last executing test programs: 20.517679564s ago: executing program 0 (id=1): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0xef) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x40) 20.081822125s ago: executing program 0 (id=5): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e24, @multicast2}}, 0x5, 0x2}, 0x90) 19.99375323s ago: executing program 0 (id=6): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0xca, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x2b}, 0x0, 0x0, 0x0, 0x0}, 0x58) read(r0, 0x0, 0x4d) 19.568838282s ago: executing program 0 (id=7): mkdir(&(0x7f0000000000)='./file0\x00', 0xfffffffffffffffe) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05c06, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 19.365937623s ago: executing program 0 (id=8): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040100010300000009210000000122020009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 17.55970021s ago: executing program 0 (id=9): r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000406104724e00000000000109022d0001000000830904000001030001000921fcff0001220b0009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) 17.161069132s ago: executing program 32 (id=9): r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000406104724e00000000000109022d0001000000830904000001030001000921fcff0001220b0009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) 6.894426536s ago: executing program 2 (id=65): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0xef) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x40) 6.432316838s ago: executing program 2 (id=67): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) 4.089612291s ago: executing program 1 (id=75): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x200, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl816\x00', [0x100, 0x7, 0x2, 0x1000, 0xe, 0x5, 0x79, 0x3, 0x80008, 0x0, 0xffffffff, 0x1, 0x8, 0x1, 0x100, 0xfd, 0xfffffffb, 0x9, 0x3, 0x7fffffff, 0x89, 0xca9f, 0xfffffffe, 0x20001e58, 0xffffffff, 0xf39e, 0x3, 0x8, 0xa6b5, 0x0, 0x10]}) ioctl$COMEDI_RANGEINFO(r0, 0x80106408, &(0x7f0000000900)={0x0, 0x0}) 4.003622777s ago: executing program 2 (id=76): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="3f031c000300140006001e0089e9aaa911d7c2290f0086dd1327c9167c64114a1b68", 0x22, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xb, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.764790298s ago: executing program 1 (id=77): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000851}, 0x24044010) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f00000004c0)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x7}, 0x1c) sendto$inet6(r1, &(0x7f0000000000)="06006c748e40e482488a2bb1581ec0", 0xf, 0x3b00, 0x0, 0x0) 3.492929497s ago: executing program 1 (id=78): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x14, 0x52, 0x6804311d36975393, 0x70bd2d, 0x25dfdbff, {0x1c}}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x20044884) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x42000, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, 0x0, 0x0) close(r2) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000040)=@e={0xff, 0x9, 0x0, 0x3, @SEQ_NOTEON=@note=0x7e, 0xa, 0x7f, 0x2}) 2.475449814s ago: executing program 1 (id=79): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$FBIOBLANK(r3, 0x4611, 0x2) 2.180830246s ago: executing program 3 (id=81): pipe2$watch_queue(0x0, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000840)=ANY=[@ANYBLOB="06"]) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 1.522874998s ago: executing program 2 (id=82): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0xef) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x40) 1.43602665s ago: executing program 2 (id=83): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000d}, 0x850) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x2d}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto(r2, 0x0, 0x0, 0x40000, &(0x7f0000002500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @empty}, 0x1, 0x2, 0x4, 0x81}}, 0x80) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 1.312678803s ago: executing program 1 (id=84): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x9, 0x0, 0x2, 0x180, 0x5, 0x4, 0xf1, 0x50, 0x12, 0x2, 0x0, 0x29, 0x0, 0x6, 0x0, 0x8000000bdb], 0xd000, 0x43102}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x4, 0x1000000000, 0x0, 0x10043, 0x2000001, 0x7, 0x2004cb, 0x0, 0x1000007, 0xd2, 0x2, 0x9, 0x3, 0x3ff, 0x7], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x60000, 0xeeee0000, 0xa, 0x8, 0xb, 0xe4, 0x40, 0x0, 0x0, 0x2e, 0x80}, {0x5000, 0x4000, 0x3, 0x0, 0x42, 0x5, 0x5, 0x6, 0x5, 0x5, 0x42, 0x89}, {0xfec00000, 0x1, 0xe, 0x5, 0x3, 0x7, 0x0, 0x7, 0x3, 0x5, 0x5, 0x5}, {0x1, 0xf000, 0xd, 0x6, 0x4, 0x42, 0xb, 0xff, 0x2, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0xfd, 0x3, 0xf7, 0x83}, {0x1000, 0xc000, 0x9, 0xa0, 0xb1, 0x8, 0x2, 0xa0, 0x82, 0xf, 0x5, 0x7}, {0xeeef0000, 0xeeef0000, 0x4, 0x5, 0x7, 0xd1, 0x7, 0x3, 0x9, 0x81, 0x40, 0x70}, {0x200000, 0x4000, 0x14, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0x9, 0xb0, 0x9}, {0xffff2000, 0x30}, {0x8000000, 0x7}, 0x80010000, 0x0, 0x0, 0x2024, 0x0, 0xf401, 0x3000, [0x9, 0x100000000000204, 0x5b, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.205332858s ago: executing program 3 (id=85): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000851}, 0x24044010) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f00000004c0)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x7}, 