] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 678.551051][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 678.567447][ T5890] usb 1-1: Product: syz [ 678.574243][ T5890] usb 1-1: Manufacturer: syz [ 678.596653][ T5890] cdc_wdm 1-1:1.0: skipping garbage [ 678.605680][ T5890] cdc_wdm 1-1:1.0: skipping garbage [ 678.640918][ T5890] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 678.652186][ T5890] cdc_wdm 1-1:1.0: Unknown control protocol [ 678.693481][T13887] hsr_slave_0: entered promiscuous mode [ 678.711005][T13887] hsr_slave_1: entered promiscuous mode [ 678.722426][T13887] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 678.730173][T13887] Cannot create hsr debugfs directory [ 678.736147][T13917] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2368'. [ 678.801565][T13906] cdc_wdm 1-1:1.0: Error submitting int urb - -90 [ 678.980956][ T5800] usb 1-1: USB disconnect, device number 15 [ 679.015100][T13923] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 679.053356][ T51] Bluetooth: hci4: command tx timeout [ 679.572364][ T5890] usb 4-1: USB disconnect, device number 24 [ 679.586987][ T5890] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 679.632754][ T5890] cp210x 4-1:0.0: device disconnected [ 680.342395][T13949] tipc: Enabled bearer , priority 0 [ 680.354912][T13951] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2376'. [ 680.431238][ T12] hsr_slave_0: left promiscuous mode [ 680.455176][ T12] hsr_slave_1: left promiscuous mode [ 680.478510][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 680.487581][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 680.497615][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 680.507463][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 680.579217][ T12] veth1_macvtap: left promiscuous mode [ 680.598985][ T12] veth0_macvtap: left promiscuous mode [ 680.609808][ T12] veth1_vlan: left promiscuous mode [ 680.623316][ T12] veth0_vlan: left promiscuous mode [ 680.946124][ T12] bond5 (unregistering): (slave bridge5): Releasing backup interface [ 680.961655][ T12] bridge5 (unregistering): left promiscuous mode [ 681.146507][ T51] Bluetooth: hci4: command tx timeout [ 681.174608][ T12] bond5 (unregistering): Released all slaves [ 681.206667][ T12] bond4 (unregistering): (slave bridge4): Releasing backup interface [ 681.215159][ T12] bridge4 (unregistering): left promiscuous mode [ 681.392324][ T12] bond4 (unregistering): Released all slaves [ 681.416066][ T12] bond0 (unregistering): (slave bridge3): Releasing backup interface [ 681.424620][ T12] bridge3 (unregistering): left promiscuous mode [ 681.430975][ T12] bridge3 (unregistering): left allmulticast mode [ 681.462447][ T5800] tipc: Node number set to 2602788884 [ 681.591402][ T12] bond0 (unregistering): Released all slaves [ 681.620788][ T12] bond3 (unregistering): (slave bridge2): Releasing backup interface [ 681.629375][ T12] bridge2 (unregistering): left promiscuous mode [ 681.641340][ T12] bridge2 (unregistering): left allmulticast mode [ 681.813927][ T12] bond3 (unregistering): Released all slaves [ 681.838692][ T12] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 681.846916][ T12] bridge1 (unregistering): left promiscuous mode [ 682.010202][ T12] bond2 (unregistering): Released all slaves [ 682.035261][ T12] bond1 (unregistering): (slave bridge0): Releasing backup interface [ 682.043595][ T12] bridge0 (unregistering): left promiscuous mode [ 682.049959][ T12] bridge0 (unregistering): left allmulticast mode [ 682.217629][ T12] bond1 (unregistering): Released all slaves [ 682.728881][ T12] team0 (unregistering): Port device team_slave_1 removed [ 682.779774][ T12] team0 (unregistering): Port device team_slave_0 removed [ 683.220597][ T51] Bluetooth: hci4: command tx timeout [ 683.386061][T13957] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 683.410534][T13959] tipc: Resetting bearer [ 683.471315][ T5159] udevd[5159]: worker [5801] /devices/virtual/block/nbd0 timeout; kill it [ 683.491300][T13947] tipc: Disabling bearer [ 683.496223][ T5159] udevd[5159]: seq 15033 '/devices/virtual/block/nbd0' killed [ 683.903692][ T5858] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 683.917328][T13887] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 683.957670][T13887] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 683.988083][T13887] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 684.011897][T13887] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 684.056544][ T12] IPVS: stop unused estimator thread 0... [ 684.104487][ T5858] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 684.143514][ T5858] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 684.173745][ T55] block nbd0: Possible stuck request ffff888021a70000: control (read@0,1024B). Runtime 390 seconds [ 684.185118][ T55] block nbd0: Possible stuck request ffff888021a80000: control (read@1024,3072B). Runtime 390 seconds [ 684.196514][ T5858] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 684.217577][ T5858] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 684.227256][ T5858] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 684.235825][ T5858] usb 4-1: Product: syz [ 684.240151][ T5858] usb 4-1: Manufacturer: syz [ 684.244939][ T5858] usb 4-1: SerialNumber: syz [ 684.332257][ T969] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 684.389362][T13887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 684.461680][T13887] 8021q: adding VLAN 0 to HW filter on device team0 [ 684.469965][ T5858] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 25 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 684.525247][ T969] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 684.536270][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.543510][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 684.571443][ T969] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 684.575103][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.588822][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 684.598635][ T969] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 684.610276][ T969] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 684.622923][ T969] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 684.636260][ T969] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 684.652368][ T969] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 684.683545][ T969] usb 2-1: Product: syz [ 684.687804][ T969] usb 2-1: Manufacturer: syz [ 684.720787][ T969] cdc_wdm 2-1:1.0: skipping garbage [ 684.731177][T14005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 684.749886][ T969] cdc_wdm 2-1:1.0: skipping garbage [ 684.768594][T14005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 684.786579][ T969] cdc_wdm 2-1:1.0: cdc-wdm1: USB WDM device [ 684.824692][ T9] usb 4-1: USB disconnect, device number 25 [ 684.831301][ T969] cdc_wdm 2-1:1.0: Unknown control protocol [ 684.961050][T14009] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 685.241157][T14018] loop8: detected capacity change from 0 to 7 [ 685.263088][T14018] Dev loop8: unable to read RDB block 7 [ 685.286553][T14018] loop8: unable to read partition table [ 685.292682][ T51] Bluetooth: hci4: command tx timeout [ 685.319887][T14018] loop8: partition table beyond EOD, truncated [ 685.336441][T14018] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 685.494083][T13973] usblp0: removed [ 685.601153][T13887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 685.644903][T14026] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2387'. [ 685.766401][ T9] usb 2-1: USB disconnect, device number 24 [ 685.861879][T13887] veth0_vlan: entered promiscuous mode [ 685.901687][T13887] veth1_vlan: entered promiscuous mode [ 686.045839][T13887] veth0_macvtap: entered promiscuous mode [ 686.075425][T13887] veth1_macvtap: entered promiscuous mode [ 686.102591][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.114668][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.170957][T13887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 686.198159][T13887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.209860][T13887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 686.239311][T13887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.260704][T13887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 686.271833][T13887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.299896][T13887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 686.346286][T13887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 686.375419][T13887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.397480][T13887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 686.418393][T13887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.431768][T13887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 686.456940][T13887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.486784][T13887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 686.530687][T13887] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.548432][T13887] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.574402][T13887] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.597752][T13887] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.842656][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 686.877076][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 686.989072][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 687.026687][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 687.115421][T14051] netlink: 'syz.0.2393': attribute type 58 has an invalid length. [ 687.122300][T14053] loop8: detected capacity change from 0 to 7 [ 687.140994][T14051] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2393'. [ 687.144237][ T7154] Dev loop8: unable to read RDB block 7 [ 687.172075][ T7154] loop8: unable to read partition table [ 687.183814][ T7154] loop8: partition table beyond EOD, truncated [ 687.222558][T14053] Dev loop8: unable to read RDB block 7 [ 687.228258][T14053] loop8: unable to read partition table [ 687.246291][T14053] loop8: partition table beyond EOD, truncated [ 687.273544][T14053] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 687.549278][T14067] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2397'. [ 688.114697][T14084] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2403'. [ 688.134193][T14084] netlink: 175 bytes leftover after parsing attributes in process `syz.2.2403'. [ 688.312166][ T9] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 688.368692][T13888] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 688.380213][T13888] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 688.390555][T13888] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 688.400041][T13888] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 688.410975][T13888] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 688.421105][T13888] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 688.423198][T14088] netlink: 'syz.2.2404': attribute type 58 has an invalid length. [ 688.472342][T14088] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2404'. [ 688.532575][ T9] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 688.541264][ T9] usb 2-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 688.555422][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 688.564618][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12336, setting to 64 [ 688.584001][ T9] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 688.593826][ T9] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 688.601879][ T9] usb 2-1: Product: syz [ 688.616505][ T9] usb 2-1: Manufacturer: syz [ 688.635768][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 688.641052][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 688.673471][ T9] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 688.736168][T14091] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2405'. [ 688.971430][T10972] usb 2-1: USB disconnect, device number 25 [ 688.990260][T14097] syzkaller0: entered promiscuous mode [ 689.032501][T14097] syzkaller0: entered allmulticast mode [ 689.140413][T14087] chnl_net:caif_netlink_parms(): no params data found [ 689.359665][T14104] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2410'. [ 689.433824][T14087] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.450953][T14087] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.459286][T14087] bridge_slave_0: entered allmulticast mode [ 689.467817][T14087] bridge_slave_0: entered promiscuous mode [ 689.476809][T14087] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.484800][T14087] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.492475][T14087] bridge_slave_1: