last executing test programs: 10.461680896s ago: executing program 2 (id=795): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80, {0xffffffffffffffff, 0x0, 0x5}}, "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", "cfb220c7d481332f3f1f8079dfe27e23185fd67a407358db7892789f96b7fa9b14daa48617a10d8a91b820ecbaa470ec0bb1f3cbce7f70ec70b19a4cad082229c2788f8611d7dc306d9a45761a97828c36ed87ebde5d4a3e1609c1422a8ae2f7cca428ebdb0dd38b90b9598a353b18a600bf35a369e6e3e5abb0a1c5c0c0e48e014e7ef1b7d768b3c5657f1adfbb7ff2985082b16c99eb83ec3660990dcf1106efa6b7f8a4798fec811c2c85faec0235c83b7093b3d02367421abc40a554e0b0d7fc1bcaece4222c594f8d20e368fe625ca433c75486fe5c94103cd17291349ee12b877602936688666f82ecd8f4f83d50bb1650e08b96cd25ad147c4c956c98649806a3736d072c8d97c6e3a46a7c18535df8d828b86662400d8e9cc861fa1dd5dc193892d3168396c499e07b279fb76c7e289f2fd955691363bc1de74536dc571817615c88b0d594a136966c129e424ccb7ef1c7c7461eac7ca5f03d72ea4c9c3d1156fb4cb1bb70e097357588b5c49f6716bbae1bd118104b42786f09a3b9f7cb80f383cadfd0c462096ff2bb637b7cf79764b6a4b7ffc5d87c1f063fb48e7f08ad5af534c70079f12f28e8921abbd4280801cdf6101ea494768b1274afd0eea5939843d56022a83590920fe446d52dfe699c33977d5592dbf7e0e236b8175d7faae06e0c50f7402174023ce4b996564e945c416fa823f2f9c3213ac50b20bd1fd55bb8d9fe70ee31ea2f404ae0fcbf857bebcc9196c8c622059fea2e248e4058905b69fb98be312d3193ea1d8ff653173e8c4ad8c81d77a5bea45b3cd6fba19b6336f94ec04c8f86d24e9ca959874577d7ca0baf3c4ff30b554bc3ccc06df46d925373fbf7863e2cf684d3bc9603ab72b851ca4728294de87f2dec6f23ca9e43ed2e5cbba662d13137fc1ce0f6ae6aeb974f72f4b750825fafb67715e425f40c7da83b92d4249a0a4e96b789cceb7b07f38cb83f72dd093a345ab3cb8ae760fc14e40ea182a0d7fe1facc62a1ab0902349fd7e27bb0cd349fb5053f4734823abf020739b4b43bb11f5d69b61295068df31177959903c2ea1bb82d24eeaa93d0d475bd5d15b2a401e7ebe0d3cfbd45b2db2882cdb41408aaa718f8320fbb7f9da4f68d0eebeef175442e807e9908132731fe5e268582dcf6dffa4251ebb7121db8e412089fa9d8af9919799547a26b6b8eb44c28f1ce5f9a3021fe30841be204c1b4b3813dccae6baeef9b53fe413cbec46bb0cd95d3793cdc9bfe6cdd96ce0c4aa4a25e1cbbeeee6c9fa558b279048c7e31d07b125bac68d4e1f4253bd4dc7824cf3d722c94cf2b8f61bc8155731f072fd447082b181a13ffb8c08a1d568298c5de2d969fae2bea070a9e2688f294e76b8c200dfb993ec19778eb56ae3127c1116ccc85ef8806fdcb9ee0cb66ff03fbb0fa6c52b9b101b3830fc1650efa859163a264b4059092e5dc9a415ec09bfd1460f142fe5ef00beb6aa9032bd0de97aefc6f65e8cfeea761b3d8174caf528b6627682ff4d4450cb0f34251fc000ed01dd538ef13260984f44703b89dfb511bfb538d0b1c8aded964e1bcc5ca57437468b14a31ec0000a17e4d24369c40500449c37e7dccedba3eceb59d827dace246b5c48afb6a5988e64c560b3dc76c32d831f51cdbc5cfc4364ac8b25372b87c92bacfedc6bc8feb44098dbebc89cda03c59e4c58a31372bd574704b9e788834b9f83c6703f6709efad97c4ce499ea580dae1de282a019247cb3dce5c1906322e6d3ca5157ea6428bc42416936fac194efe136089c07faf7adf1e923003f1dc63fcbc634b389a4f351a6acee785e23c6bb04ca2f265be1e634362b87c6f9fd369bbe62a1db6b286c7ffde6370bb4d6e9e0cc3ec451e1a99d134726c9075e71319d3a683e91e4b900061c0e6d086481069cd32f4cde7816f8e3a0ac6428a7488f31f06ee0da10df3ed0c150d29085879d064f914407f60018bb588735663647bfeda930407d69abef3f72fd461c2b85b00988b412a180fd267fc646a86d297e7e40912607157b6fa873df6442579b1523d8117f0c06c87adf75843b8bff30a5bfb4fe1e9846b7fdd58774641f9cc9c4e38e53ed24a9d9e9dbc7657aa9b220a8545852b0409f5c0812e953823e841967bf55059acc7a4600818134359e72cfae0d04a0738ac8acca133d6395a455b22cdd6f901d4cdea1cf17415f7d7895a4b65f80d2f7c5c60a0dc04b40c9ae5ffc922e074a82afd704673e1766d19db9f60eab0238fb4a3169a08aded607847e5d752d4e24c4914b95bac3892bcfc2076f16a7f07583f0d418b9dec03afdb2e93335a392e1b1ef2910eb2a4b6a63fe61641f3c02bef73cd7e4a77a6f30ae821598c3160511603541bea89022b54f321c2a55cdeeb19335d78a821ab6ca0f36588a9a79a41e2123905a491d658c2a1caeee998c995bb0f816c92c5dc2b862183f80b9f9786c9c5524723c944d11f6894c7f008ab8194f577e22c03631d2a33205f508ea49653e7600639242dbaba704f700ac227f32dc575c559a0a1f4fe0cf6c22fbf7e1ca2ab4b1e4724e8379021e3c9a7c1509c6a413bd7d9c98938e440762eda2546d636597defa86c1ad31126a1182d365f858927d140fb0a97f80adcc5f4ed5efe11ac503453917a263f1d64692348d30f382e85e464ef7616067a42df5de1a1b622fabefe2ca4ceffa4801f7a02fdef40644cd1d079590d900727628d54b44db7ac700d8d664f7eea12837fcf347360d8e43a354fe51b4c49e8fcda3c322b738ed2b800b5cc06e22c72af2a67ee7bc8ae894e841f2cf2b0a7e381caf944bf4e91ded63b6f82f7474e4f81e986fff7e5339b8e9f60103a1af81833e120f0c88893ecabac044a4a2867cda4fdcb084459a00507aa9e5a8e761a72df3322a1ae8cd918b4994c23bdb1e459b4f21651bd7fa067a00e2a2877bf6b29f289ed8018e0a78f6fb4ded9749640e0e37f6381b320ab72da404f3d70d60152f6fa6738932387b83250cb3148141edb52f109bfd4bda8054959db01f4c550609a63c08cf01ecd110cfc6f0055638c0dde039d2ac2daafe59e561f9f08a8830c3f661e4325de63e98f4a4216ec3b83fd200201ed3f647147611424286ffc6c4a8aca64a6874743242d4feeaa9153de06e51c512d9cab7ae712c6424069f3e5db4ddebe9b48b5f6caa741162edf97674d2368e03a387f798151a4b9b9fa9e3a5838a343133158364a9fe3bb4b9a3c464c0c54a4c64ca774ad200925ac6bf59508c10a8574afde9b821741af43ec64cedc13aa220b39772195283506dfe899dd6a7b37eb21f154056a2df3564ef2bb918a928651de88c3613b84e7960bddd7b46b1304deb30f57b6fe5a3b4788629e91bcc245e748b3387f52da4bb094782326dcfde0827e2d674e41bb375247d349cade9c704e5431785009b0e53f1b45c70b237c9432e07e4c7a8464ed11608a3d2184338dd9e6f6ef4b3d751e979667b6a3953c89aff4eead7a978071a912b3de21a85a5849c57933cf53cd74a610f3e60f699766fbc7e0bb8a891a429c77bb6f3b6f9f8eb0b1bd9588ef2ce98fdf0a0838e4b0bed807d8b673093c717feec8d697e32542274887d039db7a2daed5d52c8e9767443229f8003c5d67e907376ea2f393484fa70deee159cb56f8d097b8fe2736e95f540137e20725f0940a8d049068ead4c46bb3771a671bb00de88931e03445a55868de0c220db05cbda9f996d5fe7c1070efe5e718fed4d4cb4ecacad3d6b643bc0ffe9a71b720ba7b5adbbdefe29106ef6a6ffe4547f5d02bec312147df0abe80efb2d5e598fc7c8b268e58b59e0d75728e9a18126f013c963ddc92d251405f857fe3a5cbacf443be7772975b7bf4f6d7ed6f80dfcc47a88c6d19120942adb5385be6ef3c0d7e396bcac5affc8f9276d6cd1a0b069aed72a98cde8ea7aabe6cc091b19efcfaf9368dfeb3087a05a42e3b893dae5ffeb72e6ac06e995a2a75ea0b5f7876247bb4c38cf3f0153f1f7473b522f1c440b632270e2b1d654d3a5ae16cb788482760d34ca79c8951b29c628e21029715683a3e6f8f77c5d89ecdae37e0190f79c4c1dbc9d0160e359cd6c94d6662ed53bb01a83374ff593c823acc59241b11f020902069fc0054a9b26cb320bef4fb1f8cc5bd8ae76eb029afab731b9876bc4e8708a8315512823cff1f9375d284ce66e53d4efad6c76d17bb532fc938b8f80c13ce86b5ba3e540164bc5a5d47cd321c241d8740f453ef95bd3878d578561ad6ce20877ffbd44062dce8df1d048d8d5e4045be647886108cbb1f0b26a8b74b66858afedb830a161bb02bde4c46a688a0ea3a7018ce24666aab0f422ede2f78ea29f77e28d87c744cba0285ce33dff5ac45774829699de6d725a9b6db6e7d03ad4ec9d075c386e68ca0bcd9e9911d741ed0168cbddb87a7918a964d206629da4e887277b0ef7d3f9c7082f3f15f29a0dfb39f3b0877a5ec3ac4343e0d808f5aee8f1869923aab6dfc1016821c013109f34aece6183994b853d0e9561375c02cdd26b1b55194757341929a8038864cedd6b5a3b8b51ade44637044c4ebddb190f173969a0ca4cf5d42153763a0b91da0110ae7a25204850927d81b00176d4568a3d444d8029bd010df784e3f673fe855601ec4f1b26b2df58841e6a65f0db66373f63cc14a8b07dfc52ac9957eb542d05ed687c79519609de96df18b63cb294b534ddf7d2e8f41bcc1e5a006191c4db057b6709f0a96f18e7e8f67b8be2a19c015b9c4b0b3f42e4de366b71f8da8888809473c3c7a02a1158e375f29997a43bc7118ca4d1abb8f8f21972fc589aaa3d73a4d40a1e1705e169ac6e56cff50d89fc45b6863c8fc67bb2b5939a7f33072539ba4c24077be5711ba368bf7efd4897931531d388eb5c2e56bef337777150dd59518652145c9594e110e41d2615196c6b197916c88cc2814e13a3a922b4ecb044bf31cc90e0bfe0ce07de29188bbcb0ec1a12b509f52582fbb948c3cbe0c6964f46991cec0704bfac08aec6ad8ddfc36dc68c7f547c5ee6af4a8d55c79e3dc1c49b045379811f81e9a185a92cd37ae4ee32c5d3c82d36d6202a6c84fd231fe467071d42072827fd77afa5d757e6f37247f783ef09bdfd7536b666e84bc4bb878005b7829293a04ba090272dec844f4ef0e934617c08518bdc6b915ac6f3f03e4a6ab88e21c3f21f93b31d95ea3b9228e0031cb69795de5abd19c4cb4a0cf2984e53ca391cc66e33ee0d510151670331fa264753704fea5e4b1760f74890c49a74a47e0da13155c5470013d53dea0f05b5e088f1511c209f5be940232318af2757951d399e32eb862d915784713baa8ba93645caf04ba78fa3cf600ff92b9c5be58ad87438a340bac00a5ea9fb17e39478ba61fe36335e48d8c5a0b25f024cbd2ec7f217d0f260951da396dc13a2a74cd90df4b52db686e3b34d27cfa4cebd7bf59cbcfaf4007dc943a1da6e0bd1799a21ab449d7bb42935e50c839c5b567c59742436af15bc8d46095520dcd9273ae2b6f3c1cc2b4311ac9e5d297f0940b1552c5955adb302022022bb7457978998b56328629b7725dfbe3dedb37f37af0697a4471d1d6ff6bec633a38540adeba903f3eaaec5785fbb3c6a598f49dbd9ff93c67dea1ef39a614331b119fa8efccc8bac01595fb95a2a57eec9fc6c6fe82782aa89ea971866fd9a3bca4010182092ab6d1e2b49b964be9e3bb13bd6b77850e435f55a5d46e5bcb3330c7edefd31c33f61275e51600"}) 10.119889774s ago: executing program 2 (id=800): openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000080)="268292", 0xfff6}], 0x1) 9.960660628s ago: executing program 0 (id=802): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) unshare(0x20000400) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000640), 0x200500, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000006c0)) 9.90344309s ago: executing program 4 (id=803): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000000140)="2700000014000707030e0000120f0a00110001390005001cb4cb4c7cf26c3ed77d152ee1be3a4123", 0x28) 9.794539685s ago: executing program 2 (id=804): r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in=@dev={0xac, 0x14, 0x14, 0x39}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x0, 0x0, 0xffff, 0x2, 0x0, 0x0, 0x2f}, {0x0, 0x0, 0x0, 0x2}, {}, 0xffffffff, 0x0, 0x1, 0x0, 0x1}, {{@in6=@private0, 0x0, 0x32}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 0x1, 0x0, 0x0, 0x1}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xfffe, 0x80000000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x1c) 9.616026751s ago: executing program 3 (id=805): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "7fdde2030000db43e943620df397d700"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCCBRK(r1, 0x5428) 9.615698955s ago: executing program 0 (id=806): r0 = memfd_create(&(0x7f0000000080)='\b\x9dF\xd8\b\xb3~u\xa5\x81\xb1\x8aSpA\xd4\x98\x85D\x89>N\x8ar\x17\x00\x00\x00\x00\xe2{mn\xcc\xbf2\xc0\x90kn\xe8\xfe/\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97\xe7\xe6\x97\xf9\xb3\xf6\xb9\v\xb5$\xee\x84\x1cn,Bd8\x13<\xf0E\x86\xc0v\xd5?\xe5E:+Pm\x1d\xb4\xb8k\x11\x00', 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r1, 0x0, r0, &(0x7f0000000140), 0x4, 0x0) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000200)={0x18}, 0x18) 9.535161637s ago: executing program 4 (id=807): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x1000, &(0x7f0000000040)) socket$inet6(0xa, 0x3, 0x6) 9.495921278s ago: executing program 2 (id=808): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x2001048, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x211807d, 0x0) 9.327353667s ago: executing program 3 (id=809): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000180)=0x2, 0x4) syz_emit_ethernet(0x3a, &(0x7f0000002380)={@local, @random="365c4cfb3e29", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data}}}}}, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000980)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "955aec9ef39911c4e608778212119fd3c62597a2d165de62", "580c5119fb37bf4a8be03c1f77f40bafce6ab79eb3b71dc477351f542ce9232f"}}}}}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) landlock_create_ruleset(&(0x7f00000000c0), 0x10, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9.21199448s ago: executing program 0 (id=810): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002500000008000300", @ANYRES32=r2, @ANYBLOB="080026006c09000004000b000800090001ac0f0007000a0090608a0009000700963b0ca14c0000000a000600ffffffffffff0000080035"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 9.1061354s ago: executing program 4 (id=811): r0 = socket$inet(0x2, 0x4000000805, 0x0) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) sendto$inet(r0, &(0x7f0000000280)='V', 0x1, 0x0, &(0x7f0000000380)={0x2, 0x0, @private=0xa010101}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000080)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x10) 8.917796136s ago: executing program 2 (id=812): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2000000002, 0x0, 0x2}}, 0x20) 8.895558743s ago: executing program 0 (id=813): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r2, 0x0, 0x15203}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0xffff}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 8.703967464s ago: executing program 2 (id=814): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0xcc}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x3300, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 8.667036166s ago: executing program 3 (id=815): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x9c, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x40, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}]}}, @filter_kind_options=@f_flow={{0x9}, {0x8, 0x2, [@TCA_FLOW_EMATCHES={0x4}]}}]}, 0x9c}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xf0}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 8.608749162s ago: executing program 4 (id=816): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2a442, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) fallocate(r0, 0x0, 0xc00, 0x40002) 8.178621917s ago: executing program 0 (id=818): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000180)='wg0\x00', 0x4) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000680)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}], 0x1, 0xc044) sendmmsg$inet(r0, &(0x7f0000005dc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 8.175416483s ago: executing program 4 (id=820): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000010c0)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001080)={0x1d, r1}, 0xe) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES8=r0], 0x48}}, 0x0) 7.927953309s ago: executing program 4 (id=821): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="050000002186fa8f55c330ca06"], 0xffffffffffffff48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x4801}) write$cgroup_devices(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b2308217f05"], 0xffdd) 7.927701019s ago: executing program 0 (id=822): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e28}, {&(0x7f00000000c0)=""/250, 0x468}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)={0x14, r0, 0xfaac4106a1b87a7, 0x0, 0x0, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x8814}, 0x0) 2.024599601s ago: executing program 3 (id=823): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000080)={0x2, 0x0, [{0xd, 0xcff8, 0x1, 0x9, 0x219e, 0x6, 0x5}, {0x80000001, 0x5, 0x1, 0xfffffffe, 0x8, 0x5, 0x80}]}) 1.840018255s ago: executing program 3 (id=825): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0x82020000) 1.78263205s ago: executing program 1 (id=826): syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101101) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x80015b11, 0x0) 1.668075627s ago: executing program 3 (id=827): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e001400028008000100080000000600027fff00000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) 335.994414ms ago: executing program 1 (id=828): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f00000011c0)={0xa, 0x0, 0xfd}) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0xab00000000000000, 0x80a0000, 0x510}) 288.145212ms ago: executing program 1 (id=829): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xfc}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1_virt_wifi\x00', 0x10) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x0, 0x0, @mcast1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000100), 0x40000c4, 0x7ffffff7) 191.658938ms ago: executing program 1 (id=830): bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x14, &(0x7f0000000040), 0x50) listen(r0, 0x0) accept$inet6(r0, 0x0, 0x0) 43.913078ms ago: executing program 1 (id=831): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f00000011c0)={0xa, 0x5, 0xfd}) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0xab00000000000000, 0x0, 0x0, 0xa00}) 0s ago: executing program 1 (id=832): shutdown(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x2, 0x0, &(0x7f0000000000)) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0xfef, &(0x7f0000000380)={0x0, 0xb16c, 0x100, 0xfffffffd, 0x0, 0x0, r0}, 0x0, &(0x7f0000000180)) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140), 0x709281, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r3, 0x400448c9, &(0x7f0000002e80)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$tipc(0x1e, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) mmap(&(0x7f0000a92000/0x1000)=nil, 0x1000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x7bb08000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r4 = socket$kcm(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000280)=[{0x2, 0x0, 0x1, 0x9}, {0x0, 0x0, 0xfffffffe}, {0x5, 0x4, 0x0, 0x4}, {0x0, 0x5, 0xd, 0xa}, {0x5, 0x1, 0x5}], 0x10, 0x0, @void, @value}, 0x90) sendmsg$kcm(r2, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000003c0)="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", 0x8a4}], 0x1}, 0x40080) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e03002a000b05d25a806c8c6f94f90424fc601100077a0a000312050282c137153e370e0c1180fc0b0c000300", 0x33fe0}], 0x1}, 0x0) kernel console output (not intermixed with test programs): 5.448730][ T8284] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.456007][ T8284] bridge_slave_0: entered allmulticast mode [ 255.463228][ T8284] bridge_slave_0: entered promiscuous mode [ 255.529756][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.661837][ T8331] xt_hashlimit: Unknown mode mask FFFFFFFF, kernel too old? [ 255.687635][ T8284] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.694754][ T8284] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.737153][ T8284] bridge_slave_1: entered allmulticast mode [ 255.762181][ T8284] bridge_slave_1: entered promiscuous mode [ 255.798457][ T8254] hsr_slave_0: entered promiscuous mode [ 255.800070][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.810850][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.811842][ T8254] hsr_slave_1: entered promiscuous mode [ 255.838023][ T8254] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 255.862184][ T8254] Cannot create hsr debugfs directory [ 255.933205][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.971312][ T8265] team0: Port device team_slave_0 added [ 255.988731][ T5279] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 256.159068][ T5279] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.179153][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.191668][ T5279] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.205940][ T5230] Bluetooth: hci4: command tx timeout [ 256.207947][ T5279] usb 1-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 256.253448][ T8265] team0: Port device team_slave_1 added [ 256.259562][ T5279] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.301027][ T5279] usb 1-1: config 0 descriptor?? [ 256.360009][ T8284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.379839][ T8284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.415872][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.492231][ T8265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.507536][ T8265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.543501][ T8265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.589150][ T8265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.596145][ T8265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.634144][ T8357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.651390][ T8357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.675217][ T8265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.769168][ T8284] team0: Port device team_slave_0 added [ 256.799691][ T8284] team0: Port device team_slave_1 added [ 256.837720][ T5230] Bluetooth: hci0: command tx timeout [ 256.905093][ T8265] hsr_slave_0: entered promiscuous mode [ 256.916660][ T8265] hsr_slave_1: entered promiscuous mode [ 256.932394][ T8265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 256.940236][ T8265] Cannot create hsr debugfs directory [ 256.956510][ T8284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.963571][ T8284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.991378][ T8284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.998046][ T5228] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 257.004041][ T8284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.017972][ T8284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.044489][ T8284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.207977][ T5228] usb 3-1: Using ep0 maxpacket: 32 [ 257.229006][ T5228] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.254273][ T5228] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.293382][ T5228] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 257.325816][ T5228] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 257.351597][ T5228] usb 3-1: Product: syz [ 257.362106][ T5228] usb 3-1: Manufacturer: syz [ 257.398360][ T5228] hub 3-1:4.0: USB hub found [ 257.430182][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.477461][ T5230] Bluetooth: hci3: command tx timeout [ 257.515173][ T8284] hsr_slave_0: entered promiscuous mode [ 257.522634][ T8284] hsr_slave_1: entered promiscuous mode [ 257.530080][ T8284] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 257.538114][ T8284] Cannot create hsr debugfs directory [ 257.579077][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.610124][ T5228] hub 3-1:4.0: 2 ports detected [ 257.846905][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.011479][ T5228] hub 3-1:4.0: set hub depth failed [ 258.048035][ T5228] usb 3-1: USB disconnect, device number 21 [ 258.123806][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.277462][ T5230] Bluetooth: hci4: command tx timeout [ 258.727010][ T35] bridge_slave_1: left allmulticast mode [ 258.738159][ T35] bridge_slave_1: left promiscuous mode [ 258.758212][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.772997][ T35] bridge_slave_0: left allmulticast mode [ 258.796921][ T35] bridge_slave_0: left promiscuous mode [ 258.809452][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.826761][ T5279] usbhid 1-1:0.0: can't add hid device: -71 [ 258.839432][ T35] bridge_slave_1: left allmulticast mode [ 258.855417][ T35] bridge_slave_1: left promiscuous mode [ 258.862973][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.870736][ T5279] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 258.887593][ T35] bridge_slave_0: left allmulticast mode [ 258.893265][ T35] bridge_slave_0: left promiscuous mode [ 258.899579][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.906206][ T5279] usb 1-1: USB disconnect, device number 33 [ 258.917470][ T5230] Bluetooth: hci0: command tx timeout [ 259.288749][ T5279] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 259.470783][ T5279] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.481831][ T5230] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 259.481892][ T5230] Bluetooth: hci2: Injecting HCI hardware error event [ 259.499036][ T5227] Bluetooth: hci2: hardware error 0x00 [ 259.499578][ T5279] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.520378][ T5279] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 259.533600][ T5279] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.575372][ T5279] usb 1-1: config 0 descriptor?? [ 259.729292][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.749451][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.766116][ T35] bond0 (unregistering): Released all slaves [ 259.899685][ T35] bond0 (unregistering): left allmulticast mode [ 259.905977][ T35] bond_slave_0: left allmulticast mode [ 259.912176][ T35] bond_slave_1: left allmulticast mode [ 259.918059][ T35] bond0 (unregistering): left promiscuous mode [ 259.924287][ T35] bond_slave_0: left promiscuous mode [ 259.929985][ T35] bond_slave_1: left promiscuous mode [ 259.949274][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.963725][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.976103][ T35] bond0 (unregistering): Released all slaves [ 259.989766][ T8379] bridge0: port 3(dummy0) entered blocking state [ 259.996159][ T8379] bridge0: port 3(dummy0) entered disabled state [ 260.007970][ T8379] dummy0: entered allmulticast mode [ 260.016795][ T5279] hid-steam 0003:28DE:1142.0018: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 260.032063][ T8379] dummy0: entered promiscuous mode [ 260.044155][ T8379] bridge0: port 3(dummy0) entered blocking state [ 260.050983][ T8379] bridge0: port 3(dummy0) entered forwarding state [ 260.114526][ T5279] hid-steam 0003:28DE:1142.0018: Steam wireless receiver connected [ 260.145565][ T5279] hid-steam 0003:28DE:1142.0019: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 260.274920][ T8254] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 260.312994][ T29] audit: type=1326 audit(1726814783.837:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8381 comm="syz.0.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cf237def9 code=0x7ffc0000 [ 260.335828][ T29] audit: type=1326 audit(1726814783.867:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8381 comm="syz.0.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f3cf237def9 code=0x7ffc0000 [ 260.373419][ T5230] Bluetooth: hci4: command tx timeout [ 260.399472][ T29] audit: type=1326 audit(1726814783.867:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8381 comm="syz.0.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cf237def9 code=0x7ffc0000 [ 260.426982][ T29] audit: type=1326 audit(1726814783.867:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8381 comm="syz.0.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3cf237def9 code=0x7ffc0000 [ 260.468087][ T29] audit: type=1326 audit(1726814783.867:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8381 comm="syz.0.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cf237def9 code=0x7ffc0000 [ 260.492992][ T8254] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 260.500325][ T29] audit: type=1326 audit(1726814783.867:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8381 comm="syz.0.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f3cf237def9 code=0x7ffc0000 [ 260.525194][ T8254] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 260.535876][ T8254] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 260.558559][ T8386] netlink: 32 bytes leftover after parsing attributes in process `syz.0.509'. [ 260.671450][ T29] audit: type=1326 audit(1726814783.867:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8381 comm="syz.0.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cf237def9 code=0x7ffc0000 [ 260.756009][ T29] audit: type=1326 audit(1726814783.867:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8381 comm="syz.0.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f3cf237def9 code=0x7ffc0000 [ 260.835946][ T29] audit: type=1326 audit(1726814783.867:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8381 comm="syz.0.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cf237def9 code=0x7ffc0000 [ 260.941033][ T29] audit: type=1326 audit(1726814783.867:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8381 comm="syz.0.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3cf237fe17 code=0x7ffc0000 [ 261.104729][ T35] hsr_slave_0: left promiscuous mode [ 261.128747][ T35] hsr_slave_1: left promiscuous mode [ 261.152301][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.170131][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.193518][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.217341][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.297425][ T5279] usb 1-1: reset high-speed USB device number 34 using dummy_hcd [ 261.316038][ T35] hsr_slave_0: left promiscuous mode [ 261.372713][ T35] hsr_slave_1: left promiscuous mode [ 261.429563][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.437026][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.480834][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.503804][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.563263][ T5227] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 261.742979][ T35] veth1_macvtap: left promiscuous mode [ 261.754335][ T35] veth0_macvtap: left promiscuous mode [ 261.769894][ T35] veth1_vlan: left promiscuous mode [ 261.775266][ T35] veth0_vlan: left promiscuous mode [ 261.851817][ T35] veth1_macvtap: left promiscuous mode [ 261.868897][ T35] veth0_macvtap: left promiscuous mode [ 261.874630][ T35] veth1_vlan: left promiscuous mode [ 261.898667][ T35] veth0_vlan: left promiscuous mode [ 261.907348][ T5278] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 262.080777][ T5278] usb 3-1: Using ep0 maxpacket: 16 [ 262.101641][ T5278] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.145376][ T5278] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.196070][ T5278] usb 3-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 262.232500][ T5278] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.255721][ T5278] usb 3-1: config 0 descriptor?? [ 262.677318][ T5279] usb 1-1: device descriptor read/64, error -71 [ 262.933016][ T5279] usb 1-1: reset high-speed USB device number 34 using dummy_hcd [ 263.100082][ T5279] usb 1-1: device firmware changed [ 263.122161][ T5228] usb 1-1: USB disconnect, device number 34 [ 263.149141][ T5228] hid-steam 0003:28DE:1142.0018: Steam wireless receiver disconnected [ 263.182987][ T35] team0 (unregistering): Port device team_slave_1 removed [ 263.261774][ T35] team0 (unregistering): Port device team_slave_0 removed [ 263.341183][ T5228] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 263.520168][ T5228] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 263.544494][ T5228] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.569981][ T5228] usb 1-1: config 0 descriptor?? [ 263.952583][ T8411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.974902][ T8411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.204253][ T8411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.221552][ T8411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.559409][ T5278] usbhid 3-1:0.0: can't add hid device: -71 [ 264.575746][ T5278] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 264.613481][ T5278] usb 3-1: USB disconnect, device number 22 [ 264.864448][ T35] team0 (unregistering): Port device team_slave_1 removed [ 264.925105][ T35] team0 (unregistering): Port device team_slave_0 removed [ 264.977331][ T5278] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 265.151647][ T5278] usb 3-1: Using ep0 maxpacket: 8 [ 265.176689][ T5278] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.199958][ T5278] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 265.215811][ T5278] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.226697][ T5278] usb 3-1: config 0 descriptor?? [ 265.242428][ T5278] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 265.536652][ T8411] netlink: 'syz.0.513': attribute type 10 has an invalid length. [ 265.589787][ T8411] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.599419][ T8411] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 265.713107][ T5228] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 265.764485][ T5228] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 265.781852][ T5228] [drm:udl_init] *ERROR* Selecting channel failed [ 265.909897][ T8265] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 265.932535][ T5228] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 265.963843][ T5278] gspca_vc032x: reg_w err -110 [ 265.971555][ T5278] vc032x 3-1:0.0: probe with driver vc032x failed with error -110 [ 265.977940][ T5228] [drm] Initialized udl on minor 2 [ 265.992165][ T8265] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 266.074465][ T5228] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 266.100887][ T8254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.126964][ T5228] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 266.129015][ T8265] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 266.179399][ T8265] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 266.232533][ T5279] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 266.262347][ T5228] usb 1-1: USB disconnect, device number 35 [ 266.295587][ T5279] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 266.364084][ T8254] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.511769][ T5356] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.518922][ T5356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.703460][ T5356] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.710612][ T5356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.046308][ T8265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.082329][ T8254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.152903][ T8284] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 267.173784][ T8284] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 267.188140][ T8284] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 267.202127][ T8284] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 267.214480][ T8265] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.262048][ T993] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.269200][ T993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.300433][ T5277] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 267.301071][ T993] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.315112][ T993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.332995][ T8254] veth0_vlan: entered promiscuous mode [ 267.364791][ T8254] veth1_vlan: entered promiscuous mode [ 267.377745][ T8265] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 267.388718][ T8265] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 267.513219][ T8254] veth0_macvtap: entered promiscuous mode [ 267.549952][ T5277] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 267.555886][ T8254] veth1_macvtap: entered promiscuous mode [ 267.579680][ T5277] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 267.603215][ T8284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.612166][ T5277] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 267.640018][ T8265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.655246][ T5277] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 267.686299][ T5277] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 267.697001][ T5277] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.715768][ T5277] usb 1-1: Product: syz [ 267.723350][ T8254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.742466][ T5277] usb 1-1: Manufacturer: syz [ 267.756139][ T5277] usb 1-1: SerialNumber: syz [ 267.773937][ T8254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.777823][ T5277] usb 1-1: config 0 descriptor?? [ 267.801510][ T8254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.822404][ T8254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.834312][ T8254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.865278][ T5278] usb 3-1: USB disconnect, device number 23 [ 267.885879][ T8254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.917037][ T8254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.937047][ T8254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.962896][ T8254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.974706][ T8254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.004111][ T8254] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.015125][ T8254] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.020775][ T5277] adutux 1-1:0.0: Could not retrieve serial number [ 268.035546][ T8254] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.041340][ T5277] adutux 1-1:0.0: probe with driver adutux failed with error -5 [ 268.051935][ T8254] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.075171][ T8457] random: crng reseeded on system resumption [ 268.100468][ T8284] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.149445][ T8265] veth0_vlan: entered promiscuous mode [ 