0x1c) sendto$inet6(r1, &(0x7f0000000000)="06006c748e40e482488a2bb1581ec0", 0xf, 0x3b00, 0x0, 0x0) 986.203758ms ago: executing program 3 (id=86): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r2, &(0x7f0000000040)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r4, 0xfffffffffffffc01, 0x0) close(r3) close_range(r0, 0xffffffffffffffff, 0x0) 459.84824ms ago: executing program 1 (id=87): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040100010300000009210000000122020009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000001c0), 0x0}, 0x0) 459.695863ms ago: executing program 3 (id=88): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000900)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0xb, @dev={0xfe, 0x80, '\x00', 0x14}, 0x6}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000280)='Q', 0x1}], 0x1}}], 0x1, 0x4000844) shutdown(r0, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e24, @multicast2}}, 0x5, 0x2}, 0x90) 366.861371ms ago: executing program 2 (id=89): syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_udp(0x2, 0x2, 0x0) socket(0x11, 0x3, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) syz_usb_connect$uac1(0x5, 0xdc, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYBLOB='\a'], 0x0) 121.324603ms ago: executing program 3 (id=90): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0xef) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x40) 0s ago: executing program 3 (id=91): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x40000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x8201) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.190' (ED25519) to the list of known hosts. [ 76.146759][ T5594] cgroup: Unknown subsys name 'net' [ 76.389992][ T5594] cgroup: Unknown subsys name 'cpuset' [ 76.443490][ T5594] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.118273][ T5594] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.449316][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.452340][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.518209][ T5612] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.518742][ T5619] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.547139][ T5619] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.556239][ T5619] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.559635][ T5619] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.560745][ T5619] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.568554][ T4923] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.570811][ T4923] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.571720][ T5612] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.571756][ T4923] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.607436][ T5612] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.635658][ T5612] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.646928][ T5622] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.654561][ T5622] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.677130][ T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.677902][ T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.704056][ T5608] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.706429][ T5608] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.601870][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.603798][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.604067][ T5611] bridge_slave_0: entered allmulticast mode [ 82.607247][ T5611] bridge_slave_0: entered promiscuous mode [ 82.644686][ T5615] Bluetooth: hci1: command tx timeout [ 82.659149][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.659327][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.659503][ T5611] bridge_slave_1: entered allmulticast mode [ 82.661355][ T5611] bridge_slave_1: entered promiscuous mode [ 82.723707][ T5612] Bluetooth: hci0: command tx timeout [ 82.723931][ T5615] Bluetooth: hci2: command tx timeout [ 82.786753][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.803038][ T5615] Bluetooth: hci3: command tx timeout [ 82.832954][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.849520][ T5605] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.849792][ T5605] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.850534][ T5605] bridge_slave_0: entered allmulticast mode [ 82.856011][ T5605] bridge_slave_0: entered promiscuous mode [ 82.910741][ T5605] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.910968][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.911300][ T5605] bridge_slave_1: entered allmulticast mode [ 82.914024][ T5605] bridge_slave_1: entered promiscuous mode [ 82.919905][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.920171][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.920402][ T5606] bridge_slave_0: entered allmulticast mode [ 82.924497][ T5606] bridge_slave_0: entered promiscuous mode [ 82.956251][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.956528][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.956751][ T5609] bridge_slave_0: entered allmulticast mode [ 82.961217][ T5609] bridge_slave_0: entered promiscuous mode [ 83.005101][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.005285][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.005436][ T5606] bridge_slave_1: entered allmulticast mode [ 83.007219][ T5606] bridge_slave_1: entered promiscuous mode [ 83.010961][ T5611] team0: Port device team_slave_0 added [ 