entered allmulticast mode [ 689.500063][T14087] bridge_slave_1: entered promiscuous mode [ 689.628499][T14087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 689.666987][T14087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 689.726421][T14112] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2412'. [ 689.739020][T14112] netlink: 175 bytes leftover after parsing attributes in process `syz.3.2412'. [ 689.786840][T14087] team0: Port device team_slave_0 added [ 689.804646][T14114] netlink: 'syz.2.2413': attribute type 58 has an invalid length. [ 689.865854][T14087] team0: Port device team_slave_1 added [ 689.934648][T14087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 689.944786][T14087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 689.970957][T14087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 689.993976][T14087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 690.001389][T14087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 690.029716][T14087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 690.128217][T14087] hsr_slave_0: entered promiscuous mode [ 690.135779][T14087] hsr_slave_1: entered promiscuous mode [ 690.304187][T14127] program syz.3.2418 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 690.431863][T14087] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 690.450423][T14087] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.471850][T14132] syzkaller0: entered promiscuous mode [ 690.477867][T14132] syzkaller0: entered allmulticast mode [ 690.498477][ T51] Bluetooth: hci1: command tx timeout [ 690.531861][T14087] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 690.542857][T14087] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.645251][T14087] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 690.656146][T14087] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.712202][ T5800] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 690.780957][T14087] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 690.791474][T14087] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.904952][ T5800] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 690.920620][ T5800] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 690.930276][ T5800] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.938937][ T5800] usb 4-1: Product: syz [ 690.943753][ T5800] usb 4-1: Manufacturer: syz [ 690.948563][ T5800] usb 4-1: SerialNumber: syz [ 690.956686][ T5800] usb 4-1: config 0 descriptor?? [ 690.977426][T14087] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 690.983951][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 691.000114][T14087] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 691.013328][T14087] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 691.024448][T14087] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 691.062233][ T5890] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 691.136000][T14087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 691.177021][ T9] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 691.178922][T14087] 8021q: adding VLAN 0 to HW filter on device team0 [ 691.188510][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.210028][ T2939] bridge0: port 1(bridge_slave_0) entered blocking state [ 691.217318][ T2939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 691.237758][ T9] usb 3-1: config 0 descriptor?? [ 691.261475][T12717] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.268775][T12717] bridge0: port 2(bridge_slave_1) entered forwarding state [ 691.286134][ T5890] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 691.303345][ T9] cp210x 3-1:0.0: cp210x converter detected [ 691.313815][ T5890] usb 2-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 691.325376][ T5890] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 691.339173][ T5890] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12336, setting to 64 [ 691.362925][ T5890] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 691.378888][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 691.388867][ T5890] usb 2-1: Product: syz [ 691.393666][ T5890] usb 2-1: Manufacturer: syz [ 691.410433][ T5890] cdc_wdm 2-1:1.0: skipping garbage [ 691.423949][ T5890] cdc_wdm 2-1:1.0: skipping garbage [ 691.433701][ T5890] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 691.465549][ T9] usb 3-1: cp210x converter now attached to ttyUSB0 [ 691.680613][ T5858] usb 2-1: USB disconnect, device number 26 [ 691.715897][T14087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 691.820395][T14087] veth0_vlan: entered promiscuous mode [ 691.850666][T14087] veth1_vlan: entered promiscuous mode [ 691.927967][T14087] veth0_macvtap: entered promiscuous mode [ 691.950239][T14087] veth1_macvtap: entered promiscuous mode [ 691.988878][T14087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 692.007324][T14087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.034749][T14087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 692.047823][T14087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.063422][T14087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 692.074537][T14087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.085912][T14087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 692.118635][T14087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.146790][T14087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 692.166553][T14087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 692.179160][T14087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.190151][T14087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 692.217815][T14087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.230073][T14087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 692.241116][T14087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.253302][T14087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 692.264120][T14087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.280852][T14087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 692.309573][T14087] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.328510][T14087] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.341393][T14087] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.351816][T14087] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.481637][ T2922] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 692.513358][ T2922] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 692.570523][ T2939] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 692.572317][ T51] Bluetooth: hci1: command tx timeout [ 692.595363][ T2939] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 692.982261][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 693.090913][T14164] syzkaller0: entered promiscuous mode [ 693.097031][T14164] syzkaller0: entered allmulticast mode [ 693.166241][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 693.176908][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 693.187743][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 693.207599][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 693.219110][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 693.227978][ T9] usb 1-1: Product: syz [ 693.233788][ T9] usb 1-1: Manufacturer: syz [ 693.238493][ T9] usb 1-1: SerialNumber: syz [ 693.386580][ T5890] usb 4-1: USB disconnect, device number 26 [ 693.491562][ T9] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 693.761648][T14170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 693.786080][ T28] usb 3-1: USB disconnect, device number 13 [ 693.806240][ T28] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 693.834273][T14170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 693.855925][ T28] cp210x 3-1:0.0: device disconnected [ 693.878639][ T5890] usb 1-1: USB disconnect, device number 16 [ 694.254387][T13888] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 694.276215][T13888] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 694.286201][T13888] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 694.319626][T13888] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 694.322954][T14180] loop8: detected capacity change from 0 to 7 [ 694.347616][T13888] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 694.350152][ T7154] Dev loop8: unable to read RDB block 7 [ 694.360689][ T7154] loop8: unable to read partition table [ 694.368362][ T7154] loop8: partition table beyond EOD, truncated [ 694.374789][T13888] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 694.392207][ T28] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 694.445329][T14180] Dev loop8: unable to read RDB block 7 [ 694.465337][T14180] loop8: unable to read partition table [ 694.477510][T14180] loop8: partition table beyond EOD, truncated [ 694.487453][T14180] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 694.513325][T14151] usblp0: removed [ 694.625997][ T28] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 694.642221][ T28] usb 3-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 694.662330][ T28] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 694.662694][T13888] Bluetooth: hci1: command tx timeout [ 694.671479][ T28] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12336, setting to 64 [ 694.691094][ T28] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 694.705062][ T28] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 694.718434][ T28] usb 3-1: Product: syz [ 694.723051][ T28] usb 3-1: Manufacturer: syz [ 694.739413][ T28] cdc_wdm 3-1:1.0: skipping garbage [ 694.747712][ T28] cdc_wdm 3-1:1.0: skipping garbage [ 694.760607][ T28] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 694.861029][T14177] chnl_net:caif_netlink_parms(): no params data found [ 694.863357][T14191] __nla_validate_parse: 2 callbacks suppressed [ 694.863379][T14191] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2434'. [ 695.113664][T14177] bridge0: port 1(bridge_slave_0) entered blocking state [ 695.162473][T14177] bridge0: port 1(bridge_slave_0) entered disabled state [ 695.169831][T14177] bridge_slave_0: entered allmulticast mode [ 695.190744][T14177] bridge_slave_0: entered promiscuous mode [ 695.208985][T14177] bridge0: port 2(bridge_slave_1) entered blocking state [ 695.232770][T14177] bridge0: port 2(bridge_slave_1) entered disabled state [ 695.240539][T14177] bridge_slave_1: entered allmulticast mode [ 695.248818][T14177] bridge_slave_1: entered promiscuous mode [ 695.312592][ T5800] usb 3-1: USB disconnect, device number 14 [ 695.374786][T14177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 695.420773][T14177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 695.520206][T14204] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2437'. [ 696.058995][T14204] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 696.098194][T14204] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 696.126882][T14204] bond0 (unregistering): Released all slaves [ 696.171792][T14177] team0: Port device team_slave_0 added [ 696.218180][T14177] team0: Port device team_slave_1 added [ 696.264753][T14177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 696.271879][T14177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 696.298610][T14177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 696.314021][T14177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 696.329262][T14177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 696.368762][T14177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 696.467038][T14177] hsr_slave_0: entered promiscuous mode [ 696.476795][T14177] hsr_slave_1: entered promiscuous mode [ 696.490044][T14177] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 696.501696][T14177] Cannot create hsr debugfs directory [ 696.502294][T13888] Bluetooth: hci2: command tx timeout [ 696.732502][T13888] Bluetooth: hci1: command tx timeout [ 696.991929][T14210] loop8: detected capacity change from 0 to 7 [ 697.039876][T14210] Dev loop8: unable to read RDB block 7 [ 697.047403][T14210] loop8: unable to read partition table [ 697.085680][T14210] loop8: partition table beyond EOD, truncated [ 697.110013][T14177] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.132109][T14210] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 697.461176][T14177] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.477217][T14224] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2445'. [ 697.487849][T14223] netlink: 'syz.0.2444': attribute type 58 has an invalid length. [ 697.496005][T14223] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2444'. [ 