268.170525][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.177674][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.221548][ T4513] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.228699][ T4513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.339218][ T8265] veth1_vlan: entered promiscuous mode [ 268.413570][ T8265] veth0_macvtap: entered promiscuous mode [ 268.473708][ T8265] veth1_macvtap: entered promiscuous mode [ 268.536100][ T8265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.559743][ T8265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.583857][ T8265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.594524][ T8265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.617011][ T8265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.657312][ T8265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.675050][ T8265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.717110][ T8265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.729744][ T8265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.741256][ T8265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.761557][ T8265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.777269][ T8265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.800995][ T8265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.828613][ T8265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.919501][ T8265] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.929224][ T8265] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.945827][ T8265] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.973007][ T8265] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.993791][ T8284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.036752][ T8462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.055391][ T8462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.083091][ T8284] veth0_vlan: entered promiscuous mode [ 269.099752][ T8284] veth1_vlan: entered promiscuous mode [ 269.122873][ T8284] veth0_macvtap: entered promiscuous mode [ 269.135500][ T8457] binder: 8454:8457 ioctl c0306201 200002c0 returned -14 [ 269.137660][ T8284] veth1_macvtap: entered promiscuous mode [ 269.162372][ T8284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.173058][ T8284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.183642][ T8284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.195599][ T8284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.205550][ T8284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.217467][ T8284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.227374][ T8284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.240902][ T8284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.256597][ T8284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.319647][ T8284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.333331][ T8284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.357584][ T8284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.396051][ T8284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.413889][ T8284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.424993][ T8284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.436313][ T8284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.447743][ T8284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.462879][ T8284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.510679][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.524758][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.553141][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.570463][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.592348][ T8284] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.606835][ T8284] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.620434][ T8284] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.630593][ T8284] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.735046][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.743729][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.821351][ T5356] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.902900][ T5356] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.070269][ T5356] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.111394][ T5356] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.259550][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.323060][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.542298][ T5279] usb 1-1: USB disconnect, device number 36 [ 270.752196][ T25] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 270.927464][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 270.952245][ T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.979091][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 271.006929][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 271.061086][ T25] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 271.094769][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 271.117449][ T5279] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 271.133926][ T25] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 271.149670][ T25] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 271.193294][ T25] usb 5-1: Manufacturer: syz [ 271.230975][ T25] usb 5-1: config 0 descriptor?? [ 271.343042][ T5279] usb 1-1: Using ep0 maxpacket: 8 [ 271.359142][ T5279] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 271.390364][ T5279] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 271.437345][ T5279] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 271.460538][ T5277] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 271.498939][ T5279] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 271.546773][ T5279] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 271.602329][ T5279] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 271.621920][ T5279] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 271.645597][ T5277] usb 4-1: config index 0 descriptor too short (expected 106, got 36) [ 271.656772][ T5277] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.667345][ T25] rc_core: IR keymap rc-hauppauge not found [ 271.673756][ T25] Registered IR keymap rc-empty [ 271.687358][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 271.690332][ T5279] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 271.707016][ T5277] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.720125][ T5279] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 271.736068][ T5277] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 271.745727][ T5277] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.766599][ T5279] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 271.810350][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 271.818613][ T5279] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 271.827189][ T5277] usb 4-1: config 0 descriptor?? [ 271.840224][ T5279] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 271.879571][ T25] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 271.922428][ T5279] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 271.933253][ T25] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input28 [ 271.992770][ T5279] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 272.020581][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 272.036045][ T5279] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 272.093079][ T5279] usb 1-1: string descriptor 0 read error: -22 [ 272.110799][ T5279] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 272.131195][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 272.154296][ T5279] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.179807][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 272.206253][ T5279] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 272.219467][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 272.259059][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 272.307818][ T5277] corsair 0003:1B1C:1B3E.001A: unknown main item tag 0x0 [ 272.313613][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 272.334430][ T5277] corsair 0003:1B1C:1B3E.001A: unknown main item tag 0x0 [ 272.367455][ T5277] corsair 0003:1B1C:1B3E.001A: unknown main item tag 0x0 [ 272.374571][ T5277] corsair 0003:1B1C:1B3E.001A: unknown main item tag 0x0 [ 272.398093][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 272.425863][ T5277] corsair 0003:1B1C:1B3E.001A: unknown main item tag 0x0 [ 272.433311][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 272.435485][ T5279] usb 1-1: USB disconnect, device number 37 [ 272.455814][ T5277] corsair 0003:1B1C:1B3E.001A: failed to start in urb: -90 [ 272.490579][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 272.512399][ T5277] corsair 0003:1B1C:1B3E.001A: hidraw0: USB HID v0.00 Device [HID 1b1c:1b3e] on usb-dummy_hcd.3-1/input0 [ 272.541546][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 272.615596][ T25] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 272.616443][ T5277] usb 4-1: USB disconnect, device number 24 [ 272.670544][ T25] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 272.710969][ T25] usb 5-1: USB disconnect, device number 21 [ 273.247337][ T5230] Bluetooth: hci3: command tx timeout [ 273.667616][ T5333] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 273.716028][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 273.716046][ T29] audit: type=1400 audit(1726814797.237:266): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=381CD2A12F2F pid=8565 comm="syz.1.528" [ 273.800374][ T8572] netlink: 156 bytes leftover after parsing attributes in process `syz.1.528'. [ 273.966847][ T5333] usb 3-1: New USB device found, idVendor=2013, idProduct=025d, bcdDevice=f5.0f [ 273.998648][ T5333] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.013718][ T5333] usb 3-1: Product: syz [ 274.018943][ T5333] usb 3-1: Manufacturer: syz [ 274.023813][ T5333] usb 3-1: SerialNumber: syz [ 274.056830][ T5333] usb 3-1: config 0 descriptor?? [ 274.201737][ T5279] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 274.342101][ T8589] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.531'. [ 274.352879][ T8589] openvswitch: netlink: Multiple metadata blocks provided [ 274.387335][ T25] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 274.427960][ T8561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.489965][ T5279] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 274.533020][ T8561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.548421][ T5279] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 59391, setting to 1024 [ 274.549939][ T25] usb 5-1: unable to get BOS descriptor or descriptor too short [ 274.605064][ T25] usb 5-1: not running at top speed; connect to a high speed hub [ 274.619988][ T25] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 274.629742][ T25] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 274.653893][ T25] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 274.687739][ T5279] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 274.693702][ T25] usb 5-1: config 1 has no interface number 1 [ 274.710192][ T5279] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.755545][ T5279] usb 2-1: config 0 descriptor?? [ 274.765106][ T25] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 274.789805][ T25] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 274.800581][ T8576] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 274.801946][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.817453][ T25] usb 5-1: Product: syz [ 274.821761][ T25] usb 5-1: Manufacturer: syz [ 274.829475][ T5279] gspca_main: spca561-2.14.0 probing abcd:cdee [ 274.844258][ T25] usb 5-1: SerialNumber: syz [ 274.978130][ T5291] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 275.070191][ T8570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.100804][ T8570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.146267][ T5291] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 275.213865][ T5291] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 275.265312][ T5291] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 275.326200][ T5333] dvb-usb: found a 'PCTV 2002e SE' in cold state, will try to load a firmware [ 275.337387][ T5291] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.381589][ T8599] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 275.420801][ T5291] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 275.438049][ T5333] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 275.481854][ T5333] dib0700: firmware download failed at 7 with -22 [ 275.624649][ T5333] usb 3-1: USB disconnect, device number 24 [ 275.653121][ T5230] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 275.662124][ T5230] Bluetooth: hci0: Injecting HCI hardware error event [ 275.670994][ T5227] Bluetooth: hci0: hardware error 0x00 [ 275.758974][ T5279] spca561 2-1:0.0: probe with driver spca561 failed with error -22 [ 275.767839][ T5279] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 275.775574][ T5279] usb 2-1: MIDIStreaming interface descriptor not found [ 275.837287][ T5228] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 276.010822][ T5228] usb 4-1: unable to get BOS descriptor or descriptor too short [ 276.013636][ T25] usb 5-1: USB disconnect, device number 22 [ 276.043133][ T8616] netlink: 'syz.2.534': attribute type 1 has an invalid length. [ 276.057802][ T5228] usb 4-1: not running at top speed; connect to a high speed hub [ 276.134090][ T5228] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 276.149292][ T5348] udevd[5348]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 276.211367][ T5228] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 276.227026][ T5228] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 276.239188][ T5228] usb 4-1: config 1 has no interface number 1 [ 276.255298][ T5228] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 276.312627][ T5228] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 276.345646][ T5228] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.355839][ T5228] usb 4-1: Product: syz [ 276.361382][ T5228] usb 4-1: Manufacturer: syz [ 276.367367][ T5228] usb 4-1: SerialNumber: syz [ 276.684760][ T5279] usb 2-1: USB disconnect, device number 28 [ 277.148094][ T5291] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 277.328016][ T5291] usb 5-1: Using ep0 maxpacket: 8 [ 277.368164][ T5228] usb 4-1: USB disconnect, device number 25 [ 277.411410][ T5291] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 277.423947][ T5245] udevd[5245]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 277.450455][ T5291] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 277.460365][ T5291] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 277.470995][ T5291] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 277.484676][ T5291] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 277.495204][ T5291] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.565909][ T5333] usb 1-1: USB disconnect, device number 38 [ 277.637587][ T25] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 277.741612][ T8622] netlink: 4 bytes leftover after parsing attributes in process `syz.4.535'. [ 277.797497][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 277.805518][ T25] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 277.807405][ T5227] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 277.840947][ T25] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 277.913026][ T25] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 277.942996][ T25] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 277.965520][ T25] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 277.991095][ T25] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 277.999110][ T25] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 278.011379][ T25] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 278.026653][ T25] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 278.081024][ T25] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 278.114552][ T25] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 278.122482][ T25] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 278.139972][ T25] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 278.170967][ T25] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 278.201064][ T25] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 278.269733][ T8642] netlink: 12 bytes leftover after parsing attributes in process `syz.0.540'. [ 278.299649][ T25] usb 3-1: string descriptor 0 read error: -22 [ 278.313678][ T25] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 278.325904][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.363555][ T25] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 278.416272][ T8647] binder_alloc: binder_alloc_mmap_handler: 8646 20ffd000-20fff000 already mapped failed -16 [ 278.556494][ T25] usb 3-1: USB disconnect, device number 25 [ 278.682477][ T8656] netdevsim netdevsim0: Direct firmware load for ng failed with error -2 [ 278.693855][ T8656] netdevsim netdevsim0: Falling back to sysfs fallback for: ng [ 279.362621][ T8666] netlink: 2036 bytes leftover after parsing attributes in process `syz.3.543'. [ 279.372451][ T8666] netlink: 24 bytes leftover after parsing attributes in process `syz.3.543'. [ 279.399470][ T8663] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 279.443789][ T8666] netlink: 'syz.3.543': attribute type 10 has an invalid length. [ 279.549515][ T8666] bridge0: port 3(netdevsim0) entered blocking state [ 279.557398][ T8666] bridge0: port 3(netdevsim0) entered disabled state [ 279.598961][ T25] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 279.604181][ T8666] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 279.661157][ T8666] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 279.760602][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.785889][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.805656][ T25] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 279.814945][ T5291] usb 5-1: usb_control_msg returned -71 [ 279.821602][ T5291] usbtmc 5-1:16.0: can't read capabilities [ 279.842928][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.852808][ T5291] usb 5-1: USB disconnect, device number 23 [ 279.859241][ T46] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 279.874479][ T25] usb 3-1: config 0 descriptor?? [ 280.027347][ T46] usb 1-1: Using ep0 maxpacket: 16 [ 280.056979][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.079271][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.093705][ T46] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c1e, bcdDevice= 0.00 [ 280.110198][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.125624][ T46] usb 1-1: config 0 descriptor?? [ 280.294806][ T25] hid-steam 0003:28DE:1142.001B: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 280.387522][ T25] hid-steam 0003:28DE:1142.001B: Steam wireless receiver connected [ 280.438818][ T25] hid-steam 0003:28DE:1142.001C: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 280.483155][ T8676] loop0: detected capacity change from 0 to 128 [ 280.557582][ T8679] netlink: 4 bytes leftover after parsing attributes in process `syz.1.549'. [ 280.579847][ T29] audit: type=1326 audit(1726814804.107:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8664 comm="syz.2.