last executing test programs: 56.555121855s ago: executing program 2 (id=3704): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000340)={'syzkaller1\x00', 0x1}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000003c0)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=@newtfilter={0x40, 0x2c, 0x601, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0xf}, {0xffff, 0xffff}, {0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @multicast}]}}]}, 0x40}}, 0x0) write(r1, &(0x7f0000000b40)='\x00\x00\b\x00', 0x4) 56.252361509s ago: executing program 2 (id=3712): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) listen(r0, 0x5) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[{0x18, 0x110, 0x1, "12"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "12"}], 0x18}, 0x0) 56.149690522s ago: executing program 2 (id=3714): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000002c0)=""/178, 0xb2}, {&(0x7f0000000380)=""/58, 0x3a}, {&(0x7f00000006c0)=""/4077, 0xfed}, {&(0x7f00000016c0)=""/167, 0xa7}, {&(0x7f0000001780)=""/256, 0x100}, {&(0x7f0000001880)=""/191, 0xbf}], 0x6}, 0x4001}], 0x4, 0x0, 0x0) 56.076332496s ago: executing program 4 (id=3717): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000e4010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000070000000090a010400000000000000000700000008000a40000000000900020073797a310000000009000100c056e0f973"], 0xf4}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001", @ANYRES8, @ANYBLOB="51a220599d7cb85e50721d877d99abeda47eb97669e41249751a10b5c04eb9c58c2fd9e3b5d46d7b5b0dece5e6108e"], 0x6f4}}, 0x0) 55.936742476s ago: executing program 4 (id=3722): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x30000, 0x9, 0x4, 0xfffffffe, 0x0, [{0x2, 0x1, 0x84, '\x00', 0x8}, {0x52, 0x8, 0x40, '\x00', 0xb}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x0, 0xf5, '\x00', 0xb}, {0x7, 0x74, 0x6}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd9, 0xf1, '\x00', 0x7b}, {0x3, 0x7, 0xc}, {0x7f, 0x5, 0xb, '\x00', 0x7}, {0xbc, 0xd, 0xa, '\x00', 0x6}, {0x2, 0x28, 0x7c, '\x00', 0xdc}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x79, 0x26}, {0xce, 0x3, 0x1, '\x00', 0xa}, {0xf, 0xee, 0x3, '\x00', 0x5}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x4, '\x00', 0x8}, {0x9, 0xc, 0x4, '\x00', 0xc}, {0x7, 0xa, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0x7, '\x00', 0x7f}, {0x8, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x1, 0x0, '\x00', 0x10}, {0xd, 0x23, 0xf3, '\x00', 0x4}, {0x0, 0x15, 0x4}]}}) 55.8384485s ago: executing program 1 (id=3725): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x34, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}]}, 0x34}}, 0x0) 55.740924249s ago: executing program 4 (id=3727): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000001880)={&(0x7f00000018c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x94}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 55.663960049s ago: executing program 0 (id=3729): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000001880)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000018c0)={0x1, &(0x7f0000001900)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000001940)={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r1, &(0x7f0000001980)=[{{&(0x7f0000001a00)={0x2, 0x4e29, @multicast2}, 0x10, &(0x7f0000001a40)=[{&(0x7f0000001a80)="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", 0x556}], 0x1}}, {{0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000002040)="472c4a88e38271134616fb25b7687b29c80e235e02c9aff23f4a728b652208f66f23feeec79598dcdaa24794e53b9a6184cd6ffcd7d82080cd8dbbc01627508d04be89ef4f253987edc86790c075a448e28610cd2ed2533a267df298d6e49d898ccd3dd2cc1e5ac02b70cf37da35ca30ec9298077e0d1d7b263279dbbfec7beb0ee24b05cca3a3d2b391590ed345d4261b322bcda17acfeb236ab699c14d1439b22e6e8724146dde24858bf06414cf282bedddaf64a022952cd1b549106da2533bbc90a884039a3bf00d9fdeebd6820f20788070cf9117d7e27591f2ad3801fd49a7ee1fa097a51ff3877ed5d2279ec3886d7abe3ea930", 0xf7}, {&(0x7f0000002140)="12910e6839d0b741a1e77b2865", 0xd}, {&(0x7f0000002180)="a29a0bc9", 0x4}], 0x3}}], 0x2, 0x2000c044) writev(r1, &(0x7f00000021c0)=[{&(0x7f0000002200)="1ee9", 0x2}], 0x1) 55.66367229s ago: executing program 1 (id=3730): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback, 0x6}, 0x4a) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000006f80)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="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", 0x241}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)="04", 0x1}], 0x1}}], 0x2, 0x4000001) 55.62409147s ago: executing program 4 (id=3731): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) utimes(&(0x7f00000045c0)='./file0\x00', 0x0) 55.612561977s ago: executing program 1 (id=3733): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x14, 0xc, &(0x7f0000000480)=ANY=[], 0x0, 0x200, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r2, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x20000) 55.536699227s ago: executing program 1 (id=3734): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003ac0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003b00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000004000)={0x0, 0x0, &(0x7f0000003fc0)={&(0x7f0000003b40)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40) 55.534982673s ago: executing program 0 (id=3735): ioprio_set$uid(0x3, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r3 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x103282, 0x0) write$nsim_bool(r4, &(0x7f0000000e00)='1', 0x1) setns(r3, 0x20000) syz_open_dev$sndctrl(&(0x7f0000000e40), 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000940)=ANY=[@ANYBLOB="40010000100001040000000000000000ac1414aa0000000000000000000000006401010100000000000000000000000000000000000000000200000073000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000000004d232000000ac1414bb000000000000000000000000ffffffffffffff7fffffffffdfffff7fffffffffffffff7fffffffffffffff7f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000003000000000000000000000002000509000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500210001"], 0x140}}, 0x0) syz_emit_ethernet(0x248, &(0x7f0000000f40)={@multicast, @remote, @void, {@ipv4={0x800, @esp={{0x5, 0x4, 0x0, 0x0, 0x23a, 0x0, 0x0, 0x40, 0x32, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, {0x4d2, 0xffff, @basic={0x0, 0x0, 0x0, [@ipv6=@gre_packet={0x1, 0x6, "636fce", 0x17d, 0x2f, 0x1, @remote, @mcast1, {[@dstopts={0x0, 0x0, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x4}]}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xd8, 0x1, [], "c2118451d825f77ccb9b5cf2951e087877889bd7dacc481e1b5b2c51114ecf31f7c5a86e7144bf28e8d287328c364c93b4b73572ab9a39ed894216e223726ac8efeee9df36a65be528326757a9ab2a503c8d741d9dba5a90866504890ab3e009cd3ba4ef006961b92baa63e73d2cae2b9e212533958506d24901c598eea9be5ec3186cc6b88bd89b0011fc886aa48e23a585e3330a28930041973ee0244add53cd096c8a6eae56e1a1b7f6d456490f2025e90b61b8a56edae1ac909d4b19ee38e1fad966c5699d0644c5dbb012a72ec04a953a5dcb6ff6c9"}, {0x1, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0xf54], "d3ef6e5774f344ee8518f3e6429b204114603d442539dec1e9b92dc9c82927a03fa8555e8af73b4f8746ef5f881dc43c98f1"}, {0x8, 0x88be, 0x4, {{0x7, 0x1, 0x7, 0x0, 0x0, 0x1, 0x2, 0x7f}, 0x1, {0x7}}}, {0x8, 0x22eb, 0x0, {{0x4, 0x2, 0x3, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x2, {0x8000, 0x400, 0x3, 0x4, 0x0, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x4, "39c3d655a9766b923c46f2259f57c8b79ea0a6d0a070d9688f9c694a13"}}}}, @ipv4=@tipc={{0x12, 0x4, 0x0, 0x4, 0x73, 0x64, 0x0, 0xa4, 0x6, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x34, 0xdb, 0x3, 0xf, [{@private=0xa010102, 0xfff}, {@multicast2, 0x2}, {@broadcast, 0x6}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x9}, {@multicast2, 0x770c}, {@empty, 0x5b47}]}]}}, @payload_named={{{{{0x2b, 0x0, 0x1, 0x0, 0x1, 0xa, 0x3, 0x2, 0x8, 0x0, 0x0, 0x7, 0x2, 0x2, 0x4, 0x0, 0x0, 0x4e22, 0x4e20}, 0x2, 0x2}, 0x3}}, [0x0, 0x0, 0x0]}}]}}}}}}, 0x0) 55.458772368s ago: executing program 1 (id=3737): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008072, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r0, &(0x7f0000000380)=ANY=[], 0x200002e6) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) fcntl$setpipe(r0, 0x407, 0x7000000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 55.424746126s ago: executing program 0 (id=3738): fsopen(&(0x7f0000000400)='hpfs\x00', 0x0) 55.356292387s ago: executing program 3 (id=3739): set_mempolicy(0x3, &(0x7f0000000080)=0x7, 0x7) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000340)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000005c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 55.307822913s ago: executing program 0 (id=3740): r0 = syz_open_dev$mtd(&(0x7f0000000040), 0x0, 0x2) ioctl$ECCGETLAYOUT(r0, 0x81484d11, 0x0) 55.287964045s ago: executing program 0 (id=3741): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000001880)={&(0x7f00000018c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x94}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 55.238136384s ago: executing program 3 (id=3742): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x18}) fstat(r0, &(0x7f0000000100)) 55.143795846s ago: executing program 2 (id=3743): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback, 0x6}, 0x4a) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000006f80)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="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", 0x241}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)="04", 0x1}], 0x1}}], 0x2, 0x4000001) 55.143459967s ago: executing program 0 (id=3744): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000340)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x1, 0x10}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pread64(r1, 0x0, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket(0x10, 0x3, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 55.069987669s ago: executing program 3 (id=3745): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x103, 0x100, 0x751}}) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x107, 0x500, 0x300, 0x1, 0x4000}}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000b40)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=ANY=[@ANYBLOB="4400000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000004000000140012800b0001006970766c616e0000040002800800", @ANYRES32=r3, @ANYBLOB='\b'], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x90a2c342030985a5}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) 55.025240947s ago: executing program 2 (id=3746): sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008880}, 0x20000084) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000640)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000680)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000006c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @local, 0x1}, {0xa, 0x4e22, 0x200010, @dev={0xfe, 0x80, '\x00', 0x43}, 0x800003}, r2, 0xb}}, 0x48) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0) exit(0x0) close_range(r0, 0xffffffffffffffff, 0x0) 54.931878829s ago: executing program 3 (id=3747): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x0) 54.597793019s ago: executing program 4 (id=3748): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003ac0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003b00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000004000)={0x0, 0x0, &(0x7f0000003fc0)={&(0x7f0000003b40)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40) 54.542412165s ago: executing program 3 (id=3749): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x80, r1, 0x5, 0x0, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x46, 0xe, {{{}, {}, @device_a, @device_a, @from_mac}, 0x0, @random=0x2, 0x1, @void, @void, @val={0x3, 0x1, 0x2}, @void, @void, @val={0x5, 0x3, {0x2, 0x86, 0xa2}}, @val={0x25, 0x3, {0x1, 0x78, 0x3}}, @void, @void, @void, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0xff, 0x0, 0x1, 0x7, 0x29}}, @val={0x76, 0x6, {0x60, 0x6, 0x41, 0x101}}}}, @NL80211_ATTR_IE_PROBE_RESP={0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x1000}]}, 0x80}}, 0x39db77225c63fa4c) 54.201392655s ago: executing program 3 (id=3750): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000006c0)=0x1, 0x4) bind$inet(r0, &(0x7f00000007c0)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000000800)=[{{&(0x7f0000001340)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000001380)=[{&(0x7f00000013c0)="b9cd", 0x2}], 0x1}}], 0x1, 0x20008000) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001400), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="578d2dbd7000c535df250200000014000180080003007f0000010600010002"], 0x28}, 0x1, 0x0, 0x0, 0x8040000}, 0x40080) 54.136064983s ago: executing program 4 (id=3751): ioprio_set$uid(0x3, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r3 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000dc0), 0x103282, 0x0) write$nsim_bool(r4, &(0x7f0000000e00)='1', 0x1) setns(r3, 0x20000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000940)=ANY=[@ANYBLOB="40010000100001040000000000000000ac1414aa0000000000000000000000006401010100000000000000000000000000000000000000000200000073000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000000004d232000000ac1414bb000000000000000000000000ffffffffffffff7fffffffffdfffff7fffffffffffffff7fffffffffffffff7f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000003000000000000000000000002000509000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500210001"], 0x140}}, 0x0) syz_emit_ethernet(0x248, &(0x7f0000000f40)={@multicast, @remote, @void, {@ipv4={0x800, @esp={{0x5, 0x4, 0x0, 0x0, 0x23a, 0x0, 0x0, 0x40, 0x32, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, {0x4d2, 0xffff, @basic={0x0, 0x0, 0x0, [@ipv6=@gre_packet={0x1, 0x6, "636fce", 0x17d, 0x2f, 0x1, @remote, @mcast1, {[@dstopts={0x0, 0x0, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x4}]}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xd8, 0x1, [], "c2118451d825f77ccb9b5cf2951e087877889bd7dacc481e1b5b2c51114ecf31f7c5a86e7144bf28e8d287328c364c93b4b73572ab9a39ed894216e223726ac8efeee9df36a65be528326757a9ab2a503c8d741d9dba5a90866504890ab3e009cd3ba4ef006961b92baa63e73d2cae2b9e212533958506d24901c598eea9be5ec3186cc6b88bd89b0011fc886aa48e23a585e3330a28930041973ee0244add53cd096c8a6eae56e1a1b7f6d456490f2025e90b61b8a56edae1ac909d4b19ee38e1fad966c5699d0644c5dbb012a72ec04a953a5dcb6ff6c9"}, {0x1, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0xf54], "d3ef6e5774f344ee8518f3e6429b204114603d442539dec1e9b92dc9c82927a03fa8555e8af73b4f8746ef5f881dc43c98f1"}, {0x8, 0x88be, 0x4, {{0x7, 0x1, 0x7, 0x0, 0x0, 0x1, 0x2, 0x7f}, 0x1, {0x7}}}, {0x8, 0x22eb, 0x0, {{0x4, 0x2, 0x3, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x2, {0x8000, 0x400, 0x3, 0x4, 0x0, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x4, "39c3d655a9766b923c46f2259f57c8b79ea0a6d0a070d9688f9c694a13"}}}}, @ipv4=@tipc={{0x12, 0x4, 0x0, 0x4, 0x73, 0x64, 0x0, 0xa4, 0x6, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x34, 0xdb, 0x3, 0xf, [{@private=0xa010102, 0xfff}, {@multicast2, 0x2}, {@broadcast, 0x6}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x9}, {@multicast2, 0x770c}, {@empty, 0x5b47}]}]}}, @payload_named={{{{{0x2b, 0x0, 0x1, 0x0, 0x1, 0xa, 0x3, 0x2, 0x8, 0x0, 0x0, 0x7, 0x2, 0x2, 0x4, 0x0, 0x0, 0x4e22, 0x4e20}, 0x2, 0x2}, 0x3}}, [0x0, 0x0, 0x0]}}]}}}}}}, 0x0) 54.059499632s ago: executing program 1 (id=3752): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000002200)=[@in6={0xa, 0x4e20, 0x9, @loopback}], 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000002240)={0x0, 0x2c, &(0x7f0000002280)=[@in6={0xa, 0x4e20, 0x0, @loopback}, @in={0x2, 0x4e20, @loopback}]}, &(0x7f00000022c0)=0x10) 40.126833874s ago: executing program 2 (id=3753): ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000580)=@urb_type_control={0x2, {}, 0xfffffffc, 0xe1, &(0x7f00000005c0)={0x20, 0x3, 0x16, 0x2}, 0x8, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) 0s ago: executing program 32 (id=3744): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000340)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x1, 0x10}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pread64(r1, 0x0, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket(0x10, 0x3, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): : invalid notification: 0 [ 483.110678][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.116640][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.122611][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.128679][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.128888][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.129006][ T29] usb 3-1: New USB device found: idVendor=0506, idProduct=4601, bcdDevice=1.00 [ 483.129105][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.135082][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.141401][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.141602][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.141797][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.141981][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.142164][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.148140][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.154044][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.154250][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.160284][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.166267][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.172295][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.178243][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.178384][ T29] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 