last executing test programs: 1m46.051362278s ago: executing program 3 (id=2938): unshare(0x66000080) r0 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) r2 = gettid() sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r1, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r2], 0x28}}, 0x0) 1m45.095504968s ago: executing program 3 (id=2954): r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m45.039728945s ago: executing program 3 (id=2955): creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x80000, 0x113) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x10, &(0x7f0000001580), &(0x7f0000002580)=0x1000) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)=""/237, 0xed}], 0x1}, 0x18}], 0x1, 0x101, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0x1, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xa, 0xffe0}, {0xfff1, 0xfff3}, {0x5, 0xfff1}}, [@q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1m43.428746997s ago: executing program 3 (id=2974): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x88, 0x2c, 0x6f14cf9ac61f9c9b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x0, 0x5, 0xb}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x88}}, 0x24000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m43.379652175s ago: executing program 3 (id=2975): r0 = mq_open(0x0, 0x8c2, 0x30, 0x0) read(r0, 0x0, 0x0) 1m42.230530262s ago: executing program 3 (id=2982): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000fd0020851000000600000018", @ANYRES32, @ANYBLOB="00000000000000016608fffffff30000180000000000000000000000001000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x1e}, 0x94) 1m30.482195243s ago: executing program 2 (id=3023): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00', r0}, 0x10) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@setlink={0x48, 0x10, 0x401, 0x0, 0xfffffffc, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_bond\x00'}, @IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x5}]}]}, 0x48}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) 1m29.126341483s ago: executing program 0 (id=3029): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000026000000080007000000000018000180140002007465616d5f736c6176655f30"], 0x34}}, 0x4004080) 1m29.077125422s ago: executing program 0 (id=3030): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x1) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x28, 0x10, 0x0, 0x101, 0x0, 0x25dfdbfe, {0x7}, [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x6}, @nested={0xc, 0xe8, 0x0, 0x1, [@typed={0x8, 0x31, 0x0, 0x0, @uid}]}]}, 0x28}}, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) wait4(r0, &(0x7f0000000040), 0x1000001, &(0x7f0000000200)) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, 0x0) write$tun(r5, &(0x7f0000000380)=ANY=[], 0x78) prlimit64(r0, 0xf, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000500)={'gretap0\x00', 0x0, 0x8000, 0x7800, 0xd031, 0x7ca, {{0x3c, 0x4, 0x0, 0x2, 0xf0, 0x66, 0x0, 0x3, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1b}, {[@timestamp_addr={0x44, 0x54, 0xb2, 0x1, 0xc, [{@multicast2, 0x2}, {@empty, 0x9}, {@local, 0xc0ae}, {@broadcast}, {@empty, 0x7f}, {@loopback, 0xe531}, {@multicast1, 0x8}, {@multicast2, 0x4}, {@local, 0x2dee}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}]}, @cipso={0x86, 0x38, 0x3, [{0x1, 0xa, "fbceeca445806f5c"}, {0x6, 0x2}, {0x6, 0x3, "a1"}, {0x0, 0x2}, {0x6, 0x2}, {0x2, 0x11, "0de8899e8c553f91859fa0e0f9c4d9"}, {0x0, 0xe, "c3ef52dbeb5749237638023f"}]}, @ssrr={0x89, 0xb, 0x8e, [@loopback, @remote]}, @timestamp_prespec={0x44, 0x3c, 0xc2, 0x3, 0x6, [{@local, 0xd}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@multicast2, 0x18ee68df}, {@local, 0xa6b}, {@multicast2, 0x1}, {@multicast1, 0x2}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0x94f0}]}, @rr={0x7, 0x3, 0x2f}, @timestamp_prespec={0x44, 0x4, 0xf2, 0x3, 0xc}]}}}}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={0xffffffffffffffff, r7, 0x25, 0x8, @void}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xe, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x13}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1m27.961480713s ago: executing program 0 (id=3031): openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x2, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000780)=0x2, 0x4) r0 = syz_io_uring_setup(0x239, &(0x7f0000001080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f00000001c0)) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[], 0x28}}, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x9a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000003bbbbbbbbbbbb86dd6a0000000000"], 0x0) getsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) io_uring_enter(r0, 0x2def, 0x1a38, 0x0, 0x0, 0x0) 1m27.781537123s ago: executing program 2 (id=3034): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40042, 0x1) close(r1) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340), 0x0) write$binfmt_misc(r2, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 1m26.850279231s ago: executing program 2 (id=3036): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x24000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m25.119523687s ago: executing program 0 (id=3037): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000001100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000001140)) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x8000000) 1m24.969282186s ago: executing program 4 (id=3039): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30000091) close_range(r0, 0xffffffffffffffff, 0x0) 1m24.968911004s ago: executing program 0 (id=3040): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x1) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x28, 0x10, 0x0, 0x101, 0x0, 0x25dfdbfe, {0x7}, [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x6}, @nested={0xc, 0xe8, 0x0, 0x1, [@typed={0x8, 0x31, 0x0, 0x0, @uid}]}]}, 0x28}}, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) wait4(r0, &(0x7f0000000040), 0x1000001, &(0x7f0000000200)) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, 0x0) write$tun(r5, &(0x7f0000000380)=ANY=[], 0x78) prlimit64(r0, 0xf, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000500)={'gretap0\x00', 0x0, 0x8000, 0x7800, 0xd031, 0x7ca, {{0x3c, 0x4, 0x0, 0x2, 0xf0, 0x66, 0x0, 0x3, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1b}, {[@timestamp_addr={0x44, 0x54, 0xb2, 0x1, 0xc, [{@multicast2, 0x2}, {@empty, 0x9}, {@local, 0xc0ae}, {@broadcast}, {@empty, 0x7f}, {@loopback, 0xe531}, {@multicast1, 0x8}, {@multicast2, 0x4}, {@local, 0x2dee}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}]}, @cipso={0x86, 0x38, 0x3, [{0x1, 0xa, "fbceeca445806f5c"}, {0x6, 0x2}, {0x6, 0x3, "a1"}, {0x0, 0x2}, {0x6, 0x2}, {0x2, 0x11, "0de8899e8c553f91859fa0e0f9c4d9"}, {0x0, 0xe, "c3ef52dbeb5749237638023f"}]}, @ssrr={0x89, 0xb, 0x8e, [@loopback, @remote]}, @timestamp_prespec={0x44, 0x3c, 0xc2, 0x3, 0x6, [{@local, 0xd}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@multicast2, 0x18ee68df}, {@local, 0xa6b}, {@multicast2, 0x1}, {@multicast1, 0x2}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0x94f0}]}, @rr={0x7, 0x3, 0x2f}, @timestamp_prespec={0x44, 0x4, 0xf2, 0x3, 0xc}]}}}}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={0xffffffffffffffff, r7, 0x25, 0x8, @void}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xe, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x13}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1m24.898856199s ago: executing program 1 (id=3041): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x88, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd61d53a0600522f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0c2088be00060001bf3f030b7d27"], 0x0) 1m23.603263248s ago: executing program 0 (id=3042): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r0, 0x1, 0x70bd2d, 0x0, {0x41}}, 0x14}, 0x1, 0x0, 0x0, 0x4000021}, 0x840) 1m23.586165937s ago: executing program 4 (id=3043): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00', r0}, 0x10) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@setlink={0x48, 0x10, 0x401, 0x0, 0xfffffffc, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_bond\x00'}, @IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x5}]}]}, 0x48}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) 1m23.430182019s ago: executing program 4 (id=3044): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x56, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000001040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904", @ANYBLOB="8ccf"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) syz_usb_control_io$printer(r1, 0x0, 0x0) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001080)={0xfc, {"fce3ad0eed0d07f91b5e091887f70706d038e7ff7fc6e5539b0d3c0a8b089b3f383163030890e0879b0af8c6e70a9b334a959b669a240d0a0af3988f7ef319520100ffe8d178708c523c921b1b503107200773090acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1f55de1c368f4a9d9a13ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0xffffff8d}}, 0x1006) 1m23.084531435s ago: executing program 2 (id=3045): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x4, 0x0, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x6, 0x7, 0x1, 0x9, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0x9, 0x200000100, 0x3, 0xfffffffffffffff4, 0x4a, 0x5, 0x100, 0xd, 0xdd, 0x5, 0x1, 0x2a9, 0x3, 0xc39, 0x3, 0x8, 0x100000000, 0x2, 0xa51, 0x8, 0x401, 0x800000000000003, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x1, 0x8, 0x8, 0x6aa, 0x102, 0x1, 0x83, 0x538a, 0x9, 0xfffffffffffffffb, 0x4, 0x0, 0x4, 0x5, 0x8, 0x80008000, 0x8000000000000000, 0x4, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5bc, 0x1, 0x7fffffff, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0x9, 0x82c, 0x8000, 0xe000000000000, 0xe4, 0x11, 0x0, 0x8, 0x22, 0xffffffffffffffff, 0x7, 0xfffffffffffffffd, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x7, 0x100000002, 0x4, 0x4, 0x7, 0x7, 0x7, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x100000003, 0x4, 0x7, 0x406, 0x3, 0x6, 0x5, 0x0, 0x3, 0x40, 0x7fffffff, 0x7, 0x3, 0x1]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r6 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x1d}}, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, 0x0, &(0x7f00000001c0)) 1m22.696753837s ago: executing program 1 (id=3046): r0 = socket(0x2, 0x80805, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) wait4(0x0, 0x0, 0x4, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0), 0x0, 0x0) 1m22.121554583s ago: executing program 1 (id=3047): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7ff], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x31]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x10000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}]}}]}, 0xa4}}, 0x0) 1m18.756927272s ago: executing program 4 (id=3048): r0 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) read$msr(r2, &(0x7f0000002140)=""/102400, 0x19000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) 1m15.836052864s ago: executing program 1 (id=3049): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000001100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000001140)) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x8000000) 1m15.69969492s ago: executing program 2 (id=3050): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@setlink={0x48, 0x10, 0x401, 0x0, 0xfffffffc, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_bond\x00'}, @IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x5}]}]}, 0x48}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) 1m15.231209916s ago: executing program 4 (id=3051): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x1) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x28, 0x10, 0x0, 0x101, 0x0, 0x25dfdbfe, {0x7}, [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x6}, @nested={0xc, 0xe8, 0x0, 0x1, [@typed={0x8, 0x31, 0x0, 0x0, @uid}]}]}, 0x28}}, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) wait4(r0, &(0x7f0000000040), 0x1000001, &(0x7f0000000200)) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, 0x0) write$tun(r5, &(0x7f0000000380)=ANY=[], 0x78) prlimit64(r0, 0xf, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000500)={'gretap0\x00', 0x0, 0x8000, 0x7800, 0xd031, 0x7ca, {{0x3c, 0x4, 0x0, 0x2, 0xf0, 0x66, 0x0, 0x3, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1b}, {[@timestamp_addr={0x44, 0x54, 0xb2, 0x1, 0xc, [{@multicast2, 0x2}, {@empty, 0x9}, {@local, 0xc0ae}, {@broadcast}, {@empty, 0x7f}, {@loopback, 0xe531}, {@multicast1, 0x8}, {@multicast2, 0x4}, {@local, 0x2dee}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}]}, @cipso={0x86, 0x38, 0x3, [{0x1, 0xa, "fbceeca445806f5c"}, {0x6, 0x2}, {0x6, 0x3, "a1"}, {0x0, 0x2}, {0x6, 0x2}, {0x2, 0x11, "0de8899e8c553f91859fa0e0f9c4d9"}, {0x0, 0xe, "c3ef52dbeb5749237638023f"}]}, @ssrr={0x89, 0xb, 0x8e, [@loopback, @remote]}, @timestamp_prespec={0x44, 0x3c, 0xc2, 0x3, 0x6, [{@local, 0xd}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@multicast2, 0x18ee68df}, {@local, 0xa6b}, {@multicast2, 0x1}, {@multicast1, 0x2}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0x94f0}]}, @rr={0x7, 0x3, 0x2f}, @timestamp_prespec={0x44, 0x4, 0xf2, 0x3, 0xc}]}}}}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={0xffffffffffffffff, r7, 0x25, 0x8, @void}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xe, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x13}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1m13.517924889s ago: executing program 1 (id=3052): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r1, 0x2000002, 0x88, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000100000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m9.714128222s ago: executing program 4 (id=3053): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x2}, @TCA_FQ_QUANTUM={0x8, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x44090}, 0x0) 1m8.797639859s ago: executing program 1 (id=3054): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x24000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m7.505634445s ago: executing program 32 (id=3042): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r0, 0x1, 0x70bd2d, 0x0, {0x41}}, 0x14}, 0x1, 0x0, 0x0, 0x4000021}, 0x840) 1m7.220525185s ago: executing program 2 (id=3056): r0 = socket(0x2, 0x80805, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) wait4(0x0, 0x0, 0x4, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) 46.00928505s ago: executing program 33 (id=3053): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x2}, @TCA_FQ_QUANTUM={0x8, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x44090}, 0x0) 36.329680277s ago: executing program 34 (id=3054): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x24000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 26.524890845s ago: executing program 35 (id=3056): r0 = socket(0x2, 0x80805, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) wait4(0x0, 0x0, 0x4, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) 0s ago: executing program 6 (id=3057): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@setlink={0x48, 0x10, 0x401, 0x0, 0xfffffffc, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_bond\x00'}, @IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x5}]}]}, 0x48}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) kernel console output (not intermixed with test programs): all (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 306.796041][ T9257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.931480][ T5812] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 307.022549][ T3766] bridge_slave_1: left allmulticast mode [ 307.022656][ T3766] bridge_slave_1: left promiscuous mode [ 307.023386][ T3766] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.114310][ T3766] bridge_slave_0: left allmulticast mode [ 307.114339][ T3766] bridge_slave_0: left promiscuous mode [ 307.127864][ T3766] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.291473][ T6543] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 308.445161][ T6543] usb 5-1: Using ep0 maxpacket: 32 [ 308.498387][ T6543] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 308.498414][ T6543] usb 5-1: config 0 has no interface number 0 [ 308.498509][ T6543] usb 5-1: config 0 interface 12 has no altsetting 0 [ 308.501805][ T6543] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 308.501834][ T6543] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.501855][ T6543] usb 5-1: Product: syz [ 308.501870][ T6543] usb 5-1: Manufacturer: syz [ 308.501884][ T6543] usb 5-1: SerialNumber: syz [ 308.663126][ T6543] usb 5-1: config 0 descriptor?? [ 308.694830][ T7850] usb 3-1: USB disconnect, device number 37 [ 309.729944][ T9421] overlayfs: failed to resolve './file1': -2 [ 309.844772][ T6543] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 309.844828][ T6543] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 309.844846][ T6543] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 309.844938][ T6543] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 309.921461][ T6543] usb 5-1: USB disconnect, device number 26 [ 310.611672][ T6543] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 310.972340][ T6150] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 311.551392][ T6150] usb 5-1: Using ep0 maxpacket: 16 [ 311.553713][ T6150] usb 5-1: config 252 has an invalid interface number: 15 but max is 0 [ 311.553740][ T6150] usb 5-1: config 252 has no interface number 0 [ 311.553788][ T6150] usb 5-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 311.558188][ T6150] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 311.558225][ T6150] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.558246][ T6150] usb 5-1: Product: syz [ 311.558261][ T6150] usb 5-1: Manufacturer: syz [ 311.558276][ T6150] usb 5-1: SerialNumber: syz [ 311.751388][ T6543] usb 2-1: Using ep0 maxpacket: 16 [ 311.753709][ T6543] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.753735][ T6543] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 311.755216][ T6543] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 311.755243][ T6543] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 311.755264][ T6543] usb 2-1: Manufacturer: syz [ 311.807406][ T6543] usb 2-1: config 0 descriptor?? [ 312.481645][ T6150] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 312.512116][ T6150] usb 5-1: USB disconnect, device number 27 [ 312.512324][ T13] usb 5-1: Failed to submit usb control message: -71 [ 312.512355][ T13] usb 5-1: unable to send the bmi data to the device: -71 [ 312.512373][ T13] usb 5-1: unable to get target info from device [ 312.512387][ T13] usb 5-1: could not get target info (-71) [ 312.512478][ T13] usb 5-1: could not probe fw (-71) [ 312.623936][ T9452] overlayfs: failed to resolve './file1': -2 [ 313.031564][ T6342] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 313.192453][ T6342] usb 3-1: Using ep0 maxpacket: 32 [ 313.194781][ T6342] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 313.194835][ T6342] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 313.194863][ T6342] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 313.194891][ T6342] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 313.205003][ T6342] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 313.205111][ T6342] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.205132][ T6342] usb 3-1: Product: syz [ 313.205146][ T6342] usb 3-1: Manufacturer: syz [ 313.205160][ T6342] usb 3-1: SerialNumber: syz [ 313.324045][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 313.349144][ T6342] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input25 [ 313.476990][ T6543] usb 2-1: USB disconnect, device number 24 [ 313.543230][ T6150] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 313.574511][ T6342] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 313.574526][ T6342] (id 0x00) [ 313.801370][ T6150] usb 4-1: Using ep0 maxpacket: 16 [ 313.804157][ T6150] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 313.806305][ T6150] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 313.806326][ T6150] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 313.806337][ T6150] usb 4-1: Product: syz [ 313.806345][ T6150] usb 4-1: Manufacturer: syz [ 313.806353][ T6150] usb 4-1: SerialNumber: syz [ 313.809961][ T6150] usb 4-1: config 0 descriptor?? [ 313.821353][ T6342] rc_core: IR keymap rc-imon-pad not found [ 313.821370][ T6342] Registered IR keymap rc-empty [ 313.821458][ T6342] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 313.821476][ T6342] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 314.099582][ T6150] keyspan 4-1:0.0: Keyspan 4 port adapter converter detected [ 314.131981][ T6150] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81 [ 314.133658][ T6150] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 88 [ 314.308669][ T6150] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 314.583403][ T6150] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 314.586264][ T6150] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 314.609132][ T6150] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 314.627126][ T6150] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 4 [ 314.629672][ T6150] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 314.695967][ T6150] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 6 [ 314.811483][ T9477] overlayfs: failed to resolve './file1': -2 [ 315.624694][ T6342] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 315.627114][ T6150] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 315.673910][ T6342] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input26 [ 315.733654][ T6150] usb 4-1: USB disconnect, device number 30 [ 315.734534][ T6342] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:38> initialized [ 315.776808][ T6150] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 315.832633][ T6150] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 315.838339][ T6150] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 315.864089][ T6150] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 315.865045][ T6150] keyspan 4-1:0.0: device disconnected [ 315.976951][ T3766] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 316.297110][ T3766] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 316.352226][ T3766] bond0 (unregistering): Released all slaves [ 316.606153][ T9257] hsr_slave_0: entered promiscuous mode [ 316.608032][ T9257] hsr_slave_1: entered promiscuous mode [ 316.609133][ T9257] debugfs: 'hsr0' already exists in 'hsr' [ 316.609156][ T9257] Cannot create hsr debugfs directory [ 316.613017][ T6342] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 316.748839][ T6150] usb 3-1: USB disconnect, device number 38 [ 316.764780][ T6342] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 316.764820][ T6342] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 316.764834][ T6342] usb 4-1: config 0 interface 0 has no altsetting 0 [ 316.767338][ T6342] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 316.767364][ T6342] usb 4-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 316.767385][ T6342] usb 4-1: Product: syz [ 316.767401][ T6342] usb 4-1: Manufacturer: syz [ 316.767414][ T6342] usb 4-1: SerialNumber: syz [ 316.798915][ T6342] usb 4-1: config 0 descriptor?? [ 316.836485][ T9491] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 317.230698][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.232663][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.301367][ T5920] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 318.684553][ T6342] gs_usb 4-1:0.0: Couldn't get device config: (err=-110) [ 318.684600][ T6342] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -110 [ 318.778241][ T5920] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 318.778274][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.862917][ T5920] usb 2-1: config 0 descriptor?? [ 318.868679][ T5920] gspca_main: spca508-2.14.0 probing 8086:0110 [ 319.073997][ T5920] gspca_spca508: reg_read err -32 [ 319.074784][ T5920] gspca_spca508: reg_read err -32 [ 319.075603][ T5920] gspca_spca508: reg_read err -32 [ 319.075891][ C0] raw-gadget.2 gadget.1: ignoring, device is not running [ 319.076391][ T5920] gspca_spca508: reg_read err -32 [ 319.185989][ T5920] gspca_spca508: reg_read err -71 [ 319.190275][ T5920] gspca_spca508: reg write: error -71 [ 319.190352][ T5920] spca508 2-1:0.0: probe with driver spca508 failed with error -71 [ 319.215901][ T5920] usb 2-1: USB disconnect, device number 25 [ 319.382244][ T56] usb 4-1: USB disconnect, device number 31 [ 319.601417][ T6150] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 319.612442][ T9510] bond0: (slave syz_tun): Releasing backup interface [ 319.731402][ T6150] usb 3-1: device descriptor read/64, error -71 [ 319.982847][ T6150] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 320.111427][ T6150] usb 3-1: device descriptor read/64, error -71 [ 320.404912][ T6150] usb usb3-port1: attempt power cycle [ 320.771713][ T6150] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 320.791930][ T6150] usb 3-1: device descriptor read/8, error -71 [ 321.471031][ T3766] hsr_slave_0: left promiscuous mode [ 322.126038][ T9560] netlink: 'syz.2.1426': attribute type 10 has an invalid length. [ 322.231558][ T5896] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 322.382337][ T5896] usb 5-1: Using ep0 maxpacket: 16 [ 322.385198][ T5896] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 322.385253][ T5896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 322.385283][ T5896] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 322.386993][ T5896] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 322.387021][ T5896] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 322.387042][ T5896] usb 5-1: Manufacturer: syz [ 322.468971][ T5896] usb 5-1: config 0 descriptor?? [ 322.541439][ T992] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 323.189106][ T3766] hsr_slave_1: left promiscuous mode [ 323.190159][ T3766] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.190245][ T3766] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.191400][ T992] usb 4-1: Using ep0 maxpacket: 8 [ 323.221142][ T992] usb 4-1: too many endpoints for config 0 interface 0 altsetting 254: 250, using maximum allowed: 30 [ 323.221187][ T992] usb 4-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 250 [ 323.221214][ T992] usb 4-1: config 0 interface 0 has no altsetting 0 [ 323.221246][ T992] usb 4-1: New USB device found, idVendor=056a, idProduct=0024, bcdDevice= 0.00 [ 323.225192][ T992] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.284359][ T992] usb 4-1: config 0 descriptor?? [ 323.315914][ T3766] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.315940][ T3766] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.534901][ T3766] veth1_macvtap: left promiscuous mode [ 323.538487][ T3766] veth0_macvtap: left promiscuous mode [ 323.539597][ T3766] veth1_vlan: left promiscuous mode [ 323.561003][ T3766] veth0_vlan: left promiscuous mode [ 323.931032][ T7478] usb 4-1: USB disconnect, device number 32 [ 324.969642][ T31] usb 5-1: USB disconnect, device number 28 [ 325.381430][ T31] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 325.549735][ T31] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 325.549764][ T31] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 325.550672][ T31] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 325.550688][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 325.550699][ T31] usb 5-1: SerialNumber: syz [ 325.784760][ T31] usb 5-1: 0:2 : does not exist [ 325.803478][ T31] usb 5-1: USB disconnect, device number 29 [ 325.869800][ T6152] udevd[6152]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 326.132778][ T3766] team0 (unregistering): Port device team_slave_1 removed [ 326.361832][ T3766] team0 (unregistering): Port device team_slave_0 removed [ 326.591382][ T6342] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 326.743556][ T6342] usb 5-1: Using ep0 maxpacket: 32 [ 326.745772][ T6342] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 326.745797][ T6342] usb 5-1: config 0 has no interface number 0 [ 326.747981][ T6342] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 326.748005][ T6342] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.748015][ T6342] usb 5-1: Product: syz [ 326.748023][ T6342] usb 5-1: Manufacturer: syz [ 326.748031][ T6342] usb 5-1: SerialNumber: syz [ 326.751047][ T6342] usb 5-1: config 0 descriptor?? [ 326.810715][ T6342] smsc95xx v2.0.0 [ 327.159166][ T6342] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 327.159186][ T6342] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 327.976752][ T6342] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 327.976939][ T6342] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 328.003498][ T6342] usb 5-1: USB disconnect, device number 30 [ 329.801906][ T9560] syz_tun: entered promiscuous mode [ 329.820784][ T9560] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 330.733412][ T5124] Bluetooth: hci3: unexpected event for opcode 0x2006 [ 332.108576][ T9621] netlink: 'syz.1.1449': attribute type 10 has an invalid length. [ 332.211476][ T6543] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 332.363695][ T6543] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 332.363723][ T6543] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 332.365228][ T6543] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 332.365255][ T6543] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 332.365277][ T6543] usb 3-1: SerialNumber: syz [ 334.397531][ T6543] usb 3-1: 0:2 : does not exist [ 334.469502][ T6543] usb 3-1: USB disconnect, device number 43 [ 334.594569][ T6152] udevd[6152]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 334.679539][ T9649] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1455'. [ 334.679577][ T9649] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1455'. [ 334.679592][ T9649] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1455'. [ 334.679607][ T9649] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1455'. [ 334.863292][ T992] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 334.948330][ T9649] hpfs: hpfs_map_sector(): read error [ 334.965188][ T9650] program syz.1.1455 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 335.019304][ T9649] program syz.1.1455 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 335.220294][ T992] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 335.220327][ T992] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 335.220351][ T992] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 335.417566][ T992] usb 5-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 335.417601][ T992] usb 5-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 335.417623][ T992] usb 5-1: Manufacturer: syz [ 335.445690][ T6543] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 335.448212][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 335.639360][ T6543] usb 2-1: device descriptor read/64, error -32 [ 335.675387][ T992] usb 5-1: config 0 descriptor?? [ 335.688398][ T992] smsusb:smsusb_probe: board id=9, interface number 0 [ 335.689288][ T992] smsusb:smsusb_probe: Device initialized with return code -19 [ 335.881874][ T6543] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 335.964584][ T7478] usb 5-1: USB disconnect, device number 31 [ 336.045123][ T6543] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.045158][ T6543] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.045196][ T6543] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 336.045220][ T6543] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.073395][ T6543] usb 2-1: config 0 descriptor?? [ 336.119761][ T6342] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 336.423695][ T6342] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 336.423716][ T6342] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7 [ 336.423731][ T6342] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 336.475032][ T6342] usb 3-1: language id specifier not provided by device, defaulting to English [ 336.502819][ T6342] usb 3-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e [ 336.502875][ T6342] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.502888][ T6342] usb 3-1: Manufacturer: ‰ [ 336.502902][ T6342] usb 3-1: SerialNumber: syz [ 336.565648][ T6543] arvo 0003:1E7D:30D4.0010: unknown main item tag 0x0 [ 336.566307][ T6342] usb 3-1: config 0 descriptor?? [ 336.609262][ T6543] arvo 0003:1E7D:30D4.0010: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 336.645349][ T6342] em28xx 3-1:0.0: New device ‰ @ 480 Mbps (2013:0251, interface 0, class 0) [ 336.645384][ T6342] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 337.016901][ T9658] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1457'. [ 337.200437][ T6543] usb 2-1: USB disconnect, device number 27 [ 337.231802][ T6342] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 337.233019][ T6342] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 337.233430][ T6342] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 337.233442][ T6342] em28xx 3-1:0.0: No AC97 audio processor [ 337.303268][ T6342] usb 3-1: USB disconnect, device number 44 [ 337.305325][ T6342] em28xx 3-1:0.0: Disconnecting em28xx [ 337.345469][ T6342] em28xx 3-1:0.0: Freeing device [ 337.591688][ T9685] netlink: 'syz.4.1463': attribute type 10 has an invalid length. [ 337.823982][ T9257] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 337.896653][ T9257] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 338.820843][ T9257] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 339.025438][ T9257] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 339.672899][ T9741] binder: 9739:9741 ioctl c0306201 200000000180 returned -14 [ 340.777821][ T9257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.635292][ T9257] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.972348][ T5124] Bluetooth: hci3: unexpected event for opcode 0x2006 [ 342.102118][ T3906] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.102299][ T3906] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.146194][ T3467] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.146286][ T3467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.476998][ T9257] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 342.706034][ T5972] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 342.796229][ T9785] binder: 9783:9785 ioctl c0306201 200000000180 returned -14 [ 342.851929][ T5972] usb 5-1: Using ep0 maxpacket: 16 [ 342.859782][ T5972] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 342.859841][ T5972] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 342.859870][ T5972] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 342.859892][ T5972] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 342.859916][ T5972] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 342.929325][ T5972] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 342.929353][ T5972] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 342.929375][ T5972] usb 5-1: Manufacturer: syz [ 342.981956][ T5972] usb 5-1: config 0 descriptor?? [ 343.208236][ T9257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.477269][ T9257] veth0_vlan: entered promiscuous mode [ 343.580535][ T9257] veth1_vlan: entered promiscuous mode [ 344.427317][ T9257] veth0_macvtap: entered promiscuous mode [ 344.514790][ T9257] veth1_macvtap: entered promiscuous mode [ 344.784376][ T9257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 344.839151][ T9257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 344.945349][ T3881] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.945859][ T3881] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.945900][ T3881] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.945935][ T3881] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.187268][ T9822] binder: 9821:9822 ioctl c0306201 200000000180 returned -14 [ 345.646826][ T5972] rc_core: IR keymap rc-hauppauge not found [ 345.646849][ T5972] Registered IR keymap rc-empty [ 345.647008][ T5972] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 345.678132][ T5972] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 345.706060][ T5972] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 345.709322][ T5972] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input27 [ 345.771526][ T5972] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 345.795973][ T5972] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 345.814284][ T5972] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 345.831624][ T5972] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 345.862063][ T5972] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 345.881491][ T5972] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 345.903359][ T5972] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 345.929339][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.929356][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.931922][ T5972] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 345.951602][ T5972] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 345.981524][ T5972] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 346.343640][ T5972] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 346.343666][ T5972] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 346.697543][ T5972] usb 5-1: USB disconnect, device number 32 [ 346.750480][ T1512] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.750501][ T1512] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.783024][ T5920] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 