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a1017def9 code=0x7ffc0000 [ 280.642300][ T29] audit: type=1326 audit(1726814804.127:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8664 comm="syz.2.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a1017def9 code=0x7ffc0000 [ 280.673985][ T29] audit: type=1326 audit(1726814804.127:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8664 comm="syz.2.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f9a1017def9 code=0x7ffc0000 [ 280.708577][ T29] audit: type=1326 audit(1726814804.127:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8664 comm="syz.2.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a1017def9 code=0x7ffc0000 [ 280.745477][ T8684] netlink: 28 bytes leftover after parsing attributes in process `syz.0.546'. [ 280.767107][ T8681] netlink: 24 bytes leftover after parsing attributes in process `syz.2.545'. [ 280.822770][ T29] audit: type=1326 audit(1726814804.127:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8664 comm="syz.2.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9a1017def9 code=0x7ffc0000 [ 280.884382][ T29] audit: type=1326 audit(1726814804.127:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8664 comm="syz.2.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a1017def9 code=0x7ffc0000 [ 280.959237][ T29] audit: type=1326 audit(1726814804.127:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8664 comm="syz.2.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a1017def9 code=0x7ffc0000 [ 281.016357][ T29] audit: type=1326 audit(1726814804.127:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8664 comm="syz.2.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f9a1017def9 code=0x7ffc0000 [ 281.086993][ T29] audit: type=1326 audit(1726814804.127:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8664 comm="syz.2.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a1017def9 code=0x7ffc0000 [ 281.143944][ T29] audit: type=1326 audit(1726814804.127:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8664 comm="syz.2.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f9a1017def9 code=0x7ffc0000 [ 281.256817][ T8688] netlink: 20 bytes leftover after parsing attributes in process `syz.0.546'. [ 281.548148][ T25] usb 3-1: reset high-speed USB device number 26 using dummy_hcd [ 282.054139][ C1] hrtimer: interrupt took 59196 ns [ 282.656087][ T46] usbhid 1-1:0.0: can't add hid device: -71 [ 282.664066][ T46] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 282.705919][ T46] usb 1-1: USB disconnect, device number 39 [ 282.867401][ T5278] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 282.915712][ T8710] netlink: 'syz.0.556': attribute type 5 has an invalid length. [ 283.032163][ T5278] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.047299][ T5228] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 283.051808][ T5278] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 283.070109][ T25] usb 3-1: device descriptor read/64, error -71 [ 283.084066][ T5278] usb 2-1: New USB device found, idVendor=12f2, idProduct=3063, bcdDevice= 0.3a [ 283.094846][ T5278] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.109308][ T5278] usb 2-1: config 0 descriptor?? [ 283.117134][ T5278] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 283.229208][ T5228] usb 4-1: Using ep0 maxpacket: 8 [ 283.235637][ T5228] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 283.243238][ T5228] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 283.261659][ T5228] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 283.275278][ T5228] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 283.292330][ T5228] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 283.309979][ T5228] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 283.319445][ T25] usb 3-1: reset high-speed USB device number 26 using dummy_hcd [ 283.335960][ T25] usb 3-1: device reset changed ep0 maxpacket size! [ 283.336979][ T5228] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 283.364130][ T5291] usb 3-1: USB disconnect, device number 26 [ 283.382440][ T5228] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 283.405618][ T5291] hid-steam 0003:28DE:1142.001B: Steam wireless receiver disconnected [ 283.421802][ T5228] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 283.443624][ T5228] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 283.471541][ T5228] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 283.484931][ T5228] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 283.503204][ T5228] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 283.516860][ T5228] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 283.534657][ T5228] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 283.573314][ T5228] usb 4-1: string descriptor 0 read error: -22 [ 283.583974][ T5228] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 283.594816][ T5228] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.608952][ T5291] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 283.626558][ T5228] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 283.807310][ T5291] usb 3-1: Using ep0 maxpacket: 16 [ 283.819935][ T5228] usb 4-1: USB disconnect, device number 26 [ 283.834458][ T5291] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.854308][ T5291] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 283.881793][ T5291] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 283.903918][ T5291] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 283.931738][ T5291] usb 3-1: Manufacturer: syz [ 283.970223][ T5291] usb 3-1: config 0 descriptor?? [ 284.834737][ T8732] netlink: 32 bytes leftover after parsing attributes in process `syz.3.560'. [ 285.167271][ T8735] tls_set_device_offload: netdev not found [ 285.615061][ T5291] usb 2-1: USB disconnect, device number 29 [ 285.665446][ T5279] usb 3-1: USB disconnect, device number 27 [ 285.974303][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.013476][ T8750] netlink: 32 bytes leftover after parsing attributes in process `syz.2.565'. [ 286.192562][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.356940][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.452408][ T5230] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 286.461375][ T5230] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 286.469996][ T5230] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 286.479497][ T5230] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 286.487039][ T5230] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 286.494684][ T5230] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 286.703279][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.755953][ T8758] netlink: 32 bytes leftover after parsing attributes in process `syz.3.568'. [ 286.819960][ T8760] netlink: 'syz.1.569': attribute type 10 has an invalid length. [ 286.863522][ T8760] team0: Port device netdevsim0 added [ 286.878541][ T8758] netlink: 32 bytes leftover after parsing attributes in process `syz.3.568'. [ 286.911368][ T8761] netlink: 'syz.1.569': attribute type 33 has an invalid length. [ 286.961168][ T8762] netlink: 32 bytes leftover after parsing attributes in process `syz.3.568'. [ 287.158095][ T5279] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 287.242299][ T8774] bridge0: port 3(dummy0) entered blocking state [ 287.291672][ T8774] bridge0: port 3(dummy0) entered disabled state [ 287.303785][ T8774] dummy0: entered allmulticast mode [ 287.321950][ T8777] netlink: 72 bytes leftover after parsing attributes in process `syz.3.573'. [ 287.334323][ T5279] usb 3-1: Using ep0 maxpacket: 32 [ 287.343062][ T8774] dummy0: entered promiscuous mode [ 287.349753][ T8774] bridge0: port 3(dummy0) entered blocking state [ 287.356224][ T8774] bridge0: port 3(dummy0) entered forwarding state [ 287.373940][ T12] bridge_slave_1: left allmulticast mode [ 287.380128][ T5279] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 287.400897][ T12] bridge_slave_1: left promiscuous mode [ 287.406619][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.424272][ T5279] usb 3-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 287.455183][ T5279] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.472215][ T12] bridge_slave_0: left allmulticast mode [ 287.474928][ T5279] usb 3-1: Product: syz [ 287.492026][ T5279] usb 3-1: Manufacturer: syz [ 287.505686][ T5279] usb 3-1: SerialNumber: syz [ 287.506815][ T12] bridge_slave_0: left promiscuous mode [ 287.522309][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.556371][ T5279] usb 3-1: config 0 descriptor?? [ 287.577449][ T8766] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 287.595916][ T5279] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 288.035112][ T8782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.087489][ T8782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.176550][ T8766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.195642][ T8766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.373766][ T8774] syz.1.572 (8774): drop_caches: 2 [ 288.597321][ T5230] Bluetooth: hci4: command tx timeout [ 288.649290][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.672553][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.698833][ T12] bond0 (unregistering): Released all slaves [ 288.750998][ T8757] chnl_net:caif_netlink_parms(): no params data found [ 288.842111][ T8786] netlink: 'syz.3.574': attribute type 1 has an invalid length. [ 288.867489][ T8786] bond0: option mode: unable to set because the bond device has slaves [ 288.882722][ T8791] netlink: 168 bytes leftover after parsing attributes in process `syz.1.575'. [ 289.362069][ T8757] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.379880][ T8757] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.399428][ T8757] bridge_slave_0: entered allmulticast mode [ 289.416725][ T8757] bridge_slave_0: entered promiscuous mode [ 289.444413][ T12] hsr_slave_0: left promiscuous mode [ 289.480997][ T12] hsr_slave_1: left promiscuous mode [ 289.530520][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.539127][ T5277] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 289.553827][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.592800][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.616468][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.702322][ T12] veth1_macvtap: left promiscuous mode [ 289.718775][ T12] veth0_macvtap: left promiscuous mode [ 289.727974][ T5277] usb 4-1: Using ep0 maxpacket: 16 [ 289.745169][ T12] veth1_vlan: left promiscuous mode [ 289.763061][ T5277] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.789220][ T12] veth0_vlan: left promiscuous mode [ 289.797088][ T8813] netlink: 134744 bytes leftover after parsing attributes in process `syz.1.578'. [ 289.807390][ T5277] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.807421][ T5277] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 289.807477][ T5277] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 289.876059][ T5277] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.891289][ T5277] usb 4-1: config 0 descriptor?? [ 290.011366][ T5279] usb 3-1: USB disconnect, device number 28 [ 290.393333][ T8827] netlink: 134744 bytes leftover after parsing attributes in process `syz.3.577'. [ 290.637375][ T5291] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 290.694817][ T5230] Bluetooth: hci4: command tx timeout [ 290.817478][ T5291] usb 1-1: Using ep0 maxpacket: 8 [ 290.848615][ T5291] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 290.925370][ T5291] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 290.983751][ T5291] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 291.015200][ T5291] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.054187][ T5291] usb 1-1: Product: syz [ 291.076513][ T5291] usb 1-1: Manufacturer: syz [ 291.086249][ T5291] usb 1-1: SerialNumber: syz [ 291.131690][ T5291] usb 1-1: config 0 descriptor?? [ 291.158036][ T5291] streamzap 1-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0204 [ 291.277340][ T5279] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 291.408308][ T8819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.444574][ T8819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.499234][ T5279] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.515402][ T5279] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.546321][ T5279] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 291.565030][ T5279] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.616241][ T5279] usb 2-1: config 0 descriptor?? [ 291.934292][ T12] team0 (unregistering): Port device team_slave_1 removed [ 292.064341][ T12] team0 (unregistering): Port device team_slave_0 removed [ 292.278060][ T5279] hid-led 0003:1D34:000A.001D: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.1-1/input0 [ 292.382271][ T5277] usbhid 4-1:0.0: can't add hid device: -71 [ 292.390482][ T5279] hid-led 0003:1D34:000A.001D: Dream Cheeky Webmail Notifier initialized [ 292.403648][ T5277] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 292.455955][ T5277] usb 4-1: USB disconnect, device number 27 [ 292.505831][ T29] kauditd_printk_skb: 84 callbacks suppressed [ 292.505847][ T29] audit: type=1326 audit(1726814816.027:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8828 comm="syz.1.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2da17def9 code=0x7ffc0000 [ 292.612073][ T29] audit: type=1326 audit(1726814816.037:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8828 comm="syz.1.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7fb2da17def9 code=0x7ffc0000 [ 292.710559][ T29] audit: type=1326 audit(1726814816.037:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8828 comm="syz.1.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2da17def9 code=0x7ffc0000 [ 292.744013][ T29] audit: type=1326 audit(1726814816.037:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8828 comm="syz.1.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2da17def9 code=0x7ffc0000 [ 292.771742][ T5230] Bluetooth: hci4: command tx timeout [ 292.928621][ T5279] usb 1-1: USB disconnect, device number 40 [ 293.665956][ T8838] syz.2.583 (8838): drop_caches: 2 [ 293.697301][ T5291] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 293.847337][ T25] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 293.859898][ T5291] usb 1-1: Using ep0 maxpacket: 8 [ 293.865728][ T8757] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.876374][ T8757] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.883358][ T5291] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 293.906552][ T8757] bridge_slave_1: entered allmulticast mode [ 293.912817][ T5291] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 293.915084][ T8757] bridge_slave_1: entered promiscuous mode [ 293.922147][ T5291] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.957014][ T5291] usb 1-1: config 0 descriptor?? [ 293.977477][ T5291] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 294.012920][ T25] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 294.062989][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.085797][ T25] usb 4-1: Product: syz [ 294.088129][ T8757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.094304][ T25] usb 4-1: Manufacturer: syz [ 294.104074][ T25] usb 4-1: SerialNumber: syz [ 294.118179][ T5279] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 294.120238][ T25] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 294.145317][ T5333] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 294.221402][ T8757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.267543][ T5291] gspca_vc032x: reg_r err -71 [ 294.283574][ T25] usb 2-1: USB disconnect, device number 30 [ 294.296428][ T5291] vc032x 1-1:0.0: probe with driver vc032x failed with error -71 [ 294.322015][ T5279] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.334981][ T5279] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.340383][ T5291] usb 1-1: USB disconnect, device number 41 [ 294.344833][ T5279] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 294.360266][ T5279] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.433720][ T5279] usb 3-1: config 0 descriptor?? [ 294.553234][ T8757] team0: Port device team_slave_0 added [ 294.583547][ T8757] team0: Port device team_slave_1 added [ 294.599510][ T8859] netlink: 4096 bytes leftover after parsing attributes in process `syz.1.589'. [ 294.645005][ T8859] openvswitch: netlink: Missing key (keys=400040, expected=200000) [ 294.693540][ T8757] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 294.741174][ T8757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.839365][ T5230] Bluetooth: hci4: command tx timeout [ 294.852798][ T5279] hid-steam 0003:28DE:1142.001E: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 294.955341][ T8757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.974645][ T8757] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.974662][ T8757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.974688][ T8757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.979681][ T5279] hid-steam 0003:28DE:1142.001E: Steam wireless receiver connected [ 294.997558][ T5279] hid-steam 0003:28DE:1142.001F: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 295.138102][ T8865] team0: entered promiscuous mode [ 295.138128][ T8865] team_slave_0: entered promiscuous mode [ 295.138554][ T8865] team_slave_1: entered promiscuous mode [ 295.138722][ T8865] bridge0: entered promiscuous mode [ 295.181562][ T29] audit: type=1326 audit(1726814818.657:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8855 comm="syz.2.