483.178441][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.178471][ T29] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 483.178497][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.178613][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.178784][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.178955][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.179149][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.179359][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.179534][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.179719][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.185638][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.191535][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.197452][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.203326][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.209235][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.209456][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.209675][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.209884][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.215906][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.221923][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.227928][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.233813][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.239789][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.245695][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.251632][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.257645][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.257838][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.258014][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.258204][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.264091][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.269985][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.275902][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.276687][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.282645][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.288615][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.288803][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.294718][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.300761][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.306676][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.312574][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.312768][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.312957][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.313170][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.313416][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.319395][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.319600][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.319792][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.319999][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.325945][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.331893][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.332115][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.332328][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.332539][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.338497][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.344399][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.344612][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.350573][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.356526][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.362435][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.362639][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.362837][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.363029][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.369012][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.369243][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.369420][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.369591][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.369786][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.375699][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.381679][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.387620][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.393573][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.399620][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.405525][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.405743][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.405955][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.406185][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.412148][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.418104][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.418307][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.418534][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.424483][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.424698][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.424913][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.425143][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.431187][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.437180][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.443134][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.443349][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.449432][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 483.667931][ T10] usb 5-1: USB disconnect, device number 61 [ 483.975805][ T990] pegasus 4-1:1.0: can't reset MAC [ 483.977732][ T990] pegasus 4-1:1.0: probe with driver pegasus failed with error -5 [ 484.011138][ T990] usb 4-1: USB disconnect, device number 53 [ 484.096294][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 485.006561][ T5712] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 485.179478][ T5712] usb 2-1: New USB device found: idVendor=13ec, idProduct=0006, bcdDevice=0.00 [ 485.180504][ T5712] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 485.180524][ T5712] usb 2-1: config 0 interface 0 has no altsetting 0 [ 485.180544][ T5712] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.183458][ T5712] usb 2-1: config 0 descriptor?? [ 485.325603][T13483] syz.4.2627: vmalloc error: size 20480, failed to allocate pages, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 485.325723][T13483] CPU: 1 UID: 0 PID: 13483 Comm: syz.4.2627 Tainted: G L syzkaller #0 PREEMPT(full) [ 485.325750][T13483] Tainted: [L]=SOFTLOCKUP [ 485.325759][T13483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 485.325770][T13483] Call Trace: [ 485.325777][T13483] [ 485.325784][T13483] dump_stack_lvl+0xe8/0x150 [ 485.325806][T13483] warn_alloc+0x24d/0x270 [ 485.325826][T13483] ? __pfx_warn_alloc+0x10/0x10 [ 485.325838][T13483] ? policy_nodemask+0x2cc/0x8e0 [ 485.325859][T13483] ? alloc_pages_mpol+0x256/0x390 [ 485.325882][T13483] __vmalloc_node_range_noprof+0x12fd/0x16f0 [ 485.325912][T13483] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 485.325923][T13483] ? rcu_is_watching+0x16/0xb0 [ 485.325943][T13483] ? hash_netnet4_resize+0x264/0x1d20 [ 485.325959][T13483] ? rcu_is_watching+0x16/0xb0 [ 485.325977][T13483] ? hash_netnet4_resize+0x264/0x1d20 [ 485.325999][T13483] __kvmalloc_node_noprof+0x59c/0x820 [ 485.326021][T13483] ? hash_netnet4_resize+0x264/0x1d20 [ 485.326051][T13483] ? __kmalloc_noprof+0x387/0x710 [ 485.326073][T13483] ? hash_netnet4_resize+0x264/0x1d20 [ 485.326102][T13483] hash_netnet4_resize+0x264/0x1d20 [ 485.326137][T13483] ? irqentry_exit+0x2a0/0x9b0 [ 485.326172][T13483] ? __pfx_hash_netnet4_resize+0x10/0x10 [ 485.326197][T13483] call_ad+0x536/0xb50 [ 485.326211][T13483] ? __lock_acquire+0x747/0x2de0 [ 485.326228][T13483] ? __pfx_call_ad+0x10/0x10 [ 485.326248][T13483] ? __nla_parse+0x40/0x60 [ 485.326266][T13483] ip_set_ad+0x82a/0x9d0 [ 485.326283][T13483] ? __pfx_ip_set_ad+0x10/0x10 [ 485.326294][T13483] ? __mutex_lock+0x305/0x15a0 [ 485.326339][T13483] nfnetlink_rcv_msg+0xcc2/0x12b0 [ 485.326361][T13483] ? nfnetlink_rcv_msg+0x228/0x12b0 [ 485.326393][T13483] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 485.326454][T13483] ? hook_capable+0x1c3/0x5e0 [ 485.326490][T13483] netlink_rcv_skb+0x226/0x4a0 [ 485.326518][T13483] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 485.326538][T13483] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 485.326560][T13483] ? bpf_lsm_capable+0x9/0x20 [ 485.326577][T13483] ? security_capable+0x7e/0x2c0 [ 485.326595][T13483] nfnetlink_rcv+0x2b9/0x28c0 [ 485.326620][T13483] ? __dev_queue_xmit+0x29b/0x3920 [ 485.326638][T13483] ? __local_bh_enable_ip+0xd6/0x140 [ 485.326653][T13483] ? lockdep_hardirqs_on+0x7b/0x110 [ 485.326672][T13483] ? __dev_queue_xmit+0x29b/0x3920 [ 485.326697][T13483] ? __local_bh_enable_ip+0xd6/0x140 [ 485.326719][T13483] ? __dev_queue_xmit+0x29b/0x3920 [ 485.326733][T13483] ? __dev_queue_xmit+0x1efb/0x3920 [ 485.326749][T13483] ? __dev_queue_xmit+0x29b/0x3920 [ 485.326767][T13483] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 485.326787][T13483] ? __pfx___dev_queue_xmit+0x10/0x10 [ 485.326807][T13483] ? __copy_skb_header+0xa3/0x4a0 [ 485.326831][T13483] ? skb_clone+0x246/0x3a0 [ 485.326856][T13483] ? __netlink_deliver_tap+0x681/0x6e0 [ 485.326875][T13483] ? netlink_deliver_tap+0x2e/0x1b0 [ 485.326895][T13483] ? netlink_deliver_tap+0x2e/0x1b0 [ 485.326911][T13483] ? netlink_deliver_tap+0x2e/0x1b0 [ 485.326930][T13483] netlink_unicast+0x8ef/0xa80 [ 485.326955][T13483] netlink_sendmsg+0x7f0/0xb20 [ 485.326969][T13483] ? __pfx_netlink_sendmsg+0x10/0x10 [ 485.326981][T13483] ? aa_sock_msg_perm+0x144/0x210 [ 485.326997][T13483] ? apparmor_socket_sendmsg+0x98/0x360 [ 485.327010][T13483] ? __pfx_netlink_sendmsg+0x10/0x10 [ 485.327019][T13483] sock_sendmsg_nosec+0x14e/0x190 [ 485.327045][T13483] ____sys_sendmsg+0x54e/0x850 [ 485.327061][T13483] ? __pfx_____sys_sendmsg+0x10/0x10 [ 485.327079][T13483] ? import_iovec+0x73/0xa0 [ 485.327097][T13483] ___sys_sendmsg+0x2a5/0x360 [ 485.327109][T13483] ? __lock_acquire+0x747/0x2de0 [ 485.327126][T13483] ? __pfx____sys_sendmsg+0x10/0x10 [ 485.327141][T13483] ? futex_wait+0x2a2/0x390 [ 485.327170][T13483] ? __fget_files+0x3a2/0x420 [ 485.327182][T13483] ? __fget_files+0x2a/0x420 [ 485.327197][T13483] __x64_sys_sendmsg+0x1b1/0x290 [ 485.327212][T13483] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 485.327237][T13483] do_syscall_64+0x166/0x520 [ 485.327251][T13483] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.327262][T13483] ? clear_bhb_loop+0x70/0xc0 [ 485.327276][T13483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.327287][T13483] RIP: 0033:0x7f93dad9f559 [ 485.327299][T13483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 485.327309][T13483] RSP: 002b:00007f93dbd27028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 485.327320][T13483] RAX: ffffffffffffffda RBX: 00007f93db025fa0 RCX: 00007f93dad9f559 [ 485.327329][T13483] RDX: 0000000000000004 RSI: 0000200000000340 RDI: 0000000000000004 [ 485.327335][T13483] RBP: 00007f93dae36b20 R08: 0000000000000000 R09: 0000000000000000 [ 485.327342][T13483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 485.327349][T13483] R13: 00007f93db026038 R14: 00007f93db025fa0 R15: 00007f93db14fa48 [ 485.327366][T13483] [ 485.476236][T13483] Mem-Info: [ 485.476253][T13483] active_anon:23540 inactive_anon:607 isolated_anon:0 [ 485.476253][T13483] active_file:239 inactive_file:60125 isolated_file:0 [ 485.476253][T13483] unevictable:0 dirty:204 writeback:0 [ 485.476253][T13483] slab_reclaimable:12445 slab_unreclaimable:98127 [ 485.476253][T13483] mapped:39920 shmem:17931 pagetables:1601 [ 485.476253][T13483] sec_pagetables:0 bounce:0 [ 485.476253][T13483] kernel_misc_reclaimable:0 [ 485.476253][T13483] free:1271165 free_pcp:8665 free_cma:0 [ 485.476331][T13483] Node 0 active_anon:94156kB inactive_anon:2428kB active_file:956kB inactive_file:240228kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:159616kB dirty:812kB writeback:0kB shmem:71720kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:13044kB pagetables:6268kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 485.476388][T13483] Node 1 active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:272kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:64kB dirty:4kB writeback:0kB shmem:4kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 485.477400][T13483] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 485.477461][T13483] lowmem_reserve[]: 0 2464 2465 2465 2465 [ 485.477497][T13483] Node 0 DMA32 free:1136104kB boost:0kB min:33936kB low:42420kB high:50904kB reserved_highatomic:0kB free_highatomic:0kB active_anon:94156kB inactive_anon:2428kB active_file:956kB inactive_file:240228kB unevictable:0kB writepending:812kB zspages:32kB present:3129332kB managed:2523320kB mlocked:0kB bounce:0kB free_pcp:34640kB local_pcp:16788kB free_cma:0kB [ 485.477558][T13483] lowmem_reserve[]: 0 0 1 1 1 [ 485.477591][T13483] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1664kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 485.477647][T13483] lowmem_reserve[]: 0 0 0 0 0 [ 485.477701][T13483] Node 1 Normal free:3933196kB boost:0kB min:55940kB low:69924kB high:83908kB reserved_highatomic:0kB free_highatomic:0kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:272kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 485.483047][T13483] lowmem_reserve[]: 0 0 0 0 0 [ 485.483086][T13483] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 485.483200][T13483] Node 0 DMA32: 788*4kB (UE) 316*8kB (UME) 315*16kB (UE) 243*32kB (UME) 553*64kB (UME) 392*128kB (UME) 133*256kB (UME) 63*512kB (UME) 29*1024kB (UM) 5*2048kB (UME) 226*4096kB (UM) = 1136000kB [ 485.484521][T13483] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 485.484630][T13483] Node 1 Normal: 5*4kB (M) 9*8kB (UM) 15*16kB (UM) 12*32kB (UM) 15*64kB (UM) 11*128kB (UM) 10*256kB (UM) 7*512kB (UM) 2*1024kB (UM) 5*2048kB (UM) 955*4096kB (UM) = 3933196kB [ 485.484804][T13483] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 485.484821][T13483] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 485.484837][T13483] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 485.484852][T13483] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 485.484875][T13483] 78293 total pagecache pages [ 485.484883][T13483] 2 pages in swap cache [ 485.484890][T13483] Free swap = 124988kB [ 485.484896][T13483] Total swap = 124996kB [ 485.484904][T13483] 2097051 pages RAM [ 485.484912][T13483] 0 pages HighMem/MovableOnly [ 485.484918][T13483] 434189 pages reserved [ 485.484926][T13483] 0 pages cma reserved [ 485.532543][ T29] pegasus 3-1:1.0: setup Pegasus II specific registers [ 485.889460][ T29] pegasus 3-1:1.0: can't locate MII phy, using default [ 486.264888][ T5712] input: HID 13ec:0006 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:13EC:0006.0018/input/input40 [ 486.295926][ T29] pegasus 3-1:1.0: eth1, 3Com USB Ethernet 3C460B, 6e:40:70:dd:b0:fe [ 486.332192][ T29] usb 3-1: USB disconnect, device number 57 [ 486.369883][ T5712] zydacron 0003:13EC:0006.0018: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 13ec:0006] on usb-dummy_hcd.1-1/input0 [ 487.186445][T13526] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2643'. [ 487.216639][ T10] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 487.374299][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 487.383651][ T10] usb 3-1: New USB device found: idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 487.396288][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.396315][ T10] usb 3-1: Product: syz [ 487.396330][ T10] usb 3-1: Manufacturer: syz [ 487.396378][ T10] usb 3-1: SerialNumber: syz [ 487.400240][ T10] usb 3-1: config 0 descriptor?? [ 487.426116][ T10] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 487.536385][ T9] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 487.578214][T13537] xt_connbytes: Forcing CT accounting to be enabled [ 487.686108][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 487.686759][ T9] usb 4-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 487.688131][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 487.688161][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 487.688204][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 487.688245][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.691573][ T9] usb 4-1: config 0 descriptor?? [ 487.787907][ T5697] usb 2-1: USB disconnect, device number 52 [ 487.923268][T13551] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2654'. [ 488.107009][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 488.107137][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 488.112913][ T9] usb 4-1: USB disconnect, device number 54 [ 488.286352][ T5697] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 488.436912][ T5697] usb 5-1: New USB device found: idVendor=20b7, idProduct=1540, bcdDevice=0.00 [ 488.437887][ T5697] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.649892][ T10] gspca_ov534_9: reg_w failed -71 [ 488.936639][ T10] gspca_ov534_9: Unknown sensor 0000 [ 488.936768][ T10] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 488.963131][ T10] usb 3-1: USB disconnect, device number 58 [ 488.986568][T13441] udevd[13441]: setting mode of /dev/bus/usb/003/058 to 020664 failed: No such file or directory [ 488.986734][T13441] udevd[13441]: setting owner of /dev/bus/usb/003/058 to uid=0, gid=0 failed: No such file or directory [ 489.275687][ T5642] Bluetooth: hci0: unexpected event for opcode 0x1005 [ 489.463001][ T5697] usb 5-1: ATUSB: AT86RF231 version 1 [ 489.663769][ T5697] usb 5-1: Firmware version (0.0) predates our first public release. [ 489.663798][ T5697] usb 5-1: Please update to version 0.2 or newer [ 489.708690][ T5697] usb 5-1: USB