83.011297][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.011621][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.011871][ T5609] bridge_slave_1: entered allmulticast mode [ 83.019008][ T5609] bridge_slave_1: entered promiscuous mode [ 83.079324][ T5611] team0: Port device team_slave_1 added [ 83.101855][ T5605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.161860][ T5605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.170949][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.194694][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.220284][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.221674][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.221683][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.221706][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.285418][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.559898][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.559909][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.559923][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.593811][ T5605] team0: Port device team_slave_0 added [ 83.642467][ T5605] team0: Port device team_slave_1 added [ 83.647005][ T5606] team0: Port device team_slave_0 added [ 83.655264][ T5609] team0: Port device team_slave_0 added [ 83.676929][ T5606] team0: Port device team_slave_1 added [ 83.680297][ T5609] team0: Port device team_slave_1 added [ 83.739816][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.739828][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.739842][ T5605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.826890][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.826901][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.826915][ T5605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.828324][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.828332][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.828346][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.839209][ T5611] hsr_slave_0: entered promiscuous mode [ 83.841260][ T5611] hsr_slave_1: entered promiscuous mode [ 83.846429][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.846443][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.846465][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.863894][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.863910][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.863933][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.871031][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.871046][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.871069][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.080326][ T5605] hsr_slave_0: entered promiscuous mode [ 84.081490][ T5605] hsr_slave_1: entered promiscuous mode [ 84.083562][ T5605] debugfs: 'hsr0' already exists in 'hsr' [ 84.083672][ T5605] Cannot create hsr debugfs directory [ 84.142119][ T5606] hsr_slave_0: entered promiscuous mode [ 84.147702][ T5606] hsr_slave_1: entered promiscuous mode [ 84.149270][ T5606] debugfs: 'hsr0' already exists in 'hsr' [ 84.149292][ T5606] Cannot create hsr debugfs directory [ 84.178340][ T5609] hsr_slave_0: entered promiscuous mode [ 84.179817][ T5609] hsr_slave_1: entered promiscuous mode [ 84.181115][ T5609] debugfs: 'hsr0' already exists in 'hsr' [ 84.181136][ T5609] Cannot create hsr debugfs directory [ 84.722982][ T5615] Bluetooth: hci1: command tx timeout [ 84.813101][ T5615] Bluetooth: hci2: command tx timeout [ 84.813131][ T5615] Bluetooth: hci0: command tx timeout [ 84.893243][ T5612] Bluetooth: hci3: command tx timeout [ 85.216665][ T5611] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.274938][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.281342][ T5611] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.310331][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.312463][ T5611] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.359024][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.381339][ T5611] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.408136][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.521203][ T5606] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.560252][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.569598][ T5606] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.599757][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.610133][ T5606] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.637646][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.674281][ T5606] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.709417][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.847760][ T5605] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.888971][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.904246][ T5605] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.940134][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.952534][ T5605] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.988963][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.017760][ T5605] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.048517][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.180500][ T5609] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.206961][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.219531][ T5609] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.248335][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.259292][ T5609] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.289089][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.293504][ T5609] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.327414][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.432192][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.536835][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.591420][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.641312][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.641537][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.701587][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.704420][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.736595][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.799708][ T123] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.813155][ T5612] Bluetooth: hci1: command tx timeout [ 86.817302][ T123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.829746][ T32] cfg80211: failed to load regulatory.db [ 86.862116][ T5605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.884365][ T5612] Bluetooth: hci0: command tx timeout [ 86.884404][ T5612] Bluetooth: hci2: command tx timeout [ 86.935111][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.935225][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.964641][ T5615] Bluetooth: hci3: command tx timeout [ 87.045408][ T5605] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.052498][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.109161][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.109302][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.168464][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.168649][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.221123][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.330354][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.330556][ T282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.439936][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.440166][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.167485][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.451681][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.647996][ T5611] veth0_vlan: entered promiscuous mode [ 88.740706][ T5611] veth1_vlan: entered promiscuous mode [ 88.884001][ T5615] Bluetooth: hci1: command tx timeout [ 88.885806][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.916139][ T5606] veth0_vlan: entered promiscuous mode [ 88.927714][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.972965][ T5615] Bluetooth: hci2: command tx timeout [ 88.972992][ T5615] Bluetooth: hci0: command tx timeout [ 88.985323][ T5606] veth1_vlan: entered promiscuous mode [ 89.039471][ T5611] veth0_macvtap: entered promiscuous mode [ 89.043150][ T5612] Bluetooth: hci3: command tx timeout [ 89.071518][ T5611] veth1_macvtap: entered promiscuous mode [ 89.160737][ T5605] veth0_vlan: entered promiscuous mode [ 89.197068][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.227762][ T5609] veth0_vlan: entered promiscuous mode [ 89.230948][ T5606] veth0_macvtap: entered promiscuous mode [ 89.245656][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.246632][ T5605] veth1_vlan: entered promiscuous mode [ 89.270498][ T5606] veth1_macvtap: entered promiscuous mode [ 89.301981][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.318410][ T5609] veth1_vlan: entered promiscuous mode [ 89.328626][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.351169][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.365674][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.484589][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.581123][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.747236][ T5605] veth0_macvtap: entered promiscuous mode [ 89.761631][ T195] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.781975][ T195] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.798636][ T195] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.807842][ T5605] veth1_macvtap: entered promiscuous mode [ 89.817043][ T195] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.861504][ T5609] veth0_macvtap: entered promiscuous mode [ 89.956022][ T5609] veth1_macvtap: entered promiscuous mode [ 89.979624][ T1914] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.979648][ T1914] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.081276][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.392315][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.401041][ T1914] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.401067][ T1914] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.458613][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.492061][ T123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.492081][ T123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.492361][ T1914] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.501381][ T1914] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.503695][ T1914] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.504930][ T1914] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.530061][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.672678][ T195] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.685666][ T195] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.702207][ T195] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.709079][ T195] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.799514][ T195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.799533][ T195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.663396][ T195] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.663415][ T195] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.047801][ T287] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.047819][ T287] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.163794][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.163813][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.351913][ T43] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 92.362487][ T123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.362505][ T123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.683488][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 92.733370][ T43] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 92.733403][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 92.763369][ T43] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 92.763400][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.763420][ T43] usb 2-1: Product: syz [ 92.763434][ T43] usb 2-1: Manufacturer: syz [ 92.763449][ T43] usb 2-1: SerialNumber: syz [ 92.828622][ T43] usb 2-1: config 0 descriptor?? [ 92.940190][ T43] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 92.940224][ T43] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 92.990205][ T5775] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 93.529470][ T43] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 93.543599][ T43] em28xx 2-1:0.0: Config register raw data: 0x41 [ 93.815195][ T5716] usb 2-1: USB disconnect, device number 2 [ 93.988670][ T5716] em28xx 2-1:0.0: Disconnecting em28xx [ 94.115621][ T5716] em28xx 2-1:0.0: Freeing device [ 94.485952][ T44] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.147154][ T5615] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.180720][ T5615] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.191279][ T5615] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.211987][ T5615] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.212213][ T5799] syzkaller1: entered promiscuous mode [ 95.212234][ T5799] syzkaller1: entered allmulticast mode [ 95.224611][ T5615] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.384667][ T5340] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 95.488903][ T44] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.573764][ T5340] usb 3-1: Using ep0 maxpacket: 32 [ 95.576123][ T5340] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 95.576138][ T5340] usb 3-1: config 0 has no interface number 0 [ 95.576170][ T5340] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.576184][ T5340] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.576205][ T5340] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 95.576217][ T5340] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.582494][ T5340] usb 3-1: config 0 descriptor?? [ 96.102284][ T5340] usbhid 3-1:0.1: can't add hid device: -71 [ 96.102399][ T5340] usbhid 3-1:0.1: probe with driver usbhid failed with error -71 [ 96.236364][ T5340] usb 3-1: USB disconnect, device number 2 [ 96.409557][ T44] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.901762][ T5827] Zero length message leads to an empty skb [ 97.044769][ T44] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.282883][ T5612] Bluetooth: hci2: command tx timeout [ 97.463752][ T43] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 97.635209][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 97.650680][ T43] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.650732][ T43] usb 2-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 97.650760][ T43] usb 2-1: config 0 interface 0 has no altsetting 0 [ 97.694116][ T43] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 97.694144][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.694163][ T43] usb 2-1: Product: syz [ 97.694176][ T43] usb 2-1: Manufacturer: syz [ 97.694190][ T43] usb 2-1: SerialNumber: syz [ 97.758628][ T43] usb 2-1: config 0 descriptor?? [ 97.850968][ T43] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 98.009551][ T43] snd_usb_toneport 2-1:0.0: cannot get proper max packet size [ 98.034923][ T43] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 98.052450][ T43] snd_usb_toneport 2-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 98.194734][ T5759] usb 2-1: USB disconnect, device number 3 [ 98.982896][ T5759] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 99.151803][ T44] bridge_slave_1: left allmulticast mode [ 99.151909][ T44] bridge_slave_1: left promiscuous mode [ 99.166610][ T5759] usb 4-1: Using ep0 maxpacket: 32 [ 99.171081][ T5759] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 99.171105][ T5759] usb 4-1: config 0 has no interface number 0 [ 99.171146][ T5759] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.171171][ T5759] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.171206][ T5759] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 99.171227][ T5759] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.227558][ T5759] usb 4-1: config 0 descriptor?? [ 99.271044][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.363671][ T5612] Bluetooth: hci2: command tx timeout [ 99.497090][ T44] bridge_slave_0: left allmulticast mode [ 99.497124][ T44] bridge_slave_0: left promiscuous mode [ 99.498006][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.667996][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 99.668417][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 99.668811][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 99.668973][ T5759] usbhid 4-1:0.1: can't add hid device: -32 [ 99.669082][ T5759] usbhid 