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a1017def9 code=0x7ffc0000 [ 295.181605][ T29] audit: type=1326 audit(1726814818.657:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8855 comm="syz.2.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f9a1017def9 code=0x7ffc0000 [ 295.181641][ T29] audit: type=1326 audit(1726814818.657:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8855 comm="syz.2.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a1017def9 code=0x7ffc0000 [ 295.181677][ T29] audit: type=1326 audit(1726814818.667:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8855 comm="syz.2.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9a1017def9 code=0x7ffc0000 [ 295.181711][ T29] audit: type=1326 audit(1726814818.667:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8855 comm="syz.2.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a1017def9 code=0x7ffc0000 [ 295.181757][ T29] audit: type=1326 audit(1726814818.667:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8855 comm="syz.2.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f9a1017def9 code=0x7ffc0000 [ 295.182606][ T8865] syz_tun: entered promiscuous mode [ 295.234104][ T8868] netlink: 24 bytes leftover after parsing attributes in process `syz.2.588'. [ 295.240695][ T8757] hsr_slave_0: entered promiscuous mode [ 295.245285][ T5333] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 295.245998][ T5333] ath9k_htc: Failed to initialize the device [ 295.264111][ T8757] hsr_slave_1: entered promiscuous mode [ 295.270442][ T5333] usb 4-1: ath9k_htc: USB layer deinitialized [ 295.324405][ C1] vkms_vblank_simulate: vblank timer overrun [ 295.391398][ C1] vkms_vblank_simulate: vblank timer overrun [ 295.909568][ T8863] syz_tun: left promiscuous mode [ 295.932089][ T8863] team0: left promiscuous mode [ 295.937585][ T8863] team_slave_0: left promiscuous mode [ 295.957044][ T8863] team_slave_1: left promiscuous mode [ 295.977795][ T8863] bridge0: left promiscuous mode [ 296.147359][ T5279] usb 3-1: reset high-speed USB device number 29 using dummy_hcd [ 296.496700][ T5333] usb 4-1: USB disconnect, device number 28 [ 296.828905][ T8901] binder: 8896:8901 ioctl 4020ae46 20000180 returned -22 [ 296.937495][ T5230] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 296.947085][ T5230] Bluetooth: hci3: Injecting HCI hardware error event [ 296.955806][ T5230] Bluetooth: hci3: hardware error 0x00 [ 297.123272][ T8901] block device autoloading is deprecated and will be removed. [ 297.275828][ T8757] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 297.321472][ T8757] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 297.377803][ T8757] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 297.391907][ T8757] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 297.627742][ T5279] usb 3-1: device descriptor read/64, error -71 [ 297.673313][ T8757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.727453][ T8757] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.762846][ T2949] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.770048][ T2949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.828701][ T2949] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.835822][ T2949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.867459][ T5279] usb 3-1: reset high-speed USB device number 29 using dummy_hcd [ 297.876831][ T5279] usb 3-1: device reset changed ep0 maxpacket size! [ 297.927825][ T5277] usb 3-1: USB disconnect, device number 29 [ 297.949955][ T5277] hid-steam 0003:28DE:1142.001E: Steam wireless receiver disconnected [ 298.136916][ T8757] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.177761][ T5277] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 298.192163][ T8939] erspan0: entered promiscuous mode [ 298.202325][ T8939] erspan0: left promiscuous mode [ 298.257519][ T5228] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 298.260584][ T8941] netlink: 48 bytes leftover after parsing attributes in process `syz.1.599'. [ 298.338192][ T5277] usb 3-1: Using ep0 maxpacket: 16 [ 298.352895][ T5277] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 298.353933][ T8757] veth0_vlan: entered promiscuous mode [ 298.410243][ T5277] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 298.435201][ T5228] usb 1-1: Using ep0 maxpacket: 32 [ 298.451387][ T8757] veth1_vlan: entered promiscuous mode [ 298.466517][ T5277] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.487247][ T5228] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 298.516011][ T5277] usb 3-1: Product: syz [ 298.536108][ T5228] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 298.552508][ T5277] usb 3-1: Manufacturer: syz [ 298.572794][ T5277] usb 3-1: SerialNumber: syz [ 298.585099][ T8757] veth0_macvtap: entered promiscuous mode [ 298.589350][ T5277] cdc_ether 3-1:1.0: skipping garbage [ 298.597509][ T5228] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 298.614221][ T5277] usb 3-1: bad CDC descriptors [ 298.622597][ T5228] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.650917][ T8757] veth1_macvtap: entered promiscuous mode [ 298.676808][ T5228] usb 1-1: Product: syz [ 298.695597][ T5228] usb 1-1: Manufacturer: syz [ 298.732886][ T8757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.753248][ T5228] usb 1-1: SerialNumber: syz [ 298.787144][ T8757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.825906][ T8757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.880939][ T8757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.907430][ T8757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.960093][ T8757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.997133][ T8757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.043725][ T8757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.101937][ T8757] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.139453][ T8957] netlink: 'syz.3.601': attribute type 4 has an invalid length. [ 299.157427][ T5230] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 299.184865][ T8959] netlink: 'syz.3.601': attribute type 4 has an invalid length. [ 299.216823][ T8757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.228846][ T8757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.239659][ T8757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.250657][ T8757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.268231][ T8757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.309184][ T8757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.322204][ T8757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.333461][ T8757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.349496][ T8757] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.424798][ T8757] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.475833][ T8757] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.508214][ T8757] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.537338][ T5333] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 299.542735][ T8757] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.718883][ T5333] usb 4-1: Using ep0 maxpacket: 16 [ 299.733399][ T5333] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 528 [ 299.755216][ T5333] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 299.776384][ T5333] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.798350][ T5333] usb 4-1: Product: አ[ 299.812093][ T5333] usb 4-1: Manufacturer: â¯è£¨äŠ°éžºé·³é¿žé±€ä›¶é’¯á˜±â¸©ã¶žè¸“淘⛉ឥ課탰䆄㲓ꎡ易콉畘鱦୑⒳餢蹸䑉傕é©á»·î“¦å¼Šè¹¬åŸ¯ç´‹ã½è€°é™•á±…饯켜鲨槎瓒⻎븚æ•ç¶«ã¿–얢鑈㚲㯬儺êŸã¾µâ‡¢å«©çŽ¬ä‘”ἷ䱆霗쉻﫜â„ë‚›æ² [ 299.885737][ T5333] usb 4-1: SerialNumber: ᙱ寉ࢸ裾塘颃໅﵉哠頯뛜嫓꼡戚ᇮ瞠ꣻ竭䪋咞婜ä£ãŒ®á…„﨡ﻭ칳鈑勯跃줦䋦س요궦蒫絋ﰌ䛑顳符陘ډ쨗歮á“èµî‰ã¤¨ì¯­ì‹®ï¦®ì‹´ëº”幓嗱鮷炄鋴쮬栳艫猉⑶脈ﴈ퇵⿠ꄔ䂰﷙鉓挎칷䦮댮ᰊ [ 299.911469][ C1] vkms_vblank_simulate: vblank timer overrun [ 300.132915][ T2949] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.143380][ T2949] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.306604][ T5296] usb 3-1: USB disconnect, device number 30 [ 300.318270][ T5333] cdc_ncm 4-1:1.0: bind() failure [ 300.359907][ T5333] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 300.380238][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.407366][ T5333] cdc_ncm 4-1:1.1: bind() failure [ 300.452825][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.473300][ T5333] usb 4-1: USB disconnect, device number 29 [ 300.530084][ T8988] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in; [ 300.530084][ T8988] program syz.1.602 not setting count and/or reply_len properly [ 300.677102][ T8996] netlink: 12 bytes leftover after parsing attributes in process `syz.2.603'. [ 300.935373][ T937] usb 1-1: USB disconnect, device number 42 [ 301.327956][ T5228] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 301.384509][ T9013] netlink: 32 bytes leftover after parsing attributes in process `syz.0.605'. [ 301.398024][ T9013] netlink: 32 bytes leftover after parsing attributes in process `syz.0.605'. [ 301.442127][ T9013] netlink: 32 bytes leftover after parsing attributes in process `syz.0.605'. [ 301.539517][ T5228] usb 4-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 301.586945][ T5228] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.689775][ T5228] usb 4-1: config 0 descriptor?? [ 301.747706][ T25] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 301.775601][ T5228] ums-realtek 4-1:0.0: USB Mass Storage device detected [ 301.897372][ T937] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 301.917354][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 301.950035][ T25] usb 1-1: unable to get BOS descriptor or descriptor too short [ 301.973653][ T25] usb 1-1: config 131 has an invalid interface number: 65 but max is 0 [ 302.010855][ T25] usb 1-1: config 131 has an invalid descriptor of length 200, skipping remainder of the config [ 302.051828][ T25] usb 1-1: config 131 has no interface number 0 [ 302.074241][ T25] usb 1-1: too many endpoints for config 131 interface 65 altsetting 248: 248, using maximum allowed: 30 [ 302.099552][ T937] usb 3-1: Using ep0 maxpacket: 32 [ 302.111092][ T937] usb 3-1: unable to get BOS descriptor or descriptor too short [ 302.125527][ T937] usb 3-1: config 125 has an invalid interface number: 27 but max is 0 [ 302.150705][ T937] usb 3-1: config 125 has an invalid descriptor of length 0, skipping remainder of the config [ 302.167946][ T25] usb 1-1: config 131 interface 65 altsetting 248 has 0 endpoint descriptors, different from the interface descriptor's value: 248 [ 302.182451][ T5291] usb 4-1: USB disconnect, device number 30 [ 302.229647][ T937] usb 3-1: config 125 has no interface number 0 [ 302.249831][ T937] usb 3-1: config 125 interface 27 altsetting 24 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 302.263309][ T25] usb 1-1: config 131 interface 65 has no altsetting 0 [ 302.304511][ T25] usb 1-1: New USB device found, idVendor=110a, idProduct=1131, bcdDevice=8f.a9 [ 302.322534][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.333024][ T937] usb 3-1: config 125 interface 27 has no altsetting 0 [ 302.372267][ T937] usb 3-1: New USB device found, idVendor=1199, idProduct=68aa, bcdDevice=a4.70 [ 302.415890][ T937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.446131][ T937] usb 3-1: Product: syz [ 302.452246][ T937] usb 3-1: Manufacturer: syz [ 302.456985][ T937] usb 3-1: SerialNumber: syz [ 302.560915][ T5291] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 302.613574][ T25] ti_usb_3410_5052 1-1:131.65: required endpoints missing [ 302.658804][ T25] usb 1-1: USB disconnect, device number 43 [ 302.718776][ T937] hub 3-1:125.27: bad descriptor, ignoring hub [ 302.727463][ T5291] usb 4-1: Using ep0 maxpacket: 8 [ 302.746452][ T5291] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 302.767790][ T937] hub 3-1:125.27: probe with driver hub failed with error -5 [ 302.780067][ T5291] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 302.816277][ T5291] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 302.830016][ T937] sierra 3-1:125.27: Sierra USB modem converter detected [ 302.846540][ T5291] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 302.855178][ T937] usb 3-1: Sierra USB modem converter now attached to ttyUSB0 [ 302.864802][ T5228] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 302.873238][ T5291] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 302.957476][ T5291] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 302.980888][ T937] usb 3-1: USB disconnect, device number 31 [ 302.989766][ T5291] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.015806][ T937] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 303.047886][ T937] sierra 3-1:125.27: device disconnected [ 303.062521][ T5228] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.106487][ T5228] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.167716][ T5228] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 303.272146][ T5228] usb 5-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00 [ 303.337340][ T5291] usb 4-1: GET_CAPABILITIES returned 0 [ 303.364624][ T5291] usbtmc 4-1:16.0: can't read capabilities [ 303.497013][ T9060] fuse: Unknown parameter 'rootgode' [ 303.525845][ T5228] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.582456][ T5291] usb 4-1: USB disconnect, device number 31 [ 303.784898][ T5228] usb 5-1: config 0 descriptor?? [ 304.502000][ T9040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.629780][ T9040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.647117][ T9077] vivid-000: disconnect [ 305.396172][ T9075] vivid-000: reconnect [ 305.772319][ T9100] xt_l2tp: missing protocol rule (udp|l2tpip) [ 305.955110][ T5228] usbhid 5-1:0.0: can't add hid device: -71 [ 305.964492][ T5228] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 305.980238][ T5228] usb 5-1: USB disconnect, device number 24 [ 307.549982][ T9142] xt_CT: No such helper "netbios-ns" [ 308.048038][ T5291] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 308.240963][ T9153] netlink: 172 bytes leftover after parsing attributes in process `syz.4.631'. [ 308.260476][ T5291] usb 1-1: config index 0 descriptor too short (expected 106, got 36) [ 308.328269][ T5291] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.363398][ T5291] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.396962][ T5291] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 308.419971][ T5291] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.435156][ T5291] usb 1-1: config 0 descriptor?? [ 308.484248][ T9166] netlink: 20 bytes leftover after parsing attributes in process `syz.4.633'. [ 308.777710][ T46] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 308.847870][ T5291] corsair 0003:1B1C:1B3E.0020: unknown main item tag 0x0 [ 308.872382][ T5291] corsair 0003:1B1C:1B3E.0020: unknown main item tag 0x0 [ 308.901624][ T5291] corsair 0003:1B1C:1B3E.0020: unknown main item tag 0x0 [ 308.930408][ T5291] corsair 0003:1B1C:1B3E.0020: unknown main item tag 0x0 [ 308.972331][ T5291] corsair 0003:1B1C:1B3E.0020: unknown main item tag 0x0 [ 308.992438][ T46] usb 5-1: config 0 has an invalid interface number: 18 but max is 0 [ 309.007936][ T5291] corsair 0003:1B1C:1B3E.0020: failed to start in urb: -90 [ 309.015263][ T46] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.040949][ T46] usb 5-1: config 0 has no interface number 0 [ 309.052091][ T5291] corsair 0003:1B1C:1B3E.0020: hidraw0: USB HID v0.00 Device [HID 1b1c:1b3e] on usb-dummy_hcd.0-1/input0 [ 309.066568][ T46] usb 5-1: config 0 interface 18 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 309.088425][ T5291] usb 1-1: USB disconnect, device number 44 [ 309.108851][ T46] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 309.146017][ T46] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 309.184453][ T46] usb 5-1: Manufacturer: syz [ 309.209690][ T46] usb 5-1: config 0 descriptor?? [ 309.222217][ T46] usbhid 5-1:0.18: couldn't find an input interrupt endpoint [ 309.505105][ T5291] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 309.528149][ T5291] hid-generic 0000:0000:0000.0021: hidraw0: HID v0.00 Device [syz0] on syz1 [ 309.932966][ T9192] netlink: 16 bytes leftover after parsing attributes in process `syz.3.645'. [ 309.985708][ T9189] dccp_invalid_packet: P.Data Offset(0) too small [ 310.327329][ T5228] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 310.508637][ T5228] usb 2-1: Using ep0 maxpacket: 16 [ 310.534992][ T5228] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 310.564953][ T5228] usb 2-1: config 0 has no interface number 0 [ 310.579916][ T5228] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 310.603349][ T5228] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 310.620734][ T5228] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.647460][ T5228] usb 2-1: Product: syz [ 310.655888][ T5228] usb 2-1: Manufacturer: syz [ 310.683580][ T5228] usb 2-1: SerialNumber: syz [ 310.702440][ T5228] usb 2-1: config 0 descriptor?? [ 310.707632][ T5277] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 310.877344][ T5277] usb 4-1: Using ep0 maxpacket: 8 [ 310.956674][ T5277] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 311.023725][ T5277] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 311.038258][ T5277] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 311.077014][ T5277] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 311.116119][ T5277] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 311.131957][ T5277] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 311.167356][ T5277] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 311.188663][ T5277] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 311.211036][ T5277] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 311.266290][ T5277] usb 4-1: string descriptor 0 read error: -22 [ 311.273512][ T5277] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 311.336690][ T5277] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.358795][ T9194] netlink: 32 bytes leftover after parsing attributes in process `syz.1.646'. [ 311.400949][ C1] Unknown status report in ack skb [ 311.403435][ T5277] adutux 4-1:168.0: interrupt endpoints not found [ 311.416083][ T5228] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.214/input/input30 [ 311.471126][ T46] usb 5-1: USB disconnect, device number 25 [ 311.608019][ T5277] usb 4-1: USB disconnect, device number 32 [ 311.669087][ T5291] usb 2-1: USB disconnect, device number 31 [ 311.937339][ T937] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 312.085502][ T9232] @ÿ: renamed from vlan0 (while UP) [ 312.130744][ T937] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 312.141442][ T937] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 312.160329][ T937] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 312.181532][ T937] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 312.208040][ T937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.221745][ T9223] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 312.240799][ T937] hub 1-1:1.0: bad descriptor, ignoring hub [ 312.256758][ T937] hub 1-1:1.0: probe with driver hub failed with error -5 [ 312.265165][ T937] cdc_wdm 1-1:1.0: skipping garbage [ 312.275659][ T937] cdc_wdm 1-1:1.0: skipping garbage [ 312.301912][ T937] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 312.319617][ T937] cdc_wdm 1-1:1.0: Unknown control protocol [ 312.577286][ T5333] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 312.676118][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 312.682890][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 312.689160][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 312.695762][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 312.702020][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 312.708625][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 312.714838][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 312.721442][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 312.727662][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 312.733001][ T9244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.734242][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 312.748789][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 312.755376][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 312.762147][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 312.768737][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 312.774968][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 312.781566][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 312.787818][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 312.794403][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 312.800683][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 312.807282][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 312.818889][ T5333] usb 2-1: Using ep0 maxpacket: 8 [ 312.844160][ T5333] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 312.866331][ T9244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.875790][ T5333] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 312.893084][ T5333] usb 2-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 312.905114][ T9243] netlink: 'syz.4.666': attribute type 10 has an invalid length. [ 312.919139][ T5333] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 312.931928][ T9243] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 312.949270][ T5333] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 312.957301][ T937] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 312.973139][ T5333] usb 2-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 312.998660][ T5333] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 313.008135][ T5333] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 313.023020][ T5333] usb 2-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 313.083272][ T5333] usb 2-1: string descriptor 0 read error: -22 [ 313.100825][ T5333] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 313.130278][ T5333] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.178809][ T937] usb 4-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 313.196373][ T937] usb 4-1: New USB device found, idVendor=0408, idProduct=4011, bcdDevice=fa.f1 [ 313.206053][ T937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.214487][ T5333] adutux 2-1:168.0: interrupt endpoints not found [ 313.269680][ T937] usb 4-1: Product: syz [ 313.269707][ T937] usb 4-1: Manufacturer: syz [ 313.269742][ T937] usb 4-1: SerialNumber: syz [ 313.296491][ T937] usb 4-1: config 0 descriptor?? [ 313.299660][ T937] usb 4-1: Found UVC 0.00 device syz (0408:4011) [ 313.299700][ T937] usb 4-1: No valid video chain found. [ 313.431042][ T5333] usb 2-1: USB disconnect, device number 32 [ 313.455170][ T9253] netlink: 'syz.0.656': attribute type 30 has an invalid length. [ 313.817963][ T46] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 313.967314][ T46] usb 5-1: Using ep0 maxpacket: 16 [ 313.978339][ T46] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 313.978373][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 313.978398][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 313.978417][ T46] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 313.978436][ T46] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 313.981724][ T46] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 314.058634][ T46] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 314.059157][ T46] usb 5-1: Manufacturer: syz [ 314.089555][ T46] usb 5-1: config 0 descriptor?? [ 314.422327][ T46] rc_core: IR keymap rc-hauppauge not found [ 314.445207][ T46] Registered IR keymap rc-empty [ 314.470830][ T46] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 314.504674][ T46] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 314.522417][ T9257] netlink: 40 bytes leftover after parsing attributes in process `syz.4.670'. [ 314.528378][ T46] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 314.552590][ T46] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input31 [ 314.580067][ T9264] ipt_REJECT: TCP_RESET invalid for non-tcp [ 314.589659][ T46] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 314.620642][ T46] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 314.657479][ T46] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 314.707363][ T46] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 314.738752][ T46] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 314.777972][ T46] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 314.818758][ T46] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 314.858867][ T46] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 314.899128][ T46] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 314.947450][ T46] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 314.982719][ T46] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 314.991079][ T46] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 315.004573][ T46] usb 5-1: USB disconnect, device number 26 [ 315.210454][ T937] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 315.402051][ T937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 315.456264][ T937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 315.518215][ T937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 315.533850][ T937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 315.545481][ T5296] usb 1-1: USB disconnect, device number 45 [ 315.633605][ T937] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 315.678784][ T937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.686820][ T937] usb 3-1: Product: syz [ 315.731176][ T937] usb 3-1: Manufacturer: syz [ 315.744181][ T937] usb 3-1: SerialNumber: syz [ 315.758125][ T937] usb 3-1: config 0 descriptor?? [ 315.791146][ T5277] usb 4-1: USB disconnect, device number 33 [ 315.807687][ T5230] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 315.817309][ T5230] Bluetooth: hci4: Injecting HCI hardware error event [ 315.826504][ T5227] Bluetooth: hci4: hardware error 0x00 [ 315.972130][ T937] adutux 3-1:0.0: Could not retrieve serial number [ 315.987601][ T9286] Cannot find del_set index 0 as target [ 315.993331][ T937] adutux 3-1:0.0: probe with driver adutux failed with error -5 [ 316.122615][ T9295] xt_nfacct: accounting object `syz1' does not exists [ 316.233860][ T9297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.259400][ T9297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.275974][ T9298] netlink: 'syz.0.687': attribute type 3 has an invalid length. [ 316.285415][ T5230] Bluetooth: hci4: unexpected event for opcode 0x2011 [ 316.305010][ T9298] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.687'. [ 316.437353][ T5277] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 316.450909][ T9304] netlink: 136 bytes leftover after parsing attributes in process `syz.4.691'. [ 316.610991][ T5277] usb 4-1: unable to get BOS descriptor or descriptor too short [ 316.621311][ T5277] usb 4-1: not running at top speed; connect to a high speed hub [ 316.643330][ T5277] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 316.680773][ T5277] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 316.708359][ T5277] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 316.754099][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 316.754116][ T29] audit: type=1326 audit(1726814840.277:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9309 comm="syz.1.693" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb2da17def9 code=0x0 [ 316.785591][ T5277] usb 4-1: config 1 has no interface number 1 [ 316.802801][ T5277] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 316.837358][ T937] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 316.874861][ T5277] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 316.892972][ T9316] xt_CT: You must specify a L4 protocol and not use inversions on it [ 316.904466][ T5277] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.948986][ T5277] usb 4-1: Product: syz [ 316.957050][ T9317] macvlan2: entered promiscuous mode [ 316.957702][ T5277] usb 4-1: Manufacturer: syz [ 317.012782][ T937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.030181][ T5277] usb 4-1: SerialNumber: syz [ 317.051901][ T937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.084713][ T937] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 317.116945][ T937] usb 5-1: New USB device found, idVendor=0c70, idProduct=f00e, bcdDevice= 0.00 [ 317.150545][ T937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.189555][ T937] usb 5-1: config 0 descriptor?? [ 317.242452][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.249030][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.625158][ T9307] netlink: 144 bytes leftover after parsing attributes in process `syz.4.691'. [ 317.868967][ T9327] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 317.903596][ T5277] usb 4-1: USB disconnect, device number 34 [ 317.957676][ T5227] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 318.057307][ T9330] x_tables: ip_tables: SNAT target: only valid in nat table, not syz0 [ 318.083755][ T9330] netlink: 40 bytes leftover after parsing attributes in process `syz.0.699'. [ 318.161972][ T5228] usb 3-1: USB disconnect, device number 32 [ 318.357582][ T46] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 318.438594][ T5291] usb 1-1: new low-speed USB device number 46 using dummy_hcd [ 318.558941][ T46] usb 2-1: unable to get BOS descriptor or descriptor too short [ 318.595651][ T46] usb 2-1: not running at top speed; connect to a high speed hub [ 318.617921][ T46] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 318.633671][ T46] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 318.653740][ T46] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 318.669159][ T5291] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 318.683576][ T46] usb 2-1: config 1 has no interface number 1 [ 318.691584][ T5291] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 318.707319][ T46] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 318.732927][ T5291] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 318.751844][ T5291] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 318.777084][ T46] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 318.795142][ T5291] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 318.807402][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.824895][ T46] usb 2-1: Product: syz [ 318.832933][ T5291] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 318.847017][ T46] usb 2-1: Manufacturer: syz [ 318.851888][ T5291] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 318.865781][ T46] usb 2-1: SerialNumber: syz [ 318.886721][ T5291] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 318.935912][ T5291] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 318.957766][ T5291] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 318.985210][ T5291] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 319.013545][ T5291] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 319.039100][ T5291] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 319.095442][ T5291] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 319.133943][ T5291] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 319.199440][ T5291] usb 1-1: string descriptor 0 read error: -22 [ 319.222613][ T5291] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 319.287324][ T5291] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.360217][ T5291] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 319.505860][ T937] usbhid 5-1:0.0: can't add hid device: -71 [ 319.534701][ T9358] netlink: 136 bytes leftover after parsing attributes in process `syz.3.710'. [ 319.537909][ T937] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 319.619442][ T937] usb 5-1: USB disconnect, device number 27 [ 319.927335][ T5279] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 320.091085][ T9368] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.100529][ T9368] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.109671][ T9368] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.118501][ T9368] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.156905][ T5279] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.177613][ T5279] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.204584][ T5279] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 320.243801][ T46] usb 2-1: USB disconnect, device number 33 [ 320.292119][ T5279] usb 4-1: New USB device found, idVendor=0c70, idProduct=f00e, bcdDevice= 0.00 [ 320.310463][ T5279] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.349243][ T5245] udevd[5245]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 320.382336][ T5279] usb 4-1: config 0 descriptor?? [ 320.578478][ T5291] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 320.757521][ T5291] usb 3-1: Using ep0 maxpacket: 16 [ 320.773033][ T5291] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.795012][ T5291] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.822379][ T9363] netlink: 144 bytes leftover after parsing attributes in process `syz.3.710'. [ 320.856827][ T5291] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 320.918405][ T5291] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 320.982635][ T5291] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.022530][ T46] usb 1-1: USB disconnect, device number 46 [ 321.055560][ T5291] usb 3-1: config 0 descriptor?? [ 321.569289][ T9396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.715'. [ 321.895330][ T9403] usb usb8: usbfs: process 9403 (syz.1.727) did not claim interface 0 before use [ 321.897903][ T9402] ipt_REJECT: TCP_RESET invalid for non-tcp [ 321.945856][ T5291] usbhid 3-1:0.0: can't add hid device: -71 [ 322.005451][ T5291] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 322.050453][ T5291] usb 3-1: USB disconnect, device number 33 [ 322.195718][ T9408] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 322.654418][ T5279] usbhid 4-1:0.0: can't add hid device: -71 [ 322.660824][ T5279] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 322.676511][ T5279] usb 4-1: USB disconnect, device number 35 [ 324.297361][ T46] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 324.457279][ T46] usb 1-1: Using ep0 maxpacket: 32 [ 324.465134][ T46] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 324.474076][ T46] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 324.485800][ T46] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 324.497706][ T46] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 324.514291][ T46] usb 1-1: config 0 interface 0 has no altsetting 0 [ 324.523535][ T46] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 324.533892][ T46] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 324.537310][ T5279] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 324.542671][ T46] usb 1-1: Product: syz [ 324.554644][ T46] usb 1-1: Manufacturer: syz [ 324.559888][ T46] usb 1-1: SerialNumber: syz [ 324.574240][ T46] usb 1-1: config 0 descriptor?? [ 324.583859][ T46] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 324.605219][ T46] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 