disconnect, device number 62 [ 489.716543][ T5712] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 489.876708][ T5712] usb 4-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 489.877536][ T5712] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 489.879195][ T5712] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.879209][ T5712] usb 4-1: Product: syz [ 489.879217][ T5712] usb 4-1: Manufacturer: syz [ 489.879224][ T5712] usb 4-1: SerialNumber: syz [ 489.881277][ T5712] usb 4-1: config 0 descriptor?? [ 489.884539][ T5712] yurex 4-1:0.0: Could not find endpoints [ 490.086516][T13597] : renamed from bridge_slave_0 (while UP) [ 490.089640][T13597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.090102][T13597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.094305][ T5712] usb 4-1: USB disconnect, device number 55 [ 490.483083][T13622] ip6gre2: entered allmulticast mode [ 490.484350][ T64] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 490.756197][ T5697] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 490.906860][ T5697] usb 3-1: New USB device found: idVendor=0b48, idProduct=1005, bcdDevice=1.00 [ 490.907783][ T5697] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 490.909209][ T5697] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 490.909229][ T5697] usb 3-1: Product: syz [ 490.909236][ T5697] usb 3-1: Manufacturer: syz [ 490.960293][ T5697] usb 3-1: selecting invalid altsetting 1 [ 490.960393][ T5697] dvb_ttusb_budget: ttusb_init_controller: error [ 490.960401][ T5697] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 491.016098][ T5712] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 491.038480][ T5697] DVB: Unable to find symbol cx22700_attach() [ 491.081363][ T5697] DVB: Unable to find symbol tda10046_attach() [ 491.081376][ T5697] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 491.130850][T13624] dvb_ttusb_budget: failed urb submission (0: err = -2)! [ 491.132990][ T29] usb 3-1: USB disconnect, device number 59 [ 491.176150][ T5712] usb 4-1: Using ep0 maxpacket: 8 [ 491.176919][ T5712] usb 4-1: New USB device found: idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 491.182080][ T5712] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.182105][ T5712] usb 4-1: Product: syz [ 491.182120][ T5712] usb 4-1: Manufacturer: syz [ 491.182133][ T5712] usb 4-1: SerialNumber: syz [ 491.185207][ T5712] usb 4-1: config 0 descriptor?? [ 491.196781][ T5712] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 491.770381][T13675] netlink: 'syz.2.2710': attribute type 1 has an invalid length. [ 491.786144][ T5697] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 491.947245][ T5697] usb 2-1: New USB device found: idVendor=056a, idProduct=0097, bcdDevice=0.00 [ 491.948963][ T5697] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 491.948993][ T5697] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 491.949019][ T5697] usb 2-1: config 0 interface 0 has no altsetting 0 [ 491.949051][ T5697] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.952734][ T5697] usb 2-1: config 0 descriptor?? [ 492.200206][ T5712] gspca_sonixj: reg_w1 err -71 [ 492.236229][ T5712] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 492.240896][ T5712] usb 4-1: USB disconnect, device number 56 [ 492.374180][ T5697] wacom 0003:056A:0097.0019: hidraw0: USB HID v36.2c Joystick [HID 056a:0097] on usb-dummy_hcd.1-1/input0 [ 492.563651][ T990] usb 2-1: USB disconnect, device number 53 [ 492.736255][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 492.736499][ T5697] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 492.886814][ T5697] usb 3-1: New USB device found: idVendor=0b48, idProduct=1005, bcdDevice=1.00 [ 492.887956][ T5697] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 492.889420][ T5697] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 492.889444][ T5697] usb 3-1: Product: syz [ 492.889457][ T5697] usb 3-1: Manufacturer: syz [ 492.936549][ T5697] usb 3-1: selecting invalid altsetting 1 [ 492.936724][ T5697] dvb_ttusb_budget: ttusb_init_controller: error [ 492.936736][ T5697] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 492.992621][ T5697] DVB: Unable to find symbol cx22700_attach() [ 492.996660][ T5712] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 493.029056][ T5697] DVB: Unable to find symbol tda10046_attach() [ 493.029066][ T5697] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 493.108840][T13697] dvb_ttusb_budget: failed urb submission (0: err = -2)! [ 493.110646][ T5628] usb 3-1: USB disconnect, device number 60 [ 493.156099][ T29] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 493.158024][ T5712] usb 4-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 493.161521][ T5712] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 493.161544][ T5712] usb 4-1: config 0 has no interface number 0 [ 493.161581][ T5712] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 493.163745][ T5712] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.163770][ T5712] usb 4-1: Product: syz [ 493.163783][ T5712] usb 4-1: Manufacturer: syz [ 493.163797][ T5712] usb 4-1: SerialNumber: syz [ 493.167336][ T5712] usb 4-1: config 0 descriptor?? [ 493.190761][ T5712] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 493.307050][ T29] usb 1-1: Using ep0 maxpacket: 8 [ 493.307734][ T29] usb 1-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 493.309646][ T29] usb 1-1: config 0 has no interfaces? [ 493.312632][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.312655][ T29] usb 1-1: Product: syz [ 493.312670][ T29] usb 1-1: Manufacturer: syz [ 493.312707][ T29] usb 1-1: SerialNumber: syz [ 493.317281][ T29] usb 1-1: config 0 descriptor?? [ 493.524445][ T29] usb 1-1: USB disconnect, device number 44 [ 493.626198][ T5628] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 493.786258][ T5712] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 493.786403][ T5628] usb 5-1: Using ep0 maxpacket: 32 [ 493.787641][ T5628] usb 5-1: New USB device found: idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 493.793015][ T5628] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.793039][ T5628] usb 5-1: Product: syz [ 493.793052][ T5628] usb 5-1: Manufacturer: syz [ 493.793060][ T5628] usb 5-1: SerialNumber: syz [ 493.802593][ T5628] usb 5-1: config 0 descriptor?? [ 493.812361][ T5628] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 493.935643][ C1] usb 4-1: yurex_control_callback - control failed: -71 [ 493.938445][ T29] usb 4-1: USB disconnect, device number 57 [ 493.953461][ T29] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 493.963365][ T5712] usb 2-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 493.964507][ T5712] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.978630][ T5712] usb 2-1: config 0 descriptor?? [ 494.186329][ T5712] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 494.256222][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 494.398748][ T5712] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 1 [ 494.398775][ T5712] [drm] Initialized udl on minor 1 [ 494.426300][ T29] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 494.576143][ T29] usb 1-1: Using ep0 maxpacket: 32 [ 494.578705][ T29] usb 1-1: unable to get BOS descriptor or descriptor too short [ 494.578802][ T29] usb 1-1: New USB device found: idVendor=041e, idProduct=3000, bcdDevice=0.40 [ 494.580245][ T29] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 121, changing to 7 [ 494.583373][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.583402][ T29] usb 1-1: Product: syz [ 494.583410][ T29] usb 1-1: Manufacturer: syz [ 494.583418][ T29] usb 1-1: SerialNumber: syz [ 494.647391][ T29] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 494.768306][ T990] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 494.813612][ T29] usb 1-1: unit 1 not found! [ 494.916876][ T990] usb 4-1: New USB device found: idVendor=054c, idProduct=042f, bcdDevice=0.00 [ 494.918024][ T990] usb 4-1: config 0 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.918054][ T990] usb 4-1: config 0 interface 0 altsetting 12 endpoint 0x81 has invalid wMaxPacketSize 0 [ 494.918076][ T990] usb 4-1: config 0 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 494.918100][ T990] usb 4-1: config 0 interface 0 has no altsetting 0 [ 494.918132][ T990] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.920552][ T990] usb 4-1: config 0 descriptor?? [ 495.268998][ T29] usb 1-1: USB disconnect, device number 45 [ 495.322764][T13196] udevd[13196]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 495.933259][ T990] sony 0003:054C:042F.001A: can't set operational mode: step 3, ignoring [ 495.964321][ T990] sony 0003:054C:042F.001A: hidraw0: USB HID v0.00 Joystick [HID 054c:042f] on usb-dummy_hcd.3-1/input0 [ 495.964355][ T990] sony 0003:054C:042F.001A: failed to claim input [ 496.141911][ T29] usb 4-1: USB disconnect, device number 58 [ 496.877099][ T5628] gspca_stk1135: reg_w 0x352 err -71 [ 496.878155][ T5628] gspca_stk1135: serial bus timeout: status=0x00 [ 496.878169][ T5628] gspca_stk1135: Sensor write failed [ 496.878222][ T5628] gspca_stk1135: serial bus timeout: status=0x00 [ 496.878231][ T5628] gspca_stk1135: Sensor write failed [ 496.878261][ T5628] gspca_stk1135: serial bus timeout: status=0x00 [ 496.878270][ T5628] gspca_stk1135: Sensor read failed [ 496.878299][ T5628] gspca_stk1135: serial bus timeout: status=0x00 [ 496.878308][ T5628] gspca_stk1135: Sensor read failed [ 496.878316][ T5628] gspca_stk1135: Detected sensor type unknown (0x0) [ 496.878371][ T5628] gspca_stk1135: serial bus timeout: status=0x00 [ 496.878381][ T5628] gspca_stk1135: Sensor read failed [ 496.878417][ T5628] gspca_stk1135: serial bus timeout: status=0x00 [ 496.878426][ T5628] gspca_stk1135: Sensor read failed [ 496.878452][ T5628] gspca_stk1135: serial bus timeout: status=0x00 [ 496.878461][ T5628] gspca_stk1135: Sensor write failed [ 496.878506][ T5628] gspca_stk1135: serial bus timeout: status=0x00 [ 496.878515][ T5628] gspca_stk1135: Sensor write failed [ 496.881452][ T5628] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71 [ 496.889021][ T5642] Bluetooth: hci3: unexpected event for opcode 0x2039 [ 496.999739][ T5628] usb 5-1: USB disconnect, device number 63 [ 497.986221][ T5697] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 498.138577][ T5697] usb 5-1: New USB device found: idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 498.141467][ T5697] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 498.141494][ T5697] usb 5-1: Product: syz [ 498.141508][ T5697] usb 5-1: SerialNumber: syz [ 498.147275][ T5697] usb 5-1: config 0 descriptor?? [ 498.294438][T13807] syz.3.2767 (13807): drop_caches: 2 [ 498.390038][ T5697] hso 5-1:0.0: Failed to find BULK eps [ 498.583352][ T5726] usb 5-1: USB disconnect, device number 64 [ 498.636946][ T5628] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 498.796207][ T5628] usb 4-1: Using ep0 maxpacket: 32 [ 498.797041][ T5628] usb 4-1: New USB device found: idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 498.798042][ T5628] usb 4-1: config index 0 descriptor too short (expected 19, got 18) [ 498.800082][ T5628] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.800096][ T5628] usb 4-1: Product: syz [ 498.800104][ T5628] usb 4-1: Manufacturer: syz [ 498.800126][ T5628] usb 4-1: SerialNumber: syz [ 498.804555][ T5628] usb 4-1: config 0 descriptor?? [ 498.811340][ T5628] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 498.811408][ T5628] dvb-usb: bulk message failed: -22 (2/0) [ 498.839282][ T5628] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 498.839999][ T5628] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 498.840125][ T5628] usb 4-1: media controller created [ 498.857635][ T5628] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 498.894973][ T5628] usb 4-1: selecting invalid altsetting 7 [ 498.894993][ T5628] cxusb: set interface failed [ 498.895004][ T5628] dvb-usb: bulk message failed: -22 (1/0) [ 498.960356][ T5628] DVB: Unable to find symbol lgdt330x_attach() [ 498.960375][ T5628] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 499.010831][T13838] cxusb: i2c rd: len=136 is too big! [ 499.010831][T13838] [ 499.046313][ T5628] rc_core: IR keymap rc-dvico-portable not found [ 499.046332][ T5628] Registered IR keymap rc-empty [ 499.051003][ T5628] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 499.061273][ T5628] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input45 [ 499.091017][ T5628] dvb-usb: schedule remote query interval to 100 msecs. [ 499.091068][ T5628] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 499.101354][ T5628] usb 4-1: USB disconnect, device number 59 [ 499.221723][ T5628] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 499.356246][ T5726] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 499.466511][ T5712] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 499.467008][ T5712] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 499.474571][ T5712] usb 2-1: USB disconnect, device number 54 [ 499.483005][ T5628] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 499.483484][ T5628] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 499.483672][ T5628] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 499.518456][ T5726] usb 1-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00 [ 499.525863][ T5726] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.525889][ T5726] usb 1-1: Product: syz [ 499.525903][ T5726] usb 1-1: Manufacturer: syz [ 499.525916][ T5726] usb 1-1: SerialNumber: syz [ 499.636171][ T5697] usb 5-1: new full-speed USB device number 65 using dummy_hcd [ 499.753018][ T5642] Bluetooth: hci0: unknown advertising packet type: 0xff [ 499.753071][ T5642] Bluetooth: hci0: unknown advertising packet type: 0xfa [ 499.753086][ T5642] Bluetooth: hci0: unknown advertising packet type: 0x09 [ 499.753099][ T5642] Bluetooth: hci0: unknown advertising packet type: 0x05 [ 499.753112][ T5642] Bluetooth: hci0: unknown advertising packet type: 0x20 [ 499.753142][ T5642] Bluetooth: hci0: Malformed LE Event: 0x02 [ 499.816979][ T5697] usb 5-1: New USB device found: idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 499.819823][ T5697] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.819845][ T5697] usb 5-1: Product: syz [ 499.819859][ T5697] usb 5-1: Manufacturer: syz [ 499.819873][ T5697] usb 5-1: SerialNumber: syz [ 499.822733][ T5697] usb 5-1: config 0 descriptor?? [ 499.844205][ T5726] rtl8150 1-1:1.0: couldn't reset the device [ 499.844490][ T5726] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 499.876274][ T5628] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 499.893673][ T5726] usb 1-1: USB disconnect, device number 46 [ 500.034501][ T5697] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 065 [ 500.037374][ T5628] usb 4-1: New USB device found: idVendor=10c4, idProduct=ea90, bcdDevice=0.80 [ 500.038568][ T5628] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 500.038597][ T5628] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 500.038631][ T5628] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.070430][ T5628] usb 4-1: config 0 descriptor?? [ 500.309918][T13878] syzkaller1: entered promiscuous mode [ 500.309940][T13878] syzkaller1: entered allmulticast mode [ 500.485951][ T5628] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x4 [ 500.486973][ T5628] cp2112 0003:10C4:EA90.001B: item fetching failed at offset 6/7 [ 500.489919][ T5628] cp2112 0003:10C4:EA90.001B: parse failed [ 500.490161][ T5628] cp2112 0003:10C4:EA90.001B: probe with driver cp2112 failed with error -22 [ 500.682303][ T5697] usb 4-1: USB disconnect, device number 60 [ 500.691551][T13863] i2c i2c-1: failure reading status [ 500.693495][ T5628] usb 5-1: USB disconnect, device number 65 [ 501.049944][T13902] ip6gre2: entered allmulticast mode [ 501.051094][ T8891] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 501.489852][T13920] netlink: 'syz.4.2817': attribute type 5 has an invalid length. [ 501.489874][T13920] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2817'. [ 501.652800][ T5628] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 501.696441][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 501.708036][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.708091][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.810214][ T5628] usb 4-1: Using ep0 maxpacket: 32 [ 501.815026][ T5628] usb 4-1: New USB device found: idVendor=046d, idProduct=c314, bcdDevice=0.40 [ 501.816866][ T5628] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 501.816895][ T5628] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 501.818329][ T5628] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 501.818351][ T5628] usb 4-1: Product: syz [ 501.818364][ T5628] usb 4-1: Manufacturer: syz [ 501.843462][ T5628] hub 4-1:4.0: USB hub found [ 501.868150][ T5712] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 501.939668][T13932] nvme nvme0: rdma connection establishment failed (-104) [ 502.007138][ T5712] usb 5-1: New USB device found: idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 502.011035][ T5712] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 502.011088][ T5712] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.025440][ T5712] usb 5-1: config 0 descriptor?? [ 502.046635][ T5712] pwc: Askey VC010 type 2 USB webcam detected. [ 502.065680][ T5628] hub 4-1:4.0: 4 ports detected [ 502.066597][ T5628] hub 4-1:4.0: insufficient power available to use all downstream ports [ 502.270791][ T5628] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 502.307928][T13946] set match dimension is over the limit! [ 502.322596][ T5628] usb 4-1: USB disconnect, device number 61 [ 502.451577][ T5712] pwc: recv_control_msg error -32 req 02 val 2b00 [ 502.452394][ T5712] pwc: recv_control_msg error -32 req 02 val 2700 [ 502.452869][ T5712] pwc: recv_control_msg error -32 req 02 val 2c00 [ 502.453432][ T5712] pwc: recv_control_msg error -32 req 04 val 1000 [ 502.453948][ T5712] pwc: recv_control_msg error -32 req 04 val 1300 [ 502.454485][ T5712] pwc: recv_control_msg error -32 req 04 val 1400 [ 502.455053][ T5712] pwc: recv_control_msg error -32 req 02 val 2000 [ 502.455588][ T5712] pwc: recv_control_msg error -32 req 02 val 2100 [ 502.470447][ T5712] pwc: recv_control_msg error -32 req 04 val 1500 [ 502.477207][ T5712] pwc: recv_control_msg error -32 req 02 val 2500 [ 502.479794][ T5712] pwc: recv_control_msg error -32 req 02 val 2400 [ 502.684697][ T5712] pwc: recv_control_msg error -71 req 02 val 2900 [ 502.685149][ T5712] pwc: recv_control_msg error -71 req 02 val 2800 [ 502.685720][ T5712] pwc: recv_control_msg error -71 req 04 val 1100 [ 502.690163][ T5712] pwc: recv_control_msg error -71 req 04 val 1200 [ 502.713835][ T5712] pwc: Registered as video103. [ 502.717886][ T5712] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input46 [ 502.725206][ T5712] usb 5-1: USB disconnect, device number 66 [ 502.836110][ T5697] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 502.988834][ T5697] usb 1-1: New USB device found: idVendor=0499, idProduct=7010, bcdDevice=0.40 [ 502.990338][ T5697] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 128, changing to 7 [ 502.993223][ T5697] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.993248][ T5697] usb 1-1: Product: Б [ 502.993263][ T5697] usb 1-1: SerialNumber: ㊠[ 503.206177][ T5628] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 503.269301][ T5697] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 503.270050][ T5697] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 503.301938][ T5697] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 503.304314][ T5697] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 503.330077][ T5697] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 503.357084][ T5628] usb 4-1: New USB device found: idVendor=0e8f, idProduct=0003, bcdDevice=0.00 [ 503.359142][ T5628] usb 4-1: too many endpoints for config 0 interface 0 altsetting 8: 130, using maximum allowed: 30 [ 503.359182][ T5628] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 503.359206][ T5628] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1983, setting to 64 [ 503.359243][ T5628] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 503.359268][ T5628] usb 4-1: config 0 interface 0 has no altsetting 0 [ 503.359300][ T5628] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.363396][ T5628] usb 4-1: config 0 descriptor?? [ 503.366996][T13960] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 503.493531][ T5697] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 503.508293][ T5697] usb 1-1: USB disconnect, device number 47 [ 503.539498][T13441] udevd[13441]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 503.788282][ T5628] pantherlord 0003:0E8F:0003.001C: unknown main item tag 0x2 [ 503.788318][ T5628] pantherlord 0003:0E8F:0003.001C: unknown main item tag 0x0 [ 503.788346][ T5628] pantherlord 0003:0E8F:0003.001C: unknown main item tag 0x0 [ 503.805851][ T5628] input: HID 0e8f:0003 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0E8F:0003.001C/input/input47 [ 504.088006][ T5628] pantherlord 0003:0E8F:0003.001C: input,hidraw0: USB HID v0.00 Keyboard [HID 0e8f:0003] on usb-dummy_hcd.3-1/input0 [ 504.100279][ T5628] usb 4-1: USB disconnect, device number 62 [ 504.272556][T13971] fido_id[13971]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 504.366598][ T5697] usb 5-1: new full-speed USB device number 67 using dummy_hcd [ 504.457175][ T29] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 504.457830][T13986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2847'. [ 504.518249][ T5697] usb 5-1: New USB device found: idVendor=1294, idProduct=1320, bcdDevice=0.00 [ 504.519371][ T5697] usb 5-1: config 0 interface 0 altsetting 24 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 504.519402][ T5697] usb 5-1: config 0 interface 0 has no altsetting 0 [ 504.519435][ T5697] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.523404][ T5697] usb 5-1: config 0 descriptor?? [ 504.606789][ T29] usb 2-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 504.611266][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.611293][ T29] usb 2-1: Product: syz [ 504.611308][ T29] usb 2-1: Manufacturer: syz [ 504.611322][ T29] usb 2-1: SerialNumber: syz [ 504.617007][ T29] usb 2-1: config 0 descriptor?? [ 504.806208][ T5628] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 504.832093][ T29] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 504.896234][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 504.963027][ T53] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 504.967097][ T5628] usb 4-1: Using ep0 maxpacket: 8 [ 504.967859][ T5628] usb 4-1: New USB device found: idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 504.969216][ T5628] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 504.969259][ T5628] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 504.969283][ T5628] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 504.973202][ T5628] usb 4-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 504.973224][ T5628] usb 4-1: Product: syz [ 504.973238][ T5628] usb 4-1: Manufacturer: syz [ 504.973274][ T5628] usb 4-1: SerialNumber: syz [ 504.980679][ T53] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 504.991900][ T53] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 505.004168][ T53] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 505.005025][ T53] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 505.033809][ T5628] usb 4-1: config 0 descriptor?? [ 505.112987][ T5697] hid-led 0003:1294:1320.001D: item fetching failed at offset 5/6 [ 505.113776][ T5697] hid-led 0003:1294:1320.001D: probe with driver hid-led failed with error -22 [ 505.154784][ T5697] usb 5-1: USB disconnect, device number 67 [ 505.248453][ T5628] rc_core: IR keymap rc-imon-rsc not found [ 505.248474][ T5628] Registered IR keymap rc-empty [ 505.252488][ T5628] rc rc0: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 505.258898][ T5628] input: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input48 [ 505.292076][ T5628] usb 4-1: USB disconnect, device number 63 [ 506.015189][T14014] ip6gre2: entered allmulticast mode [ 506.132381][ T7860] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 506.175743][T13992] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.175859][T13992] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.190751][ T5697] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 506.199588][T13992] bridge_slave_0: entered allmulticast mode [ 506.201032][T13992] bridge_slave_0: entered promiscuous mode [ 506.239042][T13992] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.239220][T13992] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.239384][T13992] bridge_slave_1: entered allmulticast mode [ 506.243315][T13992] bridge_slave_1: entered promiscuous mode [ 506.316199][ T29] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 506.323626][ T29] usb 2-1: USB disconnect, device number 55 [ 506.360558][ T5697] usb 4-1: New USB device found: idVendor=0079, idProduct=1801, bcdDevice=0.00 [ 506.363141][T13992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 506.387291][ T5697] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 506.387327][ T5697] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 506.387353][ T5697] usb 4-1: config 0 interface 0 has no altsetting 0 [ 506.387389][ T5697] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.397104][T13992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 506.436984][ T8890] bridge_slave_1: left allmulticast mode [ 506.437011][ T8890] bridge_slave_1: left promiscuous mode [ 506.437237][ T8890] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.458544][ T5697] usb 4-1: config 0 descriptor?? [ 506.464814][ T8890] bridge_slave_0: left allmulticast mode [ 506.464834][ T8890] bridge_slave_0: left promiscuous mode [ 506.465011][ T8890] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.496310][ T5712] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 506.684763][ T5712] usb 3-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 506.696568][ T5712] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.696595][ T5712] usb 3-1: Product: syz [ 506.696609][ T5712] usb 3-1: Manufacturer: syz [ 506.696624][ T5712] usb 3-1: SerialNumber: syz [ 506.699176][ T5712] usb 3-1: config 0 descriptor?? [ 506.715132][ T8890] bond3 (unregistering): (slave gretap2): Releasing active interface [ 506.780141][ T8890] bond1 (unregistering): (slave gretap1): Releasing active interface [ 506.878636][ T5697] hid_mf 0003:0079:1801.001E: unknown main item tag 0x0 [ 506.881514][ T5697] hid_mf 0003:0079:1801.001E: unknown main item tag 0x0 [ 506.881548][ T5697] hid_mf 0003:0079:1801.001E: unknown main item tag 0x0 [ 506.881573][ T5697] hid_mf 0003:0079:1801.001E: unknown main item tag 0x0 [ 506.881598][ T5697] hid_mf 0003:0079:1801.001E: unknown main item tag 0x0 [ 506.881624][ T5697] hid_mf 0003:0079:1801.001E: unknown main item tag 0x0 [ 506.881651][ T5697] hid_mf 0003:0079:1801.001E: unknown main item tag 0x0 [ 506.881700][ T5697] hid_mf 0003:0079:1801.001E: unknown main item tag 0x0 [ 506.881727][ T5697] hid_mf 0003:0079:1801.001E: unknown main item tag 0x0 [ 506.881753][ T5697] hid_mf 0003:0079:1801.001E: unknown main item tag 0x0 [ 506.908642][ T5697] hid_mf 0003:0079:1801.001E: hidraw0: USB HID vff.ff Device [HID 0079:1801] on usb-dummy_hcd.3-1/input0 [ 506.953865][ T5712] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 507.048953][ T8890] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 507.050016][ T8890] bond_slave_0: left promiscuous mode [ 507.065789][ T8890] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 507.083086][ T8890] bond_slave_1: left promiscuous mode [ 507.083700][ T8890] bond0 (unregistering): Released all slaves [ 507.111499][ T5697] usb 4-1: USB disconnect, device number 64 [ 507.124652][ T8890] bond1 (unregistering): Released all slaves [ 507.137460][ T5642] Bluetooth: hci5: command tx timeout [ 507.183183][T14033] fido_id[14033]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 507.215517][ T8890] bond2 (unregistering): (slave veth3): Releasing backup interface [ 507.223344][ T8890] bond2 (unregistering): Released all slaves [ 507.278816][ T8890] bond3 (unregistering): Released all slaves [ 507.318238][ T8890] bond4 (unregistering): Released all slaves [ 507.372516][T13992] team0: Port device team_slave_0 added [ 507.375516][T13992] team0: Port device team_slave_1 added [ 507.432175][T13992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 507.432194][T13992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 507.432219][T13992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 507.434198][T13992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 507.434214][T13992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 507.434241][T13992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 507.537983][ T5296] 8021q: adding VLAN 0 to HW filter on device eth1 [ 507.557747][ T8890] tipc: Disabling bearer [ 507.576988][ T8890] tipc: Left network mode [ 507.586873][ T990] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 507.618638][T13992] hsr_slave_0: entered promiscuous mode [ 507.619404][T13992] hsr_slave_1: entered promiscuous mode [ 507.622109][T13992] debugfs: 'hsr0' already exists in 'hsr' [ 507.622130][T13992] Cannot create hsr debugfs directory [ 507.752806][ T990] usb 2-1: New USB device found: idVendor=0565, idProduct=0001, bcdDevice=86.f0 [ 507.754145][ T990] usb 2-1: config 8 has an invalid interface number: 252 but max is 0 [ 507.754172][ T990] usb 2-1: config 8 has no interface number 0 [ 507.781575][ T990] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.781603][ T990] usb 2-1: Product: syz [ 507.781617][ T990] usb 2-1: Manufacturer: syz [ 507.781632][ T990] usb 2-1: SerialNumber: syz [ 507.981647][ T5712] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 508.027884][ T5712] usb 3-1: USB disconnect, device number 61 [ 508.063602][ T990] belkin_sa 2-1:8.252: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 508.065618][ T990] usb 2-1: bcdDevice: 86f0, bfc: 0 [ 508.094393][ T990] usb 2-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 508.114594][ T990] usb 2-1: USB disconnect, device number 56 [ 508.130577][ T990] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 508.131154][ T990] belkin_sa 2-1:8.252: device disconnected [ 508.741936][ T8890] team0 (unregistering): Port device team_slave_1 removed [ 508.754411][ T8890] team0 (unregistering): Port device team_slave_0 removed [ 508.846223][ T8890] team0 (unregistering): Port device dummy0 removed [ 508.875065][ T5296] 8021q: adding VLAN 0 to HW filter on device eth2 [ 508.928153][ T990] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 509.082719][ T990] usb 3-1: Using ep0 maxpacket: 32 [ 509.083428][ T990] usb 3-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 509.084419][ T990] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 509.084468][ T990] usb 3-1: config 1 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.084491][ T990] usb 3-1: config 1 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 22 [ 509.084518][ T990] usb 3-1: config 1 interface 0 has no altsetting 0 [ 509.144254][ T990] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 509.144354][ T990] usb 3-1: SerialNumber: syz [ 509.226734][ T5642] Bluetooth: hci5: command tx timeout [ 509.439412][ T10] usb 3-1: USB disconnect, device number 62 [ 509.885790][T13992] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 509.898974][T13992] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 509.899929][T13992] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 509.904150][T13992] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 509.905554][T13992] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 509.936317][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 509.942221][T13992] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 509.943131][T13992] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 509.972790][T13992] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 510.161433][T14118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2880'. [ 510.288664][T13992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 510.325654][T13992] 8021q: adding VLAN 0 to HW filter on device team0 [ 510.348768][ T8891] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.348875][ T8891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 510.361197][ T8890] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.361338][ T8890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 510.527013][ T990] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 510.564731][T13992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 510.646015][T13992] veth0_vlan: entered promiscuous mode [ 510.673480][T13992] veth1_vlan: entered promiscuous mode [ 510.689642][ T990] usb 3-1: New USB device found: idVendor=08ca, idProduct=0110, bcdDevice=1.00 [ 510.705465][ T990] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 510.718605][ T990] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.718632][ T990] usb 3-1: Product: syz [ 510.718647][ T990] usb 3-1: Manufacturer: syz [ 510.718686][ T990] usb 3-1: SerialNumber: syz [ 510.751328][ T990] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 510.767652][T13992] veth0_macvtap: entered promiscuous mode [ 510.789168][T13992] veth1_macvtap: entered promiscuous mode [ 510.832740][T13992] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 510.853100][T13992] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 510.967006][ T7860] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.031376][ T8890] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.032578][ T8890] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.069628][ T8890] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.188804][ T7860] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 511.188825][ T7860] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.296549][ T5642] Bluetooth: hci5: command tx timeout [ 511.305634][ T7860] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 511.305656][ T7860] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.461525][ T29] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 511.488638][ T5712] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 511.575543][ T990] gspca_mr97310a: reg write [19] error -71 [ 511.575636][ T990] mr97310a 3-1:1.0: probe with driver mr97310a failed with error -71 [ 511.606454][ T990] usb 3-1: USB disconnect, device number 63 [ 511.616382][ T5712] usb 4-1: device descriptor read/64, error -71 [ 511.638624][ T29] usb 5-1: Using ep0 maxpacket: 16 [ 511.639610][ T29] usb 5-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 511.641213][ T29] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 511.641266][ T29] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 511.641306][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.648291][ T29] usb 5-1: config 0 descriptor?? [ 511.663252][ T29] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 511.858022][ T5712] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 512.029582][ T5712] usb 4-1: device descriptor read/64, error -71 [ 512.137970][ T5712] usb usb4-port1: attempt power cycle [ 512.483476][ T5712] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 512.519093][ T5712] usb 4-1: device descriptor read/8, error -71 [ 512.576196][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 512.776935][ T5712] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 512.780065][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 512.794735][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 512.797117][ T5712] usb 4-1: device descriptor read/8, error -71 [ 512.804457][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 512.814016][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 512.830327][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 512.926591][ T5712] usb usb4-port1: unable to enumerate USB device [ 513.379976][ T53] Bluetooth: hci5: command tx timeout [ 513.707992][T14194] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.708167][T14194] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.708577][T14194] bridge_slave_0: entered allmulticast mode [ 513.710275][T14194] bridge_slave_0: entered promiscuous mode [ 513.745418][T14194] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.745584][T14194] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.745722][T14194] bridge_slave_1: entered allmulticast mode [ 513.768274][T14194] bridge_slave_1: entered promiscuous mode [ 513.818576][T14194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 513.821381][T14194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 513.869550][T14194] team0: Port device team_slave_0 added [ 513.872403][T14194] team0: Port device team_slave_1 added [ 513.924112][T14194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 513.924131][T14194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 513.924158][T14194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 513.926510][T14194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 513.926525][T14194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 513.926550][T14194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 514.019118][T14194] hsr_slave_0: entered promiscuous mode [ 514.021681][T14194] hsr_slave_1: entered promiscuous mode [ 514.022170][T14194] debugfs: 'hsr0' already exists in 'hsr' [ 514.022198][T14194] Cannot create hsr debugfs directory [ 514.197507][ T10] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 514.351159][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 514.352969][ T10] usb 2-1: New USB device found: idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 514.353795][ T990] usb 5-1: USB disconnect, device number 68 [ 514.355355][ T10] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 514.355373][ T10] usb 2-1: config 0 has no interface number 0 [ 514.355397][ T10] usb 2-1: config 0 interface 184 has no altsetting 0 [ 514.392323][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.392352][ T10] usb 2-1: Product: syz [ 514.392397][ T10] usb 2-1: Manufacturer: syz [ 514.392411][ T10] usb 2-1: SerialNumber: syz [ 514.395467][ T10] usb 2-1: config 0 descriptor?? [ 514.571516][T14228] ip_tables: iptables: counters copy to user failed while replacing table [ 514.742027][T14194] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 514.742072][T14194] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.896204][ T53] Bluetooth: hci0: command tx timeout [ 515.008459][T14194] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 515.008495][T14194] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.043061][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 515.043081][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 515.108911][ T9] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 515.131861][T14194] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 515.131885][T14194] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.259193][ T9] usb 5-1: New USB device found: idVendor=0b48, idProduct=1005, bcdDevice=1.00 [ 515.260313][T14194] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 515.260339][T14194] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.261690][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 515.263496][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 515.263510][ T9] usb 5-1: Product: syz [ 515.263518][ T9] usb 5-1: Manufacturer: syz [ 515.332122][ T9] usb 5-1: selecting invalid altsetting 1 [ 515.335569][ T9] dvb_ttusb_budget: ttusb_init_controller: error [ 515.335581][ T9] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 515.457163][ T9] DVB: Unable to find symbol cx22700_attach() [ 515.570032][T14235] dvb_ttusb_budget: failed urb submission (0: err = -2)! [ 515.575219][T14194] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 515.576417][T14235] dvb_ttusb_budget: failed urb submission (0: err = -2)! [ 515.588889][ T9] DVB: Unable to find symbol tda10046_attach() [ 515.588904][ T9] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 515.591193][ T9] usb 5-1: USB disconnect, device number 69 [ 515.630376][T14194] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 515.633040][T14194] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 515.648210][T14194] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 515.654341][T14194] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 515.671816][T14194] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 515.673039][T14194] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 515.692441][T14194] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 515.805534][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 515.854059][T14194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 515.878972][T14194] 8021q: adding VLAN 0 to HW filter on device team0 [ 515.890233][ T8890] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.890345][ T8890] bridge0: port 1(bridge_slave_0) entered forwarding state [ 515.934351][ T8890] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.934437][ T8890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 515.962067][T14194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 516.008249][T14194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 516.053797][T14194] veth0_vlan: entered promiscuous mode [ 516.072087][T14194] veth1_vlan: entered promiscuous mode [ 516.109578][T14194] veth0_macvtap: entered promiscuous mode [ 516.115699][T14194] veth1_macvtap: entered promiscuous mode [ 516.162323][T14194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 516.174376][T14194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 516.211340][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.226542][ T7860] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.226589][ T7860] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.226625][ T7860] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.391587][ T7860] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.391608][ T7860] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.480970][ T7860] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.480993][ T7860] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.669447][T14257] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2892'. [ 516.976378][ T53] Bluetooth: hci0: command tx timeout [ 517.057181][ T9] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 517.065069][T14167] Set syz1 is full, maxelem 65536 reached [ 517.206501][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 517.207281][ T9] usb 3-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 517.208963][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 517.209007][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 517.209072][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.214000][ T9] usb 3-1: config 0 descriptor?? [ 517.292802][ T9] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 517.549794][T14278] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2915'. [ 517.696246][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 517.766385][ T9] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 517.918932][ T9] usb 1-1: New USB device found: idVendor=1e7d, idProduct=2d50, bcdDevice=0.00 [ 517.920216][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 517.920248][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 517.920311][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.926346][ T9] usb 1-1: config 0 descriptor?? [ 518.132262][T14279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.132694][T14279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.219891][T14305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2926'. [ 518.306108][ T5628] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 518.344588][ T9] hid_parser_main: 14 callbacks suppressed [ 518.344606][ T9] kovaplus 0003:1E7D:2D50.001F: unknown main item tag 0x0 [ 518.344638][ T9] kovaplus 0003:1E7D:2D50.001F: unknown main item tag 0x0 [ 518.344668][ T9] kovaplus 0003:1E7D:2D50.001F: unknown main item tag 0x0 [ 518.344684][ T9] kovaplus 0003:1E7D:2D50.001F: unknown main item tag 0x0 [ 518.344699][ T9] kovaplus 0003:1E7D:2D50.001F: unknown main item tag 0x0 [ 518.344714][ T9] kovaplus 0003:1E7D:2D50.001F: unknown main item tag 0x0 [ 518.344749][ T9] kovaplus 0003:1E7D:2D50.001F: unknown main item tag 0x0 [ 518.344779][ T9] kovaplus 0003:1E7D:2D50.001F: unknown main item tag 0x0 [ 518.344795][ T9] kovaplus 0003:1E7D:2D50.001F: unknown main item tag 0x0 [ 518.344810][ T9] kovaplus 0003:1E7D:2D50.001F: unknown main item tag 0x0 [ 518.357760][ T9] kovaplus 0003:1E7D:2D50.001F: hidraw0: USB HID v7f.fd Device [HID 1e7d:2d50] on usb-dummy_hcd.0-1/input0 [ 518.476155][ T5628] usb 4-1: Using ep0 maxpacket: 8 [ 518.476905][ T5628] usb 4-1: New USB device found: idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 518.479964][ T5628] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.479987][ T5628] usb 4-1: Product: syz [ 518.480001][ T5628] usb 4-1: Manufacturer: syz [ 518.480017][ T5628] usb 4-1: SerialNumber: syz [ 518.483030][ T5628] usb 4-1: config 0 descriptor?? [ 518.539104][T14279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.539662][T14279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.556804][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000003c: -71 [ 518.556857][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read BULK_IN_DLY: -71 [ 518.556878][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 518.557234][ T10] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 518.565378][ T10] usb 2-1: USB disconnect, device number 57 [ 518.689995][ T5628] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 519.057221][ T53] Bluetooth: hci0: command tx timeout [ 519.533064][T14325] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2935'. [ 519.629214][T14329] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2937'. [ 519.764526][T14335] IPv6: Can't replace route, no match found [ 519.845618][ T5726] usb 3-1: USB disconnect, device number 64 [ 520.089431][T14351] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2948'. [ 520.109228][ T5628] usb write operation failed. (-71) [ 520.116320][ T5628] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 520.116807][ T5628] dvbdev: DVB: registering new adapter (Terratec H7) [ 520.116854][ T5628] usb 4-1: media controller created [ 520.148090][ T5628] usb read operation failed. (-71) [ 520.148527][ T5628] usb write operation failed. (-71) [ 520.154916][ T5628] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 520.180684][ T5628] usb 4-1: USB disconnect, device number 69 [ 520.719304][ T53] Bluetooth: hci2: unexpected event for opcode 0x200c [ 520.911011][T14380] ip6gre1: entered allmulticast mode [ 521.096151][ T5628] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 521.136324][ T53] Bluetooth: hci0: command tx timeout [ 521.246770][ T5628] usb 5-1: New USB device found: idVendor=0506, idProduct=4601, bcdDevice=1.00 [ 521.248591][ T5628] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 521.248622][ T5628] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 521.248645][ T5628] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 521.248670][ T5628] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 521.248707][ T5628] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.254495][T14378] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 521.254623][T14378] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 521.265410][ T5690] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 521.446582][ T5690] usb 3-1: Using ep0 maxpacket: 32 [ 521.447412][ T5690] usb 3-1: New USB device found: idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 521.448779][ T5690] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 521.448806][ T5690] usb 3-1: config 0 has no interface number 0 [ 521.448872][ T5690] usb 3-1: config 0 interface 184 has no altsetting 0 [ 521.451387][ T5690] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.451413][ T5690] usb 3-1: Product: syz [ 521.451448][ T5690] usb 3-1: Manufacturer: syz [ 521.451463][ T5690] usb 3-1: SerialNumber: syz [ 521.519518][ T5690] usb 3-1: config 0 descriptor?? [ 521.656591][T14396] libceph: resolve ' [ 521.656591][T14396] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 521.656591][T14396] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 521.774582][T14401] erspan0: entered promiscuous mode [ 522.066446][ T5712] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 522.216239][ T5712] usb 4-1: Using ep0 maxpacket: 32 [ 522.223800][ T5712] usb 4-1: New USB device found: idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 522.228220][ T5712] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 522.228270][ T5712] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 522.228295][ T5712] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 522.228321][ T5712] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 522.291919][ T5712] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.291947][ T5712] usb 4-1: Product: syz [ 522.291986][ T5712] usb 4-1: Manufacturer: syz [ 522.292001][ T5712] usb 4-1: SerialNumber: syz [ 522.305719][ C1] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 522.319528][ T5712] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input49 [ 522.475722][ T5628] pegasus 5-1:1.0: can't reset MAC [ 522.480282][ T5628] pegasus 5-1:1.0: probe with driver pegasus failed with error -5 [ 522.505629][ T5628] usb 5-1: USB disconnect, device number 70 [ 522.566682][ T5712] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 522.566705][ T5712] (id 0x00) [ 522.568794][ T5642] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 522.578063][ T5642] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 522.605322][ T5642] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 522.614759][ T5642] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 522.615642][ T5642] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 522.716521][ T5712] rc_core: IR keymap rc-imon-pad not found [ 522.716539][ T5712] Registered IR keymap rc-empty [ 522.716620][ T5712] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 522.716638][ T5712] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 522.739445][ T5712] imon:send_packet: packet tx failed (-71) [ 522.766769][ T5712] imon 4-1:155.0: remote input dev register failed [ 522.766945][ T5712] imon 4-1:155.0: imon_init_intf0: rc device setup failed [ 522.786918][ T5690] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 522.786950][ T5690] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 522.787472][ T5690] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 522.787495][ T5690] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 522.787512][ T5690] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 522.787529][ T5690] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 522.787863][ T5690] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 522.831168][ T5690] usb 3-1: USB disconnect, device number 65 [ 522.928494][ T5712] imon 4-1:155.0: unable to initialize intf0, err 0 [ 522.969283][ T5712] usb 4-1: USB disconnect, device number 70 [ 523.110741][ T64] erspan0: left allmulticast mode [ 523.110764][ T64] erspan0: left promiscuous mode [ 523.111275][ T64] bridge0: port 1(erspan0) entered disabled state [ 523.381330][ T64] bond0 (unregistering): (slave gretap4): Releasing active interface [ 523.419056][ T64] bond3 (unregistering): (slave gretap3): Releasing active interface [ 523.444170][ T64] bond2 (unregistering): (slave gretap2): Releasing active interface [ 523.457093][ T9] kovaplus 0003:1E7D:2D50.001F: couldn't init struct kovaplus_device [ 523.457145][ T9] kovaplus 0003:1E7D:2D50.001F: couldn't install mouse [ 523.481795][ T9] kovaplus 0003:1E7D:2D50.001F: probe with driver kovaplus failed with error -110 [ 523.520162][ T64] bond1 (unregistering): (slave gretap1): Releasing active interface [ 523.531948][ T5712] usb 1-1: USB disconnect, device number 48 [ 523.645036][ T64] bond1 (unregistering): Released all slaves [ 523.670459][ T64] bond2 (unregistering): Released all slaves [ 523.693201][ T64] bond3 (unregistering): Released all slaves [ 523.736229][ T5628] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 523.740052][ T64] bond0 (unregistering): Released all slaves [ 523.892771][ T64] tipc: Left network mode [ 523.897622][ T5628] usb 3-1: Using ep0 maxpacket: 8 [ 523.907349][ T5628] usb 3-1: New USB device found: idVendor=0225, idProduct=0000, bcdDevice=0.00 [ 523.908784][ T5628] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 523.908807][ T5628] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 523.908852][ T5628] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 523.908878][ T5628] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 523.908918][ T5628] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.000437][ T5628] hub 3-1:1.0: bad descriptor, ignoring hub [ 524.000465][ T5628] hub 3-1:1.0: probe with driver hub failed with error -5 [ 524.001005][ T5628] cdc_wdm 3-1:1.0: skipping garbage [ 524.001020][ T5628] cdc_wdm 3-1:1.0: skipping garbage [ 524.010318][ T5628] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 524.010339][ T5628] cdc_wdm 3-1:1.0: Unknown control protocol [ 524.323698][T14456] netlink: 'syz.0.2993': attribute type 29 has an invalid length. [ 524.370905][ T64] hsr_slave_0: left promiscuous mode [ 524.371438][ T64] hsr_slave_1: left promiscuous mode [ 524.373636][ T64] veth1_vlan: left promiscuous mode [ 524.373701][ T64] veth0_vlan: left promiscuous mode [ 524.589830][T14461] netlink: 'syz.3.2995': attribute type 29 has an invalid length. [ 524.754249][ T53] Bluetooth: hci3: command tx timeout [ 524.775318][T14427] PID 14427 killed due to inadequate hugepage pool [ 525.079999][T14413] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.080102][T14413] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.080248][T14413] bridge_slave_0: entered allmulticast mode [ 525.083599][T14413] bridge_slave_0: entered promiscuous mode [ 525.121250][T14413] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.121416][T14413] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.121583][T14413] bridge_slave_1: entered allmulticast mode [ 525.134921][T14413] bridge_slave_1: entered promiscuous mode [ 525.249447][T14413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 525.252549][T14413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 525.342846][T14413] team0: Port device team_slave_0 added [ 525.355287][T14413] team0: Port device team_slave_1 added [ 525.382906][ T64] IPVS: stop unused estimator thread 0... [ 525.410882][T14413] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 525.410900][T14413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 525.410925][T14413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 525.415386][T14413] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 525.415401][T14413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 525.415440][T14413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 525.649354][T14413] hsr_slave_0: entered promiscuous mode [ 525.652609][T14487] netlink: 'syz.3.3007': attribute type 10 has an invalid length. [ 525.653852][T14413] hsr_slave_1: entered promiscuous mode [ 525.654338][T14413] debugfs: 'hsr0' already exists in 'hsr' [ 525.654356][T14413] Cannot create hsr debugfs directory [ 525.654808][T14487] ªªªªª»: left promiscuous mode [ 525.654986][T14487] ªªªªª»: entered allmulticast mode [ 525.655001][T14487] veth0_vlan: entered allmulticast mode [ 526.007486][T14503] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3012'. [ 526.044601][T14500] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3012'. [ 526.440633][T14413] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 526.458944][T14413] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 526.459961][T14413] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 526.473228][T14413] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 526.500714][T14413] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 526.537968][T14413] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 526.546748][T14413] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 526.574785][T14413] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 526.689594][T14541] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3029'. [ 526.816580][ T53] Bluetooth: hci3: command tx timeout [ 526.877980][T14550] netlink: 'syz.3.3031': attribute type 29 has an invalid length. [ 526.891417][T14413] 8021q: adding VLAN 0 to HW filter on device bond0 [ 526.939002][T14413] 8021q: adding VLAN 0 to HW filter on device team0 [ 526.972088][ T8891] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.972181][ T8891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 527.012041][ T7862] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.012161][ T7862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 527.142683][T14561] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3037'. [ 527.203688][T14413] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 527.274461][T14565] netlink: 'syz.0.3039': attribute type 29 has an invalid length. [ 527.284081][T14413] veth0_vlan: entered promiscuous mode [ 527.305151][T14413] veth1_vlan: entered promiscuous mode [ 527.342944][T14413] veth0_macvtap: entered promiscuous mode [ 527.354436][T14413] veth1_macvtap: entered promiscuous mode [ 527.378887][T14413] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 527.394702][T14413] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 527.426432][ T8890] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.508328][ T7860] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.512991][ T7860] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.549565][ T7860] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.549588][ T7860] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.599231][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.599252][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.606402][ T64] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.282642][T14589] netlink: 'syz.1.3047': attribute type 2 has an invalid length. [ 528.282685][T14589] netlink: 'syz.1.3047': attribute type 8 has an invalid length. [ 528.282698][T14589] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3047'. [ 528.312878][ T5642] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 528.318027][ T5642] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 528.319048][ T5642] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 528.320451][ T5642] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 528.321207][ T5642] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 528.896907][ T53] Bluetooth: hci3: command tx timeout [ 529.102396][T14618] syz_tun: entered promiscuous mode [ 529.102421][T14618] syz_tun: entered allmulticast mode [ 529.226222][ T10] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 529.293450][T14594] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.293649][T14594] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.293839][T14594] bridge_slave_0: entered allmulticast mode [ 529.295862][T14594] bridge_slave_0: entered promiscuous mode [ 529.305625][T14594] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.305791][T14594] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.306140][T14594] bridge_slave_1: entered allmulticast mode [ 529.308744][T14594] bridge_slave_1: entered promiscuous mode [ 529.354570][T14594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 529.366703][T14594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 529.379546][ T10] usb 1-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 529.380895][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.384569][ T10] usb 1-1: config 0 descriptor?? [ 529.433360][T14594] team0: Port device team_slave_0 added [ 529.444254][T14594] team0: Port device team_slave_1 added [ 529.501249][T14594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 529.501295][T14594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 529.501321][T14594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 529.536472][T14594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 529.536489][T14594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 529.536516][T14594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 529.603138][ T10] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 529.643033][T14594] hsr_slave_0: entered promiscuous mode [ 529.644344][T14594] hsr_slave_1: entered promiscuous mode [ 529.645331][T14594] debugfs: 'hsr0' already exists in 'hsr' [ 529.645352][T14594] Cannot create hsr debugfs directory [ 529.805628][ T10] [drm:udl_init] *ERROR* Selecting channel failed [ 529.844365][ T10] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 1 [ 529.844392][ T10] [drm] Initialized udl on minor 1 [ 529.863600][ T10] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 529.879686][ T10] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 529.882990][ T10] usb 1-1: USB disconnect, device number 49 [ 530.109874][T14594] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 530.115286][T14594] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 530.134422][T14594] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 530.148620][T14594] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 530.150181][T14594] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 530.172354][T14594] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 530.173323][T14594] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 530.192991][T14594] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 530.269952][T14655] syzkaller0: entered promiscuous mode [ 530.269968][T14655] syzkaller0: entered allmulticast mode [ 530.377089][T14594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 530.427305][ T53] Bluetooth: hci4: command tx timeout [ 530.453506][T14594] 8021q: adding VLAN 0 to HW filter on device team0 [ 530.467415][ T8891] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.467533][ T8891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 530.495020][ T8890] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.495117][ T8890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 530.771425][T14594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 530.979693][ T53] Bluetooth: hci3: command tx timeout [ 531.009991][T14594] veth0_vlan: entered promiscuous mode [ 531.028541][T14594] veth1_vlan: entered promiscuous mode [ 531.211865][T14594] veth0_macvtap: entered promiscuous mode [ 531.227501][T14594] veth1_macvtap: entered promiscuous mode [ 531.284111][T14594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 531.330910][T14594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 531.446680][ T8891] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.446845][ T8891] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.446879][ T8891] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.446936][ T8891] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.747641][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 531.747665][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 531.854965][ T7862] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 531.854989][ T7862] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 532.363188][T14737] netlink: set zone limit has 8 unknown bytes [ 532.451261][T14741] ip_tables: iptables: counters copy to user failed while replacing table [ 532.487717][ T5628] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 532.496573][ T53] Bluetooth: hci4: command tx timeout [ 532.647742][ T5628] usb 5-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 532.649407][ T5628] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 532.649482][ T5628] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 532.656382][ T5628] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.656432][ T5628] usb 5-1: Product: syz [ 532.656447][ T5628] usb 5-1: Manufacturer: syz [ 532.656461][ T5628] usb 5-1: SerialNumber: syz [ 532.695420][ T5628] cdc_mbim 5-1:1.0: skipping garbage [ 532.895229][T14731] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 533.112293][ T5628] cdc_mbim 5-1:1.0: bind() failure [ 533.133138][ T5628] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 533.135324][ T5628] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 533.145759][ T5628] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 533.169116][ T5628] usb 5-1: USB disconnect, device number 71 [ 533.596139][ T5711] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 533.679587][T14778] netlink: 'syz.1.3125': attribute type 10 has an invalid length. [ 533.679919][T14778] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.680594][T14778] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.696338][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 533.715574][T14778] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.715710][T14778] bridge0: port 2(bridge_slave_1) entered forwarding state [ 533.716134][T14778] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.716263][T14778] bridge0: port 1(bridge_slave_0) entered forwarding state [ 533.756483][ T5711] usb 1-1: Using ep0 maxpacket: 8 [ 533.757280][ T5711] usb 1-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 533.758610][ T5711] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 533.758678][ T5711] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 533.758702][ T5711] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 533.758726][ T5711] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 533.758749][ T5711] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 533.758788][ T5711] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.784943][T14778] team0: Port device bridge0 added [ 533.912790][T14783] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 533.912824][T14783] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 533.934348][T14783] vhci_hcd vhci_hcd.0: Device attached [ 533.944579][T14784] vhci_hcd: unknown pdu 1 [ 533.966394][ T13] vhci_hcd vhci_hcd.2: stop threads [ 533.967700][ T13] vhci_hcd vhci_hcd.2: release socket [ 533.967775][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 534.060776][ T5711] usb 1-1: GET_CAPABILITIES returned 0 [ 534.060828][ T5711] usbtmc 1-1:16.0: can't read capabilities [ 534.188367][ T5642] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 534.204056][ T5642] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 534.205833][ T5642] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 534.223623][ T5642] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 534.224384][ T5642] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 534.571135][ T64] pimreg: left allmulticast mode [ 534.576164][ T53] Bluetooth: hci4: command tx timeout [ 534.666575][T14797] usb usb1: usbfs: process 14797 (syz.2.3132) did not claim interface 0 before use [ 535.187387][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 535.192137][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 535.194392][ T64] bond0 (unregistering): Released all slaves [ 535.211174][ T64] bond1 (unregistering): Released all slaves [ 535.235777][ T64] bond2 (unregistering): (slave veth1): Releasing backup interface [ 535.251411][ T64] bond2 (unregistering): Released all slaves [ 535.508018][ T64] tipc: Disabling bearer [ 535.510421][ T64] tipc: Left network mode [ 535.796611][T14833] ip_tables: iptables: counters copy to user failed while replacing table [ 536.061620][ T64] hsr_slave_0: left promiscuous mode [ 536.063559][ T64] hsr_slave_1: left promiscuous mode [ 536.070144][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 536.070190][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 536.098197][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 536.098220][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 536.138390][ T64] veth1_vlan: left promiscuous mode [ 536.336149][ T53] Bluetooth: hci2: command tx timeout [ 536.364038][ T5726] usb 1-1: USB disconnect, device number 50 [ 536.657206][ T53] Bluetooth: hci4: command tx timeout [ 536.994255][ T64] team0 (unregistering): Port device team_slave_1 removed [ 537.025313][ T64] team0 (unregistering): Port device team_slave_0 removed [ 537.414198][T14789] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.414379][T14789] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.414520][T14789] bridge_slave_0: entered allmulticast mode [ 537.430291][T14789] bridge_slave_0: entered promiscuous mode [ 537.433814][T14789] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.433940][T14789] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.434087][T14789] bridge_slave_1: entered allmulticast mode [ 537.441253][T14789] bridge_slave_1: entered promiscuous mode [ 537.618273][T14789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 537.621285][T14789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 537.705300][T14789] team0: Port device team_slave_0 added [ 537.718875][T14789] team0: Port device team_slave_1 added [ 537.755260][T14789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 537.755278][T14789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 537.755302][T14789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 537.801908][T14789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 537.801925][T14789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 537.801948][T14789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 537.891986][T14789] hsr_slave_0: entered promiscuous mode [ 537.892946][T14789] hsr_slave_1: entered promiscuous mode [ 537.893599][T14789] debugfs: 'hsr0' already exists in 'hsr' [ 537.893617][T14789] Cannot create hsr debugfs directory [ 538.416789][ T53] Bluetooth: hci2: command tx timeout [ 538.709457][T14789] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 538.725527][T14789] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 538.728633][T14789] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 538.760260][T14789] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 538.761204][T14789] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 538.789323][T14789] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 538.792844][T14789] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 538.809059][T14789] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 539.039529][T14789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 539.079781][T14789] 8021q: adding VLAN 0 to HW filter on device team0 [ 539.098544][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.098662][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 539.134520][ T8890] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.134600][ T8890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 539.424906][T14789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 539.559131][T14789] veth0_vlan: entered promiscuous mode [ 539.592564][T14789] veth1_vlan: entered promiscuous mode [ 539.667167][T14789] veth0_macvtap: entered promiscuous mode [ 