346.934240][ T5920] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 346.934269][ T5920] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 346.946542][ T5920] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 346.946579][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 346.946598][ T5920] usb 3-1: SerialNumber: syz [ 347.180979][ T9857] binder: BINDER_SET_CONTEXT_MGR already set [ 347.180996][ T9857] binder: 9856:9857 ioctl 4018620d 200000004a80 returned -16 [ 347.181706][ T9857] binder: 9856:9857 ioctl c0306201 0 returned -14 [ 347.181947][ T9857] binder: 9856:9857 ioctl c0306201 200000000180 returned -11 [ 347.229826][ T5920] usb 3-1: 0:2 : does not exist [ 347.269894][ T5920] usb 3-1: USB disconnect, device number 45 [ 347.347703][ T6152] udevd[6152]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 347.797800][ T9887] binder: 9886:9887 ioctl c0306201 0 returned -14 [ 347.808293][ T9887] binder: 9886:9887 ioctl c0306201 200000000180 returned -11 [ 347.939594][ T9893] netlink: 'syz.2.1532': attribute type 10 has an invalid length. [ 347.998693][ T992] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 348.151948][ T992] usb 2-1: Using ep0 maxpacket: 16 [ 348.155370][ T992] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.155424][ T992] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 348.155474][ T992] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 348.155498][ T992] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 348.155522][ T992] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 348.156997][ T992] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 348.157023][ T992] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 348.157045][ T992] usb 2-1: Manufacturer: syz [ 348.163605][ T992] usb 2-1: config 0 descriptor?? [ 348.471887][ T992] rc_core: IR keymap rc-hauppauge not found [ 348.471901][ T992] Registered IR keymap rc-empty [ 348.471991][ T992] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 348.491439][ T992] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 348.513164][ T992] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 348.517597][ T992] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input28 [ 348.524643][ T992] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 348.531526][ T56] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 348.541631][ T992] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 348.561412][ T7478] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 348.561764][ T992] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 348.592841][ T992] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 348.619946][ T992] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 348.632393][ T992] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 348.656774][ T992] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 348.671631][ T992] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 348.692032][ T56] usb 3-1: Using ep0 maxpacket: 16 [ 348.704672][ T56] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.704702][ T56] usb 3-1: config 0 has no interfaces? [ 348.712076][ T992] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 348.721351][ T7478] usb 1-1: Using ep0 maxpacket: 16 [ 348.723732][ T7478] usb 1-1: config 252 has an invalid interface number: 15 but max is 0 [ 348.723755][ T7478] usb 1-1: config 252 has an invalid descriptor of length 0, skipping remainder of the config [ 348.723774][ T7478] usb 1-1: config 252 has no interface number 0 [ 348.731625][ T992] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 348.737216][ T7478] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 348.737242][ T7478] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.737262][ T7478] usb 1-1: Product: syz [ 348.737276][ T7478] usb 1-1: Manufacturer: syz [ 348.737290][ T7478] usb 1-1: SerialNumber: syz [ 348.755524][ T56] usb 3-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice=5b.44 [ 348.755552][ T56] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.755573][ T56] usb 3-1: Product: syz [ 348.755587][ T56] usb 3-1: Manufacturer: syz [ 348.755602][ T56] usb 3-1: SerialNumber: syz [ 348.790478][ T992] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 348.790501][ T992] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 348.806211][ T56] usb 3-1: config 0 descriptor?? [ 348.853226][ T992] usb 2-1: USB disconnect, device number 28 [ 348.926959][ T7478] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 349.024436][ T5920] usb 3-1: USB disconnect, device number 46 [ 349.081302][ T154] usb 1-1: Failed to submit usb control message: -71 [ 349.081336][ T154] usb 1-1: unable to send the bmi data to the device: -71 [ 349.081354][ T154] usb 1-1: unable to get target info from device [ 349.081367][ T154] usb 1-1: could not get target info (-71) [ 349.081384][ T154] usb 1-1: could not probe fw (-71) [ 349.094376][ T56] usb 1-1: USB disconnect, device number 10 [ 349.186706][ T9921] binder: 9918:9921 ioctl c0306201 0 returned -14 [ 349.187649][ T9921] binder: 9918:9921 ioctl c0306201 200000000180 returned -11 [ 349.265493][ T9923] macvtap0: entered promiscuous mode [ 349.265705][ T9923] macvtap0: entered allmulticast mode [ 349.265718][ T9923] veth1_vlan: entered allmulticast mode [ 349.288201][ T9923] macvtap1: entered promiscuous mode [ 349.288518][ T9923] macvtap1: entered allmulticast mode [ 349.434626][ T9929] netlink: 'syz.1.1546': attribute type 10 has an invalid length. [ 349.451356][ T5920] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 349.656139][ T5920] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 349.656168][ T5920] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 349.680388][ T5920] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 349.680418][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 349.680439][ T5920] usb 4-1: SerialNumber: syz [ 349.958248][ T5920] usb 4-1: 0:2 : does not exist [ 350.005827][ T5920] usb 4-1: USB disconnect, device number 33 [ 350.103655][ T6152] udevd[6152]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 350.823439][ T9951] binder: 9950:9951 ioctl c0306201 200000000180 returned -11 [ 351.159544][ T9961] netlink: 'syz.3.1558': attribute type 10 has an invalid length. [ 351.532153][ T9974] binder: 9973:9974 ioctl c0306201 200000000180 returned -11 [ 351.571462][ T56] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 351.724871][ T56] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.724921][ T56] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 351.729829][ T56] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 351.729858][ T56] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.729879][ T56] usb 1-1: Product: syz [ 351.729894][ T56] usb 1-1: Manufacturer: syz [ 351.729909][ T56] usb 1-1: SerialNumber: syz [ 351.806555][ T56] cdc_mbim 1-1:1.0: skipping garbage [ 352.004695][ T9965] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 352.341374][ T7850] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 353.277418][ T7850] usb 4-1: Using ep0 maxpacket: 16 [ 353.291529][ T9965] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 353.294326][ T56] cdc_mbim 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 353.294349][ T56] cdc_mbim 1-1:1.0: setting rx_max = 2048 [ 353.313646][ T7850] usb 4-1: config 252 has an invalid interface number: 15 but max is 0 [ 353.313671][ T7850] usb 4-1: config 252 has no interface number 0 [ 353.313717][ T7850] usb 4-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 353.319135][ T7850] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 353.319162][ T7850] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.319183][ T7850] usb 4-1: Product: syz [ 353.319197][ T7850] usb 4-1: Manufacturer: syz [ 353.319212][ T7850] usb 4-1: SerialNumber: syz [ 353.393702][T10003] binder: 10002:10003 ioctl c0306201 200000000180 returned -11 [ 353.529844][ T7850] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 353.531513][ T56] cdc_mbim 1-1:1.0: setting tx_max = 184 [ 353.595334][ T56] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device [ 353.639964][ T7478] usb 4-1: USB disconnect, device number 34 [ 353.640346][ T1164] usb 4-1: Failed to submit usb control message: -71 [ 353.640379][ T1164] usb 4-1: unable to send the bmi data to the device: -71 [ 353.640396][ T1164] usb 4-1: unable to get target info from device [ 353.640411][ T1164] usb 4-1: could not get target info (-71) [ 353.640428][ T1164] usb 4-1: could not probe fw (-71) [ 353.681128][ T56] wwan wwan0: port wwan0mbim0 attached [ 353.881574][ T56] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, ca:71:20:29:be:01 [ 353.905886][ T56] usb 1-1: USB disconnect, device number 11 [ 353.909545][ T56] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 354.184694][ T56] wwan wwan0: port wwan0mbim0 disconnected [ 355.168822][T10040] binder: 10039:10040 ioctl c0306201 200000000180 returned -11 [ 355.341423][ T5823] Bluetooth: hci4: command 0x0406 tx timeout [ 355.573398][ T56] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 356.392204][ T56] usb 3-1: device descriptor read/64, error -71 [ 356.711463][ T56] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 356.801356][ T5920] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 356.841484][ T56] usb 3-1: device descriptor read/64, error -71 [ 356.952260][ T5920] usb 4-1: Using ep0 maxpacket: 16 [ 356.955571][ T56] usb usb3-port1: attempt power cycle [ 356.956647][ T5920] usb 4-1: config 252 has an invalid interface number: 15 but max is 0 [ 356.956765][ T5920] usb 4-1: config 252 has no interface number 0 [ 356.956820][ T5920] usb 4-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 356.960056][ T5920] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 356.960084][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.960104][ T5920] usb 4-1: Product: syz [ 356.960118][ T5920] usb 4-1: Manufacturer: syz [ 356.960132][ T5920] usb 4-1: SerialNumber: syz [ 357.080899][ T5920] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 357.246835][ T69] usb 4-1: Failed to submit usb control message: -71 [ 357.246873][ T69] usb 4-1: unable to send the bmi data to the device: -71 [ 357.246891][ T69] usb 4-1: unable to get target info from device [ 357.246906][ T69] usb 4-1: could not get target info (-71) [ 357.246923][ T69] usb 4-1: could not probe fw (-71) [ 357.248397][ T7478] usb 4-1: USB disconnect, device number 35 [ 357.302186][ T56] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 357.341001][ T56] usb 3-1: device descriptor read/8, error -71 [ 357.824030][ T56] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 358.675076][ T56] usb 3-1: device descriptor read/8, error -71 [ 358.840924][T10087] pim6reg: entered allmulticast mode [ 358.870738][ T56] usb usb3-port1: unable to enumerate USB device [ 361.244940][T10131] vivid-003: disconnect [ 361.264026][T10128] vivid-003: reconnect [ 361.391438][ T56] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 361.458779][T10140] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1626'. [ 361.458815][T10140] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1626'. [ 361.458828][T10140] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1626'. [ 361.458842][T10140] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1626'. [ 361.586335][ T56] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 361.586365][ T56] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.586386][ T56] usb 1-1: Product: syz [ 361.586401][ T56] usb 1-1: Manufacturer: syz [ 361.586416][ T56] usb 1-1: SerialNumber: syz [ 361.592183][T10140] hpfs: hpfs_map_sector(): read error [ 361.638404][T10140] program syz.2.1626 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 361.688564][T10145] program syz.2.1626 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 361.731844][ T5920] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 361.768166][T10150] tipc: Failed to remove unknown binding: 66,1,1/0:3091906172/3091906174 [ 361.781475][ T6543] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 361.801205][T10150] tipc: Failed to remove unknown binding: 66,1,1/0:3091906172/3091906174 [ 361.801227][T10150] tipc: Failed to remove unknown binding: 66,1,1/0:3091906172/3091906174 [ 361.881405][ T5920] usb 5-1: Using ep0 maxpacket: 16 [ 361.888897][ T5920] usb 5-1: config 252 has an invalid interface number: 15 but max is 0 [ 361.888921][ T5920] usb 5-1: config 252 has no interface number 0 [ 361.888960][ T5920] usb 5-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 361.888986][ T5920] usb 5-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 361.911376][ T6543] usb 2-1: device descriptor read/64, error -71 [ 361.947280][ T5920] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 361.947309][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.947328][ T5920] usb 5-1: Product: syz [ 361.947343][ T5920] usb 5-1: Manufacturer: syz [ 361.947357][ T5920] usb 5-1: SerialNumber: syz [ 362.013212][ T7850] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 362.066741][ T5920] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 362.087346][ T56] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 362.087387][ T56] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 362.175833][ T6543] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 362.194030][ T7850] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.194062][ T7850] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.194098][ T7850] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 362.194122][ T7850] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.215527][ T3881] usb 5-1: Failed to submit usb control message: -71 [ 362.215561][ T3881] usb 5-1: unable to send the bmi data to the device: -71 [ 362.215630][ T3881] usb 5-1: unable to get target info from device [ 362.215646][ T3881] usb 5-1: could not get target info (-71) [ 362.215670][ T3881] usb 5-1: could not probe fw (-71) [ 362.223330][ T5895] usb 5-1: USB disconnect, device number 33 [ 362.283177][ T7850] usb 3-1: config 0 descriptor?? [ 362.301871][ T6543] usb 2-1: device descriptor read/64, error -71 [ 362.412027][ T6543] usb usb2-port1: attempt power cycle [ 362.721678][ T7850] arvo 0003:1E7D:30D4.0011: unknown main item tag 0x0 [ 362.741556][ T7850] arvo 0003:1E7D:30D4.0011: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0 [ 362.766259][ T6543] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 362.782085][ T6543] usb 2-1: device descriptor read/8, error -71 [ 363.024623][ T6543] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 363.042182][ T6543] usb 2-1: device descriptor read/8, error -71 [ 363.161902][ T6543] usb usb2-port1: unable to enumerate USB device [ 363.293099][ T56] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPROTO [ 363.293159][ T56] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 363.294197][ T56] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 363.336807][ T6543] usb 3-1: USB disconnect, device number 51 [ 363.385522][ T56] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 363.419891][ T56] usb 1-1: USB disconnect, device number 12 [ 363.653957][T10172] pimreg: entered allmulticast mode [ 363.675641][T10172] pimreg: left allmulticast mode [ 366.456962][ T7850] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 366.801565][ T7850] usb 1-1: device descriptor read/64, error -71 [ 367.041497][ T7850] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 367.181473][ T7850] usb 1-1: device descriptor read/64, error -71 [ 367.291884][ T7850] usb usb1-port1: attempt power cycle [ 367.541672][ T6113] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 367.584376][T10252] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1671'. [ 367.584398][T10252] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1671'. [ 367.584406][T10252] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1671'. [ 367.584414][T10252] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1671'. [ 367.631370][ T7850] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 367.663054][ T7850] usb 1-1: device descriptor read/8, error -71 [ 367.695026][ T6113] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 367.695044][ T6113] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 367.695069][ T6113] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 367.695081][ T6113] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.746300][T10252] hpfs: hpfs_map_sector(): read error [ 367.834286][T10252] program syz.1.1671 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 367.885633][T10255] program syz.1.1671 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 367.921452][ T7850] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 367.954900][ T6113] usb 3-1: GET_CAPABILITIES returned 0 [ 367.954928][ T6113] usbtmc 3-1:16.0: can't read capabilities [ 367.975273][ T7850] usb 1-1: device descriptor read/8, error -71 [ 368.103778][ T7850] usb usb1-port1: unable to enumerate USB device [ 368.161389][ T6150] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 368.166381][ T7850] usb 3-1: USB disconnect, device number 52 [ 368.316531][ T6150] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 368.316565][ T6150] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 368.316598][ T6150] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 368.316611][ T6150] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.336176][ T6150] usb 2-1: config 0 descriptor?? [ 368.813408][ T6150] arvo 0003:1E7D:30D4.0012: unknown main item tag 0x0 [ 368.818592][ T6150] arvo 0003:1E7D:30D4.0012: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 369.280225][ T6342] usb 2-1: USB disconnect, device number 33 [ 370.287090][ T37] audit: type=1326 audit(1766081743.838:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10305 comm="syz.3.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3051f749 code=0x7ffc0000 [ 370.287905][ T37] audit: type=1326 audit(1766081743.848:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10305 comm="syz.3.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3051f749 code=0x7ffc0000 [ 370.339883][ T37] audit: type=1326 audit(1766081743.848:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10305 comm="syz.3.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7fed3051f749 code=0x7ffc0000 [ 370.340533][ T37] audit: type=1326 audit(1766081743.898:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10305 comm="syz.3.