697.571056][T14177] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.632104][ T5890] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 697.750037][T14177] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.824567][ T5890] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 697.868346][ T5890] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 697.892179][ T5890] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 697.915038][ T5890] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 697.930729][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 697.945055][ T5890] usb 2-1: Product: syz [ 697.949365][ T5890] usb 2-1: Manufacturer: syz [ 697.954550][ T5890] usb 2-1: SerialNumber: syz [ 698.026203][ T28] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 698.048767][T14177] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 698.069559][T14177] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 698.082527][T14177] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 698.098290][T14177] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 698.194994][ T5890] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 27 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 698.309863][ T28] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 698.330341][T14177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 698.362810][ T28] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 698.373055][ T28] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 698.382539][ T28] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.393894][T14177] 8021q: adding VLAN 0 to HW filter on device team0 [ 698.407561][T14229] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 698.421263][ T28] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 698.441139][T12717] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.448427][T12717] bridge0: port 1(bridge_slave_0) entered forwarding state [ 698.485860][T14239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 698.511550][T14239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 698.553014][ T28] usb 2-1: USB disconnect, device number 27 [ 698.573963][T13888] Bluetooth: hci2: command tx timeout [ 698.617483][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 698.624681][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 698.836754][T14242] tipc: Started in network mode [ 698.862991][T14242] tipc: Node identity f6a94dbe904f, cluster identity 4711 [ 698.884131][T14242] tipc: Enabled bearer , priority 0 [ 699.021172][T14245] syzkaller0: entered promiscuous mode [ 699.027244][T14245] syzkaller0: entered allmulticast mode [ 699.034837][T14245] tipc: Resetting bearer [ 699.067746][T14241] tipc: Resetting bearer [ 699.314857][T14219] usblp0: removed [ 699.930470][ T28] tipc: Node number set to 1726369214 [ 700.361667][T14251] loop8: detected capacity change from 0 to 7 [ 700.376901][T14251] Dev loop8: unable to read RDB block 7 [ 700.387703][T14251] loop8: unable to read partition table [ 700.397277][T14251] loop8: partition table beyond EOD, truncated [ 700.407332][T14251] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 700.652270][T13888] Bluetooth: hci2: command tx timeout [ 700.884704][ T969] usb 3-1: USB disconnect, device number 15 [ 702.471870][T14241] tipc: Disabling bearer [ 702.497410][T14259] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2453'. [ 702.506841][T14259] netlink: 175 bytes leftover after parsing attributes in process `syz.2.2453'. [ 702.517996][T14260] tipc: Enabling of bearer rejected, failed to enable media [ 702.560979][T14177] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 702.733501][T13888] Bluetooth: hci2: command tx timeout [ 703.026243][T14177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 703.092386][ T969] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 703.099739][T14177] veth0_vlan: entered promiscuous mode [ 703.124074][T14177] veth1_vlan: entered promiscuous mode [ 703.170217][T14177] veth0_macvtap: entered promiscuous mode [ 703.198046][T14177] veth1_macvtap: entered promiscuous mode [ 703.208791][T14290] netlink: 'syz.2.2460': attribute type 58 has an invalid length. [ 703.217303][T14290] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2460'. [ 703.250462][T14177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 703.261391][T14177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 703.271870][T14177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 703.288243][T14177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 703.298196][T14177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 703.307113][ T969] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 703.310234][T14177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 703.327678][ T969] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 703.344782][T14177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 703.349436][ T969] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 703.360670][T14177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 703.388169][T14177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 703.410345][T14177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 703.410344][ T969] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 703.410374][ T969] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 703.431205][T14177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 703.442365][ T969] usb 2-1: Product: syz [ 703.449462][ T969] usb 2-1: Manufacturer: syz [ 703.456585][ T969] usb 2-1: SerialNumber: syz [ 703.488463][T14177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 703.499573][T14177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 703.510042][T14177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 703.522774][T14177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 703.534163][T14177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 703.545279][T14177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 703.555460][T14177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 703.566269][T14177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 703.576428][T14177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 703.587024][T14177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 703.599416][T14177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 703.617454][T14293] tipc: Started in network mode [ 703.622953][T14293] tipc: Node identity 561f770a94e7, cluster identity 4711 [ 703.630275][T14293] tipc: Enabled bearer , priority 0 [ 703.685779][ T969] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 28 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 703.696708][T14294] syzkaller0: entered promiscuous mode [ 703.696735][T14294] syzkaller0: entered allmulticast mode [ 703.697397][T14294] tipc: Resetting bearer [ 703.719320][T14177] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.731132][T14177] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.747111][T14177] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.769709][T14177] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.798868][T14291] tipc: Resetting bearer [ 703.986277][T14298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 704.004301][T14298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 704.017392][ T5800] usb 2-1: USB disconnect, device number 28 [ 704.344724][T14278] usblp0: removed [ 704.648436][ T5800] tipc: Node number set to 3271063306 [ 706.280945][T14291] tipc: Disabling bearer [ 706.293953][T14297] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2462'. [ 706.303491][T14297] netlink: 175 bytes leftover after parsing attributes in process `syz.0.2462'. [ 706.331790][T14307] tipc: Enabling of bearer rejected, failed to enable media [ 706.592793][ T999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 706.600687][ T999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 706.670386][T14326] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2467'. [ 706.688997][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 706.698462][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 706.782237][ T969] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 706.886674][T14331] netlink: 'syz.0.2468': attribute type 3 has an invalid length. [ 706.972622][T10972] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 707.014314][ T969] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 707.032471][ T969] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.053334][ T969] usb 3-1: config 0 descriptor?? [ 707.089857][ T969] cp210x 3-1:0.0: cp210x converter detected [ 707.178749][T14338] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2471'. [ 707.188288][T14338] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2471'. [ 707.192306][T10972] usb 2-1: Using ep0 maxpacket: 8 [ 707.211242][T14338] syzkaller0: entered promiscuous mode [ 707.217779][T14338] syzkaller0: entered allmulticast mode [ 707.230773][T10972] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 707.240054][T10972] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.248272][T10972] usb 2-1: Product: syz [ 707.255740][T10972] usb 2-1: Manufacturer: syz [ 707.260470][T10972] usb 2-1: SerialNumber: syz [ 707.270031][T10972] usb 2-1: config 0 descriptor?? [ 707.286935][T10972] gspca_main: se401-2.14.0 probing 047d:5003 [ 707.362311][ T23] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 707.469223][T14340] tipc: Enabled bearer , priority 0 [ 707.503045][ T969] cp210x 3-1:0.0: failed to get vendor val 0x370c size 13: -32 [ 707.532483][ T969] cp210x 3-1:0.0: GPIO initialisation failed: -32 [ 707.557762][ T969] usb 3-1: cp210x converter now attached to ttyUSB0 [ 707.586253][ T23] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 707.597824][ T969] usb 3-1: USB disconnect, device number 16 [ 707.614378][ T23] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 707.635684][ T969] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 707.649969][ T23] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 707.661076][T14340] syzkaller0: entered promiscuous mode [ 707.673020][ T969] cp210x 3-1:0.0: device disconnected [ 707.702599][ T23] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 707.724318][T14340] syzkaller0: entered allmulticast mode [ 707.726586][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 707.738901][T14340] tipc: Resetting bearer [ 707.742579][ T23] usb 4-1: Product: syz [ 707.749149][ T23] usb 4-1: Manufacturer: syz [ 707.754603][ T23] usb 4-1: SerialNumber: syz [ 707.796429][T14339] tipc: Resetting bearer [ 708.000507][ T23] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 27 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 708.183412][T10972] gspca_se401: Wrong descriptor type [ 708.323065][T14349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 708.354092][T14349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 708.384238][T10972] usb 4-1: USB disconnect, device number 27 [ 708.450238][ T23] usb 2-1: USB disconnect, device number 29 [ 708.783655][T14333] usblp0: removed [ 709.834518][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 709.852376][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 709.869802][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 709.879150][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 709.918750][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 709.939383][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 711.504593][T14339] tipc: Disabling bearer [ 711.527324][T14352] tipc: Enabling of bearer rejected, failed to enable media [ 711.788140][T14382] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2479'. [ 711.797427][T14382] netlink: 175 bytes leftover after parsing attributes in process `syz.0.2479'. [ 712.022377][T13888] Bluetooth: hci0: command tx timeout [ 712.139232][T14394] netlink: 'syz.0.2483': attribute type 2 has an invalid length. [ 712.147738][T14394] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2483'. [ 712.182757][T14362] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.348558][T14362] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.388352][T14397] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2484'. [ 712.399893][T14402] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2486'. [ 712.456758][T14362] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.506240][T14375] chnl_net:caif_netlink_parms(): no params data found [ 712.593263][T14362] team0: Port device netdevsim0 removed [ 712.603217][T14362] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.777283][T14408] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2488'. [ 712.794167][T14408] netlink: 175 bytes