4-1:0.1: probe with driver usbhid failed with error -32 [ 99.744093][ T43] usb 4-1: USB disconnect, device number 2 [ 101.606706][ T5612] Bluetooth: hci2: command tx timeout [ 102.842888][ T823] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 102.923855][ T5340] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 102.992991][ T823] usb 3-1: Using ep0 maxpacket: 32 [ 102.998894][ T823] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 102.998925][ T823] usb 3-1: config 0 has no interface number 0 [ 102.998968][ T823] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.998992][ T823] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.999090][ T823] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 102.999113][ T823] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.082169][ T823] usb 3-1: config 0 descriptor?? [ 103.103835][ T5340] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 103.128785][ T5340] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 103.128814][ T5340] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 103.128883][ T5340] usb 4-1: Product: syz [ 103.128898][ T5340] usb 4-1: Manufacturer: syz [ 103.128910][ T5340] usb 4-1: SerialNumber: syz [ 103.130328][ T5759] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 103.324849][ T5759] usb 2-1: Using ep0 maxpacket: 32 [ 103.326945][ T5759] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 103.326977][ T5759] usb 2-1: config 0 has no interface number 0 [ 103.327035][ T5759] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 103.327062][ T5759] usb 2-1: config 0 interface 85 has no altsetting 0 [ 103.329440][ T5759] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 103.329467][ T5759] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.329486][ T5759] usb 2-1: Product: syz [ 103.329500][ T5759] usb 2-1: Manufacturer: syz [ 103.329513][ T5759] usb 2-1: SerialNumber: syz [ 103.347905][ T5759] usb 2-1: config 0 descriptor?? [ 103.466571][ T5340] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 103.495562][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 103.496008][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 103.496397][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 103.496541][ T823] usbhid 3-1:0.1: can't add hid device: -32 [ 103.496657][ T823] usbhid 3-1:0.1: probe with driver usbhid failed with error -32 [ 103.584397][ T823] usb 3-1: USB disconnect, device number 3 [ 103.683522][ T5612] Bluetooth: hci2: command tx timeout [ 103.692054][ C1] usblp0: nonzero write bulk status received: -71 [ 103.716319][ T5717] usb 4-1: USB disconnect, device number 3 [ 103.741142][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.806360][ T5717] usblp0: removed [ 103.894594][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.948138][ T44] bond0 (unregistering): Released all slaves [ 104.071442][ T5269] 8021q: adding VLAN 0 to HW filter on device eth1 [ 104.071651][ T5759] appletouch 2-1:0.85: Geyser mode initialized. [ 104.140430][ T5759] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input5 [ 104.761962][ T5759] usb 2-1: USB disconnect, device number 4 [ 105.031815][ T5759] appletouch 2-1:0.85: input: appletouch disconnected [ 105.323995][ T5718] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 105.479118][ T5718] usb 3-1: Using ep0 maxpacket: 32 [ 105.496274][ T5718] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 105.496328][ T5718] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 105.496353][ T5718] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 105.496379][ T5718] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 105.513424][ T5718] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 105.513449][ T5718] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.513464][ T5718] usb 3-1: Product: syz [ 105.513475][ T5718] usb 3-1: Manufacturer: syz [ 105.513486][ T5718] usb 3-1: SerialNumber: syz [ 105.893344][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 106.142457][ T5718] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input6 [ 106.423935][ T5718] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 106.423956][ T5718] (id 0x00) [ 106.502702][ T5767] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 106.542876][ T5718] rc_core: IR keymap rc-imon-pad not found [ 106.542897][ T5718] Registered IR keymap rc-empty [ 106.542996][ T5718] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 106.543013][ T5718] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 106.682869][ T5767] usb 4-1: Using ep0 maxpacket: 32 [ 106.693087][ T5767] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 106.693113][ T5767] usb 4-1: config 0 has no interface number 0 [ 106.693162][ T5767] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.693187][ T5767] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.693222][ T5767] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 106.693244][ T5767] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.768418][ T5718] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 106.803526][ T5718] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input7 [ 106.889833][ T5718] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:4> initialized [ 106.908745][ T5718] usb 3-1: USB disconnect, device number 4 [ 106.919830][ T5767] usb 4-1: config 0 descriptor?? [ 107.649274][ T5767] usbhid 4-1:0.1: can't add hid device: -71 [ 107.649387][ T5767] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 107.781542][ T5767] usb 4-1: USB disconnect, device number 4 [ 