539.676846][T14789] veth1_macvtap: entered promiscuous mode [ 539.724895][T14789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 539.747420][T14789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 539.806330][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.806763][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.806801][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.806834][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.072184][ T8890] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 540.072206][ T8890] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 540.143728][ T8891] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 540.143751][ T8891] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 540.496499][ T53] Bluetooth: hci2: command tx timeout [ 541.743521][T15065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3247'. [ 541.757466][T15065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3247'. [ 541.757763][T15065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3247'. [ 541.757997][T15065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3247'. [ 541.758209][T15065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3247'. [ 541.758448][T15065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3247'. [ 541.758666][T15065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3247'. [ 541.758913][T15065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3247'. [ 541.764039][T15065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3247'. [ 541.764280][T15065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3247'. [ 542.137557][ T5628] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 542.299117][ T5628] usb 2-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=1.00 [ 542.300426][ T5628] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 542.300476][ T5628] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 542.305884][ T5628] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.305916][ T5628] usb 2-1: Product: syz [ 542.305931][ T5628] usb 2-1: Manufacturer: syz [ 542.305946][ T5628] usb 2-1: SerialNumber: syz [ 542.577384][ T53] Bluetooth: hci2: command tx timeout [ 543.936837][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 544.775752][T15189] syz_tun: entered allmulticast mode [ 545.065950][ T990] usb 2-1: USB disconnect, device number 58 [ 545.192898][ T53] Bluetooth: hci0: unexpected cc 0x080d length: 9 > 3 [ 545.567511][T15187] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 545.569628][T15187] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 545.585384][T15187] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 545.604631][T15187] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 545.604739][T15187] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 545.617933][T15187] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 545.628122][T15187] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 545.628222][T15187] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 545.633835][T15187] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 545.649419][T15187] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 545.649499][T15187] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 545.673518][T15187] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 545.675462][T15187] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 545.675562][T15187] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 545.694859][T15187] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 545.900679][T15224] random: crng reseeded on system resumption [ 545.977409][ T990] usb 5-1: new full-speed USB device number 72 using dummy_hcd [ 546.128778][ T990] usb 5-1: New USB device found: idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 546.129948][ T990] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 546.129973][ T990] usb 5-1: config 0 has no interface number 0 [ 546.130010][ T990] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 546.130035][ T990] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 546.130061][ T990] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 546.135181][ T990] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 546.135207][ T990] usb 5-1: Product: syz [ 546.135222][ T990] usb 5-1: SerialNumber: syz [ 546.147217][ T990] usb 5-1: config 0 descriptor?? [ 546.169932][ T990] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 546.179305][ T990] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input51 [ 546.433663][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 546.435676][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 546.435877][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 546.436076][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 546.436343][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 546.436549][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 546.436764][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 546.436977][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 546.437178][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 546.437382][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 546.475689][ T5628] usb 5-1: USB disconnect, device number 72 [ 546.475694][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 546.511033][ T10] logitech-hidpp-device 0003:046D:C082.0020: hidraw0: USB HID v0.04 Device [syz0] on syz0 [ 546.551083][ T5628] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 546.555853][T15243] bond1: (slave bond_slave_0): Device is not our slave [ 546.555878][T15243] bond1: option active_slave: invalid value (bond_slave_0) [ 546.595022][T15243] bond1 (unregistering): Released all slaves [ 546.651680][T15249] fido_id[15249]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 546.716487][ T990] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 546.818124][ T53] Bluetooth: hci5: command 0x0c1a tx timeout [ 546.876128][ T990] usb 2-1: Using ep0 maxpacket: 16 [ 546.877066][ T990] usb 2-1: New USB device found: idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 546.878635][ T990] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 546.878689][ T990] usb 2-1: config 0 interface 0 has no altsetting 0 [ 546.882116][ T990] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.882140][ T990] usb 2-1: Product: syz [ 546.882155][ T990] usb 2-1: Manufacturer: syz [ 546.882169][ T990] usb 2-1: SerialNumber: syz [ 546.884409][ T990] usb 2-1: config 0 descriptor?? [ 547.076318][ T5628] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 547.099289][ C0] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 547.109879][ T990] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input52 [ 547.117768][ T990] imon:send_packet: packet tx failed (-71) [ 547.143336][ T990] imon 2-1:0.0: panel buttons/knobs setup failed [ 547.207751][ T5628] usb 4-1: device descriptor read/64, error -71 [ 547.216937][ T990] rc_core: IR keymap rc-imon-pad not found [ 547.216956][ T990] Registered IR keymap rc-empty [ 547.217037][ T990] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 547.217055][ T990] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 547.217434][ T990] imon:send_packet: packet tx failed (-71) [ 547.236333][ T990] imon 2-1:0.0: remote input dev register failed [ 547.236490][ T990] imon 2-1:0.0: imon_init_intf0: rc device setup failed [ 547.288153][ T990] imon 2-1:0.0: unable to initialize intf0, err 0 [ 547.293127][ T990] usb 2-1: USB disconnect, device number 59 [ 547.446226][ T5628] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 547.576095][ T5628] usb 4-1: device descriptor read/64, error -71 [ 547.616407][ T53] Bluetooth: hci0: command 0x0c1a tx timeout [ 547.651005][ T990] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 547.688892][ T5628] usb usb4-port1: attempt power cycle [ 547.701859][ T53] Bluetooth: hci3: command 0x0c1a tx timeout [ 547.701922][ T53] Bluetooth: hci2: command 0x0c1a tx timeout [ 547.701983][ T53] Bluetooth: hci4: command 0x0c1a tx timeout [ 547.856828][ T990] usb 2-1: New USB device found: idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 547.857963][ T990] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 547.857993][ T990] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64 [ 547.858018][ T990] usb 2-1: config 0 interface 0 has no altsetting 0 [ 547.860183][ T990] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.860207][ T990] usb 2-1: Product: syz [ 547.860223][ T990] usb 2-1: Manufacturer: syz [ 547.860237][ T990] usb 2-1: SerialNumber: syz [ 547.863112][ T990] usb 2-1: config 0 descriptor?? [ 547.864545][T15248] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 548.028280][ T5628] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 548.046760][ T5628] usb 4-1: device descriptor read/8, error -71 [ 548.086567][ C0] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 548.095294][ T990] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input54 [ 548.366884][ T5628] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 548.387080][ T5628] usb 4-1: device descriptor read/8, error -71 [ 548.433189][T15295] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 548.458129][ T990] rc_core: IR keymap rc-imon-pad not found [ 548.458150][ T990] Registered IR keymap rc-empty [ 548.458237][ T990] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 548.458256][ T990] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 548.502040][ T5628] usb usb4-port1: unable to enumerate USB device [ 548.517687][ T990] rc rc0: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 548.553713][ T990] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input55 [ 548.568787][ T990] imon 2-1:0.0: iMON device (15c2:0045) on usb<2:60> initialized [ 548.740805][ T990] usb 2-1: USB disconnect, device number 60 [ 548.896780][ T5642] Bluetooth: hci5: command 0x0c1a tx timeout [ 549.154383][T15319] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 549.697597][ T5642] Bluetooth: hci0: command 0x0c1a tx timeout [ 549.776583][ T53] Bluetooth: hci2: command 0x0c1a tx timeout [ 549.776623][ T53] Bluetooth: hci3: command 0x0c1a tx timeout [ 549.776760][ T5642] Bluetooth: hci4: command 0x0c1a tx timeout [ 550.977000][T14192] Bluetooth: hci5: command 0x0c1a tx timeout [ 551.776425][T14192] Bluetooth: hci0: command 0x0c1a tx timeout [ 551.856090][T14192] Bluetooth: hci4: command 0x0c1a tx timeout [ 551.856126][T14192] Bluetooth: hci3: command 0x0c1a tx timeout [ 551.856150][T14192] Bluetooth: hci2: command 0x0c1a tx timeout [ 552.134268][T15384] syz.3.3395 (15384): drop_caches: 2 [ 553.178764][ T29] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 553.326990][ T29] usb 5-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=1.00 [ 553.331196][ T29] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 553.331247][ T29] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 553.351213][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.351241][ T29] usb 5-1: Product: syz [ 553.351280][ T29] usb 5-1: Manufacturer: syz [ 553.351296][ T29] usb 5-1: SerialNumber: syz [ 554.741755][T15546] __nla_validate_parse: 28 callbacks suppressed [ 554.741776][T15546] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3471'. [ 554.741888][T15546] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3471'. [ 555.097542][T15550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.098054][T15550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.479446][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 555.479596][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 555.479807][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 555.479829][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 555.480026][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 555.480046][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 555.480268][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 555.480285][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 555.480486][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 555.480505][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 555.480701][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 555.480721][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 555.480933][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 555.480952][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 555.481173][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 555.481191][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 555.481390][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 555.481409][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 555.481527][ T5697] usb 3-1: USB disconnect, device number 66 [ 555.481613][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 555.481632][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 555.481648][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 555.505837][ T5711] usb 5-1: USB disconnect, device number 73 [ 555.763122][T15573] syzkaller0: entered promiscuous mode [ 555.763138][T15573] syzkaller0: entered allmulticast mode [ 555.778002][ T5642] Bluetooth: hci0: command 0x0c1a tx timeout [ 555.992542][T15585] program syz.0.3489 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 557.107257][T15637] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3515'. [ 557.176123][ T5711] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 557.397033][ T5711] usb 4-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 557.400491][ T5711] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 557.400511][ T5711] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 557.400523][ T5711] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 557.400546][ T5711] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.402119][ T5711] usb 4-1: config 0 descriptor?? [ 557.816196][ T5628] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 557.877309][ T5711] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 557.956242][ T5628] usb 1-1: device descriptor read/64, error -71 [ 558.105472][ T5712] usb 4-1: USB disconnect, device number 75 [ 558.196959][ T5628] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 558.326108][ T5628] usb 1-1: device descriptor read/64, error -71 [ 558.436352][ T5628] usb usb1-port1: attempt power cycle [ 558.779377][ T5628] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 558.797006][ T5628] usb 1-1: device descriptor read/8, error -71 [ 558.951770][T15694] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3542'. [ 559.016606][ T5711] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 559.036106][ T5628] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 559.056897][ T5628] usb 1-1: device descriptor read/8, error -71 [ 559.166502][ T5628] usb usb1-port1: unable to enumerate USB device [ 559.166756][ T5711] usb 3-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 559.168043][ T5711] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 559.168099][ T5711] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 559.168139][ T5711] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 559.168161][ T5711] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 559.168183][ T5711] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 559.170369][ T5711] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.170394][ T5711] usb 3-1: Product: syz [ 559.170410][ T5711] usb 3-1: Manufacturer: syz [ 559.170424][ T5711] usb 3-1: SerialNumber: syz [ 559.181848][ T5711] cdc_mbim 3-1:1.0: skipping garbage [ 559.401617][T15709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3549'. [ 559.596852][ T5711] cdc_mbim 3-1:1.0: bind() failure [ 559.610056][ T5711] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 559.610807][ T5711] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 559.613292][ T5711] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 559.622216][ T5711] usb 3-1: USB disconnect, device number 67 [ 560.113731][T15733] syzkaller0: entered promiscuous mode [ 560.113791][T15733] syzkaller0: entered allmulticast mode [ 560.132116][T15733] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3558'. [ 560.132142][T15733] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3558'. [ 560.802532][T15770] input: syz0 as /devices/virtual/input/input57 [ 561.400718][T15805] batman_adv: batadv0: Adding interface: syzkaller0 [ 561.400735][T15805] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 561.400765][T15805] batman_adv: batadv0: Interface activated: syzkaller0 [ 561.819870][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057f4a000: rx timeout, send abort [ 561.822124][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888057f4a000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 561.900667][T15804] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 561.913544][ T5642] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 561.960752][T15804] batman_adv: batadv0: Removing interface: syzkaller0 [ 562.306096][ T5628] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 562.343055][T15839] input: syz0 as /devices/virtual/input/input58 [ 562.350460][T15841] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3609'. [ 562.457026][ T5628] usb 3-1: Using ep0 maxpacket: 16 [ 562.457933][ T5628] usb 3-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 562.459236][ T5628] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 562.459266][ T5628] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 562.459287][ T5628] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 562.459325][ T5628] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.465440][ T5628] usb 3-1: config 0 descriptor?? [ 562.934622][T15871] input: syz0 as /devices/virtual/input/input59 [ 562.991123][ T5628] usbhid 3-1:0.0: can't add hid device: -71 [ 562.991294][ T5628] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 563.014534][ T5628] usb 3-1: USB