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3051f749 code=0x7ffc0000 [ 370.471334][T10310] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1694'. [ 370.562659][T10308] syzkaller0: entered promiscuous mode [ 370.562685][T10308] syzkaller0: entered allmulticast mode [ 370.763953][T10322] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1701'. [ 370.800620][T10324] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1700'. [ 370.800655][T10324] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1700'. [ 370.800769][T10324] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1700'. [ 370.800786][T10324] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1700'. [ 370.920192][T10324] hpfs: hpfs_map_sector(): read error [ 370.983759][T10324] program syz.4.1700 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 371.031595][T10329] program syz.4.1700 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 371.239209][T10322] 8021q: adding VLAN 0 to HW filter on device bond1 [ 371.277150][T10325] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 371.285892][T10325] team0: Port device macvlan2 added [ 371.301491][ T6150] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 371.500741][ T6150] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.500776][ T6150] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.501101][ T6150] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 371.501127][ T6150] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.507445][ T6150] usb 5-1: config 0 descriptor?? [ 371.713176][ T5972] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 371.864966][ T5972] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.864993][ T5972] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.865054][ T5972] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 371.865068][ T5972] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.907399][ T5972] usb 3-1: config 0 descriptor?? [ 372.041194][ T6150] arvo 0003:1E7D:30D4.0013: unknown main item tag 0x0 [ 372.214488][ T6150] arvo 0003:1E7D:30D4.0013: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.4-1/input0 [ 372.329411][ T5972] keytouch 0003:0926:3333.0014: fixing up Keytouch IEC report descriptor [ 372.405298][ T5972] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0014/input/input35 [ 372.462213][ T56] usb 5-1: USB disconnect, device number 34 [ 372.589154][T10347] fido_id[10347]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 372.843072][ T5972] keytouch 0003:0926:3333.0014: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 372.861376][ T6113] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 372.887395][ T5972] usb 3-1: USB disconnect, device number 53 [ 373.018427][T10350] fido_id[10350]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 373.031414][ T6113] usb 2-1: Using ep0 maxpacket: 8 [ 373.058139][ T6113] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 373.058201][ T6113] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 373.058245][ T6113] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 373.058270][ T6113] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.174905][ T6113] usbtmc 2-1:16.0: bulk endpoints not found [ 373.263240][T10354] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1712'. [ 374.457222][T10385] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1724'. [ 374.457259][T10385] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1724'. [ 374.457274][T10385] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1724'. [ 374.457289][T10385] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1724'. [ 374.632573][T10389] hpfs: hpfs_map_sector(): read error [ 374.780071][T10394] program syz.2.1724 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 375.612718][T10385] program syz.2.1724 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 375.679642][ T6296] usb 2-1: USB disconnect, device number 34 [ 375.893931][T10403] netlink: 'syz.4.1729': attribute type 39 has an invalid length. [ 375.934068][ T6342] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 376.113686][ T6342] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.113720][ T6342] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.113757][ T6342] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 376.113875][ T6342] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.181014][ T6342] usb 3-1: config 0 descriptor?? [ 376.291520][ T5823] Bluetooth: hci1: command 0x1003 tx timeout [ 376.293744][ T5812] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 377.109888][ T6342] arvo 0003:1E7D:30D4.0015: unknown main item tag 0x0 [ 377.122141][ T6342] arvo 0003:1E7D:30D4.0015: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0 [ 377.332225][ T5972] usb 3-1: USB disconnect, device number 54 [ 377.587617][T10411] fido_id[10411]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 378.421382][ T6543] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 378.548439][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.548509][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.574474][ T6543] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 378.574501][ T6543] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 378.574538][ T6543] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 4, skipping [ 378.574561][ T6543] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 378.576131][ T6543] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 378.576151][ T6543] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 378.576162][ T6543] usb 1-1: SerialNumber: syz [ 378.828503][ T6543] usb 1-1: 0:2 : does not exist [ 378.828606][ T6543] usb 1-1: unit 5 not found! [ 378.902934][ T6543] usb 1-1: USB disconnect, device number 17 [ 378.941372][ T5920] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 379.006617][ T6152] udevd[6152]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 379.101809][ T5920] usb 2-1: Using ep0 maxpacket: 8 [ 379.106427][ T5920] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 379.106482][ T5920] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 379.106498][ T5920] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 379.106512][ T5920] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 379.106535][ T5920] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 379.106547][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.193663][ T5920] usbtmc 2-1:16.0: bulk endpoints not found [ 379.303193][T10440] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1746'. [ 380.061414][ T5920] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 380.231410][ T5920] usb 3-1: Using ep0 maxpacket: 16 [ 380.238544][ T5920] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 380.238600][ T5920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 380.238629][ T5920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 380.238651][ T5920] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 380.238676][ T5920] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 380.240206][ T5920] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 380.240235][ T5920] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 380.240257][ T5920] usb 3-1: Manufacturer: syz [ 380.255156][ T5920] usb 3-1: config 0 descriptor?? [ 380.804577][ T5920] rc_core: IR keymap rc-hauppauge not found [ 380.804599][ T5920] Registered IR keymap rc-empty [ 380.805853][ T5920] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 380.831446][ T5920] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 380.854358][ T5920] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 380.856883][ T5920] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input36 [ 380.874928][ T5920] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 380.901572][ T5920] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 380.921464][ T5920] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 380.942277][ T5920] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 380.963802][ T5920] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 380.981453][ T5920] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 381.001498][ T5920] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 381.021466][ T5920] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 381.026357][T10483] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1765'. [ 381.026391][T10483] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1765'. [ 381.026407][T10483] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1765'. [ 381.026422][T10483] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1765'. [ 381.041425][ T5920] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 381.061420][ T5920] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 381.098416][ T5920] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 381.098431][ T5920] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 381.137623][ T5920] usb 3-1: USB disconnect, device number 55 [ 381.275893][T10483] hpfs: hpfs_map_sector(): read error [ 381.323514][T10483] program syz.4.1765 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 381.374421][T10484] program syz.4.1765 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 381.467220][T10476] tipc: Failed to remove unknown binding: 66,1,1/0:2746876022/2746876024 [ 381.467255][T10476] tipc: Failed to remove unknown binding: 66,1,1/0:2746876022/2746876024 [ 381.641227][ T5920] usb 2-1: USB disconnect, device number 35 [ 381.642027][ T6543] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 381.836747][ T6543] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.836783][ T6543] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.836821][ T6543] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 381.836845][ T6543] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.839967][ T6543] usb 5-1: config 0 descriptor?? [ 381.961426][ T6113] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 382.742824][ T6113] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 382.742898][ T6113] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 382.742922][ T6113] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 382.742944][ T6113] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 382.841715][ T6113] usb 1-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 382.841734][ T6113] usb 1-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 382.841746][ T6113] usb 1-1: Manufacturer: syz [ 382.859229][ T6543] arvo 0003:1E7D:30D4.0016: unknown main item tag 0x0 [ 382.876693][ T6113] usb 1-1: config 0 descriptor?? [ 382.883778][ T6543] arvo 0003:1E7D:30D4.0016: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.4-1/input0 [ 382.888715][ T6113] smsusb:smsusb_probe: board id=9, interface number 0 [ 382.889409][ T6113] smsusb:smsusb_probe: Device initialized with return code -19 [ 383.185513][ T6113] usb 1-1: USB disconnect, device number 18 [ 383.214062][ T5972] usb 5-1: USB disconnect, device number 35 [ 385.675537][ T6296] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 385.714223][T10543] syzkaller0: entered promiscuous mode [ 385.714250][T10543] syzkaller0: entered allmulticast mode [ 385.831472][ T6296] usb 2-1: Using ep0 maxpacket: 8 [ 385.837364][ T6296] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 385.837396][ T6296] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 385.837419][ T6296] usb 2-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 385.837431][ T6296] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 385.837455][ T6296] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 385.837468][ T6296] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.911575][ T5972] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 385.914129][ T6296] usbtmc 2-1:16.0: bulk endpoints not found [ 386.076492][ T5972] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 386.076551][ T5972] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 386.076574][ T5972] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 386.076597][ T5972] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 386.078967][ T5972] usb 1-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 386.078994][ T5972] usb 1-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 386.079015][ T5972] usb 1-1: Manufacturer: syz [ 386.088215][ T5972] usb 1-1: config 0 descriptor?? [ 386.116346][ T5972] smsusb:smsusb_probe: board id=9, interface number 0 [ 386.117361][ T5972] smsusb:smsusb_probe: Device initialized with return code -19 [ 386.355793][ T6543] usb 1-1: USB disconnect, device number 19 [ 386.835783][T10555] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1790'. [ 386.835808][T10555] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1790'. [ 386.835817][T10555] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1790'. [ 386.835824][T10555] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1790'. [ 388.387247][ T6543] usb 2-1: USB disconnect, device number 36 [ 389.108979][ T6543] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 389.281370][ T6543] usb 5-1: Using ep0 maxpacket: 16 [ 389.284736][ T6543] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 389.284794][ T6543] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 389.284824][ T6543] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 389.284847][ T6543] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 389.284871][ T6543] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 389.286085][ T6543] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 389.286113][ T6543] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 389.286134][ T6543] usb 5-1: Manufacturer: syz [ 389.374560][ T6543] usb 5-1: config 0 descriptor?? [ 389.661362][ T6543] rc_core: IR keymap rc-hauppauge not found [ 389.661419][ T6543] Registered IR keymap rc-empty [ 389.661577][ T6543] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 389.681438][ T6543] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 389.723290][ T6543] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 389.726455][ T6543] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input37 [ 389.758906][ T6543] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 389.771462][ T6543] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 389.796006][ T6543] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 389.811958][ T6543] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 389.832136][ T6543] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 389.872233][ T6543] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 389.892443][ T6543] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 389.911427][ T6543] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 389.931430][ T6543] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 389.951409][ T6543] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 389.997278][ T6543] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 389.997356][ T6543] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 390.117740][ T6543] usb 5-1: USB disconnect, device number 36 [ 390.326982][T10612] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1813'. [ 390.398199][T10613] netlink: 'syz.3.1813': attribute type 10 has an invalid length. [ 399.457911][T10638] @: renamed from vlan0 (while UP) [ 399.775542][T10651] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1831'. [ 400.864178][T10669] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1836'. [ 400.866017][T10669] netlink: 'syz.1.1836': attribute type 10 has an invalid length. [ 401.039099][T10682] 9p: Bad value for 'rfdno' [ 402.711856][ T6113] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 402.775345][ T5823] Bluetooth: hci0: command 0x0406 tx timeout [ 402.816115][ T5812] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 403.141332][ T6113] usb 2-1: Using ep0 maxpacket: 16 [ 403.143605][ T6113] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 403.143654][ T6113] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 403.143678][ T6113] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.191471][ T6113] usb 2-1: config 0 descriptor?? [ 403.638458][ T6113] mcp2221 0003:04D8:00DD.0017: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 404.415765][ T6113] usb 2-1: USB disconnect, device number 37 [ 407.601983][ T6113] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 407.814483][ T6113] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 407.814514][ T6113] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.814535][ T6113] usb 3-1: Product: syz [ 407.814550][ T6113] usb 3-1: Manufacturer: syz [ 407.814564][ T6113] usb 3-1: SerialNumber: syz [ 408.081379][ T6113] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 408.081437][ T6113] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 408.081459][ T6113] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 408.124437][ T6113] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 408.146984][ T6113] usb 3-1: USB disconnect, device number 56 [ 408.163265][T10698] udevd[10698]: setting mode of /dev/bus/usb/003/056 to 020664 failed: No such file or directory [ 408.163444][T10698] udevd[10698]: setting owner of /dev/bus/usb/003/056 to uid=0, gid=0 failed: No such file or directory [ 409.415425][T10808] syzkaller1: entered promiscuous mode [ 409.415454][T10808] syzkaller1: entered allmulticast mode [ 410.175850][ T6113] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 410.593657][ T6113] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 410.593693][ T6113] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7 [ 410.593721][ T6113] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 410.599262][ T6113] usb 5-1: language id specifier not provided by device, defaulting to English [ 410.635768][ T6113] usb 5-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e [ 410.635797][ T6113] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.635819][ T6113] usb 5-1: Manufacturer: ‰ [ 410.635834][ T6113] usb 5-1: SerialNumber: syz [ 410.677696][ T6113] usb 5-1: config 0 descriptor?? [ 410.702783][ T6113] em28xx 5-1:0.0: New device ‰ @ 480 Mbps (2013:0251, interface 0, class 0) [ 410.702813][ T6113] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 411.001750][ T6113] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 411.002221][ T6113] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 411.002627][ T6113] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 411.002645][ T6113] em28xx 5-1:0.0: No AC97 audio processor [ 411.041780][ T6113] usb 5-1: USB disconnect, device number 37 [ 411.050706][ T6113] em28xx 5-1:0.0: Disconnecting em28xx [ 411.079336][ T6113] em28xx 5-1:0.0: Freeing device [ 416.455771][ T5823] Bluetooth: hci5: command 0x0406 tx timeout [ 421.082436][T10963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1952'. [ 421.101536][ T806] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 421.271396][ T806] usb 1-1: Using ep0 maxpacket: 8 [ 421.279195][ T806] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 421.279224][ T806] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.279244][ T806] usb 1-1: Product: syz [ 421.279258][ T806] usb 1-1: Manufacturer: syz [ 421.279272][ T806] usb 1-1: SerialNumber: syz [ 421.325553][ T806] usb 1-1: config 0 descriptor?? [ 421.379052][T10993] @: renamed from vlan0 (while UP) [ 421.550822][ T806] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 421.865061][T11014] fuse: Bad value for 'fd' [ 