leftover after parsing attributes in process `syz.3.2488'. [ 712.970489][T14375] bridge0: port 1(bridge_slave_0) entered blocking state [ 712.983546][T14375] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.990983][T14375] bridge_slave_0: entered allmulticast mode [ 713.000182][T14375] bridge_slave_0: entered promiscuous mode [ 713.050092][T14375] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.058197][T14375] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.066181][T14375] bridge_slave_1: entered allmulticast mode [ 713.074724][T14375] bridge_slave_1: entered promiscuous mode [ 713.123704][ T969] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 713.139820][T14375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 713.174157][T14375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 713.192213][ T23] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 713.206095][T14362] tipc: Disabling bearer [ 713.216156][T14362] tipc: Left network mode [ 713.240345][T14375] team0: Port device team_slave_0 added [ 713.264779][T14375] team0: Port device team_slave_1 added [ 713.328856][ T969] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 713.339506][ T969] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 713.350746][ T969] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 713.369264][ T969] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 713.384010][ T969] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 713.399475][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 713.406614][ T969] usb 1-1: Product: syz [ 713.411937][T14375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 713.420096][ T969] usb 1-1: Manufacturer: syz [ 713.431512][ T23] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 713.442912][T14375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 713.469784][ T969] usb 1-1: SerialNumber: syz [ 713.474698][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.486601][ T23] usb 4-1: Product: syz [ 713.491717][ T23] usb 4-1: Manufacturer: syz [ 713.498816][ T23] usb 4-1: SerialNumber: syz [ 713.505969][T14375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 713.518724][ T23] usb 4-1: config 0 descriptor?? [ 713.528501][ T23] gspca_main: se401-2.14.0 probing 047d:5003 [ 713.574339][T14375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 713.581363][T14375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 713.615169][T14375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 713.707617][ T969] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 713.890881][T14375] hsr_slave_0: entered promiscuous mode [ 713.930640][T14375] hsr_slave_1: entered promiscuous mode [ 713.957018][T14375] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 713.982324][T14375] Cannot create hsr debugfs directory [ 714.050950][T14430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 714.092217][T13888] Bluetooth: hci0: command tx timeout [ 714.101718][T14430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 714.177143][T10972] usb 1-1: USB disconnect, device number 17 [ 714.266328][ T55] block nbd0: Possible stuck request ffff888021a70000: control (read@0,1024B). Runtime 420 seconds [ 714.277499][ T55] block nbd0: Possible stuck request ffff888021a80000: control (read@1024,3072B). Runtime 420 seconds [ 714.574277][T14413] usblp0: removed [ 714.612843][T14416] raw-gadget.1 gadget.3: fail, usb_ep_queue returned -108 [ 714.727290][ T23] usb 4-1: reset high-speed USB device number 28 using dummy_hcd [ 714.742860][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 715.210987][T14362] hsr_slave_0: left promiscuous mode [ 715.252328][T14362] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 715.259848][T14362] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 715.303305][T14362] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 715.310810][T14362] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 715.499693][T14362] veth1_macvtap: left promiscuous mode [ 715.519253][T14362] veth0_macvtap: left promiscuous mode [ 715.541276][T14362] veth1_vlan: left promiscuous mode [ 715.546851][T14362] veth0_vlan: left promiscuous mode [ 715.573700][ T23] gspca_se401: read req failed req 0x06 error -19 [ 715.607281][ T23] usb 4-1: USB disconnect, device number 28 [ 715.685249][T14466] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2494'. [ 716.041781][T14362] bond2 (unregistering): Released all slaves [ 716.070263][T14362] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 716.078631][T14362] bridge1 (unregistering): left promiscuous mode [ 716.085144][T14362] bridge1 (unregistering): left allmulticast mode [ 716.173664][T13888] Bluetooth: hci0: command tx timeout [ 716.262683][T14362] bond1 (unregistering): Released all slaves [ 716.297053][T14362] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 716.307735][T14362] bridge0 (unregistering): left promiscuous mode [ 716.315709][T14362] bridge0 (unregistering): left allmulticast mode [ 716.488819][T14362] bond0 (unregistering): Released all slaves [ 716.513131][T14362] pim6reg (unregistering): left allmulticast mode [ 716.947263][T14362] team0 (unregistering): Port device team_slave_1 removed [ 717.578581][T14448] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2493'. [ 717.597880][T14448] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 717.605222][T14448] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 718.111142][T14375] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 718.188297][T14375] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 718.231291][T14375] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 718.254603][T13888] Bluetooth: hci0: command tx timeout [ 718.321562][T14375] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 718.417648][T14490] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2500'. [ 718.431153][T14490] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2500'. [ 718.467502][T14490] syzkaller0: entered promiscuous mode [ 718.474172][T14490] syzkaller0: entered allmulticast mode [ 718.555152][ T5792] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 718.756519][ T5792] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 718.783769][ T5792] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 718.808008][ T5792] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 718.836672][ T5792] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 718.851943][ T5792] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 718.861248][ T5792] usb 3-1: Product: syz [ 718.866763][ T5792] usb 3-1: Manufacturer: syz [ 718.904506][ T5792] usb 3-1: SerialNumber: syz [ 718.931517][T14503] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2501'. [ 718.943098][T14503] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2501'. [ 718.960798][T14503] bond0: entered promiscuous mode [ 718.966012][T14503] bond_slave_0: entered promiscuous mode [ 718.971950][T14503] bond_slave_1: entered promiscuous mode [ 718.982813][T14503] bridge0: entered promiscuous mode [ 719.000398][T14375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 719.138317][T14375] 8021q: adding VLAN 0 to HW filter on device team0 [ 719.158695][ T5792] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 719.269169][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.276416][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 719.423786][T14513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 719.457912][ T999] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.465201][ T999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 719.473783][T14513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 719.510214][T10972] usb 3-1: USB disconnect, device number 17 [ 719.834024][ T23] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 720.032123][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 720.056602][ T23] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 720.072582][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.090537][ T23] usb 4-1: Product: syz [ 720.099553][ T23] usb 4-1: Manufacturer: syz [ 720.119037][ T23] usb 4-1: SerialNumber: syz [ 720.131938][T14480] usblp0: removed [ 720.157180][ T23] usb 4-1: config 0 descriptor?? [ 720.188464][ T23] gspca_main: se401-2.14.0 probing 047d:5003 [ 720.357157][T14539] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2506'. [ 720.410249][T14375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 720.520078][T14375] veth0_vlan: entered promiscuous mode [ 720.555584][T14375] veth1_vlan: entered promiscuous mode [ 720.637063][T14375] veth0_macvtap: entered promiscuous mode [ 720.700634][T14375] veth1_macvtap: entered promiscuous mode [ 720.768687][T14375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 720.790766][T14375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.803779][T14375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 720.824966][T14375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.841442][T14375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 720.859133][T14375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.869619][T14375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 720.883955][T14375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.905423][T14375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 720.928709][T14375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.941371][T14375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 720.974147][T14375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 720.994095][T14375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.006955][T14375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 721.017851][T14375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.028680][T14375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 721.039410][T14375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.049343][T14375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 721.060198][T14375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.071023][T14375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 721.082135][T14375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.094459][T14375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 721.118053][T14375] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.135663][T14375] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.145356][T14375] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.154411][T14375] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.231740][ T23] gspca_se401: Wrong descriptor type [ 721.360111][ T999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 721.387800][ T999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 721.444047][ T23] usb 4-1: USB disconnect, device number 29 [ 721.481318][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 721.505369][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 721.806376][T14563] tipc: Enabled bearer , priority 0 [ 721.858766][T14563] syzkaller0: entered promiscuous mode [ 721.869015][T14563] syzkaller0: entered allmulticast mode [ 721.878822][T14563] tipc: Resetting bearer [ 721.902118][T14562] tipc: Resetting bearer [ 724.551699][T14562] tipc: Disabling bearer [ 724.813777][T14591] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2517'. [ 724.987654][T14599] netlink: 'syz.3.2519': attribute type 58 has an invalid length. [ 724.998118][T14599] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2519'. [ 725.212680][ T23] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 725.256092][T14605] tipc: Started in network mode [ 725.261046][T14605] tipc: Node identity 4e9976059055, cluster identity 4711 [ 725.278451][T14605] tipc: Enabled bearer , priority 0 [ 725.306961][T14605] syzkaller0: entered promiscuous mode [ 725.309258][T14607] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2525'. [ 725.312819][T14605] syzkaller0: entered allmulticast mode [ 725.331183][T14609] tipc: Started in network mode [ 725.336346][T14609] tipc: Node identity ea3bb8c36fb3, cluster identity 4711 [ 725.343926][T14609] tipc: Enabled bearer , priority 0 [ 725.378868][T14609] tipc: Resetting bearer [ 725.401839][T14608] tipc: Disabling bearer [ 725.421600][T14605] tipc: Resetting bearer [ 725.436945][ T23] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 725.451391][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.462712][T14604] tipc: Resetting bearer [ 725.474005][ T23] usb 3-1: config 0 descriptor?? [ 725.503711][ T23] cp210x 3-1:0.0: cp210x converter detected [ 725.606196][T14604] tipc: Disabling bearer [ 725.643092][T14614] syzkaller0: entered promiscuous mode [ 725.648635][T14614] syzkaller0: entered allmulticast mode [ 