108.120453][ T5269] 8021q: adding VLAN 0 to HW filter on device eth2 [ 108.882212][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.891144][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.891437][ T5795] bridge_slave_0: entered allmulticast mode [ 108.949935][ T5795] bridge_slave_0: entered promiscuous mode [ 109.140034][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.140290][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.140553][ T5795] bridge_slave_1: entered allmulticast mode [ 109.146809][ T5795] bridge_slave_1: entered promiscuous mode [ 110.263820][ T44] hsr_slave_0: left promiscuous mode [ 110.282907][ T44] hsr_slave_1: left promiscuous mode [ 110.284139][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.305187][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.334836][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.334863][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.654153][ T44] veth1_macvtap: left promiscuous mode [ 110.654448][ T44] veth0_macvtap: left promiscuous mode [ 110.668612][ T44] veth1_vlan: left promiscuous mode [ 110.669019][ T44] veth0_vlan: left promiscuous mode [ 111.144205][ T823] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 111.352857][ T823] usb 2-1: Using ep0 maxpacket: 32 [ 111.355675][ T823] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 111.355707][ T823] usb 2-1: config 0 has no interface number 0 [ 111.355746][ T823] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.355771][ T823] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.355807][ T823] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 111.355829][ T823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.392903][ T5767] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 111.473822][ T823] usb 2-1: config 0 descriptor?? [ 111.610345][ T5767] usb 3-1: Using ep0 maxpacket: 16 [ 112.401355][ T5767] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.401382][ T5767] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 112.434307][ T5767] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 112.434336][ T5767] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.434465][ T5767] usb 3-1: Product: syz [ 112.434480][ T5767] usb 3-1: Manufacturer: syz [ 112.434493][ T5767] usb 3-1: SerialNumber: syz [ 112.614281][ T5767] usb 3-1: 0:2 : does not exist [ 112.635634][ T0] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN PTI [ 112.635653][ T0] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 112.635677][ T0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 112.635692][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 112.635701][ T0] RIP: 0010:__schedule+0x4030/0x5550 [ 112.635722][ T0] Code: 24 80 00 00 00 e8 80 97 f2 f6 48 8b 84 24 80 00 00 00 48 8b 18 4c 8d 7b 14 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 87 04 00 00 45 8b 3f 49 83 ff 08 0f 83 98 [ 112.635734][ T0] RSP: 0018:ffffffff8e007be0 EFLAGS: 00010003 [ 112.635747][ T0] RAX: 0000000000000002 RBX: 0000000000000000 RCX: dffffc0000000000 [ 112.635757][ T0] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ffff8880b8620c60 [ 112.635765][ T0] RBP: ffffffff8e007dd0 R08: ffffffff8fcf38f7 R09: 1ffffffff1f9e71e [ 112.635776][ T0] R10: dffffc0000000000 R11: fffffbfff1f9e71f R12: ffff8880b863c658 [ 112.635786][ T0] R13: ffff888125a6b000 R14: 1ffff110170c7922 R15: 0000000000000014 [ 112.635796][ T0] FS: 0000000000000000(0000) GS:ffff888125a6b000(0000) knlGS:0000000000000000 [ 112.635807][ T0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 112.635817][ T0] CR2: 00007f6908aea540 CR3: 000000003f7f0000 CR4: 00000000003526f0 [ 112.635829][ T0] Call Trace: [ 112.635838][ T0] [ 112.635850][ T0] ? irqentry_exit+0x1c1/0x8c0 [ 112.635869][ T0] ? __pfx___schedule+0x10/0x10 [ 112.635883][ T0] ? lockdep_hardirqs_on+0x7a/0x110 [ 112.635901][ T0] ? tick_nohz_idle_exit+0x2a6/0x370 [ 112.635921][ T0] schedule_idle+0x51/0x90 [ 112.635936][ T0] do_idle+0x4a6/0x540 [ 112.635956][ T0] ? __pfx_do_idle+0x10/0x10 [ 112.635976][ T0] cpu_startup_entry+0x43/0x60 [ 112.635995][ T0] rest_init+0x2de/0x300 [ 112.636015][ T0] start_kernel+0x392/0x3e0 [ 112.636036][ T0] x86_64_start_reservations+0x24/0x30 [ 112.636051][ T0] x86_64_start_kernel+0x143/0x1c0 [ 112.636065][ T0] common_startup_64+0x13e/0x157 [ 112.636090][ T0] [ 112.636095][ T0] Modules linked in: [ 112.636108][ T0] ---[ end trace 0000000000000000 ]--- [ 112.636121][ T0] RIP: 0010:__schedule+0x4030/0x5550 [ 112.636137][ T0] Code: 24 80 00 00 00 e8 80 97 f2 f6 48 8b 84 24 80 00 00 00 48 8b 18 4c 8d 7b 14 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 87 04 00 00 45 8b 3f 49 83 ff 08 0f 83 98 [ 112.636148][ T0] RSP: 0018:ffffffff8e007be0 EFLAGS: 00010003 [ 112.636162][ T0] RAX: 0000000000000002 RBX: 0000000000000000 RCX: dffffc0000000000 [ 112.636171][ T0] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ffff8880b8620c60 [ 112.636179][ T0] RBP: ffffffff8e007dd0 R08: ffffffff8fcf38f7 R09: 1ffffffff1f9e71e [ 112.636189][ T0] R10: dffffc0000000000 R11: fffffbfff1f9e71f R12: ffff8880b863c658 [ 112.636199][ T0] R13: ffff888125a6b000 R14: 1ffff110170c7922 R15: 0000000000000014 [ 112.636209][ T0] FS: 0000000000000000(0000) GS:ffff888125a6b000(0000) knlGS:0000000000000000 [ 112.636220][ T0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 112.636230][ T0] CR2: 00007f6908aea540 CR3: 000000003f7f0000 CR4: 00000000003526f0 [ 112.636243][ T0] Kernel panic - not syncing: Fatal exception [ 113.707682][ T0] Shutting down cpus with NMI [ 113.707858][ T0] Kernel Offset: disabled