421.910805][T11011] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1970'. [ 422.983219][ T806] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 425.384891][ T806] usb 1-1: USB disconnect, device number 20 [ 429.445152][T11124] block nbd0: Unsupported socket: should be TCP or UNIX. [ 429.868624][T11130] vlan2: entered promiscuous mode [ 429.868648][T11130] syz_tun: entered promiscuous mode [ 432.745701][ T6150] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 434.672752][ T6150] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 434.672784][ T6150] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7 [ 434.672811][ T6150] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 434.725552][ T6150] usb 1-1: language id specifier not provided by device, defaulting to English [ 434.859643][ T6150] usb 1-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e [ 434.859676][ T6150] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.859696][ T6150] usb 1-1: Manufacturer: ‰ [ 434.859708][ T6150] usb 1-1: SerialNumber: syz [ 434.913164][ T6150] usb 1-1: config 0 descriptor?? [ 434.929902][ T6150] em28xx 1-1:0.0: New device ‰ @ 480 Mbps (2013:0251, interface 0, class 0) [ 434.929933][ T6150] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 435.221823][ T6150] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 435.223416][ T6150] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 435.250817][ T6150] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 435.250884][ T6150] em28xx 1-1:0.0: No AC97 audio processor [ 435.843143][ T6150] usb 1-1: USB disconnect, device number 22 [ 435.849744][ T6150] em28xx 1-1:0.0: Disconnecting em28xx [ 435.922731][ T6150] em28xx 1-1:0.0: Freeing device [ 437.571416][ T6113] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 437.721301][ T6113] usb 3-1: Using ep0 maxpacket: 16 [ 437.723233][ T6113] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 437.723256][ T6113] usb 3-1: config 0 has no interface number 0 [ 437.723297][ T6113] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 437.723322][ T6113] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 437.726344][ T6113] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 437.726370][ T6113] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 437.726391][ T6113] usb 3-1: Product: syz [ 437.726404][ T6113] usb 3-1: SerialNumber: syz [ 437.739632][ T6113] usb 3-1: config 0 descriptor?? [ 437.751484][ T6113] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 437.758563][ T6113] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input40 [ 437.948278][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 440.086148][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.086221][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.634862][ T6113] usb 3-1: USB disconnect, device number 57 [ 442.714305][ T6113] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 442.875499][T11339] No control pipe specified [ 444.162144][T11371] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2101'. [ 444.461337][ T6150] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 444.623153][ T6150] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 444.623175][ T6150] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 444.623188][ T6150] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 444.624742][ T6150] usb 5-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 444.624772][ T6150] usb 5-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 444.624849][ T6150] usb 5-1: Manufacturer: syz [ 444.629486][ T6150] usb 5-1: config 0 descriptor?? [ 444.637235][ T6150] smsusb:smsusb_probe: board id=9, interface number 0 [ 444.638106][ T6150] smsusb:smsusb_probe: Device initialized with return code -19 [ 444.691783][ T806] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 444.847694][ T806] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 444.847722][ T806] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.847734][ T806] usb 3-1: Product: syz [ 444.847741][ T806] usb 3-1: Manufacturer: syz [ 444.847749][ T806] usb 3-1: SerialNumber: syz [ 444.901374][ T6150] usb 5-1: USB disconnect, device number 38 [ 445.297069][ T806] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 445.297136][ T806] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 445.332965][T11407] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2116'. [ 445.332997][T11407] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2116'. [ 445.333011][T11407] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2116'. [ 445.333025][T11407] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2116'. [ 445.731948][ T6150] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 445.898886][ T6150] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 445.899103][ T6150] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.899124][ T6150] usb 5-1: Product: syz [ 445.899132][ T6150] usb 5-1: Manufacturer: syz [ 445.899140][ T6150] usb 5-1: SerialNumber: syz [ 445.924316][ T6150] usb 5-1: config 0 descriptor?? [ 445.948772][ T806] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 445.948806][ T806] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 445.959913][ T806] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 445.992511][ T806] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 446.016885][ T806] usb 3-1: USB disconnect, device number 58 [ 446.153599][ T6150] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 446.359401][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 446.359630][ T6150] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 446.371764][ T6150] usb 5-1: USB disconnect, device number 39 [ 447.081117][T11440] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2129'. [ 447.081159][T11440] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2129'. [ 447.081173][T11440] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2129'. [ 447.081188][T11440] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2129'. [ 451.101352][ T6113] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 451.271355][ T6113] usb 5-1: Using ep0 maxpacket: 8 [ 451.273253][ T6113] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 451.273287][ T6113] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 451.273314][ T6113] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 451.273339][ T6113] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 451.273383][ T6113] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 451.273408][ T6113] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.483840][ T6113] usb 5-1: GET_CAPABILITIES returned 0 [ 451.483886][ T6113] usbtmc 5-1:16.0: can't read capabilities [ 451.720574][ T6113] usb 5-1: USB disconnect, device number 40 [ 452.275536][T11527] tipc: Failed to remove unknown binding: 66,1,1/0:2486633027/2486633029 [ 452.324688][T11527] tipc: Failed to remove unknown binding: 66,1,1/0:2486633027/2486633029 [ 452.324728][T11527] tipc: Failed to remove unknown binding: 66,1,1/0:2486633027/2486633029 [ 452.651324][ T6296] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 452.702687][T11542] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2167'. [ 452.851394][ T6296] usb 5-1: Using ep0 maxpacket: 16 [ 452.853287][ T6296] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 452.853311][ T6296] usb 5-1: config 0 has no interface number 0 [ 452.853358][ T6296] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 452.853385][ T6296] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 452.855644][ T6296] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 452.855672][ T6296] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 452.855694][ T6296] usb 5-1: Product: syz [ 452.855709][ T6296] usb 5-1: SerialNumber: syz [ 452.861792][ T6296] usb 5-1: config 0 descriptor?? [ 452.959504][ T6296] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 452.986697][ T6296] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input41 [ 453.082977][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 453.297242][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 453.297484][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 453.297724][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 453.297959][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 453.298197][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 453.298432][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 453.298662][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 453.298893][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 453.299136][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 453.299368][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 453.309047][ T6296] usb 5-1: USB disconnect, device number 41 [ 453.309142][ C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 453.459377][ T6296] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 454.440122][T11585] No control pipe specified [ 455.050924][T11617] No control pipe specified [ 455.691815][T11648] No control pipe specified [ 455.811942][ T6150] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 455.963198][ T6150] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 455.963230][ T6150] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7 [ 455.963258][ T6150] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 455.967862][ T6150] usb 3-1: language id specifier not provided by device, defaulting to English [ 456.025837][ T6150] usb 3-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e [ 456.025866][ T6150] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.025885][ T6150] usb 3-1: Manufacturer: ‰ [ 456.025900][ T6150] usb 3-1: SerialNumber: syz [ 456.040358][ T6150] usb 3-1: config 0 descriptor?? [ 456.067868][ T6150] em28xx 3-1:0.0: New device ‰ @ 480 Mbps (2013:0251, interface 0, class 0) [ 456.067887][ T6150] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 456.341635][ T6150] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 456.341995][ T6150] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 456.342341][ T6150] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 456.342355][ T6150] em28xx 3-1:0.0: No AC97 audio processor [ 456.351755][ T6150] usb 3-1: USB disconnect, device number 59 [ 456.353834][ T6150] em28xx 3-1:0.0: Disconnecting em28xx [ 456.372167][ T6150] em28xx 3-1:0.0: Freeing device [ 456.682489][T11675] autofs: Bad value for 'fd' [ 458.272988][T11719] comedi comedi4: bad chanlist[0]=0x7fffffff chan=65535 range length=2 [ 458.334038][T11723] tipc: Failed to remove unknown binding: 66,1,1/0:951276759/951276761 [ 459.652248][T11755] tipc: Failed to remove unknown binding: 66,1,1/0:1532840574/1532840576 [ 460.898577][T11776] autofs: Bad value for 'fd' [ 461.021311][ T9] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 461.894906][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 461.894939][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 461.894965][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 461.896458][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 461.896486][ T9] usb 5-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 461.896507][ T9] usb 5-1: Manufacturer: syz [ 461.923548][ T9] usb 5-1: config 0 descriptor?? [ 461.943990][ T9] smsusb:smsusb_probe: board id=9, interface number 0 [ 461.951480][ T9] smsusb:smsusb_probe: Device initialized with return code -19 [ 462.262892][ T9] usb 5-1: USB disconnect, device number 42 [ 464.474681][T11840] netlink: 'syz.0.2299': attribute type 24 has an invalid length. [ 464.474706][T11840] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2299'. [ 465.772871][T11867] netlink: 'syz.1.2311': attribute type 24 has an invalid length. [ 465.772895][T11867] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2311'. [ 465.916049][ T6113] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 466.083570][ T6113] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 466.083599][ T6113] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 466.083624][ T6113] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 466.086700][ T6113] usb 5-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 466.086727][ T6113] usb 5-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 466.086748][ T6113] usb 5-1: Manufacturer: syz [ 466.537529][ T6113] usb 5-1: config 0 descriptor?? [ 466.822227][ T6113] smsusb:smsusb_probe: board id=9, interface number 0 [ 466.863721][ T6113] smsusb:smsusb_probe: Device initialized with return code -19 [ 467.960670][ T6113] usb 5-1: USB disconnect, device number 43 [ 468.062724][ T5812] Bluetooth: hci5: unexpected event for opcode 0x0c23 [ 468.441699][T11902] bond0: (slave syz_tun): Releasing backup interface [ 468.894217][ T37] audit: type=1326 audit(1766081842.398:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11889 comm="syz.4.2319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f480656f749 code=0x7fc00000 [ 471.989614][ T5812] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 472.198150][ T3467] tipc: Subscription rejected, illegal request [ 473.591342][ T7478] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 474.555268][ T7478] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 474.555305][ T7478] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 474.555329][ T7478] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 474.555372][ T7478] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 474.555397][ T7478] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.614831][ T7478] usb 3-1: config 0 descriptor?? [ 475.043107][ T7478] plantronics 0003:047F:FFFF.0018: reserved main item tag 0xd [ 475.096741][ T7478] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 475.383414][ T6150] usb 3-1: USB disconnect, device number 60 [ 476.163942][ T7478] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 476.163978][ T7478] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 476.164005][ T7478] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 476.164032][ T7478] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 476.164058][ T7478] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 476.164093][ T7478] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 476.164119][ T7478] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 476.164146][ T7478] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 476.164172][ T7478] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 476.164198][ T7478] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 476.297323][ T7478] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [sy] on syz0 [ 476.533503][T12033] fido_id[12033]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 476.585798][ T6150] hid-generic 8285:80000001:0814.001A: hidraw0: HID v1.ff Device [syz1] on syz0 [ 476.759589][T12045] fido_id[12045]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 477.501592][ T806] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 477.873101][ T806] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 477.873135][ T806] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7 [ 477.873162][ T806] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 477.876536][ T806] usb 3-1: language id specifier not provided by device, defaulting to English [ 477.934819][ T806] usb 3-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e [ 477.934894][ T806] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.934975][ T806] usb 3-1: Manufacturer: ‰ [ 477.935037][ T806] usb 3-1: SerialNumber: syz [ 478.210132][ T806] usb 3-1: config 0 descriptor?? [ 478.772567][ T806] em28xx 3-1:0.0: New device ‰ @ 480 Mbps (2013:0251, interface 0, class 0) [ 478.772601][ T806] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 479.051804][ T806] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 479.052260][ T806] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 479.052681][ T806] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 479.052699][ T806] em28xx 3-1:0.0: No AC97 audio processor [ 479.095246][T12117] netlink: 'syz.3.2409': attribute type 10 has an invalid length. [ 479.095270][T12117] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2409'. [ 479.095842][T12117] team0: entered promiscuous mode [ 479.095859][T12117] team_slave_0: entered promiscuous mode [ 479.096106][T12117] team0: entered allmulticast mode [ 479.096120][T12117] team_slave_0: entered allmulticast mode [ 479.096981][T12117] bridge0: port 3(team0) entered blocking state [ 479.100644][T12117] bridge0: port 3(team0) entered disabled state [ 479.100860][ T806] usb 3-1: USB disconnect, device number 61 [ 479.164923][ T806] em28xx 3-1:0.0: Disconnecting em28xx [ 479.189797][ T806] em28xx 3-1:0.0: Freeing device [ 479.201991][T12117] bridge0: port 3(team0) entered blocking state [ 479.202136][T12117] bridge0: port 3(team0) entered forwarding state [ 479.325890][T12123] gretap1: entered promiscuous mode [ 479.447573][T12132] netlink: 'syz.1.2416': attribute type 24 has an invalid length. [ 480.737450][T12156] netlink: 'syz.2.2428': attribute type 24 has an invalid length. [ 481.028794][ T5812] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 481.118831][T12172] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2433'. [ 482.332482][T12226] syz.2.2455 (12226) used greatest stack depth: 16440 bytes left [ 482.964466][T12268] gretap1: entered promiscuous mode [ 483.126030][T12272] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2473'. [ 483.144875][ T37] audit: type=1326 audit(1766081856.708:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12270 comm="syz.2.2474" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7bf324f749 code=0x0 [ 483.312539][T12272] bond0: (slave syz_tun): Releasing backup interface [ 483.495579][T12281] pimreg: entered allmulticast mode [ 483.499485][T12281] pimreg: left allmulticast mode [ 483.581335][ T6296] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 483.731537][T12288] netlink: 182 bytes leftover after parsing attributes in process `syz.1.2481'. [ 483.743668][ T6296] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 483.743702][ T6296] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7 [ 483.743729][ T6296] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 483.748785][ T6296] usb 3-1: language id specifier not provided by device, defaulting to English [ 483.785668][ T6296] usb 3-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e [ 483.785696][ T6296] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.785716][ T6296] usb 3-1: Manufacturer: ‰ [ 483.785731][ T6296] usb 3-1: SerialNumber: syz [ 483.795811][ T6296] usb 3-1: config 0 descriptor?? [ 483.842640][ T6296] em28xx 3-1:0.0: New device ‰ @ 480 Mbps (2013:0251, interface 0, class 0) [ 483.842672][ T6296] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 484.112203][ T6296] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 484.112659][ T6296] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 484.114793][ T6296] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 