725.673174][T14612] tipc: Enabled bearer , priority 0 [ 725.761968][T14612] syzkaller0: entered promiscuous mode [ 725.767860][T14612] syzkaller0: entered allmulticast mode [ 725.776627][T14612] tipc: Resetting bearer [ 725.841795][T14611] tipc: Resetting bearer [ 725.888297][ T23] cp210x 3-1:0.0: failed to get vendor val 0x370c size 13: -121 [ 725.909993][ T23] cp210x 3-1:0.0: GPIO initialisation failed: -121 [ 725.934609][ T23] usb 3-1: cp210x converter now attached to ttyUSB0 [ 726.096624][ T23] usb 3-1: USB disconnect, device number 18 [ 726.123732][ T23] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 726.132369][ T23] cp210x 3-1:0.0: device disconnected [ 728.219229][T14611] tipc: Disabling bearer [ 728.234893][T14621] netlink: 'syz.3.2530': attribute type 7 has an invalid length. [ 728.454185][T14635] tipc: Enabled bearer , priority 0 [ 728.466538][T14635] tipc: Resetting bearer [ 728.508628][T14634] tipc: Disabling bearer [ 728.525465][T14640] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2537'. [ 728.534256][T14641] loop8: detected capacity change from 0 to 7 [ 728.543863][T14641] Dev loop8: unable to read RDB block 7 [ 728.549515][T14641] loop8: unable to read partition table [ 728.562256][T14641] loop8: partition table beyond EOD, truncated [ 728.568615][T14641] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 728.692181][ T23] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 728.710514][T14646] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2540'. [ 728.897555][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 728.928539][ T23] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 728.958468][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.993019][ T23] usb 1-1: Product: syz [ 729.015819][ T23] usb 1-1: Manufacturer: syz [ 729.040908][ T23] usb 1-1: SerialNumber: syz [ 729.063874][ T23] usb 1-1: config 0 descriptor?? [ 729.094244][ T23] gspca_main: se401-2.14.0 probing 047d:5003 [ 729.201157][T14646] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 729.229139][T14646] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 729.249557][T14646] bond0 (unregistering): Released all slaves [ 729.506887][T14660] wg1 speed is unknown, defaulting to 1000 [ 729.527659][T14660] wg1 speed is unknown, defaulting to 1000 [ 729.547903][T14660] wg1 speed is unknown, defaulting to 1000 [ 729.612835][T14663] xt_TCPMSS: Only works on TCP SYN packets [ 729.682980][T14660] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 729.708143][T14665] tipc: Enabled bearer , priority 0 [ 729.873115][T14665] syzkaller0: entered promiscuous mode [ 729.878968][T14665] syzkaller0: entered allmulticast mode [ 729.886223][T14665] tipc: Resetting bearer [ 729.899340][T14660] wg1 speed is unknown, defaulting to 1000 [ 729.928042][T14660] wg1 speed is unknown, defaulting to 1000 [ 729.939412][T14660] wg1 speed is unknown, defaulting to 1000 [ 729.949390][T14664] tipc: Resetting bearer [ 730.052691][ T23] gspca_se401: Wrong descriptor type [ 730.283563][ T23] usb 1-1: USB disconnect, device number 18 [ 730.804770][ T9] tipc: Node number set to 3737941509 [ 732.390942][T14664] tipc: Disabling bearer [ 732.401296][T14660] wg1 speed is unknown, defaulting to 1000 [ 732.432877][T14677] tipc: Enabling of bearer rejected, failed to enable media [ 732.443317][T14660] wg1 speed is unknown, defaulting to 1000 [ 732.461051][T14660] wg1 speed is unknown, defaulting to 1000 [ 732.740617][T14693] netlink: 'syz.3.2553': attribute type 2 has an invalid length. [ 732.758904][T14693] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2553'. [ 733.006735][T14705] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2555'. [ 733.289597][T14712] syzkaller0: entered promiscuous mode [ 733.295737][T14712] syzkaller0: entered allmulticast mode [ 733.708063][T14723] netlink: 'syz.2.2564': attribute type 2 has an invalid length. [ 733.724871][T14723] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2564'. [ 734.151004][T14733] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2569'. [ 734.434783][T14743] syzkaller0: entered promiscuous mode [ 734.441023][T14743] syzkaller0: entered allmulticast mode [ 735.171841][T14765] program syz.2.2580 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 735.362427][T14770] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2583'. [ 735.404181][T14770] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2583'. [ 735.759854][T14775] syzkaller0: entered promiscuous mode [ 735.763057][ T23] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 735.784632][T14775] syzkaller0: entered allmulticast mode [ 736.073962][T14782] tipc: Enabled bearer , priority 0 [ 736.092129][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 736.162263][ T23] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 736.218927][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.233648][ T23] usb 3-1: Product: syz [ 736.238048][ T23] usb 3-1: Manufacturer: syz [ 736.258018][ T23] usb 3-1: SerialNumber: syz [ 736.294699][ T23] usb 3-1: config 0 descriptor?? [ 736.317459][T14782] syzkaller0: entered promiscuous mode [ 736.415973][T14782] syzkaller0: entered allmulticast mode [ 736.429176][T14791] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2592'. [ 736.439916][T14782] tipc: Resetting bearer [ 736.511922][T14781] tipc: Resetting bearer [ 738.349777][ T9] usb 3-1: USB disconnect, device number 19 [ 740.003449][T14781] tipc: Disabling bearer [ 740.032607][T14812] netlink: 'syz.2.2598': attribute type 58 has an invalid length. [ 740.040502][T14812] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2598'. [ 740.239868][T14816] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2600'. [ 740.330915][T14821] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2603'. [ 740.748423][T14836] tipc: Enabled bearer , priority 0 [ 740.895092][T14836] syzkaller0: entered promiscuous mode [ 740.902066][T14836] syzkaller0: entered allmulticast mode [ 740.918114][T14836] tipc: Resetting bearer [ 740.940325][T14843] netlink: 'syz.1.2611': attribute type 58 has an invalid length. [ 740.950056][T14843] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2611'. [ 740.996476][T14835] tipc: Resetting bearer [ 743.705614][T14835] tipc: Disabling bearer [ 743.728638][T14867] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 743.739531][T14868] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2618'. [ 744.071337][T14881] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2623'. [ 744.080874][T14881] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2623'. [ 744.234329][T14886] bridge_slave_0: left allmulticast mode [ 744.240065][T14886] bridge_slave_0: left promiscuous mode [ 744.262025][T14886] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.340853][ T55] block nbd0: Possible stuck request ffff888021a70000: control (read@0,1024B). Runtime 450 seconds [ 744.351839][ T55] block nbd0: Possible stuck request ffff888021a80000: control (read@1024,3072B). Runtime 450 seconds [ 744.376181][T14886] bridge_slave_1: left allmulticast mode [ 744.393376][T14886] bridge_slave_1: left promiscuous mode [ 744.399245][T14886] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.486067][T14886] team0: Port device team_slave_0 removed [ 744.510988][T14886] team0: Port device team_slave_1 removed [ 744.526628][T14886] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 744.534992][T14886] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 744.545074][T14886] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 744.553551][T14886] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 744.830426][T14901] syzkaller0: entered promiscuous mode [ 744.843115][T14901] syzkaller0: entered allmulticast mode [ 744.872883][T14909] netlink: 'syz.1.2632': attribute type 5 has an invalid length. [ 744.929455][T14907] bond0: entered promiscuous mode [ 744.957248][T14907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 747.362921][T14912] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2630'. [ 747.372445][T14912] bond0: entered allmulticast mode [ 747.378896][T14914] netlink: 'syz.1.2633': attribute type 58 has an invalid length. [ 747.387930][T14914] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2633'. [ 747.432711][T14917] bridge1: entered promiscuous mode [ 747.438175][T14917] bridge1: entered allmulticast mode [ 747.445550][T14917] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 747.538020][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.545552][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.781275][T14945] netlink: 240 bytes leftover after parsing attributes in process `syz.3.2636'. [ 748.020445][T14948] bridge_slave_0: left allmulticast mode [ 748.053104][T14948] bridge_slave_0: left promiscuous mode [ 748.077907][T14948] bridge0: port 1(bridge_slave_0) entered disabled state [ 748.109344][T14948] bridge_slave_1: left allmulticast mode [ 748.120488][T14948] bridge_slave_1: left promiscuous mode [ 748.132350][T14948] bridge0: port 2(bridge_slave_1) entered disabled state [ 748.175222][T14948] bond0: (slave bond_slave_0): Releasing backup interface [ 748.187863][T14948] bond_slave_0: left promiscuous mode [ 748.252740][T14948] bond0: (slave bond_slave_1): Releasing backup interface [ 748.276524][T14948] bond_slave_1: left promiscuous mode [ 748.376236][T14948] team0: Port device team_slave_0 removed [ 748.436444][T14948] team0: Port device team_slave_1 removed [ 748.473259][T14948] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 748.486887][T14948] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 748.512609][T14948] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 748.521121][T14948] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 748.610138][T14959] tipc: Enabled bearer , priority 0 [ 748.739688][T14959] syzkaller0: entered promiscuous mode [ 748.752151][T14959] syzkaller0: entered allmulticast mode [ 748.768710][T14959] tipc: Resetting bearer [ 748.803687][T14958] tipc: Resetting bearer [ 749.543265][ T23] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 749.702354][ T23] usb 4-1: device descriptor read/64, error -71 [ 749.985754][ T23] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 750.182290][ T23] usb 4-1: device descriptor read/64, error -71 [ 750.303190][ T23] usb usb4-port1: attempt power cycle [ 750.802177][ T23] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 750.833146][ T23] usb 4-1: device descriptor read/8, error -71 [ 751.114028][ T23] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 751.162172][ T23] usb 4-1: device descriptor read/8, error -71 [ 751.294495][ T23] usb usb4-port1: unable to enumerate USB device [ 752.481647][T14958] tipc: Disabling bearer [ 752.491727][T14962] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 752.499270][T14965] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2646'. [ 752.688557][T14988] tipc: Enabled bearer , priority 0 [ 752.696900][T14988] syzkaller0: entered promiscuous mode [ 752.704095][T14988] syzkaller0: entered allmulticast mode [ 752.772891][T14988] tipc: Resetting bearer [ 752.798231][T14987] tipc: Resetting bearer [ 752.869623][T14987] tipc: Disabling bearer [ 753.123112][T15002] syzkaller0: entered promiscuous mode [ 753.132229][T15002] syzkaller0: entered allmulticast mode [ 753.943984][T15016] tipc: Enabled bearer , priority 0 [ 754.012140][ T9] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 754.240403][T15016] syzkaller0: entered promiscuous mode [ 754.252441][T15016] syzkaller0: entered allmulticast mode [ 754.261035][T15016] tipc: Resetting bearer [ 754.305195][ T9] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 754.364848][ T9] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 754.432573][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 754.454000][T15019] bond1: entered promiscuous mode [ 754.459267][T15019] 8021q: adding VLAN 0 to HW filter on device bond1 [ 754.482090][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.490644][T15015] tipc: Resetting bearer [ 756.834151][ T969] usb 4-1: USB disconnect, device number 34 [ 757.862567][T15015] tipc: Disabling bearer [ 757.883056][T15021] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2664'. [ 757.914068][T15021] bond1: entered allmulticast mode [ 757.970344][T15023] bridge2: entered promiscuous mode [ 757.983431][T15023] bridge2: entered allmulticast mode [ 757.990532][T15023] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 758.394754][T15064] netlink: 'syz.3.2675': attribute type 58 has an invalid length. [ 758.432281][T15064] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2675'. [ 759.187821][ T969] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 