324.747338][ T5279] usb 4-1: Using ep0 maxpacket: 16 [ 324.760266][ T5279] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 324.789665][ T5279] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 324.807263][ T5279] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.847263][ T5279] usb 4-1: Product: syz [ 324.851611][ T5279] usb 4-1: Manufacturer: syz [ 324.856249][ T5279] usb 4-1: SerialNumber: syz [ 324.894251][ T25] usb 1-1: USB disconnect, device number 47 [ 324.894283][ C0] ldusb 1-1:0.0: usb_submit_urb failed (-19) [ 324.906723][ T9454] ldusb 1-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 324.916633][ T25] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 324.916693][ T5279] usb 4-1: bad CDC descriptors [ 325.138792][ T5279] usb 4-1: USB disconnect, device number 36 [ 325.560565][ T9494] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 325.580949][ T9494] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 325.605455][ T9494] bond0 (unregistering): Released all slaves [ 325.616866][ T9498] netlink: 12 bytes leftover after parsing attributes in process `syz.2.771'. [ 325.823274][ T9502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.773'. [ 326.076760][ T9514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.779'. [ 326.187591][ T5279] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 326.387662][ T5279] usb 1-1: Using ep0 maxpacket: 8 [ 326.405451][ T5279] usb 1-1: config 0 interface 0 altsetting 146 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.447145][ T5279] usb 1-1: config 0 interface 0 has no altsetting 0 [ 326.453930][ T5279] usb 1-1: New USB device found, idVendor=056a, idProduct=005b, bcdDevice= 0.00 [ 326.503617][ T5279] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.532244][ T5279] usb 1-1: config 0 descriptor?? [ 329.997550][ T8254] sched: DL replenish lagged too much [ 330.372422][ T5279] usbhid 1-1:0.0: can't add hid device: -71 [ 330.379427][ T5279] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 330.415101][ T5279] usb 1-1: USB disconnect, device number 48 [ 330.897682][ T5228] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 331.108058][ T5228] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 331.152029][ T5228] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.248902][ T5228] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 331.291023][ T5228] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 331.344582][ T5228] usb 2-1: Manufacturer: syz [ 331.381815][ T5228] usb 2-1: config 0 descriptor?? [ 331.481431][ T9574] ======================================================= [ 331.481431][ T9574] WARNING: The mand mount option has been deprecated and [ 331.481431][ T9574] and is ignored by this kernel. Remove the mand [ 331.481431][ T9574] option from the mount to silence this warning. [ 331.481431][ T9574] ======================================================= [ 331.707348][ T5228] rc_core: IR keymap rc-hauppauge not found [ 331.728495][ T5228] Registered IR keymap rc-empty [ 331.738376][ T9581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.810'. [ 331.774880][ T5228] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 331.828657][ T5228] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input32 [ 331.950866][ T5228] usb 2-1: USB disconnect, device number 34 [ 333.181043][ T5230] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 333.192198][ T5230] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 333.201279][ T5230] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 333.215049][ T5230] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 333.225488][ T5230] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 333.235304][ T5230] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 335.317564][ T5230] Bluetooth: hci2: command tx timeout [ 337.402446][ T5230] Bluetooth: hci2: command tx timeout [ 338.612651][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.054822][ T9614] futex_wake_op: syz.3.825 tries to shift op by 32; fix this program [ 339.307333][ T5228] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 339.477649][ T5230] Bluetooth: hci2: command tx timeout [ 339.483202][ T5228] usb 2-1: Using ep0 maxpacket: 8 [ 339.500500][ T5228] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 339.516232][ T5228] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 339.527855][ T5228] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 339.545604][ T5228] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 339.555974][ T5228] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 339.577938][ T5228] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 339.593934][ T5228] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.827492][ T5228] usb 2-1: usb_control_msg returned -32 [ 339.845552][ T5228] usbtmc 2-1:16.0: can't read capabilities [ 339.878141][ T5228] usb 2-1: USB disconnect, device number 35 [ 340.668400][ T9625] sock: sock_set_timeout: `syz.1.830' (pid 9625) tries to set negative timeout [ 341.496984][ T9632] netlink: 'syz.1.832': attribute type 12 has an invalid length. [ 341.527018][ T9632] netlink: 197276 bytes leftover after parsing attributes in process `syz.1.832'. [ 341.557540][ T5230] Bluetooth: hci2: command tx timeout [ 344.014506][ T5227] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 344.033775][ T5227] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 344.042750][ T5227] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 344.066178][ T5236] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 344.076095][ T5236] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 344.084384][ T5236] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 344.103639][ T5236] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 344.112297][ T5236] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 344.127952][ T5230] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 344.138438][ T5230] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 344.163212][ T5230] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 344.170549][ T5230] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 346.197501][ T5227] Bluetooth: hci5: command tx timeout [ 346.277457][ T5227] Bluetooth: hci1: command tx timeout [ 348.277340][ T5227] Bluetooth: hci5: command tx timeout [ 348.372507][ T5227] Bluetooth: hci1: command tx timeout [ 349.514120][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.702718][ T9619] mac80211_hwsim hwsim52 wlan1: entered promiscuous mode [ 349.740268][ T9619] mac80211_hwsim hwsim52 wlan1: left promiscuous mode [ 349.975926][ T5230] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 349.988003][ T5230] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 349.995771][ T5230] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 350.005815][ T5230] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 350.013440][ T5230] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 350.021304][ T5230] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 350.357407][ T5230] Bluetooth: hci5: command tx timeout [ 350.437426][ T5230] Bluetooth: hci1: command tx timeout [ 351.392827][ T5227] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 351.403074][ T5227] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 351.411602][ T5227] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 351.419648][ T5227] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 351.428158][ T5227] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 351.435546][ T5227] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 352.117577][ T5227] Bluetooth: hci4: command tx timeout [ 352.447818][ T5227] Bluetooth: hci5: command tx timeout [ 352.517445][ T5227] Bluetooth: hci1: command tx timeout [ 353.477391][ T5227] Bluetooth: hci6: command tx timeout [ 354.197450][ T5227] Bluetooth: hci4: command tx timeout [ 355.557378][ T5227] Bluetooth: hci6: command tx timeout [ 356.277568][ T5227] Bluetooth: hci4: command tx timeout [ 357.637309][ T5227] Bluetooth: hci6: command tx timeout [ 358.357578][ T5227] Bluetooth: hci4: command tx timeout [ 359.718241][ T5227] Bluetooth: hci6: command tx timeout [ 378.685724][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.692322][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 395.161320][ T5230] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 395.186718][ T5230] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 395.215563][ T5230] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 395.304352][ T5230] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 395.354509][ T5230] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 395.383237][ T5230] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 397.484127][ T5230] Bluetooth: hci7: command tx timeout [ 399.557395][ T5230] Bluetooth: hci7: command tx timeout [ 401.647421][ T5230] Bluetooth: hci7: command tx timeout [ 403.717391][ T5230] Bluetooth: hci7: command tx timeout [ 404.845053][ T5227] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 404.857574][ T5227] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 404.868223][ T5227] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 404.876022][ T5227] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 404.887676][ T5227] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 404.895034][ T5227] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 404.953861][ T5230] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 404.972151][ T5230] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 404.980313][ T5230] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 404.988799][ T5230] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 404.996438][ T5230] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 405.004325][ T5230] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 406.997625][ T5230] Bluetooth: hci8: command tx timeout [ 407.077451][ T5230] Bluetooth: hci9: command tx timeout [ 409.077373][ T5230] Bluetooth: hci8: command tx timeout [ 409.157326][ T5230] Bluetooth: hci9: command tx timeout [ 410.483688][ T5227] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 410.495070][ T5227] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 410.507360][ T5227] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 410.515301][ T5227] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 410.523457][ T5227] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 410.530897][ T5227] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 411.157259][ T5230] Bluetooth: hci8: command tx timeout [ 411.237586][ T5230] Bluetooth: hci9: command tx timeout [ 411.544150][ T5227] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 411.562239][ T5227] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 411.570896][ T5227] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 411.579883][ T5227] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 411.587732][ T5227] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 411.597497][ T5227] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 412.597527][ T5227] Bluetooth: hci10: command tx timeout [ 413.237297][ T5227] Bluetooth: hci8: command tx timeout [ 413.317444][ T5227] Bluetooth: hci9: command tx timeout [ 413.637424][ T5227] Bluetooth: hci11: command tx timeout [ 414.687209][ T5227] Bluetooth: hci10: command tx timeout [ 415.717424][ T5227] Bluetooth: hci11: command tx timeout [ 416.757274][ T5227] Bluetooth: hci10: command tx timeout [ 417.797263][ T5227] Bluetooth: hci11: command tx timeout [ 418.837434][ T5227] Bluetooth: hci10: command tx timeout [ 419.877345][ T5227] Bluetooth: hci11: command tx timeout [ 440.122211][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.134422][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 455.645255][ T9680] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 455.656015][ T9680] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 455.671615][ T9680] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 455.681214][ T9680] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 455.694834][ T9680] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 455.707383][ T9680] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 457.637408][ T5227] Bluetooth: hci2: command 0x0406 tx timeout [ 457.807447][ T5230] Bluetooth: hci12: command tx timeout [ 459.877233][ T5230] Bluetooth: hci12: command tx timeout [ 461.957612][ T5230] Bluetooth: hci12: command tx timeout [ 464.037335][ T5230] Bluetooth: hci12: command tx timeout [ 465.365788][ T5227] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 465.378821][ T5227] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 465.386819][ T5227] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 465.395198][ T5227] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 465.403074][ T5227] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 465.410612][ T5227] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 465.435012][ T5230] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 465.444433][ T5230] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 465.452822][ T5230] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 465.460965][ T5230] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 465.470080][ T5230] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 465.477482][ T5230] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 467.577517][ T5230] Bluetooth: hci14: command tx timeout [ 467.584491][ T5230] Bluetooth: hci13: command tx timeout [ 467.811293][ T9695] Bluetooth: hci5: command 0x0406 tx timeout [ 467.821776][ T5236] Bluetooth: hci1: command 0x0406 tx timeout [ 469.637469][ T5227] Bluetooth: hci14: command tx timeout [ 469.644751][ T9680] Bluetooth: hci13: command tx timeout [ 471.147404][ T5236] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 471.162984][ T5236] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 471.171131][ T5236] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 471.179405][ T5236] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 471.187039][ T5236] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 471.196457][ T5236] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 471.717266][ T5227] Bluetooth: hci14: command tx timeout [ 471.724441][ T5236] Bluetooth: hci13: command tx timeout [ 472.017184][ T5227] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 472.027064][ T5227] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 472.036981][ T5227] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 472.045367][ T5227] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 472.053087][ T5227] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 472.060802][ T5227] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 472.926705][ T5227] Bluetooth: hci4: command 0x0406 tx timeout [ 473.237662][ T9680] Bluetooth: hci15: command tx timeout [ 473.797318][ T5227] Bluetooth: hci14: command tx timeout [ 473.802902][ T9680] Bluetooth: hci13: command tx timeout [ 474.117402][ T9680] Bluetooth: hci16: command tx timeout [ 475.317599][ T9680] Bluetooth: hci15: command tx timeout [ 476.197355][ T9680] Bluetooth: hci16: command tx timeout [ 477.397400][ T9680] Bluetooth: hci15: command tx timeout [ 478.048153][ T9680] Bluetooth: hci6: command 0x0406 tx timeout [ 478.277239][ T5227] Bluetooth: hci16: command tx timeout [ 479.477590][ T5227] Bluetooth: hci15: command tx timeout [ 480.367346][ T5227] Bluetooth: hci16: command tx timeout [ 486.837498][ T30] INFO: task syz-executor:9607 blocked for more than 143 seconds. [ 486.845396][ T30] Not tainted 6.11.0-syzkaller-07337-g2004cef11ea0 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 486.890815][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 486.919513][ T30] task:syz-executor state:D stack:26032 pid:9607 tgid:9607 ppid:1 flags:0x00004004 [ 486.953432][ T30] Call Trace: [ 486.956761][ T30] [ 486.964651][ T30] __schedule+0x1893/0x4b50 [ 487.027317][ T30] ? __pfx___schedule+0x10/0x10 [ 487.032246][ T30] ? __pfx_lock_release+0x10/0x10 [ 487.089909][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 487.095426][ T30] ? schedule+0x90/0x320 [ 487.105252][ T30] schedule+0x14b/0x320 [ 487.109726][ T30] schedule_preempt_disabled+0x13/0x30 [ 487.115219][ T30] __mutex_lock+0x6a7/0xd70 [ 487.124904][ T30] ? __mutex_lock+0x52a/0xd70 [ 487.136248][ T30] ? ip_tunnel_init_net+0x20e/0x720 [ 487.146747][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 487.152110][ T30] ? read_word_at_a_time+0xe/0x20 [ 487.163423][ T30] ? sized_strscpy+0x8d/0x220 [ 487.168977][ T30] ip_tunnel_init_net+0x20e/0x720 [ 487.174062][ T30] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 487.184823][ T30] ? ops_init+0x75/0x590 [ 487.190533][ T30] ops_init+0x31e/0x590 [ 487.194742][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 487.205359][ T30] setup_net+0x287/0x9e0 [ 487.210058][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 487.215642][ T30] ? __pfx_setup_net+0x10/0x10 [ 487.225816][ T30] copy_net_ns+0x33f/0x570 [ 487.230579][ T30] create_new_namespaces+0x425/0x7b0 [ 487.235924][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 487.245416][ T30] ksys_unshare+0x619/0xc10 [ 487.253463][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 487.260921][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 487.266950][ T30] ? do_syscall_64+0x100/0x230 [ 487.275240][ T30] __x64_sys_unshare+0x38/0x40 [ 487.282799][ T30] do_syscall_64+0xf3/0x230 [ 487.292304][ T30] ? clear_bhb_loop+0x35/0x90 [ 487.297042][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.305466][ T30] RIP: 0033:0x7f3dc877f6f7 [ 487.313166][ T30] RSP: 002b:00007f3dc8a5ffa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 487.324612][ T30] RAX: ffffffffffffffda RBX: 00007f3dc87f22ec RCX: 00007f3dc877f6f7 [ 487.336117][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 487.347571][ T30] RBP: 0000000000000000 R08: 00007f3dc9467d60 R09: 0000000000000000 [ 487.355589][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 487.367594][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 487.375626][ T30] [ 