disconnect, device number 68 [ 563.144100][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.144152][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.280523][T15889] syzkaller0: entered promiscuous mode [ 563.280547][T15889] syzkaller0: entered allmulticast mode [ 563.328000][T15892] ip_tables: iptables: counters copy to user failed while replacing table [ 563.401073][ T5642] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 563.493625][T15900] input: syz0 as /devices/virtual/input/input60 [ 563.620482][T15907] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3640'. [ 563.625955][T15907] loop5: detected capacity change from 0 to 7 [ 563.636087][T15907] loop5: [POWERTEC] p1 p2 p3 p4 [ 563.636291][T15907] loop5: p1 start 811558262 is beyond EOD, truncated [ 563.636312][T15907] loop5: p2 size 25165824 extends beyond EOD, truncated [ 563.651577][T15907] loop5: p3 start 2036490101 is beyond EOD, truncated [ 563.651627][T15907] loop5: p4 start 2621440 is beyond EOD, truncated [ 563.762109][T13441] udevd[13441]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 564.042277][T15928] input: syz0 as /devices/virtual/input/input61 [ 564.237652][ T29] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 564.386765][ T29] usb 1-1: Using ep0 maxpacket: 16 [ 564.387496][ T29] usb 1-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 564.388767][ T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 564.388798][ T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 564.388820][ T29] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 564.388861][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.393817][ T29] usb 1-1: config 0 descriptor?? [ 564.804108][ T29] usbhid 1-1:0.0: can't add hid device: -71 [ 564.804220][ T29] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 564.831487][ T29] usb 1-1: USB disconnect, device number 55 [ 565.194686][T15972] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3671'. [ 565.208198][T15972] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3671'. [ 566.106747][ T10] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 566.268298][ T10] usb 1-1: New USB device found: idVendor=0b48, idProduct=1005, bcdDevice=1.00 [ 566.269995][ T10] usb 1-1: config 0 has no interfaces? [ 566.271471][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 566.271495][ T10] usb 1-1: Product: syz [ 566.271508][ T10] usb 1-1: Manufacturer: syz [ 566.274811][ T10] usb 1-1: config 0 descriptor?? [ 566.285688][T15999] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 566.285713][T15999] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 566.496852][ T10] usb 1-1: USB disconnect, device number 56 [ 566.683305][ T13] IPVS: starting estimator thread 0... [ 566.781802][T16038] IPVS: using max 29 ests per chain, 69600 per kthread [ 567.408387][T16084] ip_tables: iptables: counters copy to user failed while replacing table [ 567.411483][T16084] ip_tables: iptables: counters copy to user failed while replacing table [ 568.183711][T16125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3745'. [ 568.999551][ T5711] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 573.333333][ T5711] usb 1-1: Using ep0 maxpacket: 32 [ 574.546007][ C0] sched: DL replenish lagged too much [ 598.999542][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 627.830472][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 627.837622][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.141146][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.155422][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 711.621118][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 743.781529][ T5711] usb 1-1: device descriptor read/all, error -71 [ 749.446299][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 749.460881][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 781.424150][ T32] INFO: task kworker/u8:3:50 blocked for more than 144 seconds. [ 781.424179][ T32] Tainted: G L syzkaller #0 [ 781.424197][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 781.424206][ T32] task:kworker/u8:3 state:D stack:21544 pid:50 tgid:50 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 781.424255][ T32] Workqueue: events_unbound cfg80211_wiphy_work [ 781.424291][ T32] Call Trace: [ 781.424299][ T32] [ 781.424315][ T32] __schedule+0x17dd/0x5820 [ 781.424342][ T32] ? __lock_acquire+0x747/0x2de0 [ 781.424392][ T32] ? __pfx___schedule+0x10/0x10 [ 781.424413][ T32] ? lock_acquire+0x115/0x350 [ 781.424447][ T32] ? schedule+0x90/0x2b0 [ 781.424474][ T32] schedule+0x164/0x2b0 [ 781.424500][ T32] synchronize_rcu_expedited+0x60a/0x760 [ 781.424535][ T32] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 781.424567][ T32] ? __pfx_autoremove_wake_function+0x10/0x10 [ 781.424627][ T32] __sta_info_destroy+0x37/0x50 [ 781.424665][ T32] ieee80211_ibss_work+0x81d/0x1060 [ 781.424700][ T32] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 781.424728][ T32] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 781.424752][ T32] ? skb_dequeue+0x124/0x160 [ 781.424779][ T32] ? ieee80211_iface_work+0xca2/0xfa0 [ 781.424808][ T32] ? ieee80211_iface_work+0xef1/0xfa0 [ 781.424844][ T32] cfg80211_wiphy_work+0x29e/0x420 [ 781.424871][ T32] ? process_scheduled_works+0x97a/0x1630 [ 781.424900][ T32] process_scheduled_works+0xc3d/0x1630 [ 781.424959][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 781.424994][ T32] ? assign_work+0x3cf/0x5d0 [ 781.425028][ T32] worker_thread+0xa47/0xfb0 [ 781.425071][ T32] ? __kthread_parkme+0x71/0x1f0 [ 781.425102][ T32] kthread+0x38b/0x480 [ 781.425125][ T32] ? __pfx_worker_thread+0x10/0x10 [ 781.425151][ T32] ? __pfx_kthread+0x10/0x10 [ 781.425175][ T32] ret_from_fork+0x514/0xb70 [ 781.425203][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 781.425226][ T32] ? __switch_to+0xc78/0x1410 [ 781.425260][ T32] ? __pfx_kthread+0x10/0x10 [ 781.425284][ T32] ret_from_fork_asm+0x1a/0x30 [ 781.425321][ T32] [ 781.425499][ T32] [ 781.425499][ T32] Showing all locks held in the system: [ 781.425513][ T32] locks held by kthreadd/2: 1, last CPU#1: [ 781.425528][ T32] #0: ffffffff900b1170 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 781.425583][ T32] locks held by kworker/R-kvfre/6: 1, on CPU#1: [ 781.425598][ T32] #0: ffffffff8fdf64c0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390 [ 781.425661][ T32] locks held by kworker/0:0/9: 3, last CPU#0: [ 781.425675][ T32] #0: ffff88807b3ee548 ((wq_completion)wg-kex-wg1#22){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 781.425737][ T32] #1: ffffc900000e7c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 781.425809][ T32] #2: ffff888035495480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 781.425863][ T32] locks held by kworker/0:1/10: 4, last CPU#0: [ 781.425877][ T32] #0: ffff88813ff4ad48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 781.425932][ T32] #1: ffffc900000f7c40 (key_gc_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 781.434401][ T32] #2: ffff88801fee05d0 (&type->lock_class){+.+.}-{4:4}, at: keyring_gc+0x23b/0x2b0 [ 781.434457][ T32] #3: ffffffff900b1170 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 781.434508][ T32] locks held by kworker/u8:0/12: 4, last CPU#1: [ 781.434524][ T32] #0: ffff8880262dd148 ((wq_completion)wg-kex-wg1#17){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 781.434584][ T32] #1: ffffc90000117c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 781.434642][ T32] #2: ffff888034975480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 781.434703][ T32] #3: ffff88802bfe4888 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 781.434756][ T32] locks held by kworker/u8:1/13: 7, last CPU#0: [ 781.434770][ T32] #0: ffff8880361e0148 ((wq_completion)wg-kex-wg0#7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 781.434831][ T32] #1: ffffc90000127c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 781.434885][ T32] #2: ffff88807d2fd480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 781.434937][ T32] #3: ffff88802bfe0d18 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 781.434989][ T32] #4: ffffffff8ff5a360 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x3de/0x18b0 [ 781.435038][ T32] #5: ffffffff8ff5a360 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0 [ 781.435092][ T32] #6: ffffffff8ff5a360 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 781.435145][ T32] locks held by kworker/R-mm_pe/14: 1, on CPU#1: [ 781.435159][ T32] #0: ffffffff8fdf64c0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xdbe/0x12a0 [ 781.435209][ T32] locks held by kworker/1:0/24: 4, last CPU#1: [ 781.435223][ T32] #0: ffff888049e12148 ((wq_completion)wg-kex-wg1#14){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 781.435283][ T32] #1: ffffc900001e7c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 781.435354][ T32] #2: ffff88807b0da0e8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 781.435406][ T32] #3: ffffffff900b1170 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 781.435453][ T32] locks held by kworker/1:1/29: 3, last CPU#1: [ 781.435467][ T32] #0: ffff888078b02d48 ((wq_completion)wg-kex-wg1#16){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 781.435528][ T32] #1: ffffc90000a47c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 781.435599][ T32] #2: ffff888053100330 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 781.435658][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 781.435672][ T32] #0: ffffffff8ff5a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 781.435723][ T32] locks held by kcompactd0/35: 1, last CPU#1: [ 781.435737][ T32] #0: ffffffff8ff5a360 (rcu_read_lock){....}-{1:3}, at: compact_folio_lruvec_lock_irqsave+0x2a/0x360 [ 781.435795][ T32] locks held by kworker/u8:2/43: 4, last CPU#1: [ 781.435809][ T32] #0: ffff888035f57148 ((wq_completion)wg-kex-wg1#7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 781.435869][ T32] #1: ffffc90000b37c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 781.435926][ T32] #2: ffff88807bc15480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 781.444371][ T32] #3: ffff888027af5270 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 781.444430][ T32] locks held by kworker/u8:3/50: 3, on CPU#1: [ 781.444444][ T32] #0: ffff88813fe0c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 781.444501][ T32] #1: ffffc90000ba7c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 781.444556][ T32] #2: ffff888062e70800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 781.444612][ T32] locks held by kworker/R-ipv6_/61: 1, on CPU#1: [ 781.444626][ T32] #0: ffffffff8fdf64c0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390 [ 781.444689][ T32] locks held by kworker/u8:4/62: 4, on CPU#0: [ 781.444704][ T32] #0: ffff88813fe0c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 781.444758][ T32] #1: ffffc9000203fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 781.444813][ T32] #2: ffff88807b060800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 781.444866][ T32] #3: ffffffff8ff609e8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x388/0x760 [ 781.444925][ T32] locks held by kworker/u8:5/64: 3, last CPU#1: [ 781.444939][ T32] #0: ffff8880622c8148 ((wq_completion)bond1#3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 781.445000][ T32] #1: ffffc9000205fc40 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 781.445055][ T32] #2: ffffffff8ff5a360 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf0/0x1840 [ 781.445107][ T32] locks held by kswapd0/90: 1, last CPU#1: [ 781.445121][ T32] #0: ffffffff900946a0 (fs_reclaim){+.+.}-{0:0}, at: kswapd+0xa53/0x3a20 [ 781.445171][ T32] locks held by kworker/R-ksmbd/116: 1, on CPU#1: [ 781.445186][ T32] #0: ffffffff8fdf64c0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390 [ 781.445244][ T32] locks held by kworker/0:2/990: 5, last CPU#0: [ 781.445259][ T32] #0: ffff888054c5dd48 ((wq_completion)wg-kex-wg2#14){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 781.445319][ T32] #1: ffffc90004cffc40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 781.445392][ T32] #2: ffff8880790fa0e8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 781.445444][ T32] #3: ffffffff900b1170 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 781.445493][ T32] #4: ffffffff8ff5a360 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 781.445549][ T32] locks held by kworker/u8:6/1075: 4, last CPU#1: [ 781.445564][ T32] #0: ffff88802609b148 ((wq_completion)wg-kex-wg2#17){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 781.445624][ T32] #1: ffffc90004eefc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 781.445686][ T32] #2: ffff888021bdd480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 781.445739][ T32] #3: ffff88802bfe5270 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 781.445791][ T32] locks held by kworker/u8:7/1080: 3, last CPU#1: [ 781.445805][ T32] #0: ffff888026ea1948 ((wq_completion)wg-kex-wg0#13){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 781.445865][ T32] #1: ffffc90004f0fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 781.445920][ T32] #2: ffff8880790fc080 (&cookie->lock){++++}-{4:4}, at: wg_cookie_add_mac_to_packet+0x3e/0x1a0 [ 781.453930][ T32] locks held by kworker/u8:8/1109: 4, last CPU#1: [ 781.453952][ T32] #0: ffff888078bbd948 ((wq_completion)wg-kex-wg1#19){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 781.454020][ T32] #1: ffffc900050bfc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 781.454077][ T32] #2: ffff888051e09480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 781.454131][ T32] #3: ffff88802bfe20e8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 781.454175][ T32] locks held by kworker/u8:10/1171: 3, last CPU#1: [ 781.454190][ T32] #0: ffff88813fe0c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 781.454245][ T32] #1: ffffc900052cfc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 781.454302][ T32] #2: ffff88807b2c2258 (&devlink->lock_key#9){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 781.454376][ T32] locks held by kworker/R-bat_e/3230: 1, on CPU#0: [ 781.454391][ T32] #0: ffffffff8fdf64c0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xdbe/0x12a0 [ 781.454439][ T32] locks held by klogd/4990: 1, last CPU#1: [ 781.454453][ T32] #0: ffffffff900b1170 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 781.454503][ T32] locks held by udevd/5001: 2, last CPU#1: [ 781.454517][ T32] #0: ffffffff900b1170 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 781.454564][ T32] #1: ffffffff8ff5a360 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 781.454617][ T32] locks held by dhcpcd/5295: 2, last CPU#1: [ 781.454632][ T32] #0: ffffffff900b1170 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 781.454748][ T32] #1: ffffffff8ff5a360 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 781.454801][ T32] locks held by dhcpcd/5296: 1, last CPU#1: [ 781.454816][ T32] #0: ffffffff8ff5a360 (rcu_read_lock){....}-{1:3}, at: sock_def_readable+0xae/0x550 [ 781.454871][ T32] locks held by crond/5370: 1, last CPU#1: [ 781.454885][ T32] #0: ffffffff900b1170 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 781.454933][ T32] locks held by getty/5385: 2, on CPU#1: [ 781.454947][ T32] #0: ffff88803663c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 781.455001][ T32] #1: ffffc9000322e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 781.455051][ T32] locks held by dhcpcd/5433: 1, last CPU#1: [ 781.455065][ T32] #0: ffffffff900b1170 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 781.455113][ T32] locks held by syz-executor/5618: 3, last CPU#1: [ 781.455128][ T32] #0: ffff888033253440 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 781.455175][ T32] #1: ffffffff900b1170 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 781.455222][ T32] #2: ffffffff8ff5a360 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 781.455275][ T32] locks held by kworker/1:3/5628: 3, last CPU#1: [ 781.455289][ T32] #0: ffff888054c5dd48 ((wq_completion)wg-kex-wg2#14){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 781.455350][ T32] #1: ffffc900041b7c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 781.455422][ T32] #2: ffff88802ba79480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 781.455477][ T32] locks held by kworker/0:3/5690: 2, last CPU#0: [ 781.455492][ T32] #0: ffff88813ff49d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 781.455547][ T32] #1: ffffc90004357c40 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 781.455604][ T32] locks held by kworker/0:4/5697: 3, last CPU#0: [ 781.455617][ T32] #0: ffff88807faa3948 ((wq_completion)wg-kex-wg2#22){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 781.455682][ T32] #1: ffffc900048c7c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 781.455753][ T32] #2: ffff888035491480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x14e/0x9f0 [ 781.455807][ T32] locks held by kworker/0:6/5711: 6, last CPU#0: [ 781.455822][ T32] #0: ffff888022e90948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 781.455877][ T32] #1: ffffc900049a7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 781.455933][ T32] #2: ffff88802aa281d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 790.420667][ T32] #3: ffff88823be8e568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x20a1/0x4d30 [ 790.420718][ T32] #4: ffff88802a907c60 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x20c9/0x4d30 [ 790.420765][ T32] #5: ffffffff900b1170 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 790.420816][ T32] locks held by kworker/1:4/5712: 3, last CPU#1: [ 790.420832][ T32] #0: ffff88807faa3948 ((wq_completion)wg-kex-wg2#22){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 790.420895][ T32] #1: ffffc900049b7c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630