759.315620][T15082] bond1: entered promiscuous mode [ 759.323342][T15082] 8021q: adding VLAN 0 to HW filter on device bond1 [ 759.340196][T15082] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2682'. [ 759.355578][T15082] bond1: entered allmulticast mode [ 759.403808][T15082] bridge1: entered promiscuous mode [ 759.409536][T15082] bridge1: entered allmulticast mode [ 759.415903][T15082] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 759.433550][ T969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 759.510870][ T969] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 759.529624][ T969] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.546960][ T969] usb 1-1: Product: syz [ 759.557461][ T969] usb 1-1: Manufacturer: syz [ 759.588728][ T969] usb 1-1: SerialNumber: syz [ 759.659965][ T969] usb 1-1: config 0 descriptor?? [ 759.687570][T15089] syzkaller0: entered promiscuous mode [ 759.694516][T15089] syzkaller0: entered allmulticast mode [ 759.731188][T15087] tipc: Enabled bearer , priority 0 [ 759.902734][T15087] syzkaller0: entered promiscuous mode [ 759.908349][T15087] syzkaller0: entered allmulticast mode [ 759.923689][T15087] tipc: Resetting bearer [ 761.583907][ T5792] usb 1-1: USB disconnect, device number 19 [ 762.860046][T15086] tipc: Resetting bearer [ 765.190498][T15086] tipc: Disabling bearer [ 765.200642][T15102] syz_tun: entered allmulticast mode [ 765.209375][T15105] tipc: Enabling of bearer rejected, failed to enable media [ 765.563756][T15127] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2695'. [ 766.326169][T15127] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 766.468592][T15127] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 766.504602][T15127] bond0 (unregistering): Released all slaves [ 766.810704][T15150] syzkaller0: entered promiscuous mode [ 766.832153][T15150] syzkaller0: entered allmulticast mode [ 767.299183][T15173] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2706'. [ 769.590711][T15180] tipc: Enabling of bearer rejected, failed to enable media [ 769.599977][T15189] netlink: 'syz.1.2709': attribute type 58 has an invalid length. [ 769.608404][T15189] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2709'. [ 770.066720][T15208] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2716'. [ 770.227205][T15213] program syz.2.2715 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 770.405545][T15218] dummy0: entered promiscuous mode [ 770.428901][T15218] vlan2: entered promiscuous mode [ 770.742154][ T23] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 770.927462][T15224] tipc: Enabled bearer , priority 0 [ 770.961538][T15224] syzkaller0: entered promiscuous mode [ 770.982839][T15224] syzkaller0: entered allmulticast mode [ 771.025988][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 771.039048][T15224] tipc: Resetting bearer [ 771.081129][ T23] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 771.156168][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.168992][T15223] tipc: Resetting bearer [ 771.179218][ T23] usb 3-1: Product: syz [ 771.191316][ T23] usb 3-1: Manufacturer: syz [ 771.199638][ T23] usb 3-1: SerialNumber: syz [ 771.218581][ T23] usb 3-1: config 0 descriptor?? [ 771.343658][T15223] tipc: Disabling bearer [ 771.744689][T15240] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2725'. [ 772.201712][T15249] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input26 [ 772.466834][T15257] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2733'. [ 772.864267][T15257] bond0 (unregistering): left promiscuous mode [ 772.875428][T15257] bond0 (unregistering): Released all slaves [ 773.050331][T15265] syzkaller0: entered promiscuous mode [ 773.070192][T15265] syzkaller0: entered allmulticast mode [ 773.105817][T15264] tipc: Enabled bearer , priority 0 [ 773.182711][T15260] tipc: Resetting bearer [ 773.262472][T15259] tipc: Resetting bearer [ 773.276880][T15272] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2737'. [ 773.373269][T15259] tipc: Disabling bearer [ 773.537921][T15280] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2738'. [ 773.917634][T15283] syzkaller0: entered promiscuous mode [ 773.938499][ T5890] usb 3-1: USB disconnect, device number 20 [ 773.952097][T15283] syzkaller0: entered allmulticast mode [ 773.981882][T15288] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.2740'. [ 774.422135][ T55] block nbd0: Possible stuck request ffff888021a70000: control (read@0,1024B). Runtime 480 seconds [ 774.433313][ T55] block nbd0: Possible stuck request ffff888021a80000: control (read@1024,3072B). Runtime 480 seconds [ 774.528304][T15299] netlink: 'syz.3.2745': attribute type 58 has an invalid length. [ 774.568464][T15299] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2745'. [ 774.624276][T15301] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2746'. [ 774.834114][T15304] tipc: Enabled bearer , priority 0 [ 774.857750][T15304] syzkaller0: entered promiscuous mode [ 774.869246][T15304] syzkaller0: entered allmulticast mode [ 774.913267][T15304] tipc: Resetting bearer [ 774.922864][T15303] tipc: Resetting bearer [ 775.010888][T15303] tipc: Disabling bearer [ 775.030406][T15308] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2747'. [ 775.095867][T15310] program syz.1.2750 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 775.313968][T15312] tipc: Enabled bearer , priority 0 [ 775.438971][T15312] syzkaller0: entered promiscuous mode [ 775.445999][T15312] syzkaller0: entered allmulticast mode [ 775.465164][T15312] tipc: Resetting bearer [ 775.496908][T15311] tipc: Resetting bearer [ 775.532184][ T969] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 775.801551][ T969] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 775.934903][ T969] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 775.966934][ T969] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.976586][ T969] usb 2-1: Product: syz [ 775.980919][ T969] usb 2-1: Manufacturer: syz [ 775.988823][ T969] usb 2-1: SerialNumber: syz [ 775.999655][ T969] usb 2-1: config 0 descriptor?? [ 778.605336][T15311] tipc: Disabling bearer [ 778.656694][T15332] gretap0: entered promiscuous mode [ 778.679052][T15332] vlan2: entered promiscuous mode [ 778.711254][ T5890] usb 2-1: USB disconnect, device number 30 [ 778.870307][T15347] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2757'. [ 779.201749][T15357] tipc: Enabled bearer , priority 0 [ 779.213290][T15360] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.2759'. [ 779.227656][T15357] syzkaller0: entered promiscuous mode [ 779.239820][T15357] syzkaller0: entered allmulticast mode [ 779.305253][T15356] tipc: Resetting bearer [ 779.421869][T15356] tipc: Disabling bearer [ 779.460875][T15362] netlink: 'syz.3.2762': attribute type 58 has an invalid length. [ 779.471751][T15362] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2762'. [ 779.537320][T15364] tipc: Enabled bearer , priority 0 [ 779.559059][T15363] tipc: Disabling bearer [ 779.793161][T15371] program syz.3.2765 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 779.970229][T15375] gretap0: entered promiscuous mode [ 779.984901][T15375] vlan2: entered promiscuous mode [ 780.251000][T15379] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2770'. [ 780.272202][ T969] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 780.425478][T15385] netlink: 64691 bytes leftover after parsing attributes in process `syz.0.2772'. [ 780.476284][T15387] tipc: Enabled bearer , priority 0 [ 780.519129][T15387] syzkaller0: entered promiscuous mode [ 780.536983][ T969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 780.548154][T15387] syzkaller0: entered allmulticast mode [ 780.559990][ T969] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 780.589148][ T969] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.632026][ T969] usb 4-1: Product: syz [ 780.665978][ T969] usb 4-1: Manufacturer: syz [ 780.670656][ T969] usb 4-1: SerialNumber: syz [ 780.679957][T15386] tipc: Resetting bearer [ 780.703735][ T969] usb 4-1: config 0 descriptor?? [ 780.771934][T15386] tipc: Disabling bearer [ 780.804088][T15392] netlink: 'syz.1.2775': attribute type 58 has an invalid length. [ 780.872183][T15392] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2775'. [ 780.918941][T15390] tipc: Enabled bearer , priority 0 [ 780.944603][T15390] syzkaller0: entered promiscuous mode [ 780.950160][T15390] syzkaller0: entered allmulticast mode [ 781.231102][T15399] syzkaller0: entered promiscuous mode [ 781.305200][T15399] syzkaller0: entered allmulticast mode [ 781.343959][T15393] tipc: Resetting bearer [ 781.564801][T15389] tipc: Resetting bearer [ 781.644216][T15389] tipc: Disabling bearer [ 783.177092][ T969] usb 4-1: USB disconnect, device number 35 [ 783.360321][T15423] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2781'. [ 785.023237][T15408] vlan2: entered promiscuous mode [ 785.143771][T15432] tipc: Enabling of bearer rejected, failed to enable media [ 787.820412][T15461] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2789'. [ 788.048759][T15468] program syz.1.2790 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 788.125321][T15471] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2791'. [ 788.217162][T15475] tipc: Enabled bearer , priority 0 [ 788.233710][T15475] syzkaller0: entered promiscuous mode [ 788.247036][T15475] syzkaller0: entered allmulticast mode [ 788.281074][T15475] tipc: Resetting bearer [ 788.353087][T10972] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 788.353713][T15474] tipc: Resetting bearer [ 788.433937][T15474] tipc: Disabling bearer [ 788.632506][T10972] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 788.723577][T10972] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 788.804724][T10972] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.905636][T10972] usb 2-1: Product: syz [ 788.969348][T10972] usb 2-1: Manufacturer: syz [ 788.992056][T10972] usb 2-1: SerialNumber: syz [ 789.024371][T10972] usb 2-1: config 0 descriptor?? [ 789.468735][T15492] tipc: Enabling of bearer rejected, failed to enable media [ 789.500674][T15492] syzkaller0: entered promiscuous mode [ 789.532360][T15492] syzkaller0: entered allmulticast mode [ 790.045126][T15505] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2804'. [ 790.772158][T15510] syzkaller0: entered promiscuous mode [ 790.814805][T15510] syzkaller0: entered allmulticast mode [ 791.797551][ T5800] usb 2-1: USB disconnect, device number 31 [ 791.955328][T15518] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2809'. [ 794.009827][T15515] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2808'. [ 794.039186][T15520] netlink: 'syz.0.2810': attribute type 58 has an invalid length. [ 794.053977][T15520] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2810'. [ 794.354245][T15528] syzkaller0: entered promiscuous mode [ 794.360982][T15528] syzkaller0: entered allmulticast mode [ 794.405058][T15532] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2816'. [ 794.598212][T15539] program syz.3.2817 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 794.678802][T15541] tipc: Enabled bearer , priority 0 [ 794.688182][T15541] syzkaller0: entered promiscuous mode [ 794.696670][T15541] syzkaller0: entered allmulticast mode [ 794.713228][T15541] tipc: Resetting bearer [ 794.768921][T15540] tipc: Resetting bearer [ 794.822514][T15540] tipc: Disabling bearer [ 794.841105][T15543] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2820'. [ 794.850780][T15543] bridge_slave_1: left allmulticast mode [ 794.857287][T15543] bridge_slave_1: left promiscuous mode [ 794.864645][T15543] bridge0: port 2(bridge_slave_1) entered disabled state [ 794.881024][T15543] bridge_slave_0: left allmulticast mode [ 794.909436][T15543] bridge_slave_0: left promiscuous mode [ 794.935333][T15543] bridge0: port 1(bridge_slave_0) entered disabled state [ 794.952111][ T5800] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 795.248886][ T5800] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 795.286645][ T5800] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 795.326610][ T5800] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.345223][ T5800] usb 4-1: Product: syz [ 795.349627][ T5800] usb 4-1: Manufacturer: syz [ 795.360920][T15551] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2822'. [ 795.365700][ T5800] usb 4-1: SerialNumber: syz [ 795.421241][ T5800] usb 4-1: config 0 descriptor?? [ 795.498063][T15552] syzkaller0: entered promiscuous mode [ 795.538054][T15552] syzkaller0: entered allmulticast mode [ 797.680035][ T969] usb 4-1: USB disconnect, device number 