487.383158][ T30] INFO: task syz.1.832:9632 blocked for more than 143 seconds. [ 487.391549][ T30] Not tainted 6.11.0-syzkaller-07337-g2004cef11ea0 #0 [ 487.409435][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 487.422710][ T30] task:syz.1.832 state:D stack:22400 pid:9632 tgid:9628 ppid:8265 flags:0x00004006 [ 487.433162][ T30] Call Trace: [ 487.436467][ T30] [ 487.444595][ T30] __schedule+0x1893/0x4b50 [ 487.454015][ T30] ? __pfx___schedule+0x10/0x10 [ 487.464588][ T30] ? __pfx_lock_release+0x10/0x10 [ 487.469949][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 487.475464][ T30] ? schedule+0x90/0x320 [ 487.487199][ T30] schedule+0x14b/0x320 [ 487.491430][ T30] schedule_preempt_disabled+0x13/0x30 [ 487.496942][ T30] __mutex_lock+0x6a7/0xd70 [ 487.507993][ T30] ? __mutex_lock+0x52a/0xd70 [ 487.512731][ T30] ? wiphy_apply_custom_regulatory+0x2c6/0x3d0 [ 487.525937][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 487.532437][ T30] ? wiphy_apply_custom_regulatory+0x23c/0x3d0 [ 487.543546][ T30] ? wiphy_apply_custom_regulatory+0x23c/0x3d0 [ 487.551202][ T30] ? rcu_is_watching+0x15/0xb0 [ 487.556016][ T30] ? wiphy_apply_custom_regulatory+0x23c/0x3d0 [ 487.568741][ T30] ? trace_kmalloc+0x1f/0xd0 [ 487.573379][ T30] ? wiphy_apply_custom_regulatory+0x28f/0x3d0 [ 487.591850][ T30] wiphy_apply_custom_regulatory+0x2c6/0x3d0 [ 487.604306][ T30] mac80211_hwsim_new_radio+0x2928/0x4a90 [ 487.611278][ T30] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 487.623402][ T30] ? rcu_is_watching+0x15/0xb0 [ 487.629881][ T30] ? do_trace_netlink_extack+0x8b/0x1f0 [ 487.635491][ T30] hwsim_new_radio_nl+0xece/0x2290 [ 487.646813][ T30] ? __pfx___nla_validate_parse+0x10/0x10 [ 487.652957][ T30] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 487.664540][ T30] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 487.671216][ T30] genl_rcv_msg+0xb14/0xec0 [ 487.675766][ T30] ? mark_lock+0x9a/0x360 [ 487.687370][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 487.692481][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 487.703457][ T30] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 487.709347][ T30] ? __pfx___might_resched+0x10/0x10 [ 487.714694][ T30] netlink_rcv_skb+0x1e3/0x430 [ 487.727260][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 487.732348][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 487.744234][ T30] ? __netlink_deliver_tap+0x77e/0x7c0 [ 487.751248][ T30] genl_rcv+0x28/0x40 [ 487.755284][ T30] netlink_unicast+0x7f6/0x990 [ 487.765122][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 487.771989][ T30] ? __virt_addr_valid+0x183/0x530 [ 487.782047][ T30] ? __check_object_size+0x49c/0x900 [ 487.788839][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 487.793674][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 487.803963][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 487.811370][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 487.816699][ T30] __sock_sendmsg+0x221/0x270 [ 487.826040][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 487.834010][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 487.843908][ T30] __sys_sendmsg+0x2aa/0x390 [ 487.850087][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 487.855291][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 487.867204][ T30] ? do_syscall_64+0x100/0x230 [ 487.872041][ T30] ? do_syscall_64+0xb6/0x230 [ 487.876774][ T30] do_syscall_64+0xf3/0x230 [ 487.886644][ T30] ? clear_bhb_loop+0x35/0x90 [ 487.891629][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.903432][ T30] RIP: 0033:0x7fb2da17def9 [ 487.909479][ T30] RSP: 002b:00007fb2daea6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 487.923759][ T30] RAX: ffffffffffffffda RBX: 00007fb2da336130 RCX: 00007fb2da17def9 [ 487.932023][ T30] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000008 [ 487.946529][ T30] RBP: 00007fb2da1f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 487.956029][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 487.975587][ T30] R13: 0000000000000000 R14: 00007fb2da336130 R15: 00007fb2da45fa28 [ 487.983912][ T30] [ 487.987434][ T30] [ 487.987434][ T30] Showing all locks held in the system: [ 487.995167][ T30] 6 locks held by kworker/u8:1/12: [ 488.005690][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 488.023334][ T30] #1: ffffc90000117d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 488.050164][ T30] #2: ffffffff8fcbd010 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 488.063818][ T30] #3: ffff888069b8c0e8 (&dev->mutex){....}-{3:3}, at: devlink_pernet_pre_exit+0x13b/0x440 [ 488.081534][ T30] #4: ffff888064629250 (&devlink->lock_key#22){+.+.}-{3:3}, at: devlink_pernet_pre_exit+0x14d/0x440 [ 488.092749][ T30] #5: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 488.107169][ T30] 5 locks held by kworker/1:0/25: [ 488.112221][ T30] 1 lock held by khungtaskd/30: [ 488.117088][ T30] #0: ffffffff8e9389e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 488.134966][ T30] 3 locks held by kworker/u8:4/61: [ 488.141653][ T30] #0: ffff88814b5ef948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 488.158133][ T30] #1: ffffc900015cfd00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 488.176975][ T30] #2: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 488.187386][ T30] 3 locks held by kworker/u8:7/2949: [ 488.192723][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 488.210641][ T30] #1: ffffc90009b67d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 488.224483][ T30] #2: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 488.236821][ T30] 2 locks held by getty/4977: [ 488.245640][ T30] #0: ffff88814b8840a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 488.259350][ T30] #1: ffffc900031232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 488.273250][ T30] 3 locks held by kworker/0:3/5228: [ 488.281218][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 488.300970][ T30] #1: ffffc900036a7d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 488.313358][ T30] #2: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 488.327494][ T30] 3 locks held by kworker/0:8/5296: [ 488.332716][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 488.351461][ T30] #1: ffffc9000452fd00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 488.374354][ T30] #2: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 488.390801][ T30] 1 lock held by syz.4.821/9602: [ 488.395842][ T30] #0: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 488.411904][ T30] 1 lock held by syz.0.822/9605: [ 488.416886][ T30] #0: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 488.426411][ T30] 2 locks held by syz-executor/9607: [ 488.436913][ T30] #0: ffffffff8fcbd010 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 488.451180][ T30] #1: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 488.467152][ T30] 2 locks held by syz.3.827/9619: [ 488.472215][ T30] #0: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 488.486927][ T30] #1: ffffffff8e7d28d0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 488.505412][ T30] 3 locks held by syz.1.832/9632: [ 488.510723][ T30] #0: ffffffff8fd2f830 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 488.527350][ T30] #1: ffffffff8fd2f6e8 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 488.536469][ T30] #2: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: wiphy_apply_custom_regulatory+0x2c6/0x3d0 [ 488.553571][ T30] 2 locks held by syz-executor/9640: [ 488.559170][ T30] #0: ffffffff8fcbd010 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 488.574515][ T30] #1: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 488.584840][ T30] 2 locks held by syz-executor/9641: [ 488.595623][ T30] #0: ffffffff8fcbd010 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 488.606483][ T30] #1: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 488.622421][ T30] 2 locks held by syz-executor/9646: [ 488.628077][ T30] #0: ffffffff8fcbd010 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 488.643717][ T30] #1: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 488.656076][ T30] 2 locks held by syz-executor/9649: [ 488.666798][ T30] #0: ffffffff8fcbd010 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 488.676603][ T30] #1: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 488.692343][ T30] 2 locks held by syz-executor/9659: [ 488.697978][ T30] #0: ffffffff8fcbd010 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 488.715270][ T30] #1: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 488.725688][ T30] 2 locks held by syz-executor/9667: [ 488.737242][ T30] #0: ffffffff8fcbd010 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 488.746728][ T30] #1: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 488.763856][ T30] 2 locks held by syz-executor/9669: [ 488.772236][ T30] #0: ffffffff8fcbd010 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 488.786346][ T30] #1: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 488.798239][ T30] 2 locks held by syz-executor/9673: [ 488.803558][ T30] #0: ffffffff8fcbd010 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 488.818823][ T30] #1: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 488.833907][ T30] 2 locks held by syz-executor/9678: [ 488.839884][ T30] #0: ffffffff8fcbd010 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 488.854859][ T30] #1: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 488.865183][ T30] 2 locks held by syz-executor/9684: [ 488.877204][ T30] #0: ffffffff8fcbd010 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 488.886688][ T30] #1: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 488.901789][ T30] 2 locks held by syz-executor/9692: [ 488.907443][ T30] #0: ffffffff8fcbd010 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 488.916940][ T30] #1: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 488.934432][ T30] 2 locks held by syz-executor/9694: [ 488.940004][ T30] #0: ffffffff8fcbd010 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 488.955395][ T30] #1: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 488.965855][ T30] 2 locks held by syz-executor/9700: [ 488.977147][ T30] #0: ffffffff8fcbd010 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 488.986634][ T30] #1: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 489.001853][ T30] 2 locks held by syz-executor/9703: [ 489.007738][ T30] #0: ffffffff8fcbd010 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 489.022933][ T30] #1: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 489.034389][ T30] 2 locks held by dhcpcd/9709: [ 489.044584][ T30] #0: ffff8880628fc258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 489.054633][ T30] #1: ffffffff8e93df78 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 489.071699][ T30] [ 489.074054][ T30] ============================================= [ 489.074054][ T30] [ 489.085950][ T30] NMI backtrace for cpu 0 [ 489.090314][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-07337-g2004cef11ea0 #0 [ 489.100488][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 489.110646][ T30] Call Trace: [ 489.113940][ T30] [ 489.116895][ T30] dump_stack_lvl+0x241/0x360 [ 489.121613][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 489.126840][ T30] ? __pfx__printk+0x10/0x10 [ 489.131480][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 489.136445][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 489.141924][ T30] ? _printk+0xd5/0x120 [ 489.146106][ T30] ? __pfx__printk+0x10/0x10 [ 489.150717][ T30] ? __wake_up_klogd+0xcc/0x110 [ 489.155589][ T30] ? __pfx__printk+0x10/0x10 [ 489.160223][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 489.165275][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 489.171287][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 489.177315][ T30] watchdog+0xff4/0x1040 [ 489.181590][ T30] ? watchdog+0x1ea/0x1040 [ 489.186030][ T30] ? __pfx_watchdog+0x10/0x10 [ 489.190732][ T30] kthread+0x2f0/0x390 [ 489.194821][ T30] ? __pfx_watchdog+0x10/0x10 [ 489.199526][ T30] ? __pfx_kthread+0x10/0x10 [ 489.204138][ T30] ret_from_fork+0x4b/0x80 [ 489.208588][ T30] ? __pfx_kthread+0x10/0x10 [ 489.213206][ T30] ret_from_fork_asm+0x1a/0x30 [ 489.218018][ T30] [ 489.221373][ T30] Sending NMI from CPU 0 to CPUs 1: [ 489.226614][ C1] NMI backtrace for cpu 1 [ 489.226626][ C1] CPU: 1 UID: 0 PID: 25 Comm: kworker/1:0 Not tainted 6.11.0-syzkaller-07337-g2004cef11ea0 #0 [ 489.226645][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 489.226656][ C1] Workqueue: events nsim_dev_trap_report_work [ 489.226676][ C1] RIP: 0010:lock_acquire+0x5/0x550 [ 489.226702][ C1] Code: a9 00 ff ff 00 0f 95 c0 c3 cc cc cc cc 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 <48> 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 81 ec 20 01 00 [ 489.226717][ C1] RSP: 0018:ffffc90000a18ae8 EFLAGS: 00000046 [ 489.226730][ C1] RAX: 0000000000000103 RBX: 1ffff92000143164 RCX: 0000000000000000 [ 489.226742][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff9a645b00 [ 489.226753][ C1] RBP: ffffc90000a18b90 R08: 0000000000000001 R09: 0000000000000000 [ 489.226763][ C1] R10: dffffc0000000000 R11: fffffbfff2038b56 R12: 0000000000000246 [ 489.226775][ C1] R13: 1ffff92000143160 R14: ffffffff9a645ae8 R15: dffffc0000000000 [ 489.226788][ C1] FS: 0000000000000000(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000 [ 489.226802][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 489.226822][ C1] CR2: 0000001b2f31dff8 CR3: 000000005afda000 CR4: 00000000003506f0 [ 489.226836][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 489.226846][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 489.226857][ C1] Call Trace: [ 489.226862][ C1] [ 489.226869][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 489.226887][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 489.226912][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 489.226929][ C1] ? nmi_handle+0x2a/0x5a0 [ 489.226952][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 489.226973][ C1] ? nmi_handle+0x14f/0x5a0 [ 489.226989][ C1] ? nmi_handle+0x2a/0x5a0 [ 489.227005][ C1] ? lock_acquire+0x5/0x550 [ 489.227027][ C1] ? default_do_nmi+0x63/0x160 [ 489.227045][ C1] ? exc_nmi+0x123/0x1f0 [ 489.227062][ C1] ? end_repeat_nmi+0xf/0x53 [ 489.227091][ C1] ? lock_acquire+0x5/0x550 [ 489.227120][ C1] ? lock_acquire+0x5/0x550 [ 489.227146][ C1] ? lock_acquire+0x5/0x550 [ 489.227168][ C1] [ 489.227174][ C1] [ 489.227180][ C1] _raw_spin_lock_irqsave+0xd5/0x120 [ 489.227201][ C1] ? debug_object_active_state+0x15d/0x360 [ 489.227221][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 489.227242][ C1] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 489.227271][ C1] debug_object_active_state+0x15d/0x360 [ 489.227290][ C1] ? rcu_core+0xa37/0x17a0 [ 489.227305][ C1] ? __pfx_debug_object_active_state+0x10/0x10 [ 489.227323][ C1] ? dst_destroy+0x2ac/0x460 [ 489.227350][ C1] ? dst_destroy+0x43a/0x460 [ 489.227375][ C1] rcu_core+0xa21/0x17a0 [ 489.227397][ C1] ? __pfx_rcu_core+0x10/0x10 [ 489.227427][ C1] handle_softirqs+0x2c5/0x980 [ 489.227451][ C1] ? do_softirq+0x11b/0x1e0 [ 489.227473][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 489.227498][ C1] do_softirq+0x11b/0x1e0 [ 489.227517][ C1] [ 489.227523][ C1] [ 489.227529][ C1] ? __pfx_do_softirq+0x10/0x10 [ 489.227550][ C1] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 489.227575][ C1] ? rcu_is_watching+0x15/0xb0 [ 489.227593][ C1] __local_bh_enable_ip+0x1bb/0x200 [ 489.227615][ C1] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 489.227631][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 489.227652][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 489.227673][ C1] ? nsim_dev_trap_report_work+0x6a7/0xaa0 [ 489.227692][ C1] nsim_dev_trap_report_work+0x75d/0xaa0 [ 489.227714][ C1] ? process_scheduled_works+0x976/0x1850 [ 489.227737][ C1] process_scheduled_works+0xa63/0x1850 [ 489.227771][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 489.227825][ C1] ? assign_work+0x364/0x3d0 [ 489.227868][ C1] worker_thread+0x870/0xd30 [ 489.227900][ C1] ? __kthread_parkme+0x169/0x1d0 [ 489.227927][ C1] ? __pfx_worker_thread+0x10/0x10 [ 489.227951][ C1] kthread+0x2f0/0x390 [ 489.227968][ C1] ? __pfx_worker_thread+0x10/0x10 [ 489.227992][ C1] ? __pfx_kthread+0x10/0x10 [ 489.228009][ C1] ret_from_fork+0x4b/0x80 [ 489.228034][ C1] ? __pfx_kthread+0x10/0x10 [ 489.228051][ C1] ret_from_fork_asm+0x1a/0x30 [ 489.228084][ C1] [ 489.660776][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 489.667660][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-07337-g2004cef11ea0 #0 [ 489.677854][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 489.687937][ T30] Call Trace: [ 489.691242][ T30] [ 489.694191][ T30] dump_stack_lvl+0x241/0x360 [ 489.698912][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 489.704157][ T30] ? __pfx__printk+0x10/0x10 [ 489.708779][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 489.714806][ T30] ? vscnprintf+0x5d/0x90 [ 489.719168][ T30] panic+0x349/0x880 [ 489.723101][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 489.729282][ T30] ? __pfx_panic+0x10/0x10 [ 489.733722][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 489.739116][ T30] ? __irq_work_queue_local+0x137/0x410 [ 489.744689][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 489.750080][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 489.756252][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 489.762428][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 489.768609][ T30] watchdog+0x1033/0x1040 [ 489.772972][ T30] ? watchdog+0x1ea/0x1040 [ 489.777430][ T30] ? __pfx_watchdog+0x10/0x10 [ 489.782137][ T30] kthread+0x2f0/0x390 [ 489.786227][ T30] ? __pfx_watchdog+0x10/0x10 [ 489.790931][ T30] ? __pfx_kthread+0x10/0x10 [ 489.795548][ T30] ret_from_fork+0x4b/0x80 [ 489.799998][ T30] ? __pfx_kthread+0x10/0x10 [ 489.804607][ T30] ret_from_fork_asm+0x1a/0x30 [ 489.809418][ T30] [ 489.812856][ T30] Kernel Offset: disabled [ 489.817190][ T30] Rebooting in 86400 seconds..