484.114811][ T6296] em28xx 3-1:0.0: No AC97 audio processor [ 484.138842][ T6296] usb 3-1: USB disconnect, device number 62 [ 484.163564][ T6296] em28xx 3-1:0.0: Disconnecting em28xx [ 484.186863][ T6296] em28xx 3-1:0.0: Freeing device [ 484.228201][T12308] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2490'. [ 484.228236][T12308] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2490'. [ 484.228251][T12308] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2490'. [ 484.228266][T12308] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2490'. [ 484.369643][T12314] netlink: 'syz.0.2491': attribute type 1 has an invalid length. [ 484.380535][T12314] gretap1: entered promiscuous mode [ 487.010899][T12354] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2508'. [ 487.010935][T12354] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2508'. [ 487.010951][T12354] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2508'. [ 487.010966][T12354] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2508'. [ 487.111627][T12361] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2510'. [ 488.784899][T12383] overlayfs: failed to clone upperpath [ 489.260131][ T6150] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 489.261291][ T6543] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 489.411306][ T6543] usb 5-1: Using ep0 maxpacket: 8 [ 489.413829][ T6543] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 489.413882][ T6543] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 489.413905][ T6543] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 489.413931][ T6543] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 489.413954][ T6543] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 489.413994][ T6543] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 489.414167][ T6543] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.414304][ T6150] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 489.414370][ T6150] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 489.414396][ T6150] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 489.414418][ T6150] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 489.415601][ T6150] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 489.415627][ T6150] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 489.415646][ T6150] usb 3-1: Manufacturer: syz [ 489.624808][ T6150] usb 3-1: config 0 descriptor?? [ 489.832180][ T6543] usb 5-1: usb_control_msg returned -32 [ 489.832229][ T6543] usbtmc 5-1:16.0: can't read capabilities [ 490.001549][ T6150] rc_core: IR keymap rc-hauppauge not found [ 490.001564][ T6150] Registered IR keymap rc-empty [ 490.001656][ T6150] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 490.021647][ T6150] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 490.042944][ T6150] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 490.046200][ T6150] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input47 [ 490.090224][ T6150] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 490.101839][ T6150] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 490.121449][ T6150] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 490.141530][ T6150] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 490.161497][ T6150] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 490.181831][ T6150] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 490.353157][ T6150] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 490.371389][ T6150] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 490.394526][ T6150] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 490.395189][ T806] usb 5-1: USB disconnect, device number 44 [ 490.418629][ T6150] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 490.761675][ T6150] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 490.761782][ T6150] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 490.923945][ T6150] usb 3-1: USB disconnect, device number 63 [ 493.671856][T12421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2531'. [ 493.675337][T12420] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 494.097449][T12432] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2535'. [ 494.097484][T12432] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2535'. [ 494.097499][T12432] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2535'. [ 494.097513][T12432] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2535'. [ 494.723809][T12442] netlink: 'syz.2.2541': attribute type 1 has an invalid length. [ 494.752198][T12356] syz.1.2510 (12356) used greatest stack depth: 15536 bytes left [ 495.032197][T12442] 8021q: adding VLAN 0 to HW filter on device bond1 [ 496.864033][T12447] gretap1: entered promiscuous mode [ 496.932395][T12458] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 497.355604][T12473] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2554'. [ 497.355639][T12473] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2554'. [ 497.355654][T12473] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2554'. [ 497.355668][T12473] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2554'. [ 497.491335][ T5812] Bluetooth: hci5: unexpected event 0x03 length: 1 < 11 [ 499.996504][T12495] program syz.2.2561 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 500.570805][T12510] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2567'. [ 500.769666][T12515] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2570'. [ 500.769701][T12515] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2570'. [ 500.769716][T12515] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2570'. [ 500.769730][T12515] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2570'. [ 500.907759][T12515] hpfs: hpfs_map_sector(): read error [ 500.974444][T12517] program syz.4.2570 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 501.004719][T12515] program syz.4.2570 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 501.186907][T12524] pimreg11: entered allmulticast mode [ 501.251375][ T5895] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 501.422863][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 501.422898][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 501.422936][ T5895] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 501.422966][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.422967][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.423032][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.458344][ T5895] usb 5-1: config 0 descriptor?? [ 502.057024][ T5895] hid_parser_main: 42 callbacks suppressed [ 502.057050][ T5895] arvo 0003:1E7D:30D4.001B: unknown main item tag 0x0 [ 502.088144][ T5895] arvo 0003:1E7D:30D4.001B: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.4-1/input0 [ 502.538160][ T5895] usb 5-1: USB disconnect, device number 45 [ 505.670313][T12607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2601'. [ 507.169712][T12617] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 511.081822][ T9] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 511.207004][T12703] gretap1: entered promiscuous mode [ 511.231534][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 511.240146][ T9] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 511.240171][ T9] usb 5-1: config 0 has no interface number 0 [ 511.240221][ T9] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 511.240255][ T9] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 511.272116][ T9] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 511.272133][ T9] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 511.272145][ T9] usb 5-1: Product: syz [ 511.272153][ T9] usb 5-1: SerialNumber: syz [ 511.313521][ T9] usb 5-1: config 0 descriptor?? [ 511.335250][ T9] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 511.351120][ T9] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input48 [ 511.548390][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 514.362259][ T6150] usb 5-1: USB disconnect, device number 46 [ 515.855359][ T6150] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 517.846870][T12796] tipc: Started in network mode [ 517.846903][T12796] tipc: Node identity ac14140f, cluster identity 4711 [ 517.848435][T12796] tipc: New replicast peer: 255.255.255.255 [ 517.885578][T12796] tipc: Enabled bearer , priority 10 [ 519.665749][ T6150] tipc: Node number set to 2886997007 [ 524.037389][T12883] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2697'. [ 524.616468][T12917] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2712'. [ 525.074824][T12941] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2724'. [ 527.706025][ T5812] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 528.155219][T12971] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2735'. [ 528.461307][ T806] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 528.723150][ T806] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 528.723181][ T806] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 6, skipping [ 528.723203][ T806] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 528.726428][ T806] usb 3-1: string descriptor 0 read error: -22 [ 528.726529][ T806] usb 3-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e [ 528.726542][ T806] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.732076][ T806] usb 3-1: config 0 descriptor?? [ 530.199769][ T9] usb 3-1: USB disconnect, device number 64 [ 530.951297][ T5895] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 530.992182][T13032] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2760'. [ 530.992215][T13032] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2760'. [ 530.992230][T13032] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2760'. [ 530.992245][T13032] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2760'. [ 531.113739][ T5895] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 531.113798][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 531.113829][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 531.113852][ T5895] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 531.115301][ T5895] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 531.115328][ T5895] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 531.115349][ T5895] usb 5-1: Manufacturer: syz [ 531.127973][ T5895] usb 5-1: config 0 descriptor?? [ 531.451363][ T5895] rc_core: IR keymap rc-hauppauge not found [ 531.451385][ T5895] Registered IR keymap rc-empty [ 531.451545][ T5895] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 531.472232][ T5895] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 531.492950][ T5895] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 531.496018][ T5895] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input49 [ 531.519960][ T5895] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 531.531459][ T5895] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 531.550215][T13053] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2768'. [ 531.551454][ T5895] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 531.581477][ T5895] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 531.730947][ T5895] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 531.741406][ T5895] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 531.761333][ T5895] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 531.781669][ T5895] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 531.808036][ T5895] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 532.078572][ T5895] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 532.740189][T13057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2770'. [ 533.786112][ T5895] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 533.786139][ T5895] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 533.817650][ T5895] usb 5-1: USB disconnect, device number 47 [ 535.488336][T13088] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2782'. [ 535.488371][T13088] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2782'. [ 535.488384][T13088] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2782'. [ 535.488399][T13088] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2782'. [ 537.307022][ T6150] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 537.663235][ T6150] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 537.663275][ T6150] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 537.663292][ T6150] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 537.663303][ T6150] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 537.664518][ T6150] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 537.664546][ T6150] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 537.664565][ T6150] usb 5-1: Manufacturer: syz [ 537.667604][ T6150] usb 5-1: config 0 descriptor?? [ 537.868975][T13113] program syz.2.2794 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 538.121905][ T6150] rc_core: IR keymap rc-hauppauge not found [ 538.121928][ T6150] Registered IR keymap rc-empty [ 538.122090][ T6150] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 538.141421][ T6150] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 538.148686][T13124] fuse: Bad value for 'fd' [ 538.167402][ T6150] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 538.169129][ T6150] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input50 [ 538.228186][ T6150] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 538.242483][ T6150] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 538.271442][ T6150] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 538.439158][ T6150] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 538.462938][ T6150] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 538.481682][ T6150] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 538.502796][ T6150] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 538.523014][ T6150] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 538.630488][ T6150] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 538.673249][ T6150] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 539.425859][ T6150] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 539.425887][ T6150] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 539.492361][ T6150] usb 5-1: USB disconnect, device number 48 [ 540.397680][T13139] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2805'. [ 540.397717][T13139] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2805'. [ 540.397732][T13139] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2805'. [ 540.397747][T13139] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2805'. [ 540.597623][T13139] hpfs: hpfs_map_sector(): read error [ 540.652925][T13139] program syz.4.2805 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 540.706353][T13140] program syz.4.2805 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 541.231455][ T6150] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 541.401604][ T6150] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 541.401648][ T6150] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 541.401687][ T6150] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 541.401711][ T6150] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.410480][ T6150] usb 5-1: config 0 descriptor?? [ 543.745710][ T6150] arvo 0003:1E7D:30D4.001C: item fetching failed at offset 3/7 [ 543.746138][ T6150] arvo 0003:1E7D:30D4.001C: parse failed [ 543.746177][ T6150] arvo 0003:1E7D:30D4.001C: probe with driver arvo failed with error -22 [ 543.979519][ T6150] usb 5-1: USB disconnect, device number 49 [ 544.120723][T13180] netlink: 'syz.1.2821': attribute type 1 has an invalid length. [ 544.137194][T13180] gretap1: entered promiscuous mode [ 544.948649][T13201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2833'. [ 544.948691][T13201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2833'. [ 549.989690][T13302] Illegal XDP return value 4294967274 on prog (id 334) dev N/A, expect packet loss! [ 551.160315][T13345] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2893'. [ 551.401641][T13340] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 553.050477][T13378] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2906'. [ 553.050514][T13378] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2906'. [ 553.050529][T13378] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2906'. [ 553.050543][T13378] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2906'. [ 553.185662][T13384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2908'. [ 553.185689][T13384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2908'. [ 553.216508][T13378] hpfs: hpfs_map_sector(): read error [ 553.259643][T13378] program syz.4.2906 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 553.310344][T13379] program syz.4.2906 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 553.611779][ T5909] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 553.777381][ T5909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 553.777414][ T5909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 553.777436][ T5909] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 553.777449][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.786982][ T5909] usb 5-1: config 0 descriptor?? [ 554.161601][T13399] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2914'. [ 554.246840][ T5909] arvo 0003:1E7D:30D4.001D: unknown main item tag 0x0 [ 554.281804][ T5909] arvo 0003:1E7D:30D4.001D: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.4-1/input0 [ 554.572181][T13406] 9p: Bad value for 'rfdno' [ 554.774601][ T5895] usb 5-1: USB disconnect, device number 50 [ 557.401397][T13440] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 557.848125][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ba0a800: rx timeout, send abort [ 557.850575][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805ba0a800: 0x2ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 561.379814][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880580ccc00: rx timeout, send abort [ 561.381213][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880580ccc00: 0x2ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 561.678792][T13550] gretap1: entered promiscuous mode [ 563.571855][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802a8c5400: rx timeout, send abort [ 563.572695][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802a8c5400: 0x2ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 563.582149][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.582211][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.759762][ T5823] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 563.774587][ T5823] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 563.776153][ T5823] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 563.777265][ T5823] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 563.778125][ T5823] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 564.001307][ T6342] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 564.163808][ T6342] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 564.163838][ T6342] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 564.163860][ T6342] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 564.163912][ T6342] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 564.163940][ T6342] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 564.166151][ T6342] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 564.166180][ T6342] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 564.166200][ T6342] usb 3-1: Product: syz [ 564.166215][ T6342] usb 3-1: Manufacturer: syz [ 564.195822][ T6342] cdc_wdm 3-1:1.0: skipping garbage [ 564.195842][ T6342] cdc_wdm 3-1:1.0: skipping garbage [ 564.221699][ T6342] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 564.221719][ T6342] cdc_wdm 3-1:1.0: Unknown control protocol [ 565.310472][T13587] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2993'. [ 565.475587][ T6113] usb 3-1: USB disconnect, device number 65 [ 565.802516][ T3766] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 565.802553][ T3766] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.891330][ T5823] Bluetooth: hci1: command tx timeout [ 567.272600][ T3766] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 567.272636][ T3766] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.698165][ T3766] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 567.698200][ T3766] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.973296][ T5823] Bluetooth: hci1: command tx timeout [ 569.298146][ T3766] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 569.298182][ T3766] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.485299][T13570] chnl_net:caif_netlink_parms(): no params data found [ 570.052321][ T5823] Bluetooth: hci1: command tx timeout [ 573.405454][ T5823] Bluetooth: hci1: command tx timeout [ 573.503053][T13570] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.513198][T13570] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.513410][T13570] bridge_slave_0: entered allmulticast mode [ 573.544727][T13570] bridge_slave_0: entered promiscuous mode [ 573.674926][T13570] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.675077][T13570] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.675268][T13570] bridge_slave_1: entered allmulticast mode [ 573.691483][T13570] bridge_slave_1: entered promiscuous mode [ 573.980582][ T3766] bridge0: port 3(team0) entered disabled state [ 574.180338][ T3766] bridge_slave_1: left allmulticast mode [ 574.180366][ T3766] bridge_slave_1: left promiscuous mode [ 574.180615][ T3766] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.332781][ T3766] bridge_slave_0: left allmulticast mode [ 574.332809][ T3766] bridge_slave_0: left promiscuous mode [ 574.333041][ T3766] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.592081][ T3766] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 577.651817][ T3766] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 577.673330][ T3766] bond0 (unregistering): Released all slaves [ 578.929331][T13570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 580.685439][T13570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 580.822548][ T56] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 580.981342][ T56] usb 5-1: Using ep0 maxpacket: 16 [ 580.997853][ T56] usb 5-1: config 0 has an invalid interface number: 140 but max is 0 [ 580.998180][ T56] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 580.998439][ T56] usb 5-1: config 0 has no interface number 0 [ 580.998834][ T56] usb 5-1: config 0 interface 140 has no altsetting 0 [ 581.043928][ T56] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 581.044047][ T56] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 581.044189][ T56] usb 5-1: Product: syz [ 581.044705][ T56] usb 5-1: SerialNumber: syz [ 581.290664][ T56] usb 5-1: config 0 descriptor?? [ 581.974028][T13745] team0: Caught tx_queue_len zero misconfig [ 584.792518][ T992] usb 5-1: USB disconnect, device number 51 [ 587.864705][T13570] team0: Port device team_slave_0 added [ 588.068454][T13570] team0: Port device team_slave_1 added [ 595.620496][ T3766] hsr_slave_0: left promiscuous mode [ 595.762191][ T3766] hsr_slave_1: left promiscuous mode [ 595.818875][ T3766] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 595.819921][ T3766] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 596.118832][ T3766] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 596.140599][ T3766] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 598.096650][ T3766] veth1_vlan: left promiscuous mode [ 598.161651][ T3766] veth0_vlan: left promiscuous mode [ 624.312934][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.314509][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 632.987540][ T5812] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 633.026991][ T5812] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 633.078831][ T5812] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 633.166443][ T5812] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 633.199477][ T5812] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 636.052789][ T5823] Bluetooth: hci2: command tx timeout [ 638.131264][ T5823] Bluetooth: hci2: command tx timeout [ 640.211360][ T5823] Bluetooth: hci2: command tx timeout [ 642.301512][ T5823] Bluetooth: hci2: command tx timeout [ 654.972493][T13793] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 655.012542][T13793] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 655.041050][T13793] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 655.130042][T13793] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 655.152916][T13793] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 656.051407][ T5823] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 656.894268][ T5823] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 657.732533][ T5823] Bluetooth: hci6: command tx timeout [ 658.938929][T13790] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 659.811411][ T5823] Bluetooth: hci6: command tx timeout [ 661.747072][ T3766] pim6reg (unregistering): left allmulticast mode [ 661.901749][ T5823] Bluetooth: hci6: command tx timeout [ 663.978639][ T5823] Bluetooth: hci6: command tx timeout [ 667.574278][T13793] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 667.609143][T13793] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 667.637518][T13793] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 667.712947][T13793] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 667.728417][T13793] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 668.314046][ T5823] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 668.371910][ T5823] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 668.394984][ T5823] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 668.477497][ T5823] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 668.540017][ T5823] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 669.902775][ T5812] Bluetooth: hci5: command tx timeout [ 671.172465][ T5812] Bluetooth: hci7: command tx timeout [ 671.971280][ T5812] Bluetooth: hci5: command tx timeout [ 673.251328][ T5812] Bluetooth: hci7: command tx timeout [ 674.061359][ T5812] Bluetooth: hci5: command tx timeout [ 675.331233][ T5812] Bluetooth: hci7: command tx timeout [ 676.141462][ T5812] Bluetooth: hci5: command tx timeout [ 677.491698][ T5812] Bluetooth: hci7: command tx timeout [ 685.825257][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.829384][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.891214][ T5812] Bluetooth: hci1: command 0x0406 tx timeout [ 692.444324][ T5812] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 692.476637][ T5812] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 692.483315][ T5812] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 692.563927][ T5812] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 692.602205][ T5812] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 695.012613][ T5823] Bluetooth: hci8: command tx timeout [ 697.091752][ T5823] Bluetooth: hci8: command tx timeout [ 699.172051][ T5823] Bluetooth: hci8: command tx timeout [ 701.251639][ T5823] Bluetooth: hci8: command tx timeout [ 726.578864][ T3766] team_slave_0 (unregistering): left promiscuous mode [ 726.583063][ T3766] team_slave_0 (unregistering): left allmulticast mode [ 726.839699][ T3766] team0 (unregistering): Port device team_slave_0 removed [ 737.909053][ T5812] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 737.973410][ T5812] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 737.990978][ T5812] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 738.056183][ T5812] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 738.084562][ T5812] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 740.223910][ T5823] Bluetooth: hci3: command tx timeout [ 741.093309][ T5812] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 741.132697][ T5812] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 741.150262][ T5812] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 741.195751][ T5812] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 741.229109][ T5812] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 742.301275][ T5823] Bluetooth: hci3: command tx timeout [ 742.957683][T13793] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 743.020922][T13793] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 743.060508][T13793] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 743.292640][T13793] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 743.319376][T13793] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 743.362033][T13793] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 743.446847][ T5124] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 743.486631][ T5823] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 743.569113][ T5823] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 743.669602][ T5823] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 744.292511][ T5812] Bluetooth: hci9: command tx timeout [ 744.371290][ T5812] Bluetooth: hci3: command tx timeout [ 745.493723][ T5812] Bluetooth: hci10: command tx timeout [ 746.294057][ T5812] Bluetooth: hci11: command tx timeout [ 746.371311][ T5812] Bluetooth: hci9: command tx timeout [ 746.461292][ T5812] Bluetooth: hci3: command tx timeout [ 747.222571][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.226628][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.581370][ T5812] Bluetooth: hci10: command tx timeout [ 748.371208][ T5812] Bluetooth: hci11: command tx timeout [ 748.451237][ T5812] Bluetooth: hci9: command tx timeout [ 749.651394][ T5812] Bluetooth: hci10: command tx timeout [ 750.451461][ T5812] Bluetooth: hci11: command tx timeout [ 750.541370][ T5812] Bluetooth: hci9: command tx timeout [ 751.741337][ T5812] Bluetooth: hci10: command tx timeout [ 752.549588][ T5812] Bluetooth: hci11: command tx timeout [ 752.931669][ T38] INFO: task dhcpcd:5470 blocked for more than 143 seconds. [ 752.931736][ T38] Not tainted syzkaller #0 [ 752.931784][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 752.931792][ T38] task:dhcpcd state:D stack:18648 pid:5470 tgid:5470 ppid:5469 task_flags:0x400140 flags:0x00080000 [ 752.931918][ T38] Call Trace: [ 752.931929][ T38] [ 752.931980][ T38] __schedule+0x1480/0x50a0 [ 752.932064][ T38] ? __pfx___schedule+0x10/0x10 [ 752.932177][ T38] ? lockdep_hardirqs_on+0x98/0x140 [ 752.932191][ T38] ? preempt_schedule+0xae/0xc0 [ 752.932253][ T38] ? __pfx___schedule+0x10/0x10 [ 752.932314][ T38] ? preempt_schedule_common+0x83/0xd0 [ 752.932377][ T38] ? preempt_schedule+0xae/0xc0 [ 752.932437][ T38] ? __pfx_preempt_schedule+0x10/0x10 [ 752.932506][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 752.932569][ T38] rt_mutex_schedule+0x77/0xf0 [ 752.932585][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 752.932647][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 752.932719][ T38] rt_mutex_slowlock+0x2a8/0x6b0 [ 752.932777][ T38] ? rt_mutex_slowlock+0x1c9/0x6b0 [ 752.932833][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 752.932897][ T38] ? rtnl_dumpit+0x92/0x200 [ 752.932963][ T38] ? rtnl_dumpit+0x92/0x200 [ 752.932977][ T38] mutex_lock_nested+0x16a/0x1d0 [ 752.933036][ T38] ? __pfx___alloc_skb+0x10/0x10 [ 752.933102][ T38] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 752.933226][ T38] rtnl_dumpit+0x92/0x200 [ 752.933288][ T38] netlink_dump+0x6e4/0xe90 [ 752.933361][ T38] ? __pfx_netlink_dump+0x10/0x10 [ 752.933418][ T38] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 752.933435][ T38] ? lockdep_hardirqs_on+0x98/0x140 [ 752.933556][ T38] __netlink_dump_start+0x5cb/0x7e0 [ 752.933627][ T38] rtnetlink_rcv_msg+0x9eb/0xb70 [ 752.933696][ T38] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 752.933761][ T38] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 752.933817][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 752.933834][ T38] ? __pfx_rtnl_dumpit+0x10/0x10 [ 752.933888][ T38] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 752.933955][ T38] netlink_rcv_skb+0x208/0x470 [ 752.934017][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 752.934090][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 752.934225][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 752.934355][ T38] netlink_unicast+0x846/0xa10 [ 752.934488][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 752.934609][ T38] ? smack_socket_getpeersec_dgram+0x266/0x430 [ 752.934739][ T38] ? netlink_sendmsg+0x642/0xb30 [ 752.934810][ T38] ? skb_put+0x11b/0x210 [ 752.934938][ T38] netlink_sendmsg+0x805/0xb30 [ 752.935141][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 752.935268][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 752.935463][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 752.935597][ T38] __sock_sendmsg+0x21c/0x270 [ 752.935796][ T38] __sys_sendto+0x3c7/0x520 [ 752.935929][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 752.936256][ T38] ? rcu_is_watching+0x15/0xb0 [ 752.936510][ T38] __x64_sys_sendto+0xde/0x100 [ 752.936649][ T38] do_syscall_64+0xfa/0xf80 [ 752.936840][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.936970][ T38] ? clear_bhb_loop+0x60/0xb0 [ 752.937171][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.937367][ T38] RIP: 0033:0x7faaba26e407 [ 752.938798][ T38] RSP: 002b:00007ffc803acaf0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 752.939527][ T38] RAX: ffffffffffffffda RBX: 00007faaba1e4740 RCX: 00007faaba26e407 SYZFAIL: failed to recv rpc [ 752.939985][ T38] RDX: 0000000000000014 RSI: 00007ffc803acb80 RDI: 0000000000000011 [ 752.940977][ T38] RBP: 00007ffc803acb64 R08: 00007ffc803acb64 R09: 000000000000000c fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 753.417550][ T38] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffc803cd470 [ 753.420502][ T38] R13: 00007faaba1e46c8 R14: 00007ffc803acc60 R15: 00007ffc803bd240 [ 753.487475][ T38] [ 753.487797][ T38] INFO: task kworker/1:8:6150 blocked for more than 143 seconds. [ 753.487874][ T38] Not tainted syzkaller #0 [ 753.487994][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 753.488005][ T38] task:kworker/1:8 state:D stack:19944 pid:6150 tgid:6150 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 753.488332][ T38] Workqueue: events switchdev_deferred_process_work [ 753.488521][ T38] Call Trace: [ 753.488529][ T38] [ 753.488652][ T38] __schedule+0x1480/0x50a0 [ 753.488918][ T38] ? rcu_is_watching+0x15/0xb0 [ 753.489047][ T38] ? __pfx___schedule+0x10/0x10 [ 753.489183][ T38] ? preempt_schedule_irq+0xde/0x150 [ 753.489371][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 753.489504][ T38] rt_mutex_schedule+0x77/0xf0 [ 753.489634][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 753.489767][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 753.489968][ T38] rt_mutex_slowlock+0x2a8/0x6b0 [ 753.490159][ T38] ? rt_mutex_slowlock+0x1c9/0x6b0 [ 753.490299][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 753.490422][ T38] ? switchdev_deferred_process_work+0xe/0x20 [ 753.490558][ T38] ? process_scheduled_works+0x9ef/0x1770 [ 753.490749][ T38] ? switchdev_deferred_process_work+0xe/0x20 [ 753.490828][ T38] mutex_lock_nested+0x16a/0x1d0 [ 753.490934][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 753.490955][ T38] ? process_scheduled_works+0x9ef/0x1770 [ 753.491406][ T38] switchdev_deferred_process_work+0xe/0x20 [ 753.551776][ T38] process_scheduled_works+0xad1/0x1770 [ 753.552035][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 753.552293][ T38] worker_thread+0x8a0/0xda0 [ 753.552615][ T38] kthread+0x711/0x8a0 [ 753.552750][ T38] ? __pfx_worker_thread+0x10/0x10 [ 753.552877][ T38] ? __pfx_kthread+0x10/0x10 [ 753.553006][ T38] ? rt_spin_unlock+0x150/0x200 [ 753.553142][ T38] ? rt_spin_unlock+0x161/0x200 [ 753.553272][ T38] ? __pfx_kthread+0x10/0x10 [ 753.553403][ T38] ret_from_fork+0x599/0xb30 [ 753.553534][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 753.553672][ T38] ? __switch_to_asm+0x39/0x70 [ 753.553785][ T38] ? __switch_to_asm+0x33/0x70 [ 753.553867][ T38] ? __pfx_kthread+0x10/0x10 [ 753.554053][ T38] ret_from_fork_asm+0x1a/0x30 [ 753.554319][ T38] [ 753.554453][ T38] INFO: task syz-executor:13570 blocked for more than 143 seconds. [ 753.554526][ T38] Not tainted syzkaller #0 [ 753.554589][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 753.554655][ T38] task:syz-executor state:D stack:21512 pid:13570 tgid:13570 ppid:1 task_flags:0x400140 flags:0x00080002 [ 753.554918][ T38] Call Trace: [ 753.555042][ T38] [ 753.555113][ T38] __schedule+0x1480/0x50a0 [ 753.555366][ T38] ? __lock_acquire+0x6b6/0x2cf0 [ 753.616317][ T38] ? __pfx___schedule+0x10/0x10 [ 753.616580][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 753.616713][ T38] rt_mutex_schedule+0x77/0xf0 [ 753.616841][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 753.616973][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 753.617235][ T38] rt_mutex_slowlock+0x2a8/0x6b0 [ 753.617428][ T38] ? rt_mutex_slowlock+0x1c9/0x6b0 [ 753.617562][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 753.617760][ T38] ? rtnl_newlink+0x8ec/0x1c90 [ 753.617891][ T38] ? safesetid_security_capable+0xa9/0x1a0 [ 753.618086][ T38] ? bpf_lsm_capable+0x9/0x20 [ 753.618160][ T38] ? security_capable+0x7e/0x2e0 [ 753.618356][ T38] ? rtnl_newlink+0x8ec/0x1c90 [ 753.618487][ T38] mutex_lock_nested+0x16a/0x1d0 [ 753.618678][ T38] rtnl_newlink+0x8ec/0x1c90 [ 753.618871][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 753.619074][ T38] ? __lock_acquire+0x6b6/0x2cf0 [ 753.619263][ T38] ? __lock_acquire+0x6b6/0x2cf0 [ 753.619404][ T38] ? __switch_to+0xda8/0x1670 [ 753.619531][ T38] ? finish_task_switch+0x162/0x940 [ 753.619737][ T38] ? __lock_acquire+0x6b6/0x2cf0 [ 753.619849][ T38] ? rcu_is_watching+0x15/0xb0 [ 753.619930][ T38] ? trace_sched_exit_tp+0x36/0xf0 [ 753.663302][ T38] ? __schedule+0x1496/0x50a0 [ 753.663704][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 753.663838][ T38] rtnetlink_rcv_msg+0x7cf/0xb70 [ 753.664097][ T38] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 753.664223][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 753.664362][ T38] ? __lock_acquire+0x6b6/0x2cf0 [ 753.664489][ T38] netlink_rcv_skb+0x208/0x470 [ 753.664679][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 753.664810][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 753.664953][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 753.665139][ T38] netlink_unicast+0x846/0xa10 [ 753.665278][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 753.665411][ T38] ? smack_socket_getpeersec_dgram+0x266/0x430 [ 753.665525][ T38] ? netlink_sendmsg+0x642/0xb30 [ 753.665606][ T38] ? skb_put+0x11b/0x210 [ 753.665795][ T38] netlink_sendmsg+0x805/0xb30 [ 753.665935][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 753.666060][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 753.666196][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 753.666383][ T38] __sock_sendmsg+0x21c/0x270 [ 753.666524][ T38] __sys_sendto+0x3c7/0x520 [ 753.666654][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 753.721312][ T38] ? fput_close_sync+0x113/0x220 [ 753.721430][ T38] ? __pfx_fput_close_sync+0x10/0x10 [ 753.721567][ T38] __x64_sys_sendto+0xde/0x100 [ 753.721764][ T38] do_syscall_64+0xfa/0xf80 [ 753.721893][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.721969][ T38] ? clear_bhb_loop+0x60/0xb0 [ 753.722157][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.722294][ T38] RIP: 0033:0x7f3bf6ea15dc [ 753.722424][ T38] RSP: 002b:00007ffd219219a0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 753.722559][ T38] RAX: ffffffffffffffda RBX: 00007f3bf7c24620 RCX: 00007f3bf6ea15dc [ 753.722678][ T38] RDX: 0000000000000028 RSI: 00007f3bf7c24670 RDI: 0000000000000003 [ 753.722750][ T38] RBP: 0000000000000000 R08: 00007ffd219219f4 R09: 000000000000000c [ 753.722821][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 753.722887][ T38] R13: 0000000000000000 R14: 00007f3bf7c24670 R15: 0000000000000000 [ 753.723081][ T38] [ 753.723532][ T38] INFO: task kworker/u8:16:13671 blocked for more than 144 seconds. [ 753.723602][ T38] Not tainted syzkaller #0 [ 753.723666][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 753.723728][ T38] task:kworker/u8:16 state:D stack:23208 pid:13671 tgid:13671 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 753.723990][ T38] Workqueue: events_unbound linkwatch_event [ 753.724127][ T38] Call Trace: [ 753.724194][ T38] [ 753.724323][ T38] __schedule+0x1480/0x50a0 [ 753.724647][ T38] ? rcu_is_watching+0x15/0xb0 [ 753.724779][ T38] ? __pfx___schedule+0x10/0x10 [ 753.724915][ T38] ? preempt_schedule_irq+0xde/0x150 [ 753.725110][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 753.795629][ T38] rt_mutex_schedule+0x77/0xf0 [ 753.795745][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 753.795883][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 753.796084][ T38] rt_mutex_slowlock+0x2a8/0x6b0 [ 753.796284][ T38] ? rt_mutex_slowlock+0x1c9/0x6b0 [ 753.796417][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 753.796613][ T38] ? linkwatch_event+0xe/0x60 [ 753.796733][ T38] ? process_scheduled_works+0x9ef/0x1770 [ 753.796870][ T38] ? linkwatch_event+0xe/0x60 [ 753.797002][ T38] mutex_lock_nested+0x16a/0x1d0 [ 753.797130][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 753.797263][ T38] ? process_scheduled_works+0x9ef/0x1770 [ 753.797393][ T38] linkwatch_event+0xe/0x60 [ 753.797523][ T38] process_scheduled_works+0xad1/0x1770 [ 753.797791][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 753.797989][ T38] worker_thread+0x8a0/0xda0 [ 753.798122][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 753.798313][ T38] ? __kthread_parkme+0x7b/0x200 [ 753.798510][ T38] kthread+0x711/0x8a0 [ 753.798701][ T38] ? __pfx_worker_thread+0x10/0x10 [ 753.798777][ T38] ? __pfx_kthread+0x10/0x10 [ 753.798887][ T38] ? rt_spin_unlock+0x150/0x200 [ 753.798970][ T38] ? rt_spin_unlock+0x161/0x200 [ 753.799104][ T38] ? __pfx_kthread+0x10/0x10 [ 753.799223][ T38] ret_from_fork+0x599/0xb30 [ 753.855070][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 753.855198][ T38] ? __switch_to_asm+0x39/0x70 [ 753.855317][ T38] ? __switch_to_asm+0x33/0x70 [ 753.855400][ T38] ? __pfx_kthread+0x10/0x10 [ 753.855515][ T38] ret_from_fork_asm+0x1a/0x30 [ 753.855727][ T38] [ 753.855849][ T38] INFO: task syz.1.3054:13775 blocked for more than 144 seconds. [ 753.855923][ T38] Not tainted syzkaller #0 [ 753.855989][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 753.856056][ T38] task:syz.1.3054 state:D stack:26152 pid:13775 tgid:13772 ppid:5805 task_flags:0x400140 flags:0x00080002 [ 753.856438][ T38] Call Trace: [ 753.856446][ T38] [ 753.856568][ T38] __schedule+0x1480/0x50a0 [ 753.856711][ T38] ? __pfx___schedule+0x10/0x10 [ 753.856839][ T38] ? lockdep_hardirqs_on+0x98/0x140 [ 753.856962][ T38] ? preempt_schedule+0xae/0xc0 [ 753.857104][ T38] ? __pfx___schedule+0x10/0x10 [ 753.857215][ T38] ? preempt_schedule_common+0x83/0xd0 [ 753.857358][ T38] ? preempt_schedule+0xae/0xc0 [ 753.857496][ T38] ? __pfx_preempt_schedule+0x10/0x10 [ 753.857618][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 753.857751][ T38] rt_mutex_schedule+0x77/0xf0 [ 753.857880][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 753.858018][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 753.858284][ T38] rt_mutex_slowlock+0x2a8/0x6b0 [ 753.858397][ T38] ? rt_mutex_slowlock+0x1c9/0x6b0 [ 753.858481][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 753.858602][ T38] ? rtnetlink_rcv_msg+0x71c/0xb70 [ 753.926637][ T38] ? rtnetlink_rcv_msg+0x71c/0xb70 [ 753.926751][ T38] mutex_lock_nested+0x16a/0x1d0 [ 753.926895][ T38] rtnetlink_rcv_msg+0x71c/0xb70 [ 753.927026][ T38] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 753.927153][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 753.927294][ T38] ? netlink_rcv_skb+0x81/0x470 [ 753.927403][ T38] ? netlink_rcv_skb+0xca/0x470 [ 753.927484][ T38] ? kasan_check_range+0xa5/0x2c0 [ 753.927621][ T38] netlink_rcv_skb+0x208/0x470 [ 753.927756][ T38] ? rcu_is_watching+0x15/0xb0 [ 753.927936][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 753.928137][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 753.928342][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 753.928464][ T38] netlink_unicast+0x846/0xa10 [ 753.928604][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 753.928790][ T38] ? netlink_sendmsg+0x642/0xb30 [ 753.928867][ T38] ? skb_put+0x11b/0x210 [ 753.929059][ T38] netlink_sendmsg+0x805/0xb30 [ 753.929318][ T38] ? __pfx_[ 753.929318][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 753.929511][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 753.929639][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 753.929774][ T38] __sock_sendmsg+0x21c/0x270 [ 753.929910][ T38] ____sys_sendmsg+0x534/0x810 [ 753.930046][ T38] ? __pfx_____sys_sendmsg+0x10/0x10 [ 753.930169][ T38] ? import_iovec+0x74/0xa0 [ 753.998592][ T38] ___sys_sendmsg+0x21f/0x2a0 [ 753.998718][ T38] ? __pfx____sys_sendmsg+0x10/0x10 [ 753.998856][ T38] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 753.999245][ T38] ? __fget_files+0x2a/0x420 [ 753.999372][ T38] ? __fget_files+0x3a6/0x420 [ 753.999570][ T38] __sys_sendmmsg+0x22d/0x430 [ 753.999708][ T38] ? __pfx___sys_sendmmsg+0x10/0x10 [ 753.999905][ T38] ? __pfx_do_futex+0x10/0x10 [ 754.000360][ T38] __x64_sys_sendmmsg+0xa0/0xc0 [ 754.000552][ T38] do_syscall_64+0xfa/0xf80 [ 754.000683][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.000760][ T38] ? clear_bhb_loop+0x60/0xb0 [ 754.000946][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.001403][ T38] RIP: 0033:0x7fe5316bf749 [ 754.001479][ T38] RSP: 002b:00007fe52f91e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 754.001611][ T38] RAX: ffffffffffffffda RBX: 00007fe531915fa0 RCX: 00007fe5316bf749 [ 754.001730][ T38] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 754.001801][ T38] RBP: 00007fe531743f91 R08: 0000000000000000 R09: 0000000000000000 [ 754.001873][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 754.001998][ T38] R13: 00007fe531916038 R14: 00007fe531915fa0 R15: 00007ffc29c54c08 [ 754.002330][ T38] [ 754.002589][ T38] [ 754.002589][ T38] Showing all locks held in the system: [ 754.002657][ T38] 3 locks held by kworker/u8:0/12: [ 754.002780][ T38] #0: ffff88802fc09938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 754.078615][ T38] #1: ffffc90000117b80 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 754.079053][ T38] #2: ffffffff8e8a5778 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 754.079331][ T38] 1 lock held by ktimers/0/16: [ 754.079521][ T38] #0: ffff8880b883b6d8 (&rq->__lock){-...}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 754.079795][ T38] 4 locks held by pr/legacy/17: [ 754.079865][ T38] 4 locks held by rcuc/0/20: [ 754.080046][ T38] 1 lock held by khungtaskd/38: [ 754.080057][ T38] #0: ffffffff8d5ae8c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 754.080437][ T38] 6 locks held by kworker/u8:5/82: [ 754.080448][ T38] #0: ffff88813ff69938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 754.080842][ T38] #1: ffffc900015bfb80 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 754.081293][ T38] #2: ffff88805a4d0300 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 754.081558][ T38] #3: ffff88805a572920 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 754.081872][ T38] #4: ffffffff8d5ae8c0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1c1/0x3e0 [ 754.082217][ T38] #5: ffff8880b8936e50 ((crngs.lock)){+.+.}-{3:3}, at: crng_make_state+0x163/0x5e0 [ 754.182225][ T38] 3 locks held by kworker/1:3/992: [ 754.182351][ T38] 6 locks held by kworker/u8:8/1111: [ 754.182421][ T38] 3 locks held by kworker/u8:9/1164: [ 754.182544][ T38] 4 locks held by kworker/u8:12/1512: [ 754.182682][ T38] 3 locks held by kworker/u8:18/3607: [ 754.182752][ T38] 4 locks held by kworker/u8:20/3766: [ 754.182871][ T38] 1 lock held by syslogd/5157: [ 754.182883][ T38] 2 locks held by dhcpcd/5470: [ 754.183005][ T38] #0: ffff888027898928 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 754.183322][ T38] #1: ffffffff8e8a5778 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200 [ 754.183537][ T38] 2 locks held by getty/5568: [ 754.183604][ T38] #0: ffff8881433220a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 754.184051][ T38] #1: ffffc90003e7e2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x44f/0x1460 [ 754.184319][ T38] 1 lock held by syz-executor/5795: [ 754.184446][ T38] 3 locks held by kworker/0:5/5909: [ 754.184510][ T38] 3 locks held by kworker/1:8/6150: [ 754.184521][ T38] #0: ffff88813ff55138 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 754.185024][ T38] #1: ffffc90005a77b80 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 754.185306][ T38] #2: ffffffff8e8a5778 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 754.185690][ T38] 1 lock held by syz.4.796/8037: [ 754.185702][ T38] #0: ffffffff8e8a5778 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 754.257785][ T38] 7 locks held by kworker/u8:15/10001: [ 754.257857][ T38] 1 lock held by syz.0.2652/12764: [ 754.257923][ T38] #0: ffffffff8e8a5778 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 754.258380][ T38] 1 lock held by syz-executor/13570: [ 754.258446][ T38] #0: ffffffff8e8a5778 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8ec/0x1c90 [ 754.258774][ T38] 3 locks held by kworker/u8:16/13671: [ 754.258840][ T38] #0: ffff88813ff69938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 754.259298][ T38] #1: ffffc90005a67b80 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 754.259618][ T38] #2: ffffffff8e8a5778 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 754.260018][ T38] 1 lock held by syz.1.3054/13775: [ 754.260084][ T38] #0: ffffffff8e8a5778 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x71c/0xb70 [ 754.260477][ T38] 2 locks held by syz.2.3056/13780: [ 754.260597][ T38] 1 lock held by syz-executor/13782: [ 754.260608][ T38] #0: ffffffff8e8a5778 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 754.261452][ T38] 1 lock held by syz-executor/13791: [ 754.263024][ T38] #0: ffffffff8e8a5778 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 754.266770][ T38] 1 lock held by syz-executor/13799: [ 754.266835][ T38] #0: ffffffff8e8a5778 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 754.277712][ T38] 1 lock held by syz-executor/13800: [ 754.562402][ T38] #0: ffffffff8e8a5778 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 754.562976][ T38] 1 lock held by syz-executor/13804: [ 754.562989][ T38] #0: ffffffff8e8a5778 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 754.563446][ T38] 1 lock held by syz-executor/13814: [ 754.563515][ T38] #0: ffffffff8e8a5778 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 754.563967][ T38] 2 locks held by udevd/13815: [ 754.564033][ T38] 1 lock held by syz-executor/13818: [ 754.564103][ T38] #0: ffffffff8e8a5778 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 754.564563][ T38] 1 lock held by syz-executor/13819: [ 754.564631][ T38] #0: ffffffff8e8a5778 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 754.565268][ T38] 1 lock held by syz-executor/13821: [ 754.565280][ T38] #0: ffffffff8e8a5778 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 754.565668][ T38] 1 lock held by udevd/13822: [ 754.565740][ T38] 1 lock held by udevd/13827: [ 754.567708][ T38] 2 locks held by udevd/13828: [ 754.569866][ T38] 4 locks held by syz-executor/13829: [ 754.572158][ T38] [ 754.572165][ T38] ============================================= [ 754.572165][ T38] [ 754.573738][ T38] NMI backtrace for cpu 1 [ 754.573773][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 754.573796][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 754.573807][ T38] Call Trace: [ 754.573814][ T38] [ 754.573822][ T38] dump_stack_lvl+0x189/0x250 [ 754.573852][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 754.573876][ T38] ? __pfx__printk+0x10/0x10 [ 754.573892][ T38] ? preempt_schedule_irq+0xde/0x150 [ 754.573931][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 754.573959][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 754.573986][ T38] ? __pfx__printk+0x10/0x10 [ 754.574008][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 754.574031][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 754.574058][ T38] sys_info+0x135/0x170 [ 754.574078][ T38] watchdog+0xf95/0xfe0 [ 754.574104][ T38] ? watchdog+0x20a/0xfe0 [ 754.574131][ T38] kthread+0x711/0x8a0 [ 754.574159][ T38] ? __pfx_watchdog+0x10/0x10 [ 754.574185][ T38] ? __pfx_kthread+0x10/0x10 [ 754.574207][ T38] ? rt_spin_unlock+0x150/0x200 [ 754.574235][ T38] ? rt_spin_unlock+0x161/0x200 [ 754.574257][ T38] ? __pfx_kthread+0x10/0x10 [ 754.574282][ T38] ret_from_fork+0x599/0xb30 [ 754.574306][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 754.574335][ T38] ? __switch_to_asm+0x39/0x70 [ 754.574359][ T38] ? __switch_to_asm+0x33/0x70 [ 754.574383][ T38] ? __pfx_kthread+0x10/0x10 [ 754.574409][ T38] ret_from_fork_asm+0x1a/0x30 [ 754.574450][ T38] [ 754.574471][ T38] Sending NMI from CPU 1 to CPUs 0: [ 754.574493][ C0] NMI backtrace for cpu 0 [ 754.574507][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 754.574526][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 754.574535][ C0] RIP: 0010:run_ktimerd+0x0/0x190 [ 754.574557][ C0] Code: c7 20 db e9 8a e8 90 1e 4e 09 65 48 8b 05 58 a1 2c 10 e9 d3 c6 51 09 cc 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 48 89 e5 41 57 41 56 41 54 53 48 83 e4 e0 48 83 ec [ 754.574571][ C0] RSP: 0018:ffffc90000157cb8 EFLAGS: 00000246 [ 754.574586][ C0] RAX: ffff88813fe51320 RBX: dffffc0000000000 RCX: ffffffff8d44f160 [ 754.574598][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 754.574608][ C0] RBP: 0000000080000000 R08: 0000000000000000 R09: 0000000000000000 [ 754.574618][ C0] R10: 0000000000000100 R11: ffffffff81859120 R12: ffff88801b6fdad8 [ 754.574630][ C0] R13: ffff88801b6ff248 R14: 1ffff110036dfe49 R15: ffffffff818f7f2d [ 754.574642][ C0] FS: 0000000000000000(0000) GS:ffff888126d01000(0000) knlGS:0000000000000000 [ 754.574656][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 754.574667][ C0] CR2: 00007f014ce648e7 CR3: 0000000033e6e000 CR4: 00000000003526f0 [ 754.574682][ C0] Call Trace: [ 754.574688][ C0] [ 754.574694][ C0] smpboot_thread_fn+0x542/0xa60 [ 754.574715][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 754.574738][ C0] kthread+0x711/0x8a0 [ 754.574759][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 754.574778][ C0] ? __pfx_kthread+0x10/0x10 [ 754.574796][ C0] ? rt_spin_unlock+0x150/0x200 [ 754.574818][ C0] ? rt_spin_unlock+0x161/0x200 [ 754.574836][ C0] ? __pfx_kthread+0x10/0x10 [ 754.574856][ C0] ret_from_fork+0x599/0xb30 [ 754.574874][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 754.574896][ C0] ? __switch_to_asm+0x39/0x70 [ 754.574915][ C0] ? __switch_to_asm+0x33/0x70 [ 754.574942][ C0] ? __pfx_kthread+0x10/0x10 [ 754.574962][ C0] ret_from_fork_asm+0x1a/0x30 [ 754.574992][ C0] [ 754.848331][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 754.848360][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 754.848383][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 754.848394][ T38] Call Trace: [ 754.848402][ T38] [ 754.848410][ T38] dump_stack_lvl+0x99/0x250 [ 754.848440][ T38] ? __asan_memcpy+0x40/0x70 [ 754.848464][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 754.848489][ T38] ? __pfx__printk+0x10/0x10 [ 754.848521][ T38] vpanic+0x237/0x6d0 [ 754.848546][ T38] ? __pfx_vpanic+0x10/0x10 [ 754.848570][ T38] ? irqentry_exit+0x5dd/0x660 [ 754.848590][ T38] ? lockdep_hardirqs_on+0x98/0x140 [ 754.848614][ T38] panic+0xb9/0xc0 [ 754.848638][ T38] ? __pfx_panic+0x10/0x10 [ 754.848673][ T38] ? __pfx_panic+0x10/0x10 [ 754.848699][ T38] watchdog+0xfdf/0xfe0 [ 754.848726][ T38] ? watchdog+0x20a/0xfe0 [ 754.848754][ T38] kthread+0x711/0x8a0 [ 754.848782][ T38] ? __pfx_watchdog+0x10/0x10 [ 754.848802][ T38] ? __pfx_kthread+0x10/0x10 [ 754.848824][ T38] ? rt_spin_unlock+0x150/0x200 [ 754.848853][ T38] ? rt_spin_unlock+0x161/0x200 [ 754.848875][ T38] ? __pfx_kthread+0x10/0x10 [ 754.848901][ T38] ret_from_fork+0x599/0xb30 [ 754.848924][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 754.848954][ T38] ? __switch_to_asm+0x39/0x70 [ 754.848978][ T38] ? __switch_to_asm+0x33/0x70 [ 754.849002][ T38] ? __pfx_kthread+0x10/0x10 [ 754.849028][ T38] ret_from_fork_asm+0x1a/0x30 [ 754.849069][ T38] [ 754.849380][ T38] Kernel Offset: disabled