36 [ 798.799651][T15562] netlink: 'syz.0.2823': attribute type 58 has an invalid length. [ 798.807706][T15562] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2823'. [ 799.112852][T15592] netdevsim netdevsim2: Direct firmware load for . failed with error -2 [ 799.142260][T15592] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 799.200459][T15595] tipc: Enabled bearer , priority 0 [ 799.258718][T15595] syzkaller0: entered promiscuous mode [ 799.273592][T15595] syzkaller0: entered allmulticast mode [ 799.333027][T15595] tipc: Resetting bearer [ 799.360748][T15594] tipc: Resetting bearer [ 799.379184][T15601] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input27 [ 799.423283][T15594] tipc: Disabling bearer [ 799.539624][T15607] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2834'. [ 799.604210][T15608] program syz.1.2833 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 799.664399][T13888] Bluetooth: hci0: link tx timeout [ 799.672192][T13888] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 799.788533][T15616] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2837'. [ 799.885115][T15618] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2838'. [ 799.898646][T15618] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2838'. [ 800.002924][ T5800] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 800.219980][ T5800] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 800.260132][ T5800] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 800.342883][ T5800] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.397968][ T5800] usb 2-1: Product: syz [ 800.417356][ T5800] usb 2-1: Manufacturer: syz [ 800.431358][ T5800] usb 2-1: SerialNumber: syz [ 800.507348][ T5800] usb 2-1: config 0 descriptor?? [ 800.702436][T10972] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 800.812207][T13888] Bluetooth: hci4: command 0x0406 tx timeout [ 801.052678][T10972] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 801.134734][T10972] usb 3-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 801.232519][T10972] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 801.259604][T10972] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.360980][T10972] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 801.398263][T10972] usb 3-1: invalid MIDI out EP 0 [ 801.605050][ T9965] udevd[9965]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 801.692760][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 801.764443][T10972] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 802.381460][T15653] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2848'. [ 802.390712][T15653] netlink: 'syz.3.2848': attribute type 31 has an invalid length. [ 802.399812][T15653] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2848'. [ 802.418140][T15653] netlink: 'syz.3.2848': attribute type 31 has an invalid length. [ 802.597226][T15655] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2849'. [ 802.642113][T15659] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2850'. [ 803.237157][T10972] usb 3-1: USB disconnect, device number 21 [ 803.525087][T15674] tipc: Enabled bearer , priority 0 [ 803.607237][T15674] syzkaller0: entered promiscuous mode [ 803.642603][T15674] syzkaller0: entered allmulticast mode [ 803.657081][T15674] tipc: Resetting bearer [ 803.689410][T10972] usb 2-1: USB disconnect, device number 32 [ 803.738158][T15673] tipc: Resetting bearer [ 804.509331][ T55] block nbd0: Possible stuck request ffff888021a70000: control (read@0,1024B). Runtime 510 seconds [ 804.520486][ T55] block nbd0: Possible stuck request ffff888021a80000: control (read@1024,3072B). Runtime 510 seconds [ 804.602115][ T5890] tipc: Node number set to 2240329923 [ 807.004325][T15673] tipc: Disabling bearer [ 807.013971][T15678] tipc: Enabling of bearer rejected, failed to enable media [ 807.024659][T15681] syzkaller0: entered promiscuous mode [ 807.030185][T15681] syzkaller0: entered allmulticast mode [ 807.039682][T15685] syzkaller0: entered promiscuous mode [ 807.045311][T15685] syzkaller0: entered allmulticast mode [ 807.176867][T15696] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2859'. [ 807.543269][T15704] syzkaller0: entered promiscuous mode [ 807.574530][T15704] syzkaller0: entered allmulticast mode [ 807.822137][T10972] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 808.130678][T10972] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 808.165116][T10972] usb 4-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 808.211777][T10972] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 808.243037][T10972] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.315287][T10972] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 808.389055][T10972] usb 4-1: invalid MIDI out EP 0 [ 808.645577][T10972] snd-usb-audio: probe of 4-1:27.0 failed with error -22 [ 808.655246][ T9965] udevd[9965]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 808.983386][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.799321][ T5800] usb 4-1: USB disconnect, device number 37 [ 810.910906][T15739] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2869'. [ 810.959031][T15737] team_slave_0: entered promiscuous mode [ 810.965155][T15737] team_slave_1: entered promiscuous mode [ 810.982922][T15737] vlan2: entered promiscuous mode [ 810.988120][T15737] team0: entered promiscuous mode [ 811.065634][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 811.125399][T15743] tipc: Enabling of bearer rejected, failed to enable media [ 811.138623][T15743] syzkaller0: entered promiscuous mode [ 811.158864][T15743] syzkaller0: entered allmulticast mode [ 811.398268][T15756] tipc: Enabled bearer , priority 0 [ 811.437206][T15756] tipc: Resetting bearer [ 811.578472][T15754] tipc: Disabling bearer [ 811.602559][T15768] netlink: 'syz.1.2880': attribute type 58 has an invalid length. [ 811.617913][T15768] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2880'. [ 812.012635][ T23] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 812.063960][T15782] netlink: 'syz.1.2884': attribute type 2 has an invalid length. [ 812.084538][T15781] vlan2: entered promiscuous mode [ 812.090242][T15782] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2884'. [ 812.307669][ T23] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 812.346015][ T23] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 812.361221][ T23] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 812.377176][ T23] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 812.386771][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.409576][ T23] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 812.490152][T15787] tipc: Enabled bearer , priority 0 [ 812.502995][T15787] syzkaller0: entered promiscuous mode [ 812.508487][T15787] syzkaller0: entered allmulticast mode [ 812.571482][ T5980] udevd[5980]: setting owner of /dev/mixer3 to uid=0, gid=29 failed: No such file or directory [ 812.663046][ T23] snd-usb-audio: probe of 4-1:27.0 failed with error -12 [ 812.675527][T15792] tipc: Resetting bearer [ 812.743367][T15786] tipc: Resetting bearer [ 812.833010][T15786] tipc: Disabling bearer [ 812.923818][T15796] tipc: Enabled bearer , priority 0 [ 812.948442][T15796] tipc: Resetting bearer [ 813.004504][T15795] tipc: Disabling bearer [ 813.169411][T15805] netlink: 'syz.2.2893': attribute type 58 has an invalid length. [ 813.180270][T15805] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2893'. [ 813.734996][T15816] team_slave_0: entered promiscuous mode [ 813.740804][T15816] team_slave_1: entered promiscuous mode [ 813.754427][T15816] vlan2: entered promiscuous mode [ 813.774683][T15816] team0: entered promiscuous mode [ 813.846457][T15818] netlink: 'syz.2.2896': attribute type 2 has an invalid length. [ 813.854900][T15818] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2896'. [ 814.039720][T15820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2898'. [ 814.207761][T15823] tipc: Enabled bearer , priority 0 [ 814.226704][T15823] syzkaller0: entered promiscuous mode [ 814.240412][T15823] syzkaller0: entered allmulticast mode [ 814.304623][T15823] tipc: Resetting bearer [ 814.319750][T15822] tipc: Resetting bearer [ 814.385741][T15822] tipc: Disabling bearer [ 814.423551][T15831] tipc: Enabled bearer , priority 0 [ 814.436089][T15833] tipc: Enabled bearer , priority 0 [ 814.451763][T15831] tipc: Resetting bearer [ 814.507992][T15833] syzkaller0: entered promiscuous mode [ 814.520836][T15833] syzkaller0: entered allmulticast mode [ 814.527498][T15833] tipc: Resetting bearer [ 814.546083][T15830] tipc: Disabling bearer [ 814.563642][T15832] tipc: Resetting bearer [ 815.290100][ T5800] usb 4-1: USB disconnect, device number 38 [ 817.284372][T15832] tipc: Disabling bearer [ 817.296464][T15847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2905'. [ 817.305635][T15848] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2905'. [ 817.408316][T15854] netlink: 'syz.3.2906': attribute type 58 has an invalid length. [ 817.418846][T15854] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2906'. [ 817.661766][T15868] bridge_slave_0: default FDB implementation only supports local addresses [ 817.845339][T15874] syzkaller0: entered promiscuous mode [ 817.850894][T15874] syzkaller0: entered allmulticast mode [ 817.941532][T15881] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2917'. [ 817.964717][T15879] tipc: Enabled bearer , priority 0 [ 818.026100][T15881] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2917'. [ 818.128008][T15879] syzkaller0: entered promiscuous mode [ 818.154483][T15879] syzkaller0: entered allmulticast mode [ 818.169093][T15879] tipc: Resetting bearer [ 818.245875][T15878] tipc: Resetting bearer [ 818.292359][ T969] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 818.494237][ T969] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 818.523480][ T969] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 818.540517][ T969] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 818.550742][ T969] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 818.571058][ T969] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.590538][T15891] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2919'. [ 818.641685][ T969] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 818.759921][ T9965] udevd[9965]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 818.781389][ T969] snd-usb-audio: probe of 4-1:27.0 failed with error -12 [ 820.930966][T10972] usb 4-1: USB disconnect, device number 39 [ 821.295649][ T5104] Bluetooth: hci2: command 0x0406 tx timeout [ 821.748495][T15878] tipc: Disabling bearer [ 821.931202][T15900] vlan2: entered promiscuous mode [ 821.962699][T15900] team0: entered promiscuous mode [ 822.098879][T15908] tipc: Enabled bearer , priority 0 [ 822.107004][T15908] syzkaller0: entered promiscuous mode [ 822.118441][T15908] syzkaller0: entered allmulticast mode [ 822.182472][T15908] tipc: Resetting bearer [ 822.194433][T15914] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2927'. [ 822.231425][T15907] tipc: Resetting bearer [ 822.272827][T15907] tipc: Disabling bearer [ 822.768753][T15929] tipc: Enabled bearer , priority 0 [ 822.880478][T15931] syzkaller0: entered promiscuous mode [ 822.886660][T15931] syzkaller0: entered allmulticast mode [ 822.893288][T15931] tipc: Resetting bearer [ 823.098461][ T42] tipc: Resetting bearer [ 823.110498][T15927] tipc: Resetting bearer [ 825.686248][T15927] tipc: Disabling bearer [ 825.701324][T15946] vlan2: entered promiscuous mode [ 825.740043][T15950] tipc: Enabling of bearer rejected, failed to enable media [ 825.808769][T15979] netlink: 'syz.2.2942': attribute type 1 has an invalid length. [ 825.839586][T15979] bond0: entered promiscuous mode [ 825.845420][T15979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 825.861512][T15979] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2942'. [ 825.885995][T15979] bond0: (slave bridge1): making interface the new active one [ 825.893705][T15979] bridge1: entered promiscuous mode [ 825.899992][T15979] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 826.395708][T15995] vlan2: entered promiscuous mode [ 826.404301][T15995] team0: entered promiscuous mode [ 826.486661][T16000] tipc: Enabled bearer , priority 0 [ 826.495584][T15998] tipc: Enabled bearer , priority 0 [ 826.508709][T16000] syzkaller0: entered promiscuous mode [ 826.514474][T16000] syzkaller0: entered allmulticast mode [ 826.579728][T15998] syzkaller0: entered promiscuous mode [ 826.590767][T15998] syzkaller0: entered allmulticast mode [ 826.600743][T15998] tipc: Resetting bearer [ 826.658109][T16007] netlink: 'syz.1.2954': attribute type 1 has an invalid length. [ 826.701629][T16007] bond0: entered promiscuous mode [ 826.709531][T16007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 826.725571][T15993] tipc: Resetting bearer [ 829.197374][T15993] tipc: Disabling bearer [ 829.214501][T16012] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2954'. [ 829.227781][T16000] tipc: Resetting bearer [ 829.257675][T16019] bond0: (slave bridge2): making interface the new active one [ 829.268616][T16019] bridge2: entered promiscuous mode [ 829.275783][T16019] bond0: (slave bridge2): Enslaving as an active interface with an up link [ 829.308449][T15999] tipc: Resetting bearer [ 829.388087][T15999] tipc: Disabling bearer [ 829.416757][T16040] netlink: 'syz.1.2961': attribute type 58 has an invalid length. [ 829.425022][T16040] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2961'. [ 830.085933][T16065] tipc: Enabled bearer , priority 0 [ 830.194838][T16061] syzkaller0: entered promiscuous mode [ 830.200625][T16061] syzkaller0: entered allmulticast mode [ 830.215349][T16061] tipc: Resetting bearer [ 832.419037][T16067] tipc: Enabled bearer , priority 0 [ 832.426300][T16060] tipc: Resetting bearer [ 833.292426][ T29] INFO: task udevd:5801 blocked for more than 143 seconds. [ 833.299845][ T29] Not tainted syzkaller #0 [ 833.305467][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 833.314353][ T29] task:udevd state:D stack:23688 pid:5801 ppid:5159 flags:0x00004006 [ 833.323857][ T29] Call Trace: [ 833.327179][ T29] [ 833.330168][ T29] __schedule+0x14d2/0x44d0 [ 833.334812][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 833.340769][ T29] ? asan.module_dtor+0x20/0x20 [ 833.347072][ T29] ? mark_lock+0x94/0x320 [ 833.351505][ T29] ? lock_chain_count+0x20/0x20 [ 833.356734][ T29] ? _raw_spin_lock_irq+0xaf/0xe0 [ 833.361845][ T29] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 833.367438][ T29] schedule+0xbd/0x170 [ 833.371551][ T29] io_schedule+0x80/0xd0 [ 833.375927][ T29] folio_wait_bit_common+0x6eb/0xf70 [ 833.381294][ T29] ? folio_wait_bit+0x30/0x30 [ 833.386138][ T29] ? _compound_head+0x120/0x120 [ 833.391058][ T29] ? filemap_add_folio+0x192/0x3c0 [ 833.396334][ T29] ? __filemap_get_folio+0x70a/0xbc0 [ 833.401673][ T29] ? blkdev_writepage+0x30/0x30 [ 833.406818][ T29] do_read_cache_folio+0x1c0/0x7e0 [ 833.412102][ T29] ? blkdev_writepage+0x30/0x30 [ 833.417014][ T29] read_part_sector+0xd2/0x350 [ 833.421805][ T29] adfspart_check_POWERTEC+0x8d/0xf00 [ 833.427325][ T29] ? adfspart_check_ADFS+0x660/0x660 [ 833.434444][ T29] ? put_partition+0x350/0x350 [ 833.439346][ T29] ? alloc_pages+0x4dc/0x740 [ 833.444177][ T29] bdev_disk_changed+0x73a/0x1410 [ 833.449284][ T29] ? bdev_resize_partition+0xf0/0xf0 [ 833.455078][ T29] ? iput+0x347/0x920 [ 833.459104][ T29] blkdev_get_whole+0x30d/0x390 [ 833.464532][ T29] blkdev_get_by_dev+0x279/0x600 [ 833.469542][ T29] blkdev_open+0x152/0x360 [ 833.474082][ T29] ? blkdev_mmap+0x1b0/0x1b0 [ 833.478711][ T29] do_dentry_open+0x8c6/0x1500 [ 833.483586][ T29] path_openat+0x274b/0x3190 [ 833.488234][ T29] ? __kasan_slab_alloc+0x6c/0x80 [ 833.493351][ T29] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 833.499457][ T29] ? verify_lock_unused+0x140/0x140 [ 833.504822][ T29] ? do_filp_open+0x3d0/0x3d0 [ 833.509563][ T29] ? __virt_addr_valid+0x18c/0x540 [ 833.514764][ T29] do_filp_open+0x1c5/0x3d0 [ 833.519488][ T29] ? vfs_tmpfile+0x490/0x490 [ 833.524234][ T29] ? _raw_spin_unlock+0x28/0x40 [ 833.529120][ T29] ? alloc_fd+0x58f/0x630 [ 833.533617][ T29] do_sys_openat2+0x12c/0x1c0 [ 833.538346][ T29] ? __bpf_trace_rseq_ip_fixup+0x1f0/0x1f0 [ 833.544419][ T29] ? do_sys_open+0xe0/0xe0 [ 833.548878][ T29] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 833.554977][ T29] ? lock_chain_count+0x20/0x20 [ 833.559866][ T29] __x64_sys_openat+0x139/0x160 [ 833.564809][ T29] do_syscall_64+0x55/0xb0 [ 833.569266][ T29] ? clear_bhb_loop+0x40/0x90 [ 833.574032][ T29] ? clear_bhb_loop+0x40/0x90 [ 833.578847][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 833.584895][ T29] RIP: 0033:0x7f2f28ea7407 [ 833.589359][ T29] RSP: 002b:00007ffee9fd8770 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 833.597880][ T29] RAX: ffffffffffffffda RBX: 00007f2f2954e880 RCX: 00007f2f28ea7407 [ 833.605977][ T29] RDX: 00000000000a0800 RSI: 0000563f3cc19df0 RDI: ffffffffffffff9c [ 833.614026][ T29] RBP: 0000563f3cbf8910 R08: 0000000000000000 R09: 0000000000000000 [ 833.622184][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 0000563f3cc15f10 [ 833.630199][ T29] R13: 0000563f3cc10410 R14: 0000000000000000 R15: 0000563f3cc15f10 [ 833.638267][ T29] [ 833.641418][ T29] [ 833.641418][ T29] Showing all locks held in the system: [ 833.649550][ T29] 1 lock held by khungtaskd/29: [ 833.654724][ T29] #0: ffffffff8cd2fee0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 833.665103][ T29] 3 locks held by kworker/u4:3/49: [ 833.670233][ T29] #0: ffff88814cadd538 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 833.681935][ T29] #1: ffffc90000ba7d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 833.695063][ T29] #2: ffffffff8dfbbd08 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x14e0 [ 833.704602][ T29] 3 locks held by kworker/u4:6/1140: [ 833.709921][ T29] #0: ffff888017871538 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 833.721677][ T29] #1: ffffc9000466fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 833.732903][ T29] #2: ffffffff8dfbbd08 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 833.742066][ T29] 2 locks held by getty/5554: [ 833.746870][ T29] #0: ffff8880312b20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 833.756767][ T29] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x425/0x1380 [ 833.767106][ T29] 1 lock held by udevd/5801: [ 833.771732][ T29] #0: ffff8880219a24c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 833.781922][ T29] 2 locks held by syz.1.2969/16060: [ 833.787217][ T29] #0: ffffffff8dfbbd08 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x41/0x1c0 [ 833.796361][ T29] #1: ffffffff8cd358b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x448/0x830 [ 833.807344][ T29] 1 lock held by syz.3.2971/16066: [ 833.812555][ T29] #0: ffffffff8dfbbd08 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x41/0x1c0 [ 833.821594][ T29] 1 lock held by syz.3.2971/16070: [ 833.826802][ T29] #0: ffffffff8dfbbd08 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x7d2/0x1170 [ 833.835712][ T29] 1 lock held by syz.3.2971/16072: [ 833.840836][ T29] #0: ffffffff8dfbbd08 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x41/0x1c0 [ 833.849877][ T29] 1 lock held by syz.3.2971/16074: [ 833.855135][ T29] #0: ffffffff8dfbbd08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x76f/0xf10 [ 833.865634][ T29] 1 lock held by syz.3.2971/16077: [ 833.870791][ T29] #0: ffffffff8dfbbd08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x76f/0xf10 [ 833.880426][ T29] 1 lock held by syz.3.2971/16080: [ 833.885629][ T29] #0: ffffffff8dfbbd08 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x7d2/0x1170 [ 833.894566][ T29] 1 lock held by syz.0.2973/16075: [ 833.899713][ T29] #0: ffffffff8dfbbd08 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x3b9/0x1fd0 [ 833.909178][ T29] 1 lock held by syz.0.2973/16076: [ 833.914394][ T29] #0: ffffffff8dfbbd08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x76f/0xf10 [ 833.923952][ T29] 1 lock held by syz.0.2973/16081: [ 833.929098][ T29] #0: ffffffff8dfbbd08 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x32c/0x1c60 [ 833.938700][ T29] 1 lock held by syz.0.2973/16084: [ 833.945240][ T29] #0: ffffffff8dfbbd08 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x41/0x1c0 [ 833.954363][ T29] 1 lock held by syz.2.2975/16094: [ 833.959503][ T29] #0: ffffffff8dfbbd08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x76f/0xf10 [ 833.969324][ T29] [ 833.971690][ T29] ============================================= [ 833.971690][ T29] [ 833.980298][ T29] NMI backtrace for cpu 1 [ 833.984677][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 833.991927][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 834.002012][ T29] Call Trace: [ 834.005326][ T29] [ 834.008283][ T29] dump_stack_lvl+0x16c/0x230 [ 834.013005][ T29] ? preempt_count_add+0x91/0x1a0 [ 834.018232][ T29] ? show_regs_print_info+0x20/0x20 [ 834.023455][ T29] ? load_image+0x3b0/0x3b0 [ 834.028010][ T29] nmi_cpu_backtrace+0x39b/0x3d0 [ 834.032983][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 834.039153][ T29] ? _printk+0xd0/0x110 [ 834.043331][ T29] ? load_image+0x3b0/0x3b0 [ 834.047869][ T29] ? load_image+0x3b0/0x3b0 [ 834.052569][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 834.058664][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 834.064693][ T29] watchdog+0xf41/0xf80 [ 834.068892][ T29] ? watchdog+0x1e1/0xf80 [ 834.073260][ T29] kthread+0x2fa/0x390 [ 834.077352][ T29] ? hungtask_pm_notify+0x90/0x90 [ 834.082402][ T29] ? kthread_blkcg+0xd0/0xd0 [ 834.087024][ T29] ret_from_fork+0x48/0x80 [ 834.091474][ T29] ? kthread_blkcg+0xd0/0xd0 [ 834.096083][ T29] ret_from_fork_asm+0x11/0x20 [ 834.101075][ T29] [ 834.104707][ T29] Sending NMI from CPU 1 to CPUs 0: [ 834.109973][ C0] NMI backtrace for cpu 0 [ 834.109983][ C0] CPU: 0 PID: 5792 Comm: kworker/0:3 Not tainted syzkaller #0 [ 834.110016][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 834.110028][ C0] Workqueue: events_freezable update_balloon_stats_func [ 834.110060][ C0] RIP: 0010:detach_buf_split+0x50/0xb80 [ 834.110084][ C0] Code: 96 c3 fc fc 48 89 1c 24 48 81 c3 80 00 00 00 48 89 d8 48 c1 e8 03 48 89 44 24 30 42 80 3c 20 00 74 08 48 89 df e8 c0 1e 54 fd <89> 6c 24 54 41 89 ed 4c 89 e8 48 c1 e0 04 48 89 5c 24 58 48 8b 1b [ 834.110098][ C0] RSP: 0018:ffffc9000460f4d0 EFLAGS: 00000246 [ 834.110112][ C0] RAX: 1ffff1100364cb10 RBX: ffff88801b265880 RCX: ffff888049245a00 [ 834.110125][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88801b265800 [ 834.110136][ C0] RBP: 0000000000000000 R08: ffffffff8ca144df R09: 1ffffffff194289b [ 834.110148][ C0] R10: dffffc0000000000 R11: fffffbfff194289c R12: dffffc0000000000 [ 834.110161][ C0] R13: ffff88801b265800 R14: ffff88801b265880 R15: 0000000000000000 [ 834.110173][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 834.110187][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 834.110198][ C0] CR2: 00005555925185c8 CR3: 000000000cb30000 CR4: 00000000003506f0 [ 834.110213][ C0] Call Trace: [ 834.110220][ C0] [ 834.110227][ C0] ? __lock_acquire+0x7c80/0x7c80 [ 834.110266][ C0] ? do_raw_spin_lock+0x121/0x2c0 [ 834.110295][ C0] virtqueue_get_buf_ctx+0x592/0xd10 [ 834.110318][ C0] ? si_mem_available+0x266/0x2d0 [ 834.110339][ C0] update_balloon_stats_func+0x59d/0x9c0 [ 834.110369][ C0] ? virtballoon_restore+0x370/0x370 [ 834.110462][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 834.110481][ C0] ? process_scheduled_works+0x957/0x15b0 [ 834.110504][ C0] ? process_scheduled_works+0x957/0x15b0 [ 834.110526][ C0] process_scheduled_works+0xa45/0x15b0 [ 834.110563][ C0] ? assign_work+0x400/0x400 [ 834.110586][ C0] ? assign_work+0x39e/0x400 [ 834.110610][ C0] worker_thread+0xa55/0xfc0 [ 834.110645][ C0] kthread+0x2fa/0x390 [ 834.110660][ C0] ? pr_cont_work+0x560/0x560 [ 834.110681][ C0] ? kthread_blkcg+0xd0/0xd0 [ 834.110697][ C0] ret_from_fork+0x48/0x80 [ 834.110718][ C0] ? kthread_blkcg+0xd0/0xd0 [ 834.110734][ C0] ret_from_fork_asm+0x11/0x20 [ 834.110766][ C0] [ 834.111419][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 834.345297][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 834.352508][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 834.362574][ T29] Call Trace: [ 834.365862][ T29] [ 834.368802][ T29] dump_stack_lvl+0x16c/0x230 [ 834.373508][ T29] ? show_regs_print_info+0x20/0x20 [ 834.378726][ T29] ? load_image+0x3b0/0x3b0 [ 834.383255][ T29] panic+0x2c0/0x710 [ 834.387158][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 834.392810][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 834.397322][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 834.402893][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 834.409082][ T29] watchdog+0xf80/0xf80 [ 834.413267][ T29] ? watchdog+0x1e1/0xf80 [ 834.417617][ T29] kthread+0x2fa/0x390 [ 834.421712][ T29] ? hungtask_pm_notify+0x90/0x90 [ 834.426750][ T29] ? kthread_blkcg+0xd0/0xd0 [ 834.431350][ T29] ret_from_fork+0x48/0x80 [ 834.435779][ T29] ? kthread_blkcg+0xd0/0xd0 [ 834.440382][ T29] ret_from_fork_asm+0x11/0x20 [ 834.445170][ T29] [ 834.448520][ T29] Kernel Offset: disabled [ 834.452849][ T29] Rebooting in 86400 seconds..